Calyxos user here. I like it so far. Half a year into it. I can live with microg instead of gms. And it also works on moto g32, 42 and 52 so you don't need Google hardware.
this post was submitted on 14 Jun 2024
2 points (100.0% liked)
Linux
47233 readers
765 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 5 years ago
MODERATORS
I've been using Graphene since the pixel 4a, have never considered going back. It works wonderfully.
Calyx. It just works. I've honestly just used it like stock Android, using as many private apps as possible. It's so fun seeing all the cool little projects not on iOS! I just recently discovered Petals, which helps with measuring THC intake.
GrapheneOS is fundamentally better, if CalyxOS didnt fix up their mess in the past months.
I also use calyx but I'll agree that graphene is technologically superior of the two. I'm more comfortable with the idea of using MicroG as opposed to sandboxes google play but that's not to slant the implementation in any way.
I also avoid sandboxed play like hell.
But note
- microG downloads official Google binaries. It is not some magical reverse engineered bundle. It is a reimplementation
- microG has privileged access to the system, and thus gives Google privileged access
- apps needing Google Play often include the binaries themselves and dont even rely on an "adapter"
- GrapheneOS sandboxed play has the same access as the apps, not more, not less
Sandboxed Play is better for privacy and may prevent a Pegasus/malware vector.
DivestOS has sandboxed microG but I didnt try it. Also note that microG could break any time and the Google binaries may be outdated.
Privileged android apps are a huge attack surface as so many devices have them. So outdated privileged microG binaries may be a target.
Re-implementation means reverse-engineering and building new binaries. What's the point of MicroG if it is just downloading google binaries? An app with privileged access is different than a remote access trojan. The whole point of a sandbox is not to have the same access as the original app.
What you are saying doesn't make any sense.
Strong words here.
I couldnt find what is the correct definition of "reimplementation" but we can assume it either means "taking the binaries and bundling them in a different bundle" or "writing different code to do the same thing".
The whole point of a sandbox
What sandbox? Not the Android app sandbox, as microG (when I used it) needed to be installed as system app i.e. flashed to the system partition.
microG may isolate the binaries or whatever code it runs in some way, but not via the Android App sandbox.
Now GrapheneOS uses a privileged app that channels the calls of the unprivileged to the OS. This is also possible for microG, so it can run unprivileged too. DivestOS does that.
The concept of signature spoofing and more is poorly pretty flawed.
I would really like if a fully open source rewrite of the core services could just work, but these apps are written for Google, contain the official proprietary code anyways, and signature spoofing only works if you dont use many hardware security features.
GrapheneOS can be extremely secure when degoogled, but it cannot securely fake to be a Google Android. And neither can microG Android.
You would need to change the apps to do that.
I use LineageOS because my phone is not a Pixel and it works fine for me. If you don't want to pay Google for a Pixel, buy a used one. Other than that LOS is fine. It doesn't have anonymization features like /e/OS or something like that but it doesn't force nor promote any apps or ecosystems (except for Seedvault but it's not a big deal) and it is FOSS
I have a Pixel and LineageOS is the best by far. Freedom to root, which I absolutely want... I want full control over my devices. I'm extremely picky about how every little thing runs and works in my phone and I can only get it with root. You can't get root with GraphenOS without a huge pain in the ass with updates.
It's hilarious people install GrapheneOS and think they are better off because Google services are installed as user apps instead of system. You lose as soon as you install them either way. They are getting the data they are after no matter if it's installed as a user app or system app.
But anyway, I've been running LineagOS since it used to be Cynogenmod over 10 years ago. It's the most established and reliable while remaining open to customization by far.
Unfortunately 90% of privacy-conscious people can't live without Google services because Google Meet, banking apps and other Play Integrity needing stuff
GrapheneOS is perfect. Pixel phones are Google hardware yes, but works like a dream once GOS is installed. NO MORE GOOGLE !!! Frequent OS updates, love it
I loved it too until I forgot my wallet one day. It's the one thing I had to go back to stock Android for because I forget everything but my phone constantly.
There isn't any Foss phone. Graphene os and everything else requires proprietary software for the modem to operate at a minimum.
If you are ok with some proprietary software go with Lineage OS.
For devices that support Lineage OS go here: https://wiki.lineageos.org/devices/
I've had calyxOS on this phone now for about 2 uears now. Its pretty good. It comes with microG to simulate the google apis.
I've used Lineage on multiple devices, Calyx, and Graphene. Graphene by far has the least issues (basically none), and the best compatibility in my experiences. Being able to relock the boot loader is perfect for a mobile device too.
I've read some lemmy users dislike this OS due to perceived misleading advertising and the pixel 7a you're supposed to install graphene on because it's from google
There is no misleading advertisement. Go with Graphene if you own a Pixel (from Pixel 5 up) or you can find a cheap second-hand one.
there is so much false information about this OS, namely compatible phones that simply don't work
Care to share which devices are you talking about? If a device is officially supported by the latest LineageOS version, it works.
For me LineageOS is a good baseline. I don't have anything against "privacy" OS's but they're not really for me. I just use F-Droid to get apps and don't care about compatibility with proprietary stuff so neither microG nor the GrapheneOS sandboxed Play services are of interest to me. I don't use GrapheneOS because I don't have or want a Pixel phone.
