Skip to content

Enginex0/Super-Builders

BranchesTags

Repository files navigation

⚡ Super-Builders

Pre-Patched GKI Kernel Builds for ZeroMount + SUSFS

Every kernel version. Every KSU variant. One CI pipeline.

Beta GKI Telegram

Warning

Super-Builders is in active development. Kernel builds are provided as-is.

Flashing a custom kernel carries inherent risk. You are solely responsible for any outcome — including bootloops, data loss, or bricked devices. Review the patches, understand your device's kernel version, and make sure you know what you're doing before flashing. If in doubt, fork this repo and build the kernel yourself.

No warranty. No liability. Your device, your risk.

🧬 What is Super-Builders?

Super-Builders is the kernel build pipeline for ZeroMount. It takes Google's stock GKI kernel sources, applies the SUSFS + ZeroMount VFS patches, and compiles them across every supported Android version, kernel version, and KSU variant via GitHub Actions CI.

The kernels built here provide the infrastructure layer — the hiding primitives, VFS hooks, and control interfaces that the ZeroMount userspace module relies on for mountless module loading, root detection evasion, and SUSFS automation.

Super-Builders builds the engine. ZeroMount drives it.

✨ What's In The Kernel Patches

SUSFS Hiding Infrastructure

  • Path hiding — files and directories vanish from readdir and path lookups for unprivileged apps
  • Kstat spoofing — file metadata (inode, device, timestamps, size) returns stock values to stat/fstat/lstat
  • Maps hiding — /proc/PID/maps, /proc/PID/mem, pagemap, and map_files entries blanked for flagged inodes
  • Mount ID spoofing — non-SU processes see fake mount IDs across mountinfo, fdinfo, statfs
  • Mount hiding — KSU mount entries filtered from /proc/PID/mountinfo for non-root processes
  • Uname spoofing — uname -r / uname -v return stock-looking kernel version strings
  • Cmdline & bootconfig spoofing — /proc/cmdline and /proc/bootconfig show clean boot state
  • AVC log suppression — SELinux audit denial messages suppressed from dmesg/logcat
  • Kallsyms hiding — SUSFS and ZeroMount kernel symbols hidden from /proc/kallsyms

ZeroMount VFS Engine

  • VFS path redirection — intercepts getname() to redirect file lookups at the VFS layer, zero mount table entries
  • Directory entry injection — module files appear in ls / readdir like stock system files
  • d_path spoofing — /proc/PID/fd symlinks and d_path() return virtual paths
  • Mmap metadata spoofing — /proc/PID/maps dev/ino replaced with stock values for redirected files
  • SELinux xattr injection — redirected files carry correct SELinux contexts (system_file, vendor_file, etc.)
  • statfs spoofing — system partitions report EROFS_SUPER_MAGIC as expected
  • Write protection — injected files are read-only through virtual paths, preventing source corruption
  • Bloom filter — 4096-bit 3-hash pre-check rejects non-matching paths in a few CPU cycles
  • ioctl control — /dev/zeromount miscdevice with 11 commands for userspace rule management

Custom Extensions (Not in Upstream SUSFS)

  • Kstat redirect — single supercall maps virtual-path stat to real-path metadata
  • Unicode filter — blocks filesystem path attacks using invisible/confusable unicode characters
  • AS_FLAGS collision guards — BUILD_BUG_ON prevents inode flag bit conflicts between SUSFS and ZeroMount

Performance & Safety

  • Inline fast-path — root/system processes skip hiding logic entirely (zero overhead)
  • Two-level readdir guard — parent directory flags enable early skip when no hidden children exist
  • RCU-protected data structures — all hash tables use Read-Copy-Update for lock-free concurrent reads
  • Zygote SID null guard — prevents false-positive process classification during early boot
  • UID range fix — all Android app UIDs (10000–19999) correctly recognized
  • Memory barriers — WRITE_ONCE/READ_ONCE on hot-path hook flags for cross-CPU safety
  • strncpy null-termination — buffer overread prevention across 5+ SUSFS entry points
  • EACCES removal — hidden paths return ENOENT (indistinguishable from nonexistent) instead of leaking SUSFS presence

📋 Build Progress

GKI Kernels

Android Kernel Sublevels Variants Patches Build
Android 12 5.10 107 → 246 SukiSU, ReSukiSU, KSU-Next, WKSU ✅ ✅ All green
Android 13 5.10 107 → 246 SukiSU, ReSukiSU, KSU-Next, WKSU ✅ 🔄 In progress
Android 13 5.15 41 → 194 SukiSU, ReSukiSU, KSU-Next, WKSU ✅ 🔄 In progress
Android 14 5.15 131 → 194 SukiSU, ReSukiSU, KSU-Next, WKSU ✅ 🔄 In progress
Android 14 6.1 25 → 157 SukiSU, ReSukiSU, KSU-Next, WKSU ✅ 🔄 In progress
Android 15 6.6 30 → 118 SukiSU, ReSukiSU, KSU-Next, WKSU ✅ 🔄 In progress
Android 16 6.12 23 → 58 SukiSU, ReSukiSU, KSU-Next, WKSU ✅ 🔄 In progress

Pre-GKI

Android Kernel Sublevels Variants Patches Build
Android 12 5.4 (LTS) 302 SukiSU, ReSukiSU ✅ ✅ All green

KernelSU-Next and WKSU are not supported on 5.4 — they lack pre-5.7 compatibility (TWA_RESUME enum).

