Willie169 Android Non Root

Android Non Root

Android Non Root has three versions:

In this tutorial, we’ll explore a range of powerful, open-source tools such as Termux, F-Droid, Shizuku, Tor, TrackerControl, InviZible Pro, QEMU, Tailscale, OpenSSH, and PipePipe to enhance your Android device’s functionality, security, privacy, and customization without the need for root access.

Please read the Global Note before you start or you may encounter errors.

My main development of Termux Shell scripts has been moved to my another repository, termux-sh, which includes setup automation, shortcuts, installations and configurations of development tools and emulation environments such as proot, proot-distro, QEMU system emulation, and box64, and more, while tutorials for Termux, some of my scripts in termux-sh, and other related stuff remain here.

Table of Contents

Author Information

The author of this tutorial is Willie169, Willie Shen, or 沈威宇.

If for whatever reason you want to send me money, here are where you may do so:

Global Note

F-Droid: Free Software Android Apps Repository and App Store

Install F-Droid

F-Droid (org.fdroid.fdroid) can be installed from their official website.

Introduction of F-Droid

F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform. The client makes it easy to browse, install, and keep track of updates on your device.

F-Droid is both a repository of verified free software Android apps as well as a whole “app store kit”, providing all the tools needed to setup and run an app store. It is a community-run free software project developed by a wide range of contributors. It also includes complete build and release tools for managing the process of turning app source code into published builds.

The F-Droid server tools provide various scripts and tools that are used to maintain the main F-Droid application repository. You can use these same tools to create your own additional or alternative repository for publishing, or to assist in creating, testing and submitting metadata to the main repository.

F-Droid Repositories

F-Droid repositories are compatible with an F-Droid client application. To add a repository, go to F-Droid app’s Settings page tap My Apps > Repositories, tap the plus sign in the lower right corner, and scan QR code or enter or paste repository URL.

The Offical F-Droid repository is http://f-droid.org/repo, which is pre-added in the app by default.

One of the most popular unofficial F-Droid repository is the IzzyOnDroid F-Droid repository.

A list of some known F-Droid repositories:

Termux: A Powerful Terminal Emulation with an Extensive Linux Package Collection

Install Termux

Termux (com.termux) can be installed from F-Droid.

WARNING: If you installed termux from Google Play or a very old version, then you will receive package command errors. Google Play builds are deprecated and no longer supported. It is highly recommended that you update to termux-app v0.118.0 or higher as soon as possible for various bug fixes, including a critical world-readable vulnerability reported at https://termux.github.io/general/2022/02/15/termux-apps-vulnerability-disclosures.html. It is recommended that you shift to F-Droid or GitHub releases.

Short Introduction of Termux

Termux is an Android terminal application and Linux environment. Termux combines powerful terminal emulation with an extensive Linux package collection. Some of the commands available in Linux are available in Termux too, such as cp, mv, ls, mkdir, apt, and apt-get.

Features:

and more.

At first startup, a small base system is downloaded. Desired packages can then be installed using the apt package manager, which is known from the Debian and Ubuntu Linux distributions. To learn more, access the built-in help by long-pressing anywhere on the terminal and selecting the Help menu option.

For people who are new to POSIX, please refer to POSIX References.

Termux App User Interface

Shortcuts in Termux

The following are some of the shortcuts commonly used in the terminal, and they also work in Ter­mux. The volume plus button (abbreviated to Volume below) can be used as a special key to generate a specific input, which can be roughly understood as the Fn key on a laptop.

Types of Storage in Termux

There are three main types of storage in Termux:

Feature comparison between storage types:

Storage type chmod/chown support Special files support Executables support Access mode
Internal ($HOME/$PREFIX) yes yes yes RW (app dir)
Shared storage no no no RW
External storage no no no RO / RW (app dir)

Shell in Termux

A shell is an command language interpreter that executes commands from standard input devices (like a keyboard) or from a file. Shells are not a part of the system kernel, but use the system kernel to execute programs, create files, etc.

Use chsh from termux-tools to change your login shell. Currently Termux supports bash, fish, tcsh, zsh, xonsh, beanshell, and ipython. The default one is bash.

Termux Chroot

If you want a classical Linux file system layout, you can to use termux-chroot from package proot. The termux-chroot utility may be very helpful if you use custom software that requires standard paths like /tmp, /etc, /usr to be available.

Install Proot:

pkg install proot

Use Termux chroot:

termux-chroot

Result:

$ ls /usr
bin  doc  etc  include lib  libexec  share  tmp  var

Termux Fix Shebang

You may have a problem executing scripts that have standard shebangs (e.g. #!/bin/sh) because Termux is not FHS compliant. Use the termux-fix-shebang script to modify these files before executing. Recent versions of Termux provide a special package (termux-exec) which allows usage of standard shebangs.

Environment Variables in Termux

Difference Between Linux and Termux

Termux-Properties

You can edit properties of Termux by:

nano ~/.termux/termux-properties

Properties that can be changed include default-working-directory, allow-external-apps, volume-keys, etc.

Termux PKG Package Manager

pkg is a tool for managing apt packages in Termux.

Debian Derivatives and Termux APT Package Manager

apt is a commandline package manager and provides commands for searching and managing as well as querying information about packages. It provides the same functionality as the specialized APT tools, like apt-get and apt-cache, but enables options more suitable for interactive use by default.

Termux Change Repo

Package Command Error

Termux had to move the primary Termux package repository hosting from Bintray to Fosshost since Bintray shut down on May 1st, 2021 which created problems for users while running package installation and update commands with pkg or apt and their commands would fail with errors similar to the following:

E: The repository 'https://termux.org/packages stable Release' does no longer have a Release file.
N: Metadata integrity can't be verified, repository is disabled now.
N: Possible cause: repository is under maintenance or down (wrong sources.list URL?).

E: The repository 'https://dl.bintray.com/grimler/game-packages-24 games Release' does not have a Release file.
N: Metadata integrity can't be verified, repository is disabled now.
N: Possible cause: repository is under maintenance or down (wrong sources.list URL?).

E: The repository 'https://science.termux-mirror.ml science Release' does not have a Release file.
N: Metadata integrity can't be verified, repository is disabled now.
N: Possible cause: repository is under maintenance or down (wrong sources.list URL?).

Command Solution

Manual Solution

Further Readings and References about Package Command Error

Process completed (signal 9) - press Enter Error

Some Android OS will kill any (phantom) processes greater than 32 (limit is for all apps combined) and also kill any processes using excessive CPU.

You may get Process completed (signal 9) - press Enter message in the terminal without actually exiting the shell process yourself.

Here is the guide of how to turn it off.

Graphical Fix

This fix is generally available for Stock Android 12L and beyond, and often unavailable for QEMs like OneUI, MiUi, Samsung, etc. and other non-stock Android. If this fix is not available for your phone, please refer to the command line solution in next section.

  1. In phone’s Settings or something similar, go to About Phone > Software Information or something similar, and tap the Version Number seven times to enable Developer Options. Some phones may have different methods to enable Developer Options.
  2. Click the section named Feature Flags.
  3. Toggle off settings_enable_monitor_phantom_procs to disable phantom process killer.
  4. To enable phantom process killer again, just toggle on settings_enable_monitor_phantom_procs.

Command Line Fix

  1. Connect to Android Debug Bridge (ADB) of your Android device from another device or via Shizuku. For people who are new to them, please refer to the tutorial for them in Shizuku, SystemUI Tuner, and aShell: Use Local ADB of Android Device on Terminals Such as Termux without Another Device with Shizuku, Leave Developer Options off When Doing So with SystemUI Tuner, and Use ADB with Features like Autocomplete Suggestion with aShell.
  2. Type adb shell to enter adb shell.
  3. Run the following commands inside adb shell: 
    /system/bin/device_config set_sync_disabled_for_tests persistent
/system/bin/device_config put activity_manager max_phantom_processes 2147483647
settings put global settings_enable_monitor_phantom_procs false
  4. To check the status of whether phantom process killer is disabled, run the following commands inside adb shell: 
    /system/bin/dumpsys activity settings | grep max_phantom_processes
/system/bin/device_config get activity_manager max_phantom_processes
  5. To enable phantom process killer again, run the following commands inside adb shell: 
    /system/bin/device_config set_sync_disabled_for_tests none; /system/bin/device_config put activity_manager max_phantom_processes 32
settings put global settings_enable_monitor_phantom_procs true

Further Readings and References about Process completed (signal 9) - press Enter error

POSIX References

POSIX (Portable Operating System Interface) is a family of standards specified by the IEEE for maintaining compatibility between operating systems. It defines a set of APIs, command-line interfaces, and utility interfaces to enable software portability across different Unix-like systems.

Shell Reference

Go to Bash Reference Manual for more information.

Shell Syntax

When the shell reads input, it proceeds through a sequence of operations. If the input indicates the beginning of a comment, the shell ignores the comment symbol (#), and the rest of that line.

Otherwise, roughly speaking, the shell reads its input and divides the input into words and operators, employing the quoting rules to select which meanings to assign various words and characters.

The shell then parses these tokens into commands and other constructs, removes the special meaning of certain words or characters, expands others, redirects input and output as needed, executes the specified command, waits for the command’s exit status, and makes that exit status available for further inspection or processing.

Shell Commands

A simple shell command such as echo a b c consists of the command itself followed by arguments, separated by spaces.

More complex shell commands are composed of simple commands arranged together in a variety of ways: in a pipeline in which the output of one command becomes the input of a second, in a loop or conditional construct, or in some other grouping.

Shell Functions

Shell functions are a way to group commands for later execution using a single name for the group. They are executed just like a "regular" command. When the name of a shell function is used as a simple command name, the list of commands associated with that function name is executed. Shell functions are executed in the current shell context; no new process is created to interpret them.

Functions are declared using this syntax:

fname () compound-command [ redirections ]

or

function fname [()] compound-command [ redirections ]

This defines a shell function named fname. The reserved word function is optional. If the function reserved word is supplied, the parentheses are optional.

