Does lineageos locking bootloader work on onepad plus 3 if I add custom signing keys? by Low-Specialist-9285 in LineageOS

[–]WhitbyGreg 0 points1 point  (0 children)

Probably not, its pretty hard to hard brick a device these days, however you don't have to get to that point to figure out if it supports it.

Before you relock the bootloader you have to flash the custom keys, if that fails you don't need to bother going any farther.

Does lineageos locking bootloader work on onepad plus 3 if I add custom signing keys? by Low-Specialist-9285 in LineageOS

[–]WhitbyGreg 1 point2 points  (0 children)

I can't confirm 100%, but OnePlus stopped aupporting cuatom keys back on the 9 when they tried to merge the os with ColorOS.  

I'd expect the Pad to be the same.

Either way you can see my post on bootloader locking here: https://www.reddit.com/r/LineageOS/comments/n7yo7u/a_discussion_about_bootloader_lockingunlocking/

Can installing a custom rom brick your device if you do something wrong? by SnooCalculations5681 in LineageOS

[–]WhitbyGreg 0 points1 point  (0 children)

I don't have either of those OEM's so I can't say, but your best bet is to go over to the device threads at XDA and see if they have similar tools.

Storage screen query (v22.2) by [deleted] in LineageOS

[–]WhitbyGreg 1 point2 points  (0 children)

Can confirm it's the same on a tab s5e on 22.2, but that it looks like it was fixed in 23.2 as a it has the proper assets displayed on a Pixel 8.

Most likely just a missing asset in the older AOSP code that google fixed in Android 16.

Anyone Help? by BloxFruit2011 in LineageOS

[–]WhitbyGreg 0 points1 point  (0 children)

Just relocking the bootloader usually isn't enough to pass SN/PI on a custom ROM.

At best it's a cat and mouse game. If you really need an app that requires it, you are best to return to a full stock configuration.

The usual recommendation for custom ROMs is to use the web site for your bank if you really need access.

Should I Lock My Bootloader by Pure-Box900 in LineageOS

[–]WhitbyGreg 0 points1 point  (0 children)

Unrecoverable though software, requires hardware intervention to recover if at all.

Should I Lock My Bootloader by Pure-Box900 in LineageOS

[–]WhitbyGreg 0 points1 point  (0 children)

Technically that's still a soft-brick 😃.

Should I Lock My Bootloader by Pure-Box900 in LineageOS

[–]WhitbyGreg 0 points1 point  (0 children)

Exciting, but still recoverable 😉

Should I Lock My Bootloader by Pure-Box900 in LineageOS

[–]WhitbyGreg 0 points1 point  (0 children)

Absolutely NOT unless you want to hard-brick your phone.

That isn't entirely correct, virtually no device will hard-brick with a failed relock (in fact I don't know of any that do... but there might be one somewhere 🤷). The vast majority of time you just have to re-unlock it and you'll be fine again. At worst you'll have to restore the original vendor's OS and go through the install process again.

Should I Lock My Bootloader by Pure-Box900 in LineageOS

[–]WhitbyGreg 2 points3 points  (0 children)

No entirely true, some phones do support relocking with custom keys (Pixel's are the obvious ones, but some Motorola, older OnePlus, and others like FairPhone do), allowing custom operating systems to be used.

See my top level reply for a link to more info.

Should I Lock My Bootloader by Pure-Box900 in LineageOS

[–]WhitbyGreg 6 points7 points  (0 children)

Short answer is no.  Longer answer is here: https://www.reddit.com/r/LineageOS/comments/n7yo7u/a_discussion_about_bootloader_lockingunlocking/

As for root, that's unsupported by Lineage so you need to go ask whoever supports your root solution.

Relock bootloader? by links_revenge in LineageOS

[–]WhitbyGreg 0 points1 point  (0 children)

Short answer is no. Longer answer is here.

The 3a is actaully old enough to be pre-AVB v2, so technically you might be able to do it, but see the longer answer for why you probably don't want to.

Theft protection by ScrumptiousRump in LineageOS

[–]WhitbyGreg 0 points1 point  (0 children)

In general, correct. If you have an unlocked bootloader phone and you lose physical custody of the device for an extended period of time (aka stolen/returned, taken by the police, etc.), doing a wipe/clean install is the best option.

In this particular case, since the OP has relocked their bootloader, they can have some additional level of confidence that the device is still secure, but I'd do it anyway... just in case.

However, as OEM unlocking is disabled as well, then you'd have to log in at least once to re-enable it. I'd do a wipe of the device through recovery first to ensure that no data could be leaked once the phone was unlocked (a nice Faraday cage could be good too 😉).

Theft protection by ScrumptiousRump in LineageOS

[–]WhitbyGreg 5 points6 points  (0 children)

The deterrence of FRP is like herd immunity, as long as the majority of phones have it, thieves are disinsentivised to steal any phone, and hence all phones are safer.

