lineage-18.1 by MSe1969 (oneplus3 - 15/5/2025 / 21/12/2025 build) : boots. Last updated : 26/1/2026 Changelog : 26/1/2026 - Deleted the 204 overlays from /system/product/app. Settings force-closes after any of the prebuilts (including the GrapheneOS default) were selected in Settings > Network & internet > Captive Portal Detection Provider; which then reverts back to the "default" (which, if you've already set via ADB, will stay in the ADB-set entries). 23/1/2026 - Update to 21/12/2025 build, as my OP3T is restored from the junkyard with new(ish) OP3 parts (and a new OP3T battery). Had to stick with a beaten-up midframe as my parts dealer couldn't get a new one (not even those "OEM" knockoffs). SourceForge also behaved reasonably in Pale Moon so there's that. - Cleanups - removed irrelevant pre-debloats. - Added network connection notes. - Finally wrote a conclusion. So yeah, it is no longer incomplete. - Failed attempt to use APatch 11142. CONFIG_KALLSYMS not enabled, IKCFG_ST not found; APatch aborted patching boot.img. 23/6/2025 - Initial creation - yes, I know June 2025 build exists as of the moment of writing; but I already had the May 2025 build that I kept around for no reason and I couldn't be bothered to fuck around with SourceForge as I wrote this. Tested on a client's OP3T at the moment of writing; which I should've mentioned before. Pre-debloat (i dunno, probably better than letting system consume too much resource for nonexistent tasks?) - Telemetry : Settings > Privacy > Trust > LineageOS statistics > untick "Stats collection" (only if this isn't offed in setup wizard) - updater : Settings > System > Updater > 3-dot menu > Preferences - set autoupdate check to never, disable mobile data warning - cell broadcast (optional) : Settings > Notifications / Safety & emergency > Wireless Emergency alerts - disable everything - Do Not Disturb : Settings > Notifications > People - set Calls & Messages up so no one can interrupt DND (if you don't use the device as a phone, do before debloating) /system/apex com.android.cellbroadcast com.android.neuralnetworks /system/app AuroraStore BasicDreams Bluetooth BluetoothMidiService CarrierDefaultApp CompanionDeviceManager CtsShimPrebuilt embms eSpeakTTS FDroid (optional) GsfProxy (?) (only if GmsCore is nuked) imssettings LiveWallpapersPicker PrintSpooler QtiTelephonyService SimAppDialog Stk Traceur uceShimService WallpaperBackup /system/etc /cne /org.fdroid.fdroid (only if FDroid from /system/app is nuked) /system/priv-app AudioFX (optional, as it can be used to change up sounds unlike ArrowOS' MusicFX which doesn't seem to do anything) AuroraServices BlockedNumberProvider BuiltInPrintService CalendarProvider (optional, required for Etar) CallLogBackup CellBroadcastLegacyApp ContactsProvider CtsShimPrivPrebuilt FakeStore (only if GmsCore is nuked) FDroidPrivilegedExtension (only if FDroid from /system/app is nuked) GmsCore (optional) ManagedProvisioning MmsService qcrilmsgtunnel Seedvault Tag Telecom TelephonyProvider TeleService Updater /system/product/app Jelly / messaging / PhotoTable > Fossify Gallery / OpenCamera (OpenCamera : only if Snap gets nuked; else do in whatever order and/or delete unused ones) Etar > Fossify Calendar (optional, or only if Etar and/or CalendarProvider is deleted) LatinIME > SimpleKeyboard (rkkr) Recorder (optional) [Done following the 26/1/2026 changelog; read that for its consequences] overlay-204-android-Google overlay-204-android-openSUSE overlay-204-android-Ubuntu overlay-204-networkstack-Google overlay-204-networkstack-openSUSE overlay-204-networkstack-Ubuntu /system/product/priv-app Contacts Dialer dpmserviceapp Eleven ims /system/system_ext/app EVERYONE (but leave the /app folder un-deleted) /system/system_ext/priv-app CarrierConfig EmergencyInfo Gallery2 LineageSetupWizard QuickAccessWallet Snap (optional) /system/vendor /app/CneApp /etc/cne Setup QS : Not sure how relevant it would be; but at the very least Wi-Fi and Caffeine are present. adb shell commands (usual stuff I apply; coupled with reboot from shell) : settings put secure show_rotation_suggestions 0 adb shell commands (as part of testing; coupled with reboot from shell) : settings put global captive_portal_http_url http://captiveportal.kuketz.de settings put global captive_portal_https_url https://captiveportal.kuketz.de settings put global captive_portal_fallback_url http://captiveportal.kuketz.de settings put global captive_portal_other_fallback_urls http://captiveportal.kuketz.de settings put global ntp_server pool.ntp.org (unchanged, still connects to time.grapheneos.org) settings put global ntp_server localhost (ditto) Additional notes : - Personally, I don't like the added app stores. But then again, deleting them is trivial. - Boot animation is in /system/media if it needed changing. There's only 1 bootanimation.zip. - Snap as default camera. Not placed where I ideally would like (/system/system_ext/priv-app), but then again shutter sound can be turned off (on by default) so I don't see the need to change. - Shattered Pixel Dungeon & Xeonjia's background songs reliably play in this LineageOS build. In addition, there are no arbitrary volume limiters so you can go wild with the headphone volumes. Network connection notes : - Network time (default) : GrapheneOS - time.grapheneos.org - Not mentioned in XDA thread; sourced from PCAPDroid - Still connects to NTP server despite disabled network-provided time settings - Network time (changed to pool.ntp.org) : Unchanged, still connects to time.grapheneos.org - Network time (localhost) : ditto. - Captive portal (default) : GrapheneOS - Sourced from PCAPDroid - Documented in XDA thread - Captive portal (changed to Kuketz via ADB) : - As it should be, captive portal now connects to Kuketz's servers. Conclusion : Well, guess I forgot to report this part when I first wrote this (23/6/2025), so I might as well do it now (in 23/1/2026). As far as base systems go, MSe1969's LineageOS is decently acceptable (for A11), featuring the latest patches to date and various other enhancements including GrapheneOS' secure app spawning (though it noticeably slows down the 3T); though certain stuff can be a bit questionable IMO (default cuckflare DNS; various added bloat (Aurora & F-Droid); and undocumented (or not fully documented) whitelist for Facebook & Google blocking with Aurora Store, microG, & Newpipe mentioned as whitelisted in a deprecated thread). For network connection, network time isn't mentioned; but PCAPDroid revealed time.grapheneos.org. Captive portal defauts to GrapheneOS, with fallbacks for Google, openSUSE, and Ubuntu. ADB can be used to change the captive portal provider (at least if I didn't touch the provider settings); but not for ntp_server as it still connects to the aforementioned time.grapheneos.org. With this analysis, this leaves me needing to dial back the MSe1969 glazing by A LOT. As a privacy-focused ROM (which this ROM does not claim to be, to his credit), I've seen far worse (/e/ with their immutable default connections among other issues; Calyx & Jaguar not changing default connections; iodéOS & LMODroid contradicting their degoogled claims) but there are better ones (like GrapheneOS, even if it chases the latest Android like everyone but Jaguar & is primarily security-focused like this LineageOS fork; as well as Divest, may its successor(s) re-explore <=A12L). So, yeah... a bit ahead of everyone else, but a few steps from the perfect ROM (needing truly customizable connections (preferably without presets and/or the terminal/shell?); proper documentations for added features; removing the pretend-degoogle bullshit (including Aurora Store); and replacing cuckflare DNS with something less likely to disrespect the users).