{"id":6639,"date":"2025-08-18T21:57:11","date_gmt":"2025-08-19T01:57:11","guid":{"rendered":"https:\/\/droidbasement.com\/db-blog\/?p=6639"},"modified":"2025-09-25T17:29:35","modified_gmt":"2025-09-25T21:29:35","slug":"tutorial-kernelsu-next-with-susfs-integrated-in-to-a-kernel-with-aosp","status":"publish","type":"post","link":"https:\/\/droidbasement.com\/db-blog\/tutorial-kernelsu-next-with-susfs-integrated-in-to-a-kernel-with-aosp\/","title":{"rendered":"Tutorial – KernelSU-Next with SuSFS integrated in to a kernel with AOSP"},"content":{"rendered":"\n

This is a tutorial to build KernelSU-Next<\/a> (rifsxd<\/a>) with SuSFS<\/a> (simonpunk<\/a>) integrated in to an AOSP<\/a>, GKI<\/a> (Generic Kernel Image) or GKI<\/a> LTS (Generic Kernel Image; (Long Term Support)) kernel using AOSP<\/a>. This is used to gain escalation on your mobile device.<\/p>\n\n\n\n

This tutorial will use Pixel 7a (Lynx) as an example (Pixel 7 \/ 8 \/ 9 can be used) and is geared towards using AVB<\/a> Android14-11. Other interfaces can be used (the tutorial shows how to get this information), but you would need to, perhaps, fix hunks and \/ or rejects against the source that is applicable to your device, when using the patches. We will build using Ubuntu 24.0.4.3 on WSL2 (this requires virtualization to be on).<\/p>\n\n\n\n

…..<\/p>\n\n\n\n

Pre-requirements:
You will need adb \/ fastboot<\/a>.
Install git (sudo apt-get update && sudo apt-get -y install git)
You will need magiskboot<\/a> (place the binary from x86-64 (if on Windows using WSL2 Linux) in to the root of the ~\/.bin directory (see below; where you are putting the manual install of repo)). Ensure you set execute permissions on it: chmod u+x magiskboot
Note<\/strong>: magiskboot is only needed to unpack the stock kernel to take a peek at it (strings, etc.).
Install curl (sudo apt-get -y install curl).

This was amended on 8\/29\/25.<\/em>
You will need to perform a one-time wipe to turn off boot verification so you can boot and flash things you build, to properly test before committal. Please see below but do not remove the -w (wipe USERDATA), but add on the aforementioned flags before it, Thereafter, you will always pass the needed flags when you flash the monthly updates (but remove the -w).<\/strong>
<\/p>\n\n\n\n

Update to the latest monthly update for your device prior (remove any ramdisk modifications you may have made (Magisk), remove -w after fastboot in flash-all script and replace with –disable-verity –disable-verification):
https:\/\/developers.google.com\/android\/images#xxxxx
Replace xxxxx with the codename for your device.<\/p>\n\n\n\n

Repo<\/a> (Use manual install, its newer).<\/p>\n\n\n\n

Put the path to it (repo) in your PATH:
export PATH=PATH_TO_REPO<\/em>:$PATH<\/code>
Replace PATH_TO_REPO<\/em> with the \/xxx\/xxx\/xxx path to repo.
You can make it permanent by adding it in to your shell’s .rc file (i.e. if you use BASH then at the end of ~\/.bashrc) and source it after (source ~\/.bashrc), so it can reflect in your current shell session.<\/p>\n\n\n\n

Create a work area for yourself and enter it:
mkdir workarea && cd workarea<\/code><\/p>\n\n\n\n

We will use android14-6.1 (Pixel 7 \/ 8).
This was amended on 8\/29\/25.<\/em>
You can get this information by unpacking the stock boot.img (boot-stock.img) with magiskboot and taking note of the linux version string:
magiskboot unpack boot-stock.img
strings kernel | grep -i 'linux version'<\/code><\/p>\n\n\n\n

…..<\/p>\n\n\n\n

Clone susfs4ksu:
Note: If you have done the previous tutorial(s), then: cd susfs4ksu<\/code> && git fetch origin aosp-android14-6.1-dev<\/code> && git checkout aosp-android14-6.1-dev<\/code>
git clone --depth 3 --no-tags<\/code> https:\/\/gitlab.com\/pershoot\/susfs4ksu.git -b aosp-android14-6.1-dev<\/code>

Note<\/strong>: The repo’s branch in mention is set to patch against AOSP (kernel (which is GKI in the past)). For GKI and \/ or GKI-LTS, please see below (patching with susfs4ksu section).
This was amended on 8\/23\/25.<\/em><\/p>\n\n\n\n

Create the source folder for the repository and the destination directory for the build:
Note: If you’ve done the previous tutorial(s), then: rm -rf android-kernel\/*
mkdir aosp-kernel
mkdir android-kernel<\/code><\/p>\n\n\n\n

