Files
AXP-Resurection/specs/005-restricted-signature-spoofing/quickstart.md
T
sunfish-admin 12d2179c20 AXP Magisk resurrection track: Speckit 009 port AXP/LOS22 to LOS23.
Ship Magisk like GOLDEN; KernelSU optional recycle only; parallel to sunfish-a16-rom standby.
2026-09-16 21:56:22 +00:00

75 lines
2.7 KiB
Markdown

# Quickstart: 005 first working stack (LAB only)
**Device**: LAB `11231JEC207477` — never GOLDEN `11071JEC203839`
## Goal
One flash proves: microG + patched Play + restricted spoofing + modern location
docs. Not banking (`006`), not root (`007`).
## Prerequisites
- Artifact zip from `005` bacon (includes `REPLACE_PREBUILT` + updated privapp)
- Laptop `adb`/`fastboot`; hashes verified
- Oracle notes (optional): `.local-artifacts/002-golden/20260915-spoofing-phonesky/README.md`
## Flash
Follow `docs/003-flash-lab.md` pattern with the **005** zip (dtbo → boot/recovery
→ format if needed → sideload). Say **No** to additional packages.
## After first boot
```bash
SERIAL=11231JEC207477
adb -s "$SERIAL" shell getprop ro.lineage.version
adb -s "$SERIAL" shell pm path com.google.android.gms
adb -s "$SERIAL" shell pm path com.google.android.gsf
adb -s "$SERIAL" shell pm path com.android.vending
# expect all three present — no remount push
```
## Spoofing
1. Enable **Developer options**
2. Enable **Allow signature spoofing** (`settings get secure allow_signature_fake` → `1`)
3. Open **microG Settings → Self-Check**
4. Grant spoofing for GmsCore and Play when prompted (or App info → permissions)
5. Confirm Self-Check **correct signature** for GmsCore and Play/Companion
```bash
adb -s "$SERIAL" shell settings get secure allow_signature_fake
adb -s "$SERIAL" shell dumpsys package com.google.android.gms | grep FAKE_PACKAGE_SIGNATURE
adb -s "$SERIAL" shell dumpsys package com.android.vending | grep FAKE_PACKAGE_SIGNATURE
```
## Play auth
1. Open Play Store; sign in
2. Confirm UI stays up (no FGS crash loop)
3. Optional logcat gate: **no** `UNREGISTERED_ON_API_CONSOLE` for Phonesky
In-app Play self-update may still fail (AXP-like) — acceptable.
## Modern location
1. microG Settings → Location
2. Enable network location as shown
3. Configure service URL: `https://api.beacondb.net` (BeaconDB; MLS is dead)
4. Do **not** install Déjà Vu / Nominatim NLP backend APKs
## Pass criteria (SC)
- [x] Toggle + `allow_signature_fake=1` *(LAB 2026-09-15)*
- [x] Self-Check correct signature for gms + vending
- [x] Play sign-in without API-console fingerprint error
- [x] All three packages from zip without remount *(gms/gsf system; vending upgraded in-place for exact-alarm — next bacon restores system path)*
- [x] BeaconDB steps recorded; no UnifiedNlp backends required
- [x] No Magisk/KSU on the build
## Failure
Capture logcat (`vending`, `GmsAuthenticator`, `SelfCheck`, `PackageManager`).
Do not flash GOLDEN. Packaging-only regressions → fix under vendor overlay;
spoofing regressions → frameworks/Settings patches.