Shell Parameters

A parameter is an entity that stores values. It can be a name, a number, or one of the special characters listed below. A variable is a parameter denoted by a name. A variable has a value and zero or more attributes. Attributes are assigned using the declare builtin command.

A parameter is set if it has been assigned a value. The null string is a valid value. Once a variable is set, it may be unset only by using the unset builtin command.

A variable may be assigned to by a statement of the form

name=[value]

If value is not given, the variable is assigned the null string. All values undergo tilde expansion, parameter and variable expansion, command substitution, arithmetic expansion, and quote removal.

Shell Expansion

Expansion is performed on the command line after it has been split into tokens. The order of expansions is: brace expansion; tilde expansion, parameter and variable expansion, arithmetic expansion, and command substitution (done in a left-to-right fashion); word splitting; and filename expansion.

Shell Redirections

Before a command is executed, its input and output may be redirected using a special notation interpreted by the shell. Redirection allows commands’ file handles to be duplicated, opened, closed, made to refer to different files, and can change the files the command reads from and writes to. Redirection may also be used to modify file handles in the current shell execution environment. The following redirection operators may precede or appear anywhere within a simple command or may follow a command. Redirections are processed in the order they appear, from left to right.

File and Directory Management

Command Usage
ls List directory contents: ls
  • ls -l: long format
  • ls -a: include hidden files
  • ls -A: include hidden files except . (current directory) and .. (parent directory)
  • ls -lh: human-readable sizes.
  • ls -d: show directory names instead of their contents
  • ls -R: list subdirectories recursively
  • ls -t: sort by modification time (newest first)
  • ls -S: sort by file size (largest first)
  • ls -X: sort by extension
  • ls -r: reverse order of sorting
  • ls -1: list one entry per line
  • ls -F: append indicators (/ for directories, * for executables, etc.)
  • ls -p: append / to directories
  • ls --color=auto: colorize output based on file type
  • ls -i: show inode numbers
  • ls -n: show numeric UID and GID instead of names
  • ls -g: like -l but without showing owner
  • ls -o: like -l but without group information
  • ls --time=ctime: sort by change time (instead of modification)
  • ls --time=access: sort by last access time
  • ls -Z: show SELinux security context (if enabled)
  • ls --full-time: show complete timestamps
cd Change directory: cd /path/to/dir
pwd Print current working directory
mkdir Create a new directory: mkdir newdir
  • mkdir -m newdir: set file mode (as in chmod), not a=rwx - umask
  • mkdir -p newdir: no error if existing, make parent directories as needed, with their file modes unaffected by any -m option
rmdir Remove empty directory: rmdir emptydir
rm Remove files or directories: rm file
  • rm -r dir: recursive
  • rm -f: force
cp Copy files/directories: cp src dest
  • cp -r dir1 dir2: recursive
mv
  • mv oldname newname: rename files/directories
  • mv file /destination/: move files/directories
touch
  • touch newfile.txt: Create an empty newfile.txt or update its timestamp
  • touch -c newfile.txt: Don’t create newfile.txt if it doesn’t exist
    • find Search for files: find [path] [options] [expression]
    • find /home/user/ -name '*.txt': Find all .txt files under /home/user/
    • find . -type d -name 'dir*': Find directories starting with dir
    locate Quickly find files using an index: locate filename (remember to run updatedb
    updatedb Update the locate database
    stat Display detailed file information: stat file
    tree Show directory structure in a tree format (not always installed)
    df Show disk usage of file systems: df [options] [file]
  • df -h: human-readable size
  • df -T: include filesystem type
  • df --total: Show a grand total of all file systems
    		•
    du Show disk usage of files and directories: du [options] [file]
  • du -h: human-readable size
  • du -sh /path/to/dir: Show the total size of /path/to/dir
  • du -a: Show the size of all files and directories
  • du --max-depth=1: Limit the depth of directory traversal to 1 level
    		•
    basename Extract filename from a path: basename /path/to/file
    dirname Extract directory path from a full file path: dirname /path/to/file

    File Permissions and Ownership

    Command Usage
    chmod Change file permissions:
    • Numeric Mode:
      • Syntax: chmod [permissions] file
      • First number in permissions is for user (owner), second is for group, third is for others
      • Permissions:
      • 4: read
      • 2: write
      • 1: execute
      • Permissions are additive. For example, 7 = 4 + 2 + 1
    • Symbolic Mode:
      • Syntax: chmod [who][+/-/=][permissions] file
      • Who:
      • u: User (owner)
      • g: Group
      • o: Others
      • a: All (user, group, and others)
      • Operators
      • +: Add permission
      • -: Remove permission
      • =: Set exact permission
      • Permissions:
      • r: read
      • w: write
      • x: execute
    • Recursively:
      -R or --recursive: change files and directories recursively. The following options modify how a hierarchy is traversed when the -R option is also specified. If more than one is specified, only the final one takes effect. -H is the default.
      • -H: if a command line argument is a symbolic link to a directory, traverse it
      • -L: traverse every symbolic link to a directory encountered
      • -P: do not traverse any symbolic links
    chown Change file owner: chown [options] user[:group] file
    • chown user file.txt: Change the owner to user
    • chown user:group file.txt: Change the owner to user and the group to group
    • chown :group file.txt: Change the group to group without changing the owner
    • Recursively: same as chmod
    chgrp Change group ownership: chgrp group file
    umask Set default permissions: umask 022 (default 755 for new files)

    File Viewing and Manipulation

    Command Usage
    cat Display file contents: cat file.txt
    tac Display file contents in reverse order
    more View file page by page (scroll forward only)
    less View file page by page (scroll forward and backward)
    head Show first N lines: head -n 10 file.txt
    tail Show last N lines: tail -n 10 file.txt, tail -f logfile (follow changes)
    cut Extract specific fields: cut -d':' -f1 /etc/passwd
    sort Sort lines: sort file.txt, sort -n numbers.txt
    uniq Remove duplicate lines: `sort file.txt
    wc Count words, lines, characters: wc -l file.txt
    diff Compare two files: diff file1 file2
    cmp Compare two files byte by byte
    tee Read from standard input and write to file and standard output: `echo "hello"
    split Split large files into smaller ones: split -b 1M largefile
    paste Merge lines of files:
    • paste file1 file2: Merge corresponding lines from two files
    • paste -d ',' file1 file2: Use a comma as a delimiter
    • paste -s file: Merge all lines of a file into a single line
    tr Translate or delete characters:
    • echo "hello" | tr 'a-z' 'A-Z': Convert lowercase to uppercase
    • echo "hello world" | tr -d 'o': Delete all 'o' characters
    • echo "hello world" | tr ' ' '\n': Convert spaces to newlines
    xargs Build and execute command lines:
    • echo file1 file2 | xargs rm: Remove listed files
    • find . -name "*.txt" | xargs cat: Concatenate all .txt files
    • cat list.txt | xargs -n 1 echo: Process one argument per line
    grep Search for patterns in files:
    • grep "pattern" file: Search for 'pattern' in a file
    • grep -i "pattern" file: Case-insensitive search
    • grep -r "pattern" /path: Recursively search in a directory
    • grep -v "pattern" file: Exclude lines matching 'pattern'
    egrep / fgrep Extended and fixed string search:
    • egrep "regex" file: Extended regular expressions
    • fgrep "string" file: Fixed string search (no regex)
    cut Extract portions of text:
    • cut -d ':' -f 1 /etc/passwd: Extract first field using ':' as delimiter
    • cut -c 1-5 file: Extract first five characters of each line
    awk Process and analyze text files:
    • awk '{print $1}' file: Print first field of each line
    • awk -F ':' '{print $1, $3}' /etc/passwd: Specify a field separator
    • awk 'NR==3' file: Print only the third line
    sed Stream editing:
    • sed 's/old/new/g' file: Replace 'old' with 'new'
    • sed -n '5p' file: Print only the fifth line
    • sed '/pattern/d' file: Delete lines matching 'pattern'

    Process and Job Management

    Command Usage
    ps Show active processes: ps aux (detailed list)
    top Display real-time system processes
    htop Interactive process monitor (not always installed)
    kill Send signal to a process: kill PID, kill -9 PID (force kill)
    pkill Kill process by name: pkill processname
    jobs Show background jobs
    fg Bring background job to foreground: fg %1
    bg Resume a suspended job in the background: bg %1
    nohup Run a process immune to hangups: nohup command &
    nice Start a process with a priority: nice -n 10 command
    renice Change process priority: renice 10 -p PID
    time Measure execution time of a command: time command

    Networking

    Command Usage
    ping Check network connectivity: ping example.com
    wget Download files: wget URL
    curl Transfer data: curl -O URL (download), curl -X POST URL
    scp Copy files over SSH: scp file user@host:/path
    rsync Efficient file transfer: rsync -av source destination
    netstat Show network connections and ports: netstat -tulnp
    ss More advanced network statistics: ss -tulnp
    traceroute Show network route to a host: traceroute example.com
    dig Query DNS records: dig example.com
    nslookup Query DNS: nslookup example.com

    Disk and System Information

    Command Usage
    uptime Show system uptime
    who Show logged-in users
    w Show active users and their processes
    id Show user ID and group ID
    uname Show system information: uname -a
    hostname Show system hostname
    df Show disk space usage: df -h
    du Show directory size: du -sh /path
    free Show memory usage: free -m
    vmstat Show system performance statistics
    iostat Show CPU and I/O statistics

    Archiving and Compression

    Command Usage
    tar Archive files: tar -cvf archive.tar files, tar -xvf archive.tar (extract)
    gzip Compress files: gzip file
    gunzip Decompress files: gunzip file.gz
    zip Create ZIP archive: zip archive.zip files
    unzip Extract ZIP archive: unzip archive.zip

    User Management

    Command Usage
    whoami Show current user
    who Show logged-in users
    groups Show groups a user belongs to
    passwd Change user password
    su Switch user: su - username
    sudo Run command as superuser: sudo command

    Miscellaneous

    Command Usage
    echo Print text: echo "Hello"
    date Show current date and time
    cal Show calendar
    clear Clear terminal screen
    history Show command history
    alias Create alias: alias ll='ls -l'
    env Show environment variables
    export Set environment variable: export VAR=value

    Termux:Styling, Termux:Widget, Termux:Boot, Termux:Float, and Termux:API

    Termux:Styling

    Termux:Styling (com.termux.styling) can be installed from F-Droid.

