Skip to content
KernelSU Modules

Menu

lkm4ctr Kernel Module

Immutable release Synced

Auto-load lkm4ctr.ko enables Docker and containers on all currently released arm64 Android GKI KMIs; no custom kernel flash.

Download 4.0.5 Source

Description

lkm4ctr

lkm4ctr automatically loads lkm4ctr.ko to enable Docker and containers on all currently released arm64 Android GKI KMIs; no custom kernel flash. The module is intended for rooted devices and must match the device KMI exactly.

See copying.txt for the project and vendored-source license terms.

Start here

  1. Check the device kernel: uname -a
  2. Either download the matching lkm4ctr-4.0.5-<kmi>-arm64.ko release asset or install lkm4ctr-kernelsu-module.zip in KernelSU; the KernelSU module selects the matching KMI automatically
  3. Install fuse-overlayfs and configure Docker to use it by default (see the user manual)
  4. For a standalone .ko install, load it as root: sudo insmod /path/to/lkm4ctr-4.0.5-<matching-kmi>-arm64.ko (KernelSU installs and loads the bundled module itself)
  5. Start Docker: sudo dockerd --config-file="$PREFIX/etc/docker/daemon.json" --bridge=none --experimental
  6. Test a container: sudo docker run --network=host --rm -it docker.io/library/alpine:latest /bin/sh

NET_NS is currently bookkeeping-only, so host networking is required for network access. Read the manual before loading a module on a real device.

The KernelSU ZIP includes every KMI build and lkm4ctr_checker, enables boot auto-load by default, and provides an action button plus a multilingual WebUI for module control and checker output. Published releases include an update feed so KernelSU Manager can offer in-app updates when versionCode increases.

Documentation

AGENTS.md is the repository's contributor/agent contract and intentionally remains at the repository root.

Releases

4.0.5

Latest

Version code 40005 4.0.5

Download

4.0.5 (4.0.4 → 4.0.5)

Highlights

  • Added a KernelSU module package containing the supported KMI builds and userspace checker. It detects the device KMI, enables boot auto-load by default, and provides an Action button and multilingual WebUI for module controls and checker output.
  • Added KernelSU Manager update metadata (update.json) and automated publication of versioned module assets, the checker, and the KernelSU ZIP. Release tags are checked against the module version; release creation accepts an HTTPS URL for release notes.
  • Hardened controlled unload and hot-reload around live namespace and IPC state. The module tracks vendored namespace proxies, namespace-filesystem inode pins, IPC objects, and deferred cleanup; unsafe teardown is refused until references and work drain. Diagnostic resource counters help identify remaining blockers.
  • Added procfs lookup fallbacks for /proc/<pid>/ns/ipc and /proc/<pid>/ns/pid when native namespace entries are unavailable, including an Android 17 / 6.18 path using that KMI's procfs PID accessor.

Compatibility and testing

  • The QEMU workflow exercises the checker before and after module load, namespace/procfs behavior, container workloads, and post-use module unload using pinned official Google GKI images across eight KMIs: android12-5.10, android13-5.10, android13-5.15, android14-5.15, android14-6.1, android15-6.6, android16-6.12, and android17-6.18.
  • KernelSU ZIP and release packaging require a complete supported-KMI build matrix.
  • NET_NS remains bookkeeping-only; use host networking (--network=host). The module must match the device's exact KMI. On Android data filesystems with casefold support, configure Docker to use fuse-overlayfs as described in the user guide.

Changes

fix:

  • Improved namespace/IPC lifetime handling, task-exit cleanup, and Android 5.10 compatibility; fixed KernelSU install permissions and shell invocation of control scripts.

docs and licensing:

  • Added consolidated copying.txt terms to the project and KernelSU package, with clarified attribution and provenance metadata.

This AI-generated release note is Public Domain.

Assets 1

lkm4ctr-kernelsu-module.zip 26.0 MiB

SHA-256 7922a8a36522549f338c9c5dbfa5d2c063311e61cf55e6db4177a6e7e421f58e · Attestations

Transparency

Repository
cyanmint/lkm4ctr
Tag
4.0.5 Immutable release
Tag commit
4c2ee72f54c5
Content commit
d033555d2d7f
SHA-256
7922a8a36522549f338c9c5dbfa5d2c063311e61cf55e6db4177a6e7e421f58e
Attestations
github.com/cyanmint/lkm4ctr/attestations
Last change synced

Verify it yourself

KernelSU Modules does not sign or audit modules. The SHA-256 only proves the download matches this index. Verify the release yourself with the GitHub CLI:

gh release verify 4.0.5 -R cyanmint/lkm4ctr
gh release verify-asset 4.0.5 lkm4ctr-kernelsu-module.zip -R cyanmint/lkm4ctr