Pull down the repository:
Note: Use the branch designated for your device’s codename. Replace ‘lynx’ (below) with it.
cd aosp-kernel
repo init -u https:\/\/android.googlesource.com\/kernel\/manifest -b android-gs-lynx-6.1-android16 --depth=3
repo sync -c --no-tags
cd ..<\/code><\/p>\n\n\n\n

Note<\/strong>: If you want GKI –
This was amended on 8\/23\/25.<\/em>
Note2: Use the branch designated for your device’s codename. Replace ‘lynx’ (below) with it.
Note3: If you want to perform a synchronization, change back to the device codename’s branch (replace CODENAME <\/em>with your device’s codename): cd aosp-kernel\/aosp && git checkout android-gs-CODENAME<\/em>-6.1-android16<\/code> && cd ..\/ && repo sync -c –no-tags
Note4: If you want to synchronize GKI: git checkout android14-6.1-2025-08<\/code> && git pull –depth 3 –no-tags aosp android14-6.1-2025-08<\/code>
Note5: If you want to move to a new date, do to the below (change the date), then remove the previous from local tracking: git branch -D android14-6.1-2025-MONTH<\/em><\/p>\n\n\n\n


cd aosp-kernel\/aosp
git fetch --depth 3 --no-tags aosp android14-6.1-2025-08
git checkout android-gs-lynx-6.1-android16
git checkout android14-6.1-2025-08
cd ..\/..\/<\/code><\/p>\n\n\n\n

Note<\/strong>: If you want GKI-LTS –
This was amended on 8\/23\/25.<\/em>
Note2: Use the branch designated for your device’s codename. Replace ‘lynx’ (below) with it.
Note3: If you want to perform a synchronization, change back to the device codename’s branch (replace CODENAME <\/em>with your device’s codename): cd aosp-kernel\/aosp && git checkout android-gs-CODENAME<\/em>-6.1-android16<\/code> && cd ..\/ && repo sync -c –no-tags
Note4: Use the current date (2025-08 as of this writing) of development in the repository. You can also use the current development tag (i.e. append _rNUM (NUM = 1, 2, 3, etc.) to the DATE).
Note5: You can also use a tag instead of branch
Note6: If you want to synchronize GKI-LTS: git checkout android14-6.1-lts<\/code><\/code> && git pull –depth 3 –no-tags aosp android14-6.1-lts<\/code><\/code>
cd aosp-kernel\/aosp
git fetch --depth 3 --no-tags aosp android14-6.1-lts
git checkout android-gs-lynx-6.1-android16
git checkout android14-6.1-lts
cd ..\/..\/<\/code><\/p>\n\n\n\n

Create a mirror, which you will work against:
rsync -a --del aosp-kernel\/ aosp-14<\/code><\/p>\n\n\n\n

Copy SuSFS module and patches in:
This was amended on 8\/23\/25<\/em>, 8\/29\/25, 8\/30\/25<\/em>.
cd aosp-14<\/code>
cp -p ..\/susfs4ksu\/kernel_patches\/fs\/* aosp\/fs
cp -p ..\/susfs4ksu\/kernel_patches\/include\/linux\/* aosp\/include\/linux<\/code><\/p>\n\n\n\n

If you want AOSP<\/strong>:
cp -p ..\/susfs4ksu\/kernel_patches\/50_add_susfs_in_gki-android14-6.1.patch aosp<\/code><\/p>\n\n\n\n

If you want GKI<\/strong>:
cp -p ..\/susfs4ksu\/kernel_patches\/50_add_susfs_in_gki-android14-6.1_GKI.patch aosp<\/code><\/p>\n\n\n\n

If you want GKI-LTS<\/strong>:
cp -p ..\/susfs4ksu\/kernel_patches\/50_add_susfs_in_gki-android14-6.1_GKI-LTS.patch aosp<\/code><\/p>\n\n\n\n


cp -p ..\/susfs4ksu\/kernel_patches\/60_scope-minimized_manual_hooks.patch aosp<\/code>
cp -p ..\/susfs4ksu\/device_patches\/10_disable-prebuilt_build-aosp.patch private\/devices\/google\/common<\/code><\/p>\n\n\n\n

Patch:
This was amended on 8\/23\/25<\/em>, 8\/29\/25, 8\/30\/25<\/em>.
cd aosp<\/code><\/p>\n\n\n\n

If you want AOSP<\/strong>:
patch -p1 -ui 50_add_susfs_in_gki-android14-6.1.patch<\/code><\/p>\n\n\n\n

If you want GKI<\/strong>:
patch -p1 -ui 50_add_susfs_in_gki-android14-6.1_GKI.patch<\/code><\/p>\n\n\n\n

If you want GKI-LTS<\/strong>:
patch -p1 -ui 50_add_susfs_in_gki-android14-6.1_GKI-LTS.patch<\/code><\/p>\n\n\n\n


patch -p1 -ui 60_scope-minimized_manual_hooks.patch
cd ..\/private\/devices\/google\/common
patch -p1 -ui 10_disable-prebuilt_build-aosp.patch
cd ..\/..\/..\/..\/<\/code><\/p>\n\n\n\n

