Ship Magisk like GOLDEN; KernelSU optional recycle only; parallel to sunfish-a16-rom standby.
2.7 KiB
2.7 KiB
Quickstart: 005 first working stack (LAB only)
Device: LAB 11231JEC207477 — never GOLDEN 11071JEC203839
Goal
One flash proves: microG + patched Play + restricted spoofing + modern location
docs. Not banking (006), not root (007).
Prerequisites
- Artifact zip from
005bacon (includesREPLACE_PREBUILT+ updated privapp) - Laptop
adb/fastboot; hashes verified - Oracle notes (optional):
.local-artifacts/002-golden/20260915-spoofing-phonesky/README.md
Flash
Follow docs/003-flash-lab.md pattern with the 005 zip (dtbo → boot/recovery
→ format if needed → sideload). Say No to additional packages.
After first boot
SERIAL=11231JEC207477
adb -s "$SERIAL" shell getprop ro.lineage.version
adb -s "$SERIAL" shell pm path com.google.android.gms
adb -s "$SERIAL" shell pm path com.google.android.gsf
adb -s "$SERIAL" shell pm path com.android.vending
# expect all three present — no remount push
Spoofing
- Enable Developer options
- Enable Allow signature spoofing (
settings get secure allow_signature_fake→1) - Open microG Settings → Self-Check
- Grant spoofing for GmsCore and Play when prompted (or App info → permissions)
- Confirm Self-Check correct signature for GmsCore and Play/Companion
adb -s "$SERIAL" shell settings get secure allow_signature_fake
adb -s "$SERIAL" shell dumpsys package com.google.android.gms | grep FAKE_PACKAGE_SIGNATURE
adb -s "$SERIAL" shell dumpsys package com.android.vending | grep FAKE_PACKAGE_SIGNATURE
Play auth
- Open Play Store; sign in
- Confirm UI stays up (no FGS crash loop)
- Optional logcat gate: no
UNREGISTERED_ON_API_CONSOLEfor Phonesky
In-app Play self-update may still fail (AXP-like) — acceptable.
Modern location
- microG Settings → Location
- Enable network location as shown
- Configure service URL:
https://api.beacondb.net(BeaconDB; MLS is dead) - Do not install Déjà Vu / Nominatim NLP backend APKs
Pass criteria (SC)
- Toggle +
allow_signature_fake=1(LAB 2026-09-15) - Self-Check correct signature for gms + vending
- Play sign-in without API-console fingerprint error
- All three packages from zip without remount (gms/gsf system; vending upgraded in-place for exact-alarm — next bacon restores system path)
- BeaconDB steps recorded; no UnifiedNlp backends required
- No Magisk/KSU on the build
Failure
Capture logcat (vending, GmsAuthenticator, SelfCheck, PackageManager).
Do not flash GOLDEN. Packaging-only regressions → fix under vendor overlay;
spoofing regressions → frameworks/Settings patches.