    This plugin for Termux provides beautiful color schemes and powerline-ready fonts to customize the appearance of the terminal.

    Long-press anywhere on the Termux terminal and use the "Style" menu entry to use after installation.

    Go to the official wiki for more information.

    Termux:Widget

    Termux:Widget (com.termux.widget) can be installed from F-Droid.

    Add-on app which adds shortcuts to Termux scripts and commands on the home screen. Scripts should be placed in the $HOME/.shortcuts/ folder to allow quick access to frequently used commands without typing.

    Go to the official wiki for more information.

    Termux:Boot

    Termux:Boot (com.termux.boot) can be installed from [F-Droid](<https://f-droid.org/packages/com.termux.boot).

    This plugin for Termux allows programs to be run at boot.

    Instructions:

    Note that you may want to run termux-wake-lock as first thing want to ensure that the device is prevented from sleeping.

    Go to the official wiki for more information.

    Termux:Float

    Termux:Float (com.termux.float) can be installed from F-Droid.

    This plugin for Termux provides a floating terminal window which is shown above other apps.

    Long-press on the floating window to move or resize it and tap on the notification to temporarily hide it.

    Go to the official wiki for more information.

    Termux:API

    Termux:API (com.termux.api) can be installed from F-Droid.

    Expose basic Android functionality like sending SMS or accessing GPS data to the Termux app. This is an add-on which requires that the main Termux app is installed to use.

    Besides installing this app an additional package is required to install inside Termux:

    apt install termux-api

    Go to the official wiki for more information.

    TigerVNC, Termux-x11, Fluxbox, Openbox, XFCE, LXQt, and MATE: Termux VNC or X Server and Graphical Environment

    Introduction of VNC (Virtual Network Computing)

    VNC (Virtual Network Computing) is a graphical desktop-sharing system that uses the Remote Frame Buffer protocol (RFB) to remotely control another computer. It transmits the keyboard and mouse input from one computer to another, relaying the graphical-screen updates, over a network.

    Introduction of X Window System (X11, or X)

    The X Window System (X11, or simply X) is a windowing system for bitmap displays, common on Unix-like operating systems. X is an architecture-independent system for remote graphical user interfaces and input device capabilities. Each person using a networked terminal has the ability to interact with the display with any type of user input device. The X server is typically the provider of graphics resources and keyboard/mouse events to X clients.

    Termux X11 Repository

    X11 packages are available in a separate APT repository. You can enable it by running the following command:

    pkg install x11-repo

    It will automatically add appropriate sources.list file and PGP key. You can disable this repository by running the following command:

    pkg uninstall x11-repo

    TigerVNC VNC Server in Termux

    Go to their official website for more information.

    Install TigerVNC

    pkg install x11-repo
pkg install tigervnc

    Start a VNC Server

    vncserver [:1] [-geometry 1920x1080]

    You can optionally specify port with :port and resolution with -geometry. VNC server will start on the unused port with the smallest number on localhost if no port specified.

    You can specify xstartup script in the ~/.vnc/xstartup file. When the VNC server starts, it will run the script in ~/.vnc/xstartup (if any).

    At first time, you will be prompted for setting up passwords:

    You will require a password to access your desktops.

Password:
Verify:
Would you like to enter a view-only password (y/n)? n

    Note that passwords are not visible when you are typing them and maximal password length is 8 characters.

    If everything is okay, you will see this message:

    New 'localhost:1 ()' desktop is localhost:1

Creating default startup script /data/data/com.termux/files/home/.vnc/xstartup
Creating default config /data/data/com.termux/files/home/.vnc/config
Starting applications specified in /data/data/com.termux/files/home/.vnc/xstartup
Log file is /data/data/com.termux/files/home/.vnc/localhost:1.log

    It means that the server is available on display localhost:1.

    To make programs do graphical output to the display localhost:1, set environment variable like shown here (yes, without specifying localhost):

    export DISPLAY=":1"

    You may even put this variable to your bashrc or profile so you don’t have to always set it manually unless display address will be changed.

    You can connect to the VNC server from a VNC viewer to view the output.

    Note that you have to start a windows manager or desktop environment in ~/.vnc/xstartup or no graphical environment will be shown.

    Kill a VNC Server

    vncserver -kill localhost:1

    Replace :1 with the actual port your VNC server started on.

    Termux-x11

    Install Termux-x11 App

    Termux-x11 (com.termux.x11) app for Android can be installed from the .apk asset corresponding to your architecture in its GitHub release.

    Install Termux-x11 Package

    pkg install x11-repo
pkg install termux-x11-nightly

    Start a Termux-x11 X Server

    To start Termux-x11 X server, run:

    termux-x11 :1 -xstartup "$XSTARTUP"

    Replace :1 with the actual port you want and $XSTARTUP with the actual xstartup script.

    Note that you have to start a windows manager or desktop environment in the argument of -xstartup or no graphical environment will be shown.

    Connect to a Termux-x11 X Server

    Open the Termux-x11 app. It will connect to the Termux-x11 X server automatically.

    Fluxbox in Termux

    Install Fluxbox

    pkg install fluxbox

    Xstartup Script

    #!/data/data/com.termux/files/usr/bin/sh
fluxbox-generate_menu
fluxbox &

    Fluxbox windows manager will start automatically on VNC or X server startup.

    Openbox in Termux

    Install Openbox

    pkg install openbox pypanel xorg-xsetroot

    Xstartup Script

    #!/data/data/com.termux/files/usr/bin/sh
openbox-session &

    Don’t put any other command than the lines above to the xstartup script since Openbox has its own autostart script, which is located at ${PREFIX}/etc/xdg/openbox/autostart.

    nano ~/etc/xdg/openbox/autostart

    Copy below and paste to it (replace gray with the color you want):

    # Make background gray.
xsetroot -solid gray
pypanel &

    Openbox windows manager will start automatically on VNC or X server startup.

    XFCE in Termux

    Install XFCE

    pkg install xfce4

    Xstartup Script

    #!/data/data/com.termux/files/usr/bin/sh
xfce4-session &

    Don’t put any other command than the lines above to the xstartup script.

    XFCE desktop environment will start automatically on VNC or X server startup.

    LXQt in Termux

    Install LXQt

    pkg install lxqt

    Xstartup Script

    #!/data/data/com.termux/files/usr/bin/sh
startlxqt &

    Don’t put any other command than the lines above to the xstartup script.

    LXQt desktop environment will start automatically on VNC or X server startup.

    MATE in Termux

    Install MATE

    pkg install mate-* marco

    Xstartup Script

    #!/data/data/com.termux/files/usr/bin/sh
mate-session &

    Don’t put any other command than the lines above to the xstartup script.

    MATE desktop environment will start automatically on VNC server startup.

    Further Readings and References about Termux VNC or X Server and Graphical Environment

    AVNC: A VNC Client for Android

    Install AVNC

    AVNC (com.gaurav.avnc) can be installed from F-Droid.

    Connect a VNC Server

    Introduction of AVNC

    Tailscale: Peer-to-Peer Mesh VPN

    Introduction of Tailscale

    Tailscale is a modern, user-friendly mesh VPN that creates a secure, peer-to-peer network between your devices using WireGuard. It allows devices across different networks to communicate directly without complex firewall configurations or port forwarding.

    WireGuard is a registered trademark of Jason A. Donenfeld.

    Features of Tailscale:

    Go to their official website for more information.

    Tailscale in Linux

    Install

    curl -fsSL https://tailscale.com/install.sh | sh

    Log in

    sudo tailscale up

    Log in via https://login.tailscale.com/login. Google, Microsoft, GitHub, Apple, and passkey are available.

    Systemd Enable

    sudo systemctl enable tailscaled

    Manually Start Userspace Networking

    sudo tailscaled --tun=userspace-networking &

    Tailscale IP

    Your tailscale ip will be

    tailscale ip

    You can connect to it from another device logged in with the same account.

    Subnet Routing

    If you want to access devices on your local network through Tailscale, enable subnet routing

    sudo tailscale up --advertise-routes=192.168.1.0/24

    Tailscale in Android

    Install Tailscale

    Tailscale (com.tailscale.ipn) can be installed from F-Droid or Google Play.

    Introduction of Tailscale in Android

    Tailscale is a mesh VPN alternative that makes it easy to connect your devices, wherever they are. No more fighting configuration or firewall ports. Built on WireGuard®, Tailscale enables an incremental shift to zero-trust networking by implementing “always-on” remote access. This guarantees a consistent, portable, and secure experience independent of physical location.

    You can view the devices logged in and their Tailscale IPs in the app.

    PRoot-Distro with Termux: Install Linux Distributions in Termux

    Introduction of Chroot, PRoot, PRoot-Distro

    PRoot-Distro Usage

    Supported Distributions

    Here are the supported distributions (alias: name):

    Hint to Install Linux OS with PRoot-Distro

    Type command proot-distro list to get a list of the supported distributions.

    Pick a distro alias and run the next command to install it:

    proot-distro install <alias> [--override-alias <new alias>]

    Runtime data is stored at this location:

    /data/data/com.termux/files/usr/var/lib/proot-distro

    If you have issues with proot during installation or login, try to set PROOT_NO_SECCOMP=1 environment variable.

    Andronix with Termux: Install Linux Distributions in Termux

    Install Andronix App (Optional)

    Andronix (studio.com.techriz.andronix) can be installed from Google Play.

