Filza 27.2 worse_query: public and developer builds
This commit is contained in:
admin committed
commit
91a6adf723
267 files changed
+42015
No files matched your search
@@ -0,0 +1,130 @@
|
||||
# Filza 27.2 — worse_query build
|
||||
|
||||
Filza fork for iOS 26.0–26.7.2 and iOS 27.0–27.2, built around
|
||||
[forcequitOS/worse_query](https://github.com/forcequitOS/worse_query). It runs
|
||||
under a normal Apple signing identity and does not require a jailbreak or a
|
||||
root helper.
|
||||
|
||||
## Two builds
|
||||
|
||||
| | Public | Developer |
|
||||
|---|---|---|
|
||||
| Bundle ID | `com.jbjf.filza` | `com.jbjf.filzanb` |
|
||||
| Display name | `filza27.2` | `filza27.2` |
|
||||
| Install together | yes | yes |
|
||||
| worse_query browser | yes | yes |
|
||||
| App data / App Groups browser | yes | yes |
|
||||
| WebDAV server | yes | yes |
|
||||
| `.deb` installer + apt/dpkg | yes | yes |
|
||||
| Terminal | — | full a-Shell command set |
|
||||
| SSH server | — | mobile / root, password `alpine`, port 2222 |
|
||||
| `mount`, `extract`, archive support | terminal only | yes |
|
||||
| `neofetch`, `respring` | — | yes |
|
||||
|
||||
Release assets are named exactly:
|
||||
|
||||
```
|
||||
filza_public.ipa
|
||||
filza_develop.ipa
|
||||
```
|
||||
|
||||
## Features
|
||||
|
||||
- Per-container worse_query grants for app, extension, internal-daemon and
|
||||
system-group data.
|
||||
- Accessible roots, App Data (by app), App Data (UUID), App Groups and System
|
||||
Data links saved as Filza favorites.
|
||||
- Startup progress overlay; first launch indexes installed apps and container
|
||||
families.
|
||||
- Moves Filza's Trash into the app sandbox.
|
||||
- In-process WebDAV server on port 11111 (fallback ports if busy).
|
||||
- In-process dpkg/apt with support for `.deb` installation, `dpkg -l/-L/-s/-r`,
|
||||
`apt update/list/search/show/install/remove`.
|
||||
- Developer terminal command set excludes Python, Node.js and Lua/TeX, and
|
||||
includes Perl, ImageMagick, FFmpeg, ripgrep, make and the rest of a-Shell.
|
||||
- `mount` lists mounted filesystems.
|
||||
- `extract`, `unzip`, `untar`, `un7z`, `unrar` extract zip, tar, tar.gz, gz,
|
||||
bz2, xz, zst, 7z and rar through libarchive.
|
||||
- `test.deb` (official Procursus `apt 2.9.4-1`) and an executable `test` script
|
||||
are copied into `worse_query` on first launch.
|
||||
- `respring` uses Erosion's WebKit pressure method.
|
||||
|
||||
## Build
|
||||
|
||||
Requirements:
|
||||
|
||||
- macOS with Theos and iOS SDKs.
|
||||
- An unsigned Filza base IPA at `base/FilzaSlop-v1.2.0-unsigned.ipa`
|
||||
(or set `BASE_IPA`).
|
||||
- A signing profile with at least one App Group. Set `WQ_APP_GROUPS`
|
||||
(space-separated).
|
||||
- For the developer build: an a-Shell IPA at `$HOME/Downloads/Terminal.ipa`
|
||||
(or set `ASHELL_IPA`).
|
||||
|
||||
Public:
|
||||
|
||||
```sh
|
||||
export WQ_APP_GROUPS="group.example.01"
|
||||
export PROFILE="/path/to/profile.mobileprovision"
|
||||
export ENTITLEMENTS="/path/to/entitlements.plist"
|
||||
export SIGN_IDENTITY="Apple Distribution: ..."
|
||||
export KEYCHAIN="$HOME/Library/Keychains/signing.keychain-db"
|
||||
./scripts/build_public.sh
|
||||
```
|
||||
|
||||
Developer:
|
||||
|
||||
```sh
|
||||
export ASHELL_IPA="$HOME/Downloads/Terminal.ipa"
|
||||
./scripts/build_developer.sh
|
||||
```
|
||||
|
||||
Both:
|
||||
|
||||
```sh
|
||||
./scripts/build_release.sh
|
||||
# build/filza_public.ipa
|
||||
# build/filza_develop.ipa
|
||||
```
|
||||
|
||||
Without `SIGN_IDENTITY` the script produces an ad-hoc-signed IPA. Nested
|
||||
Mach-O files and the app are signed in the same pass.
|
||||
|
||||
## Terminal quick test
|
||||
|
||||
```sh
|
||||
cd "$(sbx_status | sed -n 's/^hub: //p')"
|
||||
ls -l test test.deb
|
||||
./test
|
||||
mount
|
||||
extract test.deb -C apt
|
||||
extract sample.zip -C out
|
||||
```
|
||||
|
||||
`./test` is a `#!/bin/dash` script; iOS does not allow executing Mach-O files
|
||||
from the app data container, so scripts are run through the bundled `dash`.
|
||||
|
||||
SSH (developer build):
|
||||
|
||||
```sh
|
||||
ssh -p 2222 mobile@DEVICE_IP # password: alpine
|
||||
ssh -p 2222 root@DEVICE_IP # password: alpine
|
||||
```
|
||||
|
||||
Sessions start in the `worse_query` hub.
|
||||
|
||||
## Signing notes
|
||||
|
||||
The app needs one App Group entitlement for worse_query. The public and
|
||||
developer bundle IDs must match their provisioning profiles. The build script
|
||||
removes Filza's `CFBundleURLTypes` and the bundled Sharing extension so the
|
||||
single-App-ID profile can sign the app.
|
||||
|
||||
## Credits
|
||||
|
||||
- [0xjohnnydev/FilzaSlop](https://github.com/0xjohnnydev/FilzaSlop)
|
||||
- [forcequitOS/worse_query](https://github.com/forcequitOS/worse_query)
|
||||
- [a-Shell](https://github.com/holzschu/a-Shell) / ios_system
|
||||
- [libssh](https://www.libssh.org/)
|
||||
- [jailbreakdotparty/Erosion](https://github.com/jailbreakdotparty/Erosion) for
|
||||
the WebKit respring method
|
||||
Reference in new issue
Block a user