Not Yet Done

Target Status Notes
non-GKI 4.19 🔲 Planned —
non-GKI 4.14 🔲 Planned —
MKSU workflow 🔲 Planned No SUSFS branch exists upstream yet
RKSU workflow 🔲 Planned No SUSFS integration upstream yet

Deferred

Target Status Notes
USB ADB filter (65_ patches) ⏸️ Deferred Patches archived — may revisit later

🔧 Patch Architecture

Each kernel version directory contains the same three-layer patch system:

android12-5.10/
├── SukiSU-Ultra/patches/
│   ├── 50_enhanced_susfs-android12-5.10.patch    # SUSFS hiding infrastructure (~3900 lines)
│   ├── 60_zeromount-android12-5.10.patch          # ZeroMount VFS driver (~2200 lines)
│   └── 70_ksu_safety-sukisu-5.10.patch            # KSU variant-specific safety fixes
├── KernelSU-Next/patches/
│   ├── 50_enhanced_susfs-android12-5.10.patch     # same 50_ — variant-independent
│   ├── 60_zeromount-android12-5.10.patch           # same 60_ — variant-independent
│   └── 70_ksu_safety-kernelsu-next-5.10.patch     # different 70_ — variant-specific
├── build-helpers/                                  # sublevel compat scripts
└── defconfig.fragment                              # kernel config flags

50_ (Enhanced SUSFS) — The core hiding infrastructure. Hooks readdir, namei, stat, proc, namespace, and more. Shared across all KSU variants — same patch, different forks.

60_ (ZeroMount VFS) — The mountless file injection driver. Intercepts getname(), injects directory entries, spoofs d_path, xattrs, and statfs. Also variant-independent.

70_ (KSU Safety) — Small variant-specific patches for each KSU fork. Fixes null-termination, UID ranges, zygote guards, and supercall wiring in the fork's own kernel/ directory.

build-helpers/ — Scripts that handle sublevel-specific compatibility issues across kernel versions. Different sublevels have different API surfaces — these scripts detect and adapt at build time.

defconfig.fragment — Kernel config flags enabling SUSFS, ZeroMount, ZRAM, BBR, and other features.

Application order: 50_ → 70_ → 60_ → build-helpers

🏗️ KSU Variants

Variant Fork 5.4 Support
SukiSU Ultra SukiSU-Ultra ✅
ReSukiSU ReSukiSU ✅
KernelSU-Next KernelSU-Next 🔲 Planned
WKSU WildKSU 🔲 Planned

All four variants share the same 50_ and 60_ kernel patches. The 70_ patch is generated per-variant to address safety issues specific to each fork's codebase.

🚀 Quick Start

  1. Find your kernel version — check Settings → About Phone → Kernel version or run uname -r
  2. Download the matching build from Releases for your Android version, kernel sublevel, and preferred KSU variant
  3. Flash the kernel using your preferred method (fastboot, custom recovery, etc.)
  4. Install ZeroMount — the userspace module that activates the kernel features
  5. Reboot and open the ZeroMount WebUI from your KSU manager

Caution

Flashing the wrong kernel version will bootloop your device. Match your exact Android version and kernel sublevel. If you're unsure, don't flash — ask in the Telegram group first.

🔨 Build It Yourself

Every build runs through GitHub Actions CI. Fork this repo and trigger the workflow for your target:

# Dispatch a specific kernel build
gh workflow run kernel-a12-5.10.yml --ref main \
  -f ksu_variant=SukiSU \
  -f add_susfs=true \
  -f add_zeromount=true

# Or use kernel-custom.yml for single-sublevel builds
gh workflow run kernel-custom.yml --ref main \
  -f kernel_target="android12-5.10.107 (2022-11)" \
  -f ksu_variant=All

The CI pipeline handles kernel source checkout, patch application, build-helper execution, compilation, and artifact packaging automatically.

💬 Community

$ super-builders --connect

 ██████╗ ██████╗ ███╗   ██╗███╗   ██╗███████╗ ██████╗████████╗
██╔════╝██╔═══██╗████╗  ██║████╗  ██║██╔════╝██╔════╝╚══██╔══╝
██║     ██║   ██║██╔██╗ ██║██╔██╗ ██║█████╗  ██║        ██║
██║     ██║   ██║██║╚██╗██║██║╚██╗██║██╔══╝  ██║        ██║
╚██████╗╚██████╔╝██║ ╚████║██║ ╚████║███████╗╚██████╗   ██║
 ╚═════╝ ╚═════╝ ╚═╝  ╚═══╝╚═╝  ╚═══╝╚══════╝ ╚═════╝   ╚═╝

 [✓] SIGNAL    ──→  t.me/superpowers9
 [✓] UPLINK    ──→  kernel builds · bug triage · feature drops
 [✓] STATUS    ──→  OPEN — all operators welcome

Telegram

🙏 Credits

  • ZeroMount — the userspace module that drives these kernels
  • SUSFS by simonpunk — the hiding framework these patches are built on
  • SukiSU Ultra — SukiSU fork with builtin SUSFS
  • ReSukiSU — ReSukiSU fork
  • KernelSU-Next — next-gen KernelSU fork
  • WildKSU — WildKSU fork
  • KernelSU by tiann — the original kernel root framework
  • NoMount — the project that inspired the VFS approach

📄 License

This project is licensed under the GNU General Public License v3.0.

⚡ The kernel infrastructure behind 👻 GHOST mode.

About

GKI Kernel Builder with KernelSU + SUSFS + ZeroMount

Resources

Readme
Activity

Stars

16 stars

Watchers

0 watching

Forks

25 forks
Report repository

Releases

No releases published

Packages

 
 
 

Contributors

Languages