    Andronix is an app that lets you install Linux distributions like Ubuntu, Debian, Manjaro etc. in Termux on non-rooted Android devices with PRoot. Andronix provides paid, close-source modded OS too, which won’t be mentioned in this tutorial.

    Install an OS Following Andronix App Instructions

    1. Open Andronix app.
    2. Click the Linux Distribution card.
    3. Click on the Linux distribution you want to install. It is recommended to get started with Ubuntu or Debian if you are overwhelmed by the options.
    4. Click on the user interface you want. Graphical User Interface or GUI is the visual interface that you interact with to do things in your Linux distribution. Command Line Interface or CLI is the text-based interface that you interact with to execute commands and perform tasks in your Linux distribution.
    5. Desktop Environment: You can choose a Desktop Environment if you would like to use your mouse as well as your keyboard, or you’ve little or no experience with Linux.
    6. Window Manager: You can choose a Window Manager if you only want to use your keyboard to manage windows and other OS-level tasks. These are pretty light and fast, but do require some skill before getting productive.
    7. CLI Only: If you don’t want a Graphical User-interface, you can go ahead with the Command Line Interface.
    8. Andronix will automatically copy the command to your clipboard.
    9. Paste and run in Termux.

    Uninstall an Not Modded OS Following Andronix App Instructions

    1. Open Andronix app.
    2. Click the Linux Distribution card.
    3. Long press on the Linux distribution you want to uninstall.
    4. Select Uninstall.
    5. Andronix will automatically copy the command to your clipboard.
    6. Paste and run in Termux (Not inside that OS).

    PulseAudio Server Sound Output

    Install and Setup

    Run the following command in Termux (Not inside that OS):

    pkg install wget && wget https://andronixos.sfo2.cdn.digitaloceanspaces.com/OS-Files/setup-audio.sh && chmod +x setup-audio.sh && ./setup-audio.sh

    Start PulseAudio Server

    pulseaudio --start

    Example: Debian with XFCE Desktop Environment

    Install Debian with XFCE

    pkg update -y && pkg install wget curl proot tar -y && wget https://raw.githubusercontent.com/AndronixApp/AndronixOrigin/master/Installer/Debian/debian-xfce.sh -O debian-xfce.sh && chmod +x debian-xfce.sh &&  bash debian-xfce.sh

    The file directory of the Debian OS will be debian-fs. You can read, write, and execute files in it both in Termux or in the Debian OS.

    Turn on the OS (CLI)

    ./start-debian.sh

    VNC Server

    1. Run vncserver-start in the OS to start the VNC server (default on port 1).
    2. Get a VNC viewer. AVNC is recommended for Android.
    3. Add a new connection with address localhost:1.
    4. View GUI of the OS from VNC viewer.
    5. Run vncserver-start in the OS to kill all VNC servers.

    Example: Debian with CLI Only

    Install Debian

    pkg update -y && pkg install wget curl proot tar -y && wget https://raw.githubusercontent.com/AndronixApp/AndronixOrigin/master/Installer/Debian/debian.sh -O debian.sh && chmod +x debian.sh && bash debian.sh

    The file directory of the Debian OS will be debian-fs. You can read, write, and execute files in it both in Termux or in the Debian OS.

    Turn on the OS (CLI)

    ./start-debian.sh

    Example: Uninstall Debian OS (Not Modded)

    wget https://raw.githubusercontent.com/AndronixApp/AndronixOrigin/master/Uninstall/Debian/UNI-debian.sh && chmod +x UNI-debian.sh && bash UNI-debian.sh

    Further Readings and References about Chroot, Proot, and Andronix

    QEMU System Emulation with Termux: Full System Emulation

    Install QEMU System Emulation for x86-64

    Run the following command in Termux:

    pkg update && pkg install qemu-utils qemu-common qemu-system-x86-64-headless wget -y

    Install QEMU System Emulation for AArch64

    Run the following command in Termux:

    pkg update && pkg install qemu-utils qemu-common qemu-system-aarch64-headless wget -y

    ISO and QCOW2 Image Methods

    For more complex distribution like Debian and Ubuntu, using ISO image method is easier to encounter some issues like GRUB menu not showing on CLI or stuck in the middle of the installation process which QCOW2 image method usually doesn’t cause.

    Host Port Forwarding

    Set hostfwd to set host port forwarding. Take hostfwd=tcp::2222-:22 for example, tcp specifies the TCP protocol for the forwarding rule, ::2222 indicates that on the host machine, TCP connections to port 2222 will be forwarded, and -:22 indicates that these connections will be forwarded to port 22 (the default SSH port) on the guest virtual machine.

    Alpine Linux x86-64 ISO Image

    Installation

    size='5G'
memory='1024'
cpu='2'
pkg update && pkg install qemu-utils qemu-common qemu-system-x86-64-headless wget -y
mkdir ~/alpine-x86_64 && cd ~/alpine-x86_64
wget https://dl-cdn.alpinelinux.org/v3.21/releases/x86_64/alpine-virt-3.21.0-x86_64.iso
qemu-img create -f qcow2 alpine-x86_64.img $size
qemu-system-x86_64 -machine q35 -m $memory -smp cpus=$cpu -cpu qemu64 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-x86_64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -cdrom alpine-virt-3.21.0-x86_64.iso -drive file=alpine-x86_64.img,format=qcow2 -nographic

    Run below in the Alpine Linux VM to setup:

    setup-alpine

    CLI Only

    memory='1024'
cpu='2'
qemu-system-x86_64 -machine q35 -m $memory -smp cpus=$cpu -cpu qemu64 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-x86_64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/alpine-x86_64/alpine-x86_64.img,format=qcow2 -nographic

    With VNC Display

    memory='1024'
cpu='2'
qemu-system-x86_64 -machine q35 -m $memory -smp cpus=$cpu -cpu qemu64 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-x86_64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/alpine-x86_64/alpine-x86_64.img,format=qcow2 -vnc :0

    Alpine Linux AArch64 ISO Image

    Installation

    size='5G'
memory='1024'
cpu='2'
pkg update && pkg install qemu-utils qemu-common qemu-system-aarch64-headless wget -y
mkdir ~/alpine-aarch64 && cd ~/alpine-aarch64
wget https://dl-cdn.alpinelinux.org/alpine/latest-stable/releases/aarch64/alpine-virt-3.21.0-aarch64.iso
qemu-img create -f qcow2 alpine-aarch64.img $size
qemu-system-aarch64 -machine virt -m $memory -smp cpus=$cpu -cpu cortex-a72 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-aarch64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -cdrom alpine-virt-3.21.0-aarch64.iso -drive file=alpine-aarch64.img,format=qcow2 -nographic

    Run below in the Alpine Linux VM to setup:

    setup-alpine

    CLI Only

    memory='1024'
cpu='2'
qemu-system-aarch64 -machine virt -m $memory -smp cpus=$cpu -cpu cortex-a72 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-aarch64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/alpine-aarch64/alpine-aarch64.img,format=qcow2 -nographic

    With VNC Display

    memory='1024'
cpu='2'
qemu-system-aarch64 -machine virt -m $memory -smp cpus=$cpu -cpu cortex-a72 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-aarch64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/alpine-aarch64/alpine-aarch64.img,format=qcow2 -vnc :0

    Debian Linux AMD64 QCOW2 Image

    Installation

    size='5G'
memory='1024'
cpu='2'
pkg update && pkg install qemu-utils qemu-common qemu-system-x86-64-headless wget -y
mkdir ~/debian-amd64 && cd ~/debian-amd64
wget https://cloud.debian.org/images/cloud/bookworm/latest/debian-12-nocloud-amd64.qcow2
qemu-img resize debian-12-nocloud-amd64.qcow2 +$size
qemu-system-x86_64 -machine q35 -m $memory -smp cpus=$cpu -cpu qemu64 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-x86_64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/debian-amd64/debian-12-nocloud-amd64.qcow2,format=qcow2 -nographic

    CLI Only

    memory='1024'
cpu='2'
qemu-system-x86_64 -machine q35 -m $memory -smp cpus=$cpu -cpu qemu64 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-x86_64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/debian-amd64/debian-12-nocloud-amd64.qcow2,format=qcow2 -nographic

    With VNC Display

    memory='1024'
cpu='2'
qemu-system-x86_64 -machine q35 -m $memory -smp cpus=$cpu -cpu qemu64 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-x86_64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/debian-amd64/debian-12-nocloud-amd64.qcow2,format=qcow2 -vnc :0

    Debian Linux ARM64 QCOW2 Image

    Installation

    size='5G'
memory='1024'
cpu='2'
pkg update && pkg install qemu-utils qemu-common qemu-system-aarch64-headless wget -y
mkdir ~/debian-arm64 && cd ~/debian-arm64
wget https://cloud.debian.org/images/cloud/bookworm/latest/debian-12-nocloud-arm64.qcow2
qemu-img resize debian-12-nocloud-arm64.qcow2 +$size
qemu-system-aarch64 -machine virt -m $memory -smp cpus=$cpu -cpu cortex-a72 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-aarch64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/debian-arm64/debian-12-nocloud-arm64.qcow2,format=qcow2 -nographic

    CLI Only

    memory='1024'
cpu='2'
qemu-system-aarch64 -machine virt -m $memory -smp cpus=$cpu -cpu cortex-a72 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-aarch64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/debian-arm64/debian-12-nocloud-arm64.qcow2,format=qcow2 -nographic

    With VNC Display

    memory='1024'
cpu='2'
qemu-system-aarch64 -machine virt -m $memory -smp cpus=$cpu -cpu cortex-a72 -drive if=pflash,format=raw,read-only=on,file=$PREFIX/share/qemu/edk2-aarch64-code.fd -netdev user,id=n1,dns=8.8.8.8,hostfwd=tcp::2222-:22 -device virtio-net,netdev=n1 -drive file=~/debian-arm64/debian-12-nocloud-arm64.qcow2,format=qcow2 -vnc :0

    Check Image Info

    In host, run:

    qemu-img info <image>

    Check VM Disk

    Inside guest, run:

    df -h

    and for partition, run:

    lsblk

    Resize Image

    In host, run:

    qemu-img resize <image> +5G

    +5G indicates increasing 5GB disk image. You can adjust the size as needed.

