PhoneRig - Open Source Licenses

Last updated: 26 June 2026 (PhoneRig 3.2.2)

PhoneRig is built on, and distributes, open source software. This page lists those components, their licenses, and how to obtain their source. PhoneRig's own application code is proprietary; the components below remain under their own open source licenses. The same notice ships inside the app (Settings → Open source licenses).

Distributed inside the app

PRoot — GPL-2.0-or-later

User-space chroot/bind-mount engine that runs the bundled Linux system. PhoneRig runs PRoot as a separate process; it is never linked into PhoneRig's code. Source: green-green-avk/build-proot-android and the PRoot source it references; PhoneRig's binaries are reproducible from tools/build-proot.sh in the PhoneRig repository.

libtalloc — LGPL-3.0

Memory-pool library statically linked into the PRoot binary above. Source: samba-team/samba (talloc).

Ubuntu 22.04 LTS base system — per-package licenses

The Linux userland that runs inside PRoot, bundled unmodified from Canonical's official ubuntu-base image. It is a combination of licenses, one per package (GPL-2.0, GPL-3.0, LGPL-2.1, LGPL-3.0, Apache-2.0, BSD, MIT, MPL and others). The verbatim text of each common license ships with PhoneRig inside that system at /usr/share/common-licenses/, and each package's copyright is at /usr/share/doc/<package>/copyright. Corresponding source is available from Canonical (see the source offer below).

crypto-js — MIT

Client-side crypto used by PhoneRig's local admin dashboard page. Source: brix/crypto-js.

Libraries linked into the Android app

Apache-2.0: AndroidX / Jetpack, Jetpack Compose, Material Components, Kotlin & kotlinx-coroutines, Gson, ZXing (core), AndroidX Biometric, Apache Commons Compress, AndroidX WorkManager.
BSD-3-Clause: NanoHTTPD.
CC0-1.0 (public domain): net.i2p.crypto:eddsa (Ed25519).
Google SDK terms (not open source): Google Play Billing Library, Google Play Integrity API.

Downloaded at runtime (not distributed by PhoneRig)

cloudflared (Apache-2.0) - your device downloads it directly from Cloudflare's official releases only if you set up a Cloudflare tunnel. PhoneRig does not redistribute it.

Written offer of source code (GPL / LGPL)

For the GPL- and LGPL-licensed software PhoneRig distributes (PRoot, libtalloc, and the GPL/LGPL packages inside the bundled Ubuntu system), the complete corresponding source is available: PRoot/libtalloc reproducibly from tools/build-proot.sh or its upstream; Ubuntu packages from Canonical (apt-get source, archive.ubuntu.com, Launchpad).

If you cannot obtain it through those links, PhoneRig will provide the corresponding source on request for at least three years - email support@phonerig.app with the version (3.2.2) and the component, at no charge beyond any cost of physically performing the distribution.

Full license texts

Verbatim copies ship with PhoneRig under /usr/share/common-licenses/ and are published at: GPL-2.0, GPL-3.0, LGPL-3.0, Apache-2.0, MIT, BSD-3-Clause, CC0-1.0.

"Ubuntu" is a trademark of Canonical Ltd. "Android", "Google Play" are trademarks of Google LLC. PhoneRig is an independent project and is not endorsed by or affiliated with these projects.