onn. 4K Streaming Box (2023) Debloat List

Notes & quirks on this firmware

• Google TV 14 (SDK 34), build URO4.260304.011.B1.15051976
• Second unit: same model, device and build, Vietnam, 32-bit userspace (armeabi-v7a, zygote32), remote
• "Onn-Remote Keyboard" (Vendor_0957_Product_0005.kl). Its notes are marked "second unit" below.
• Everything is DISABLED, not uninstalled. Comment out any line you want to keep.
• Stock launcher: com.google.android.apps.tv.launcherx. No HDMI inputs or Live TV (it's a box):
• leave live_tv_package empty in config.xml.
• Known quirks on this firmware:
• - Unlike the Chromecast on Google TV 14, port 5555 is open as soon as USB debugging is on; no pairing.
• - If a VPN app is connected, Settings > Network shows the VPN tunnel address, not the LAN one.
• Find the box with `nc -z <lan>.x 5555` or `dns-sd -B _adb-tls-connect._tcp local.`.
• - The Wi-Fi network saved during first setup belongs to setupwraith (dumpsys wifi: cname=...setupwraith).
• Forget and re-join it in Settings before disabling setupwraith, or the network is deleted.
• Second unit: this applies to every network saved during setup, not only the one in use - a second,
• out-of-range network saved at setup was still owned by setupwraith after the first was re-joined, and
• was deleted with it (`cmd wifi list-networks` lists them; check each one's cname in `dumpsys wifi`).
• - As on the Chromecast, setupwraith's RecoveryActivity takes Home until setupwraith is disabled.
• - Unlike the Chromecast, the remote's app buttons and mic keep working with launcherx disabled
• (com.gretzky.GlobalKey handles them; keep it). No key-mapper workaround needed.
• Second unit: not with its remote. Its YouTube button (KEYCODE_BUTTON_3, usage 0x0c0077), profile button
• (KEYCODE_PROFILE_SWITCH, 0x0c019c) and MACRO_1 (0x0c0186) are global keys routed to launcherx, and its
• Settings button (KEYCODE_NOTIFICATION 83, 0x0c009f) goes to com.droidlogic's receiver, which opens
• launcherx's quick settings: all four do nothing once launcherx is disabled (`dumpsys window policy` lists
• the routing). HOME_KEY_SERVICE=1 with settings_key_keycodes [83] and app_keys
• ["KEYCODE_BUTTON_3:com.google.android.youtube.tv", "KEYCODE_PROFILE_SWITCH:<app>"] brings them back, but
• the bound helper costs held-key repeat on this box (Volume Up moves one step per press), as on the TCL G09.
• The mic itself keeps working.
• - The gear does nothing once launcherx is disabled, on the first unit's remote as well. The same
• recipe as the second unit brings it back: HOME_KEY_SERVICE=1, settings_key_panel on, and 83 in
• settings_key_keycodes. That opens the launcher's quick settings panel, and the helper was still
• bound after a reboot. Holding volume may step only once while it is bound.
• - Second unit: voice search for songs and videos needs launcherx. With it disabled, saying a title gives
• "Google Assistant is having trouble processing your request" (logcat: provider.OPEN UNKNOWN_ERROR); app
• commands ("open YouTube") still work. See docs/TROUBLESHOOTING.md. Apps only mode (Settings > Accounts)
• is no way out: on this build it switches the Assistant off.
• - Second unit: casting with setupwraith disabled was not tested. On the Chromecast with Google TV the Cast
• receiver loses its device credentials with setupwraith (docs/TROUBLESHOOTING.md); check before relying on it.
• - Second unit: `com.google.android.videos` is not preinstalled.
• Kept on purpose: Google Assistant (com.google.android.katniss), Cast receiver
• (com.google.android.apps.mediashell), onn update prompts (com.onn.updatenotification), com.gretzky.GlobalKey (onn remote app buttons), com.gretzky.hwinfo,
• com.droidlogic.* (Amlogic vendor: HDMI, picture, remote pairing), com.onn.bluetoothconnect,
• Play Store / Play Services, Gboard, com.google.android.tv.dfuservice (remote firmware updates),
• com.google.android.tv.remote.service (phone remote).
• under com.android.* names. Play Store, voice search (with launcherx enabled) and YouTube kept working.
• Photos slideshow still works with launcherx disabled, as long as screensaver_components points at
• com.google.android.apps.tv.dreamx/.service.Backdrop. Uncomment to swap it for the Clock.
• and verified, and restore.sh re-enables it; setupwraith has to go too (it re-enables launcherx),
• so it stays in the list for restore.sh to bring back.