    Resize Partition in Debian AMD64

    In Debian guest, run:

    sudo apt update
sudo apt install parted e2fsprogs -y
sudo parted /dev/sda

    In (parted), run:

    print
fix
resizepart 1 100%
quit

    and then in Debian guest run:

    sudo resize2fs /dev/sda1

    Resize Partition in Debian ARM64

    In Debian guest, run:

    sudo apt update
sudo apt install parted e2fsprogs -y
sudo parted /dev/vda

    In (parted), run:

    print
fix
resizepart 1 100%
quit

    and then in Debian guest run:

    sudo resize2fs /dev/vda1

    Further Readings and References about QEMU

    Shizuku, SystemUI Tuner, and aShell: Use Local ADB of Android Device on Terminals Such as Termux without Another Device with Shizuku, Leave Developer Options off When Doing So with SystemUI Tuner, and Use ADB with Features like Autocomplete Suggestion with aShell

    Install Shizuku

    Shizuku (moe.shizuku.privileged.api) can be installed from IzzyOnDroid F-Droid repository or Google Play.

    Introduction of ADB and Shizuku

    Connect Shizuku to Wireless ADB

    1. Grant Shizuku notification permission.
    2. Tap Pairing in Start via Wireless debugging block in Shizuku.
    3. Connect to a WiFi you trust. You don’t need to log in to the WiFi though. You just need to let your phone think that you’re connected to WiFi.
    4. In phone’s Settings or something similar, go to About Phone > Software Information or something similar, and tap the Version Number seven times to enable Developer Options. Some phones may have different methods to enable Developer Options.
    5. In the Developer Options, enable Wireless ADB and tap Pair with a pairing code.
    6. Input the pairing code in the notification of Shizuku.
    7. In the Developer Options, togle on Disable adb authorization timeout if you don’t want to do all the above again every few times using Shizuku. If the connection is disconnected due to whatever reason, follow Reconnect Shizuku in Case it Stops with SystemUI Tuner to reconnect if you’re using SystemUI Tuner, or follow above guide again to reconnect.
    8. Back to Shizuku and tap Start in Start via Wireless debugging block. You all see Shizuku is running on the top of the app interface of Shizuku.

    Use Shizuku in a Terminal Application for the First Time

    1. Tap Use Shizuku in terminal applications in Shizuku and export files rish and rish_shizuku.dex to somewhere on your phone.
    2. Use a text editor to replace PKG in rish with the package name of your terminal application. Take Termux for example, Termux’s package name is com.termux. Run termux-setup-storage and tap Allow to grant Termux storage permission.
    3. Open your terminal application and move the exported files to somewhere it can access (usually with mv old_location new_location). The root directory of the main storage of Android is usually /storage/emulated/0. One recommended terminal application for Android is Termux. My tutorial for it is available in Termux: A Powerful Terminal Emulation with an Extensive Linux Package Collection.
    4. Go to the directory you moved the exported files to with cd directory (assumed ~/shizuku below) and run sh rish.
    5. ~ $ should become <device>:/ $ (such as e2q:/ $) if sh rish succeeded. Write ADB commands here. Note that there is no need to use adb or adb shell prefixes before commands and that devices command gets /system/bin/sh: devices: inaccessible or not found.
    6. You can turn WiFi off after ADB is connected. The notification of Shizuku may say Paring failed after that, but you can check Shizuku app to check whether there’s a block that reads Shizuku is running on the top.
    7. Optionally, create a .sh file (nano ~/shizuku.sh for example), paste cd shizuku && sh rish, save it, and make it executable with chmod +x shizuku.sh so that you can run this shortcut to start Shizuku on your terminal afterward.

    Install SystemUI Tuner

    SystemUI Tuner can be installed from Google Play (pub: Zachary Wander).

    To Leave Developer Options off When Using Shizuku to Connect to ADB with SystemUI Tuner

    WARNING: In Android 14’s latest update, now Enable ADB can’t be persistently on unless USB connected.

    Some apps (such as many financial apps) may require Developer Options to be off when using them. This section is the tutorial about how to turn Developer Options off while still using ADB Shell with Shizuku.

    1. Run adb shell command pm grant com.zacharee1.systemuituner android.permission.WRITE_SECURE_SETTINGS (you can do it with Shizuku and a terminal such as Termux or aShell).
    2. Connect to a WiFi. You don’t need to log in or have real WiFi access, just make your phone believes you are connected to WiFi.
    3. Turn off Developer Options if it’s on. The toggle switch is usually on the top of Developer Options.
    4. In SystemUI Tuner, go to Developer and turn on Enable ADB and Enable Wireless ADB.
    5. In SystemUI Tuner, go to Persistent Options and select Enable ADB.
    6. Press Start on Shizuku.
    7. Turn off WiFi. Enable Wireless ADB will be turned off automatically by system settings. You can check that in SystemUI Tuner.

    Reconnect Shizuku in Case it Stops with SystemUI Tuner

    1. Connect to a WiFi. You don’t need to log in or have real WiFi access, just make your phone believes you are connected to WiFi.
    2. Turn off Developer Options if it’s on. The toggle switch is usually on the top of Developer Options.
    3. In SystemUI Tuner, go to Developer and turn on Enable Wireless ADB.
    4. Press Start on Shizuku.
    5. Turn off WiFi. Enable Wireless ADB will be turned off automatically by system settings. You can check that in SystemUI Tuner.

    Other SystemUI Tuner Usage

    SystemUI Tuner exposes some hidden options in Android. You can set them, add them to Persistent Options to keep them on, etc. Different manufacturers may remove or change these options, which SystemUI Tuner may not work around.

    You may need to run the following adb shell command (you can do it with Shizuku and a terminal such as Termux or aShell) in order to change the settings:

    pm grant com.zacharee1.systemuituner android.permission.WRITE_SECURE_SETTINGS
pm grant com.zacharee1.systemuituner android.permission.PACKAGE_USAGE_STATS
pm grant com.zacharee1.systemuituner android.permission.DUMP

    aShell

    Install aShell

    aShell can be installed from F-Droid.

    Introduction of aShell

    Usage of aShell

    1. Give aShell the permission moe.shizuku.manager.permission.API_V23.
    2. Connect to ADB.
    3. Use aShell.

    Further Readings and References about ADB and Shizuku

    Tor, Tor Browser, NoScript Security Suite, and Torsocks

    Introduction of Tor

    Tor is a free overlay network for enabling anonymous communication. Built on free and open-source software and more than seven thousand volunteer-operated relays worldwide, users can have their Internet traffic routed via a random path through the network.

    Using Tor makes it more difficult to trace a user’s Internet activity by preventing any single point on the Internet (other than the user’s device) from being able to view both where traffic originated from and where it is ultimately going to at the same time. This conceals a user’s location and usage from anyone performing network surveillance or traffic analysis from any such point, protecting the user’s freedom and ability to communicate confidentially.

    Key Features of Tor:

    Some services may crash when routing traffic through Tor, changing the Exit nodes may help.

    Install Tor Browser

    Tor Browser can be installed from Google Play or the Guardian Project F-Droid repository. For the latter, please refer to F-Droid Repositories for more information about how to add a F-Droid repository to your F-Droid client app.

    The Tor Browser for Android is a mobile version of the Tor Browser that utilizes Mozilla Firefox for Android codebase.

    NoScript Security Suite

    NoScript (or NoScript Security Suite) is a free and open-source extension for Firefox- and Chromium-based web browsers, written and maintained by Giorgio Maone, a software developer and member of the Mozilla Security Group. By default, NoScript blocks active (executable) web content, which can be wholly or partially unblocked by allowlisting a site or domain from the extension’s toolbar menu or by clicking a placeholder icon. It is recommended to enable NoScript for all Tor sites unless you fully trust it.

    Tor in Termux

    Install

    pkg install tor

    Configurations

    nano $PREFIX/etc/tor/torrc

    Default SOCKS proxy port is:

    SOCKSPort 9050

    Run

    tor

    or in background,

    tor &

    You can add tor & in .bashrc (or .zshrc) to start Tor automatically when opening Termux.

    Torsocks in Termux

    Install

    pkg install torsocks

    Configurations

    nano $PREFIX/etc/tor/torsocks.conf

    Default address and port are:

    TorAddress 127.0.0.1
TorPort 9050

    To use the tor in Termux, use TorAddress 127.0.0.1 and ensure TorPort is the same as the SOCKSPort in $PREFIX/etc/tor/torrc.

    Usage

    You can route any command through Tor by adding torsocks in the beginning of the command. For example:

    torsocks curl https://check.torproject.org

    You can add aliases in .bashrc (or .zshrc) to force commands to go through torsocks. For example:

    alias apt="torsocks apt"

    To start tor and let it run in background on every boot, you can install Termux:Boot and add

    #!/data/data/com.termux/files/usr/bin/bash
nohup tor &

    to ~/.termux/boot/boot.sh.

    TrackerControl and InviZible Pro: Route Traffic through Tor, Block DNS over UDP, Set DNS Server, Block Trackers, etc.

    This section mentions Tor, for people who are new to it, please refer to Tor, Tor Browser, NoScript Security Suite, and Torsocks.

    Install InviZible Pro

    InviZible Pro (pan.alexander.tordnscrypt.stable) can be installed from F-Droid or Google Play.

    Install TrackerControl

    TrackerControl (net.kollnig.missioncontrol.fdroid), also known as TC, can be installed from F-Droid.

    WARNING: Please avoid use the Google Play version because it doesn’t have the feature like trackers blocking in order to comply with Google’s terms.

