A hardened, GrapheneOS-derived mobile OS for the Pixel 10 Pro XL — signed with its own keys, a curated privacy app suite, and self-hosted updates.
X-NIX is built on the GrapheneOS hardened Android
base and compiled from source for the Pixel 10 Pro XL (codename
mustang). It keeps GrapheneOS's security model — verified boot, a strong
sandbox, and hardware-backed attestation — while shipping its own signing keys, a
bundled app set, and two small privileged helper services.
Current build 2026101600
Signed end-to-end with X-NIX keys; the bootloader locks to the X-NIX AVB root of trust.
Identity is rebranded for display only — the build fingerprint stays intact so hardware attestation keeps working.
A set of privacy and utility apps preinstalled out of the box, no Google services required.
Two minimal native services (interface-pinned networking + a Shizuku-free terminal helper), each in its own SELinux domain.
Over-the-air updates delivered from ota.foxnet.live, verified against the baked-in signing key.
Flash directly from a WebUSB browser — no SDK, no command line required.
You need a Pixel 10 Pro XL with an unlockable bootloader and a USB cable.
Note: installing replaces your OS and erases the device. Verified boot means a locked bootloader only trusts the X-NIX signing key. Back up your data first.