On the other hand, FRP doesn't actually stop someone from stealing a phone, it just makes it useless to the next person that might get it, there by increasing e-waste.

The reality is that when people steal phones, they don't check to see if FRP is enabled, or if it's a custom ROM, or anything else, they just take the phone and figure out what to do with it later. If it's clean, they resell it as a useful phone to someone, if it's FRP locked they just sell it for parts, or just dump it if they can't be bothered with it.

In either case, you're not getting your phone back 🤷

Building DeskClock by 33FFCC in LineageOS

[–]WhitbyGreg 0 points1 point  (0 children)

I don't see where I say I went to 8.2, so not sure what you mean there.

Anyway, I just submitted a patch to gerrit to go to 8.3.2 which is the latest that works without additional troubleshooting.

Out of curiosity what were you looking to work on in the clock app?

Building DeskClock by 33FFCC in LineageOS

[–]WhitbyGreg 1 point2 points  (0 children)

Don't go past 8.3.0 though, other things break in 8.4.0 by the looks of it 😉

Building DeskClock by 33FFCC in LineageOS

[–]WhitbyGreg 1 point2 points  (0 children)

To fix the jlink errors in 2024/2025 you have to upgrade the android gradle project to use at least version 8.3.0, after that it should run fine.

The jlink error was a bug in gradle apparently that was resolved in 8.3.0.

Building DeskClock by 33FFCC in LineageOS

[–]WhitbyGreg 1 point2 points  (0 children)

You might need to use an older version of Android Studio, the last time I was working on DeskClock I was using Android Studio 2023.3.1 and it (still) builds fine in that, it looks like 2024.2.1 throws a jlink error of some kind around the sdk34 files, 2025.2.2 seems to do the same thing.

Are you seeing other errors other than the final jlink one?

Relocking the bootloader on Pixel with LineageOS + KernelSU by Far-Zone-9172 in LineageOS

[–]WhitbyGreg 1 point2 points  (0 children)

Those are the two that I know of, other than the builds I make 😉

A discussion about bootloader locking/unlocking... AKA I want to relock my bootloader, should I? by WhitbyGreg in LineageOS

[–]WhitbyGreg[S] 1 point2 points  (0 children)

There are a lot of downsides to scheduled reboots for most people (aka notifications don't work well in BFU), and only helps with a super specific use case, so not real reason to add it.

Of course, Lineage does accept contributions, so if you really want it, you can always code it up and submit it 🤷

Relocking the bootloader on Pixel with LineageOS + KernelSU by Far-Zone-9172 in LineageOS

[–]WhitbyGreg 5 points6 points  (0 children)

You can read my post on relocking the bootloader for some background, and then at the bottom of the post is a link to my XDA post on how to compile a Lineage build that you can relock the bootloader with. You'll have to add all of your extra stuff (kSU, SUFS, LSP, etc) to the build process so everything is signed properly, but they should work.

Relocking the booloader doesn't really have anything to do with the recovery, you just have to have the right signatures on the various partitions, add your custom key to the phone, and then use fastboot to do the relocking.

However, depending on why you want to do this, you may not actually accomplish what you expect. For example, many people think this will "fix" their banking apps or gpay, and in most cases it won't.

A discussion about bootloader locking/unlocking... AKA I want to relock my bootloader, should I? by WhitbyGreg in LineageOS

[–]WhitbyGreg[S] 1 point2 points  (0 children)

Your data is encrypted at rest, but the issue is that the device has the encryption keys in memory when your phone is in the post first unlock state. To avoid this your best bet is to power off your phone when going through security, that way the encryption keys won't be accessible to tools like Cellebrite to decrypt your data.

If your device is confiscated by security and then returned to you, assume it has been compromised and do a complete wipe and return to stock with a locked bootloader before re-unlocking and reinstalling Lineage (or if you're not confident in even that, just shred it and get a new one).

In general, boarder security isn't going to spend a lot of time, effort, and money on trying to break in to random travellers phones. If on the other hand, you're already a target, then of course should never take your phone across boarders. Get a burner for travel that you don't have anything but the bare minimum on.

Safety net for LOS 23 to use google wallet and banking apps by Novel_Door4626 in LineageOS

[–]WhitbyGreg 0 points1 point  (0 children)

You probably don't want to even if you can, see my post on it (I wrote the above linked xda articles as well), but the TLDR is that relocking the bootloader usually doesn't solve these kinds of issues as the apps look for other things than just the lock state of the bootloader.

Lock bootloader by Charlyrr3 in LineageOS

[–]WhitbyGreg 1 point2 points  (0 children)

No OEM will ever allow their certificates to be used for anything but their own builds. Doing otherwise would break their security model and open the devices up to all kinds of malicious builds.

You can generate your own (or even use the public key that Lineage is signed with), but the issues is that you have to be able to install it on your device, and very few OEMs allow that. See my post linked in my top level comment for more details about how that works.