    Configure TrackerControl to Block Trackers without InviZible Pro

    Configure TrackerControl and InviZible Pro for DNSCrypt and Tor

    Configure TrackerControl

    1. Turn on TrackerControl as the VPN service of the device.
    2. Go to TrackerControl.
    3. Disable Monitoring of InviZible Pro (pan.alexander.tordnscrypt.stable).
    4. Go to the Settings > Advanced options.
    5. Turn on Block Trackers on UDP.
    6. Set the SOCKS5 address to 127.0.0.1.
    7. Set the SOCKS port to the port you’ve configured Tor to use in InviZible Pro (9050 by default).
    8. Enable the Use SOCKS5 proxy option.
    9. Tap Port forwarding.
    10. Tap ⊕. Set protocol as UDP, Source port to 53, Destination address to 127.0.0.1, Destination port to the port you configure DNSCrypt of InviZible pro to listen to (5354 by default), and Destination app to nobody.
    11. Tap ⊕. Set protocol as TCP, Source port to 53, Destination address to 127.0.0.1, Destination port to the port you configure DNSCrypt of InviZible pro to listen to (5354 by default), and Destination app to nobody.
    12. Set first (above) VPN DNS as 9.9.9.9.
    13. Set second (below) VPN DNS as 149.112.112.112.
    14. Set where to validate the internet connection in Validate at if you want, www.f-droid.org for example.
    15. Block unwanted trackers and set other things if you want.

    If you export settings and import it on another device, the blocklist may not be able to be configured as that in the previous device. You can apply some of the above settings with the .xml below (assuming the configuration of Invizible Pro is as in this tutorial) by coping it, storing it in a .xml file and going to Settings > Backup > Import settings of TrackerControl to import this file. However, it just contains some of the settings, you have to configure others yourself and test whether your applications work as normal because things may vary from case to case.

    <?xml version='1.0' encoding='UTF-8' standalone='yes' ?>
<trackercontrol>
  <application>
    <setting key="dns2" type="string" value="149.112.112.112" >
    <setting key="filter_udp" type="boolean" value="true" >
    <setting key="domain_based_blocking" type="boolean" value="true" >
    <setting key="dark_theme" type="boolean" value="true" >
    <setting key="dns" type="string" value="9.9.9.9" >
    <setting key="hosts_url_new" type="string" value="https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts" >
    <setting key="wifi_homes" type="set" value="" >
    <setting key="traffic_blocked" type="boolean" value="true" >
    <setting key="hosts_url" type="string" value="https://www.netguard.me/hosts" >
    <setting key="socks5_addr" type="string" value="127.0.0.1" >
    <setting key="socks5_port" type="string" value="9050" >
    <setting key="proto_tcp" type="boolean" value="true" >
    <setting key="manage_system" type="boolean" value="true" >
    <setting key="validate" type="string" value="www.f-droid.org" >
    <setting key="update_check" type="boolean" value="true" >
    <setting key="socks5_enabled" type="boolean" value="true" >
    <setting key="filter" type="boolean" value="true" >
  </application>
  <apply>
    <setting key="com.termux" type="boolean" value="false" >
    <setting key="pan.alexander.tordnscrypt.stable" type="boolean" value="false" >
  </apply>
  <forward>
    <port pkg="nobody" protocol="17" dport="53" raddr="127.0.0.1" rport="5354" >
    <port pkg="nobody" protocol="6" dport="53" raddr="127.0.0.1" rport="5354" >
  </forward>
</trackercontrol>

    Configure InviZible Pro

    1. Change to Proxy mode by tapping the ⋮ button in the upper right corner and select that option.
    2. Go to Fast settings.
    3. Turn on Autostart DNSCrypt and Autostart Tor if you want.
    4. Set Delay, DNSCrypr servers, Bridges, whether to Spoof SNI, etc. if needed.
    5. Go to Common Settings and turn on Prevent device sleep if needed.
    6. Go to DNSCrypt Settings.
    7. Go to Listen port and set it to the port TrackerControl forwarding UDP and TCP of port 53 to (5354 by default).
    8. Set Require DNSSEC, Require no log, and Require no filter if you want.
    9. Turn on Force TCP because Tor doesn’t support UDP.
    10. Turn on SOCKS proxy > Outbound proxy.
    11. Set Proxy port as the port you want to configure Tor to use in InviZible Pro (9050 by default).
    12. Turn on Query logging and Suspicious logging if you want.
    13. Go to Tor settings.
    14. Set Nodes, Proxy, etc. if you want. Make sure the SOCKS port is coordinated with the SOCKS proxy in TrackerControl and the DNS port is coordinated with the Forwarding rules in DNSCrypt Settings (onion 127.0.0.1:5400 by default).
    15. Set other things if you want.
    16. Turn on DNSCrypt and Tor.

    You can apply some of the above settings with the files below (assuming the configuration of TrackerControl is as in this tutorial). However, they just contain some of the settings, you have to configure others yourself and test whether your applications work as normal because things may vary from case to case.

    Some services may crash when routing traffic through Tor, changing the Exit nodes in InviZible Pro may help; otherwise, you may try to disable monitoring that app or toggle off Use SOCKS5 proxy in TrackerControl, which however compromise your privacy to some degree.

    Configure TrackerControl and InviZible Pro for DNSCrypt Only

    To use DNSCrypt but not Tor of InviZible Pro with TrackerControl, there are below differences in the configuration compared with both DNSCrypt and Tor in above section.

    Configure TrackerControl

    1. Turn on TrackerControl as the VPN service of the device.
    2. Go to TrackerControl.
    3. Disable Monitoring of InviZible Pro (pan.alexander.tordnscrypt.stable).
    4. Go to the Settings > Advanced options.
    5. Turn on Block Trackers on UDP.
    6. Tap Port forwarding.
    7. Tap ⊕. Set protocol as UDP, Source port to 53, Destination address to 127.0.0.1, Destination port to the port you configure DNSCrypt of InviZible pro to listen to (5354 by default), and Destination app to nobody.
    8. Tap ⊕. Set protocol as TCP, Source port to 53, Destination address to 127.0.0.1, Destination port to the port you configure DNSCrypt of InviZible pro to listen to (5354 by default), and Destination app to nobody.
    9. Set first (above) VPN DNS as 9.9.9.9.
    10. Set second (below) VPN DNS as 149.112.112.112.
    11. Set where to validate the internet connection in Validate at if you want, www.f-droid.org for example.
    12. Block unwanted trackers and set other things if you want.

    Configure InviZible Pro

    1. Change to Proxy mode by tapping the ⋮ button in the upper right corner and select that option.
    2. Go to Fast settings.
    3. Turn on Autostart DNSCrypt if you want.
    4. Set Delay, DNSCrypr servers, Bridges, whether to Spoof SNI, etc. if needed.
    5. Go to Common Settings and turn on Prevent device sleep if needed.
    6. Go to DNSCrypt Settings.
    7. Go to Listen port and set it to the port TrackerControl forwarding UDP and TCP of port 53 to (5354 by default).
    8. Set Require DNSSEC, Require no log, and Require no filter if you want.
    9. Turn on Force TCP if you want.
    10. Turn on Query logging and Suspicious logging if you want.
    11. Turn on DNSCrypt.

    Configure TrackerControl and InviZible Pro for Tor Only

    To use Tor but not DNSCrypr of InviZible Pro with TrackerControl, there are below differences in the configuration compared with both DNSCrypt and Tor in above section.

    Configure TrackerControl

    1. Turn on TrackerControl as the VPN service of the device.
    2. Go to TrackerControl.
    3. Disable Monitoring of InviZible Pro (pan.alexander.tordnscrypt.stable).
    4. Go to the Settings > Advanced options.
    5. Turn on Block Trackers on UDP.
    6. Set the SOCKS5 address to 127.0.0.1.
    7. Set the SOCKS port to the port you’ve configured Tor to use in InviZible Pro (9050 by default).
    8. Enable the Use SOCKS5 proxy option.
    9. Tap Port forwarding.
    10. Tap ⊕. Set protocol as UDP, Source port to 53, Destination address to 127.0.0.1, Destination port to the Forwarding rules in DNSCrypt Settings of InviZible Pro (5400 by default), and Destination app to nobody.
    11. Tap ⊕. Set protocol as TCP, Source port to 53, Destination address to 127.0.0.1, Destination port to the Forwarding rules in DNSCrypt Settings of InviZible Pro (5400 by default), and Destination app to nobody.
    12. Set first (above) VPN DNS as 9.9.9.9.
    13. Set second (below) VPN DNS as 149.112.112.112.
    14. Set where to validate the internet connection in Validate at if you want, www.f-droid.org for example.
    15. Block unwanted trackers and set other things if you want.

    Configure InviZible Pro

    1. Change to Proxy mode by tapping the ⋮ button in the upper right corner and select that option.
    2. Go to Fast settings.
    3. Turn on Autostart Tor if you want.
    4. Set Delay, DNSCrypr servers, Bridges, whether to Spoof SNI, etc. if needed.
    5. Go to Common Settings and turn on Prevent device sleep if needed.
    6. Go to Tor settings.
    7. Set Nodes, Proxy, etc. if you want. Make sure the SOCKS port is coordinated with the SOCKS proxy in TrackerControl and the DNS port is coordinated with the Port forwarding rules in TrackerControl.
    8. Set other things if you want.
    9. Turn on Tor.

    Check Whether the Tor Route Setup Is Successful

    Configure InviZible Pro to Block Trackers without TrackerControl

    OpenSSH: Secure Remote Access with SSH, SCP, and SFTP

    Introduction of SSH (Secure Shell) and OpenSSH

    OpenSSH Server

    Install in Debian Derivatives

    sudo apt install openssh-server

    Install in Termux

    pkg install openssh

    Edit Configuration

    sudo nano /etc/ssh/sshd_config
    Listening Port

    Edit

    #Port 22

    line to change the listening port.

    Note that you may need to set it to higher port in VMs.

    Ports Listening to

    Edit

    #AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::

    lines to change ports listening to.

    PermitRootLogin

    Change the PermitRootLogin line to

    PermitRootLogin yes

    if you want to permit login as root. In Termux, this is common, but in normal Linux, this is not discouraged.

