I've been following The Guardian Project for a long time. They are...
...building an open-source secure smartphone-based on Android for the good of all mankind.
And since Robin lend me his spare Galaxy Nexus a couple weeks ago, I thought this is the perfect way to finally test Guardian.
I've had very nice experiences with just hitting people on twitter instead of wading through websites, so I gave that a shot and got instant answer (after a couple of questions):
So here is the log of my from-scratch experience, including all the wonderous inner monologue:
I open How To Build Your Own Libro.
What the hell is "Libro"? Later. I read something about Nexus 7 and Kindle Fire and worry if this the right link. The headline "From 0 to Firmware" sounds promising though, and right there it says "Test secure GuardianROM on Nexus 4 or Galaxy Nexus". Awesome. Time to check what "Libro" is:
LiBro aka the FreeBook aka the Little Brother
The Libro is an affordable, low-cost companion device, designed to defend the privacy of its user. It has no camera or microphone, and so cannot be used as an unwitting surveillance tool. It utilizes a streamlined, locked-down version of Android, that includes no closed-source applications or links to Google, Amazon or other corporate account. It utilizes full-disk encryption, built-in firewalls, and other secure by design features. Finally, it comes stock with the full suite of Guardian Project applications and add-ons, for secure communications and information access, including support for Tor, Off-the-Record Encryption, and a full Debian OS subsystem. The Libro can be used on traditional internet-enabled wifi access points, as well as mesh network settings, where the network is not trusted or available.
That sounds awesome. So back to the build page
I open Devices — Guardian Rom on the somewhat suspicious-sounding domain shadowdcatconsulting.com [sic!]:
Now, this is A+. Brillant. I follow my device...
...am somewhat disappointed about a "coming soon" message (don't really care what is coming soon... it is equivalent to "abandoned webproject") and see "Linux installer". Jesus. Do I need to install Linux to flash the phone? Well, just follow the white rabbit:
Mmm-kay. I hit download and the package is roughly 170 MB in size.
There is for info for verifying downloads and stuff, but I skip that for now – I just want to see it running.
A link Guardian Rom Manual seems to be what I am looking for. It opens this page:
ODF? PDF? Okay, bring on the PDF:
The install section features the "easy way" and the "manual way". The easy way uses a Windows installer. Neither do I have a Windows system, nor was a windows installer acutally available (see Step 2). So it looks like the manual way is the only option for me. It could be worse, since I am familiar with the terminal. Still I stumble at...
reboot into bootloader mode “adb reboot bootloader”
I find the folder
platform-tools in which
fastboot are located. I copy them to the install folder with the rom image and do
which brings up the usual help stuff, so looks like I can contin– ah, I guess I should finally connect the device to the computer, right? Okay, done.
And yes, after unlocking the phone there is a confirmation dialogue to allow this computer to debug. Nothing fancy I guess, just have never befire used this stuff. So let's do it again:
No feedback on the terminal, but the device lights up:
The image on the phone changes accordingly with a pixel-sixed blue message on the bottom.
I continue as told by the PDF with
which responds with
So I do
and it says:
Last step of installation coming up?
Yeah, I wish!
Oh great. I do a little reading and actually understanding what I just did and... well... since I have flashed a new system image to the device I probably just need to start a boot process.
The Android logotype with the moving reflection appears. I give it ten minutes. I pull out the battery and reboot. The Android logotype with the moving reflection appears.
End of story.
I manage to flash an image of 4.3 with the help of the internet and the phone boots up to the welcome screen. At least I didn't brick it :)
Since I have another hour, I join IRC and ping guardianproject on twitter again. I get answer and help.