Pull down KernelSU-Next and execute setup:
curl -LSs \"https:\/\/raw.githubusercontent.com\/pershoot\/KernelSU-Next\/refs\/heads\/next-susfs\/kernel\/setup.sh\" | bash -s next-susfs<\/code><\/p>\n\n\n\n

Remove patches:
This was amended on 8\/23\/25, 8\/29\/25, 8\/30\/25<\/em>.
rm aosp\/50_add_susfs_in_gki-android14-6.1*.patch aosp\/60_scope-minimized_manual_hooks.patch private\/devices\/google\/common\/10_disable-prebuilt_build-aosp.patch<\/code><\/p>\n\n\n\n

Commit the changes in to your local repository:
cd aosp
git add -A
git commit -a -m \"Add KernelSU-Next-susfs\"
cd ..\/private\/devices\/google\/common
git add -A
git commit -a -m \"Disable prebuilt; build AOSP\"
cd ..\/..\/..\/..\/<\/code><\/p>\n\n\n\n

Build:
Note: concatenate (cat) the build_CODENAME<\/em>.sh (replace CODENAME <\/em>with your device’s codename) and replace –config=lynx and lynx:gs201_lynx_dist<\/code> with what’s found in your designated file (below)
This was amended on 8\/29\/25<\/em>, 8\/30\/25<\/em>.
tools\/bazel run <\/code>--kernel_package=@\/\/aosp --config=no_download_gki <\/code>--config=fast --config=stamp --config=lynx --lto=thin \/\/private\/devices\/google\/lynx:gs201_lynx_dist -- --dist_dir=..\/android-kernel<\/code><\/p>\n\n\n\n

Change in to the kernel output directory:
cd ..\/android-kernel<\/code><\/p>\n\n\n\n

Test your boot image (boot.img is found in android-kernel directory you are in):
adb reboot bootloader or vol down and power
fastboot boot boot.img<\/code>

Note: Wi-Fi \/ BT will not work (it will, once you place the module(s) built with the same versioning on to the system).<\/p>\n\n\n\n

If all looks well (Pixel 7 \/ 8):
adb reboot bootloader
fastboot flash boot boot.img
fastboot flash dtbo dtbo.img
fastboot flash vendor_kernel_boot vendor_kernel_boot.img
fastboot reboot fastboot
fastboot flash vendor_dlkm vendor_dlkm.img
fastboot flash system_dlkm system_dlkm.img
fastboot reboot<\/code><\/p>\n\n\n\n

…..<\/p>\n\n\n\n

Install the latest susfs4ksu<\/a> module (sidex15<\/a>) through the KernelSU-Next Manager.<\/p>\n\n\n\n

Enjoy!<\/p>\n\n\n\n

…..<\/p>\n\n\n\n

Sources:
pershoot\/KernelSU-Next at next-susfs<\/a>
pershoot\/susfs4ksu\/-\/tree\/aosp-android14-6.1-dev<\/a>
KernelSU-Next\/KernelSU-Next: An advanced Kernel based root solution for Android<\/a>
simonpunk\/susfs4ksu\/-\/tree\/gki-android14-6.1<\/a>
sidex15\/susfs4ksu-module: An addon root hiding service for KernelSU<\/a>
backslashxx\/KernelSU<\/a>
build\/building-pixel-kernels<\/a>
ChatGPT<\/a> to crawl repos \/ sanity checking \/ specific implementation assistance<\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

This is a tutorial to build KernelSU-Next (rifsxd) with SuSFS (simonpunk) integrated in to an AOSP, GKI (Generic Kernel Image) or GKI LTS (Generic Kernel Image; (Long Term Support)) kernel using AOSP. This is used to gain escalation on your mobile device. This tutorial will use Pixel 7a (Lynx) as an example (Pixel 7 \/ […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[88],"class_list":["post-6639","post","type-post","status-publish","format-standard","hentry","category-android","tag-kernelsunext-susfs-aosp"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/droidbasement.com\/db-blog\/wp-json\/wp\/v2\/posts\/6639","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/droidbasement.com\/db-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/droidbasement.com\/db-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/droidbasement.com\/db-blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/droidbasement.com\/db-blog\/wp-json\/wp\/v2\/comments?post=6639"}],"version-history":[{"count":54,"href":"https:\/\/droidbasement.com\/db-blog\/wp-json\/wp\/v2\/posts\/6639\/revisions"}],"predecessor-version":[{"id":6724,"href":"https:\/\/droidbasement.com\/db-blog\/wp-json\/wp\/v2\/posts\/6639\/revisions\/6724"}],"wp:attachment":[{"href":"https:\/\/droidbasement.com\/db-blog\/wp-json\/wp\/v2\/media?parent=6639"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/droidbasement.com\/db-blog\/wp-json\/wp\/v2\/categories?post=6639"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/droidbasement.com\/db-blog\/wp-json\/wp\/v2\/tags?post=6639"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}