    PasswordAuthentication

    Change the PasswordAuthentication line to

    PasswordAuthentication yes

    to permit password authentication. Password can be set by running passwd.

    Usage in Linux with Systemctl

    sudo systemctl start ssh
sudo systemctl enable ssh
sudo systemctl restart ssh
sudo systemctl status ssh
sudo systemctl disable ssh

    Usage in Termux

    Start
    sshd
    Stop
    pkill sshd

    Deny

    nano /etc/hosts .deny

    Ubuntu Firewall

    sudo ufw enable
sudo ufw allow ssh

    OpenSSH Client

    Install in Debian Derivatives

    sudo apt install openssh-client

    Install in Termux

    pkg install openssh

    Connect

    ssh [user]@[ssh_server] -p [port] -L [local_port]:[remote_host]:[remote_port]

    Key

    ssh-keygen -R [localhost]:2222

    You need to delete the original key if the server is reset.

    If you’re using password authentication, you won’t need to generate key.

    SCP (Secure Copy Protocol)

    SCP is a simple command-line tool for securely copying files between local and remote systems based on the rcp (remote copy) command but uses SSH for security. It is faster but less flexible than SFTP.

    You can use scp on the client side to transfer files between the server side and the client side.

    The syntax of scp is generally the same as that of cp, but with the <user@remote>: added before the path from the server and optional -P <port> to specify the port. For example:

    scp -r root@localhost:/root/Desktop /data/data/com.termux/files/home -P 22

    SFTP (Secure File Transfer Protocol)

    SFTP is a full-fledged file transfer protocol that runs over SSH. This makes it more secure than traditional FTP (File Transfer Protocol). SFTP allows for various file management operations, such as listing, renaming, deleting directories and files, and changing directories.

    The syntax of sftp, which connects to the server from the client, is generally the same as that of ssh. For example:

    sftp -p 2222 user@example.com

    You can also connect to the sftp server from other clients. One recommended file manager for Android which can connect to sftp server is Material Files. My tutorial for it is available in Material File: Linux-Aware File Manager with FTP, SFTP, SMB and WebDAV Support.

    Further Readings and References about OpenSSH with Linux and Termux

    OpenSSL: SSL and TLS Protocals and Cryptography Library Implementation

    Introduction of OpenSSL

    OpenSSL is an open-source library that provides a comprehensive suite of cryptographic tools for securing communications over computer networks. It implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols and includes a general-purpose cryptographic library that supports a variety of encryption algorithms, hashing functions, digital signatures, key generation, certificate management, and secure random number generation.

    Install OpenSSL in Termux

    pkg install openssl openssl-tool

    Install of OpenSSL in Debian Derivatives

    sudo apt install openssl libssl-dev

    RSA (Rivest-Shamir-Adleman)

    Introduction of RSA

    RSA is a widely used asymmetric encryption algorithm that underpins many security protocols. Its strength lies in the difficulty of factoring large prime numbers. The algorithm involves key generation, encryption, and decryption processes utilizing a pair of keys: a public key, shared openly, and a private key, kept secret.

    1. Key Generation: The algorithm begins by selecting two large prime numbers. The totient function, equal to the product of the decrements of the two large prime numbers by one, is computed. A public exponent, typically 65537, is chosen, which is coprime to the totient function of the product of the two large prime numbers. The public key is the array of the product of the two large prime numbers and the public exponent. The private exponent is calculated such that the product of the public exponent and the private exponent is congruent to 1 modulo the totient function of the product of the two large prime numbers. The private key is the array of the product of the two large prime numbers and the private exponent. RSA’s security relies on the ease of multiplying primes and the difficulty of factoring their product.
    2. Public Encryption and Private Decryption (Communication): After generating the keys, RSA can be used for secure communication. To encrypt a message, which should be less than the product of the two large prime numbers, the sender uses the recipient’s public key with the formula that the ciphertext equals the message to the power of the public exponent modulo the product of the two large prime numbers. Only the intended recipient, with the private key, can decrypt it using the formula that the message equals the cyphertext to the power of the private exponent modulo the product of the two large prime numbers.
    3. Private Encryption and Public Decryption (Signature): RSA can also create digital signatures for authenticity and non-repudiation. The sender encrypts a hash of the message with their private key with the formula that the signature equals the hash to the power of the private exponent modulo the product of the two large prime numbers. The signature is sent accompanying the original message. The recipient verifies the signature by decrypting it with the sender’s public key with the formula that the hash equals the signature to the power of the public exponent modulo the product of the two large prime numbers. If hash obtained from the formula matches the hash of the received message, it confirms the message’s authenticity.

    Applications:

    Generate New Private Key

    openssl genrsa -out /path/privatekeyfilename.pem 2048

    2048 means 2048 iterations, change the number as needed.

    Generate Public Key from Private Key

    openssl rsa -pubout -in /path/privatekeyfilename.pem -out /path/publickeyfilename.pem

    Encrypt with Public Key

    openssl pkeyutl -in /path/filename.txt -out /path/publickeyencryptedfilename.txt -inkey /path/publickeyfilename.pem -pubin -encrypt

    Decrypt with Public Key

    openssl pkeyutl -in /path/publickeyencryptedfilename.txt -out /path/filename.txt -inkey /path/privatekeyfilename.pem -decrypt

    Encrypt with Private Key

    openssl pkeyutl -in /path/filename.txt -out /path/privatekeyencryptedfilename.txt -inkey /path/privatekeyfilename.pem -encrypt

    Decrypt with Private Key

    openssl pkeyutl -in /path/privatekeyencryptedfilename.txt -out /path/filename.txt -inkey /path/publickeyfilename.pem -pubin -decrypt

    Sign a Raw File

    openssl pkeyutl -in filename.txt -rawin -out signed_filename.txt -inkey keyfile/privatekeyfile.pem -sign

    Sign a Hex File

    openssl pkeyutl -in hexfilename.txt -out signed_filename.txt -inkey keyfile/privatekeyfile.pem -sign

    Verify a Signature Against a Raw File

    openssl pkeyutl -in filename.txt -rawin -out verification.txt -sigfile signed_filename.txt -inkey keyfile/publickeyfile.pem -pubin -verify

    Verify a Signature Against a Hex File

    openssl pkeyutl -in hexfilename.txt -rawin -out verification.txt -sigfile signed_filename.txt -inkey keyfile/publickeyfile.pem -pubin -verify

    All Command Options of Pkeyutl from Official Doc

    openssl pkeyutl [-help] [-in file] [-rawin] [-digest algorithm] [-out file] [-sigfile file] [-inkey filename|uri] [-keyform DER|PEM|P12|ENGINE] [-passin arg] [-peerkey file] [-peerform DER|PEM|P12|ENGINE] [-pubin] [-certin] [-rev] [-sign] [-verify] [-verifyrecover] [-encrypt] [-decrypt] [-derive] [-kdf algorithm] [-kdflen length] [-pkeyopt opt:value] [-pkeyopt_passin opt[:passarg]] [-hexdump] [-asn1parse] [-engine id] [-engine_impl] [-rand files] [-writerand file] [-provider name] [-provider-path path] [-propquery propq] [-config configfile]

    DESCRIPTION: This command can be used to perform low-level public key operations using any supported algorithm.

    OPTIONS:

    Symmetric Encryption

    Introduction of Symmetric Encryption

    Symmetric encryption uses the same key for both encryption and decryption, requiring both parties to possess and keep the key confidential.

    Features:

    Common Algorithms:

    Applications:

    AES-256-CBC Encryption

    openssl enc -aes-256-cbc -in file.rar -out encfile.rar -pass pass:1234567890123456789012345678901234567890123456789012345678901234 -base64 -iv 12345678901234567890123456789012 -S 1234567890123456 -md sha-256 -iter 2048 -pbkdf2 -p

    AES-256-CBC Decryption

    openssl enc -aes-256-cbc -in encfile.rar -out file.rar -pass pass:1234567890123456789012345678901234567890123456789012345678901234 -d -base64 -iv 12345678901234567890123456789012 -S 1234567890123456 -md sha-256 -iter 2048 -pbkdf2

    All Command Options of Enc / Cipher

    openssl enc|cipher [-cipher] [-help] [-list] [-ciphers] [-in filename] [-out filename] [-pass arg] [-e] [-d] [-a] [-base64] [-A] [-k password] [-kfile filename] [-K key] [-iv IV] [-S salt] [-salt] [-nosalt] [-z] [-md digest] [-iter count] [-pbkdf2] [-saltlen size] [-p] [-P] [-bufsize number] [-nopad] [-v] [-debug] [-none] [-engine id] [-rand files] [-writerand file] [-provider name] [-provider-path path] [-propquery propq]

    DESCRIPTION: The symmetric cipher commands allow data to be encrypted or decrypted using various block and stream ciphers using keys based on passwords or explicitly provided. Base64 encoding or decoding can also be performed either by itself or in addition to the encryption or decryption.

    OPTIONS:

    Supported ciphers:

    droidVNC-NG: VNC Server App for Android That Does Not Require Root Privileges

    Install droidVNC-NG

    droidVNC-NG (net.christianbeier.droidvnc_ng) can be installed from F-Droid or Google Play.

    Introduction of droidVNC-NG

    Remote Control & Interaction

    Comfort Features

    Security & Configuration

    Advanced VNC Features

    SD Maid SE: A File Management Tool and System Cleaner

    Install SD Maid SE

    SD Maid SE (eu.darken.sdmse) can be installed from F-Droid or Google Play.

    Introduction of SD Maid SE

    SD Maid SE (also known as SD Maid 2 or SD Maid 2/SE) is a file management tool and system cleaner for Android that specializes in maintenance, freeing up space, and removing unwanted data.

    Features include:

    Use SD Maid SE with Shizuku

    Phyphox: Perform Physics Experiments with Your Phone

    Install Phyphox

    Phyphox (de.rwth_aachen.phyphox) can be installed from F-Droid or Google Play.

