Hacker News new | ask | show | jobs
by heywoodlh 1313 days ago
With GrapheneOS, specifically, it kind of defeats their design goals[0] -- so on Graphene I would say it is not a viable solution.

On other custom ROMS such as CalyxOS (my go-to for my Pixels), or LineageOS, I have used microG and it works very well.

[0] https://nitter.net/GrapheneOS/status/1437380576055541761

2 comments

GrapheneOS instead went on to implement a whole sandbox which can run google services properly, without hacks like spoofing signatures (which is required for microG).

In practice, you can run most apps on GrapheneOS.

The thread you're linking explains why we developed sandboxed Google Play compatibility layer for better privacy, security and far broader app compatibility. On an OS using microG, you still have the Google Play code running in each of the apps you're using which depend on Google Play. You aren't avoiding the Google Play code. In fact, you're running it with more privileges than it has on GrapheneOS where there's a stronger sandbox and permission model. You're avoiding part of the Google Play code: the part sitting between the Google Play SDK / libraries and their services (but not quite, since microG downloads and runs droidsec/snet within the context of microG, which has significantly elevated privileges on CalyxOS).
> we developed sandboxed Google Play compatibility layer for better privacy, security and far broader app compatibility.

Does this mean you could install and run Google Play apps on GrapheneOS now? Last I used GrapheneOS (2020), I wasn't able to.

Thank you for the explanation!