    WARNING: Please be careful not to damage your phone while experimenting. Please take special care to avoid dropping it on hard surfaces and do not expose it to excessive magnetic fields. The authors of phyphox are not responsible for any damage to your phone.

    Introduction of Phyphox

    Supported sensors:

    Go to their official website for more information.

    AndroidIDE: IDE for Android App development on Android devices

    Install AndroidIDE

    AndroidIDE (com.itsaky.androidide) can be installed from F-Droid archive repository or the .apk asset corresponding to your architecture in its GitHub release.

    Note that this project is not maintained anymore.

    Introduction of AndroidIDE

    The main goal is to bring support for building Gradle-based Android projects on Android devices itself.

    Go to their official website for more information.

    Linux Command Library

    Install Linux Command Library (Optional)

    Linux Command Library app can be installed from F-Droid or Google Play.

    Introduction of Linux Command Library

    Linux Command Library has 6056 manual pages, 22+ basic categories and a bunch of general terminal tips about Linux (retrieved Sep. 27, 2024). The app works completely offline.

    Website Version of Linux Command Library

    There is a website version of Linux Command Library: https://linuxcommandlibrary.com.

    Material File: Linux-Aware File Manager with FTP, SFTP, SMB and WebDAV Support

    Install Material Files

    Material Files (me.zhanghai.android.files) can be installed from F-Droid or Google Play.

    Introduction of Material Files

    Mount External Storage or NAS (Network-Attached Storage) Server

    1. Pull out the left sidebar.
    2. Tap Add storage….
    3. Tap the option you want.
    4. For external storage such as Termux home folder ($HOME), select it from Storage Access Framework (SAF).
    5. For NAS server, input necessary information such as Hostname, Port, and Path. Leave Path empty to mount the whole file system of the server side.

    PipePipe: A FLOSS Android App to Let You Browse YouTube, NicoNico and BiliBili Freely.

    Install PipePipe

    PipePipe (InfinityLoop1309.NewPipeEnhanced) can be installed from F-Droid or the .apk asset corresponding to your architecture in its GitHub release.

    Note that because YouTube is trying to block third-party clients, especially for anonymous access, PipePipe sometimes has to be updated frequently to address issues that arise. You can receive the latest update from GitHub release without waiting for F-Droid update building process.

    Introduction of PipePipe

    Xtra: Twitch Player and Browser

    Install Xtra

    Xtra (com.github.andreyasadchy.xtra) can be installed from F-Droid.

    Introduction of Xtra

    Xtra for Twitch is a Twitch client providing the viewing and chatting experience on mobile devices:

    Material Photo Widget

    Install Material Photo Widget

    Material Photo Widget (com.fibelatti.photowidget) can be installed from IzzyOnDroid F-Droid repository.

    Introduction of Material Photo Widget

    LibreOffice Viewer: Viewer for Open Document Formats and Microsoft Office Formats

    LibreOffice Viewer (org.documentfoundation.libreoffice) can be installed from F-Droid or Google Play.

    Introduction of LibreOffice

    Go to their official website for more information

    Introduction of LibreOffice Viewer

    Simplified form of LibreOffice that only supports viewing but not writing documents, available on Android and iOS.

    VLC for Android: Open Source Media Player and Multimedia Engine

    Install VLC for Android

    VLC for Android (org.videolan.vlc) can be installed from F-Droid or Google Play.

    Introduction of VLC

    VLC is a libre and open source media player and multimedia engine, focused on playing everything, and running everywhere.

    VLC can play most multimedia files, discs, streams, devices and is also able to convert, encode, stream and manipulate streams into numerous formats.

    VLC is available on Windows, macOS, Linux, BSD, Android, iOS, and Haiku.

    Firefox: Fast and Private Browser

    Install Firefox

    Firefox (org.mozilla.firefox), also known as Firefox Fast & Private Browser, can be installed from Google Play.

    Introduction of Firefox

    Go to their official website for more information.

    DuckDuckGo: Privacy Browser

    Install DuckDuckGo

    DuckDuckGo (com.duckduckgo.mobile.android), also known as DuckDuckGo Privacy Browser or DuckDuckGo Private Browser, can be installed from F-Droid or Google Play.

    Introduction of DuckDuckGo

    Go to their official website for more information.

    Brave: Privacy Browser

    Install Brave

    Brave (com.brave.browser), also known as Brave Privacy Browser or Brave Private Web Browser, VPN, can be installed from Google Play.

    Introduction of Brave

    Safe Space: A Safe Space For Your Digital Valuables

    Install Safe Space

    Safe Space (org.privacymatters.safespace) can be installed from F-Droid.

    Introduction of Safe Space

    SimplyTranslate Mobile: A Privacy Friendly Frontend to Google Translate

    Install SimplyTranslate Mobile

    SimplyTranslate Mobile (com.simplytranslate_mobile) can be installed from F-Droid.

    Introduction of SimplyTranslate Mobile

    Website Version of SimplyTranslate Mobile

    There is a website version of SimplyTranslate Mobile: https://simplytranslate.org.

    LibreTorrent

    Install LibreTorrent

    LibreTorrent (org.proninyaroslav.libretorrent) can be installed from F-Droid or Google Play.

    Introduction of BitTorrent

    Introduction of LibreTorrent

    Thunderbird: Privacy-Focused Email App

    Install Thunderbird

    Thunderbird (net.thunderbird.android), also known as Thunderbird: Free Your Inbox, can be installed from F-Droid or Google Play.

    Introduction of Thunderbird

    Thunderbird is a powerful, privacy-focused email app. Effortlessly manage multiple email accounts from one app, with a Unified Inbox option for maximum productivity. Built on open-source technology and supported by a dedicated team of developers alongside a global community of volunteers, Thunderbird never treats your private data as a product. Supported solely by financial contributions from our users, so you never have to see ads mixed in with your emails again.

    Features of Thunderbird:

    Go to their official website for more information.

    ANC by Gaurav Ujwal / gujjwal00

    AndroidIDE by AndroidIDE / AndroidIDEOfficial

    Andronix by Devriz Technologies LLP / Andronix App /AndronixApp

    aShell by Sunil Paul Mathew M. / sunilpaulmathew

    Brave / Brave Browser by Brave Software / brave

    Debian by the Debian Project

    DontKillMyApp / DontKillMyApp: Make apps work by Urbandroid Team / urbandroid-team / Petr Nálevka (Urbandroid)

    droidVNC-NG / droidVNC-NG VNC Server by Christian Beier / bk138

    DuckDuckGo / DuckDuckGo Browser / DuckDuckGo Privacy Browser / DuckDuckGo Private Browser by DuckDuckGo or duckduckgo

    F-Droid by F-Droid

    Firefox / Firefox Fast & Private Browser by Mozilla

    GNU

    Invizible Pro by Garmatin Oleksandr / Oleksandr Garmatin / Gedsh

    IzzyOnDroid by IzzyOnDroid

    LibreOffice and LibreOffice Viewer by The Document Foundation

    LibreTorrent by Yaroslav Pronin / proninyaroslav

    Linux Command Library by Simon Schubert / SimonSchubert

    Material Files / MaterialFiles by Hai Zhang / zhanghai

    MyIP / IPCheck.ing by Jason Ng / jason5ng32

    NetGuard by Marcel Bokhorst / M66B / Marcel Bokhorst, FairCode BV

    NewPipe by Team NewPipe / TeamNewPipe

    OpenSSH by OpenSSH / openssh

    OpenSSL by OpenSSL / openssl

    Phyphox by RWTH Aachen University / phyphox

    PipePipe by InfinityLoop1309 / InfinityLoop1308

    QEMU by Qemu Project / QEMU

    Safe Space by aashishksahu

    SD Maid SE / SD Maid 2/SE - System Cleaner / sdmaid-se by d4rken / d4rken-org / darken / darken development

    Shizuku by Xingchen & Rikka / RikkaApps

    SimplyTranslate Mobile by ManeraKai

    SystemUI Tuner by Zachary Wander / zacharee

    Tailscale by Tailscale / tailscale

    Termux by Fredrik Fornwall / Termux / termux

    Termux:API by Fredrik Fornwall / Termux / termux

    Termux:Boot by Fredrik Fornwall / Termux / termux

    Termux:Float by Fredrik Fornwall / Termux / termux

    Termux:Styling by Fredrik Fornwall / Termux / termux

    Termux:Widget by Fredrik Fornwall / Termux / termux

    Termux-x11 by Fredrik Fornwall / Termux / termux

    TigerVNC or tigervnc by TigerVNC

    Thunderbird or Thunderbird: Free Your Inbox by Mozilla Thunderbird / thunderbird / Mozilla

    Tor and Tor Browser by The Tor Project

    TrackerControl / TC by TrackerControl / Oxford HCC

    VLC for Android / vlc-android by Videolabs / VLC Mobile Team / VideoLAN / videolan

    Wireguard by Jason A. Donenfeld

    Xtra by AndreyAsadchy or Andrey Asadchy and crackededed

    Others

    Contribution

    We welcome contributions to this project! Please fork the repository and submit a pull request for your contributions. For clarity and convenience, we recommend making one pull request per revised section or added feature.

    License

    Copyright (C) 2024 Willie169.

    This project is licensed under the terms of either:

    GNU Free Documentation License, Version 1.3 (GFDL 1.3)

    Permission is granted to copy, distribute, and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts.

    You should have received a copy of the GNU Free Documentation License along with this document. If not, see https://www.gnu.org/licenses/fdl-1.3.html.

    Creative Commons Attribution-ShareAlike 4.0 International License (CC BY-SA 4.0)

    You are free to:

    The licensor cannot revoke these freedoms as long as you follow the license terms.

    Under the following terms:

    No additional restrictions — You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.

    You should have received a copy of the Creative Commons Attribution-ShareAlike 4.0 International License along with this program. If not, see https://creativecommons.org/licenses/by-sa/4.0.