LineageOS significantly increases the lifespan of devices it supports and that's important to me. Planned obsolescence is cancer.
My ideal mobile OS would be something like Mobian (or even better, a GNU Guix based distribution) but it should be noted that AOSP is also a Linux based operating system and thus anything derived from that is a Linux mobile OS.
GrapheneOS is probably the best option out there.
As you said, it's only for Pixels currently, because
- They are more secure than most other phones. They have some kind of chip built in that makes them superior. I don't know the specifics, but other commentators might add some information if needed. Something with encryption if I remember correctly. The GrapheneOS team is a bit ...picky... when it comes to security, and most other phones don't reach their requirements for a secure device.
- Google is one major contributor to Android, and their phones are fine tuned to work perfectly with it. Other manufacturers' phones feel less polished.
- It's easier to maintain one line of devices that are very similar, instead of keeping hundred phones up to date and secure. Pixels are similar to iPhones, they get updated almost simultaneously and are similar. If you now add a phone from a different line, e.g. a Fairphone or Nothing Phone, things get more complicated. If you look at Calyx (more onto that later), the FP4 caused quite some headaches for the dev team.
Pixels are cheap(ish) for what you get, and I believe Google makes them so cheap because 99% of users don't care which ROM/OS is installed. Those are the advertisment-cows that will get milked. If you buy a Pixel and install a custom ROM on it, they will loose money.
My experience with GrapheneOS has been great. My Pixel 5 hit EOL a while ago and still gets maintenance updates almost weekly.
Many security additions are overkill for me, but quite some make a lot of sense.
I used CalyxOS for a year too, but now that I don't get full updates anymore, I don't feel safe anymore with it.
I think GrapheneOS is technically superior to Calyx, especially due to the sandboxing they do. MicroG has full root privileges and can do with your phone what it wants, while also breaking some apps due to missing dependencies. If you choose to enable Play Services on GrapheneOS, they are user level and heavily restricted, and only you decide how much access you want to give them.
Regarding Calyx, since they don't limit themselves as much in terms of security, they also offer a ROM for the Fairphone. Maybe check that out too.
DivestOS also seems to be a good option. AFAIK it's based on LineageOS and supports a lot of devices, while being more secure than LOS.
Regarding Linux phones, I don't have any experience with them. I tried Phosh (Mobile Gnome) on an exhibition a while ago, and it felt great and interesting, but from what I've heard, they are nowhere as good as Android.
My personal ranking:
- GrapheneOS on a Pixel. Get an used/ refurbished device if you don't want to support Google. Best price-performance ratio, great OS, and very good hardware (battery life, camera, etc.)
- CalyxOS on a Fairphobe. Modular device with good repairability. Nowhere near as good in terms of what you'll get for your money. Better security than 95% of other phone ROMs, oh, and you can just swap your battery in seconds if you want that :D
- DivestOS on a random supported phone, e.g. a China device. Nowhere near as sustainable (short lived update support, no spare parts, etc.)
- Linux phone. Only a good option for a tinkering device right now imo.
Great synopsis!
The cool thing about GrapheneOS: It provides basically all the comforts and usability as any Android (stock) ROM minus some compatibility issues with a portion of Google Apps and services (Google Pay doesn't and probably will never work, for example) while providing state-of-the-art security and privacy if you choose to utilize those features. A modern Pixel with up-to-date GrapheneOS, configured the right way, is literally the most secure and private smartphone you can get today.
CrDroid on Poco F3, it just works and it's on latest Android version.
Crdroid with microg is what I use Getting rid of google services altogether is a huge mess. Its hard for me tbh. Lineages for microg (lineageos4microg) is also something that I wanna checkout. Grapheneos is fine only if you want to pay for it.
I'm fairly happy with LineageOS myself
but there is so much false information about this OS, namely compatible phones that simply don’t work with this OS and no support.
I think you're overreacting a bit calling it "false information". LOS is a FLOSS project that many individuals have ported to their device — and either at some point they buy a new phone and drop that development, or they realise what a massive project it is to maintain it. That's just a general bummer with open source, especially when people volunteer their free time.
I mean, the website has officially supported devices. If you are running an unofficial rom made by some random on a forum, that's on you.
Same argument stands though. It's not like LOS is a company with a ton of venture capital. Maintainers are the same randos from the same forums, they just banded together under a common flag. Some of the "official" LOS devs even release unofficial prereleases on other sites. And sometimes support drops because the maintainers may or may not have the physical device to test on.
If you are running an unofficial rom made by some random on a forum, that’s on you.
LOL you haven't lived until you flashed a weird ROM off XDA-dev to realise it was developed for some regional variation of your device, the UI is all in a language you don't read, and the developer customised the OS to their own niche use case that you're not partial to.
Mind, it used to be easier to casually flash ROMs (for me at least) back in the Jellybean/KitKat days. Fun times!
It really depends on what you want from your phone and what matters to you.
I recently got a refurbished OnePlus 9 and put lineage on it. I would have gone with a pixel and graphene, but pixels with more storage are hard to come by and expensive.
Find which roms are available for your phone and choose from there, or if you want to change the Asus phone, look at your target specs and which phone ROM combination you can find
GrapheneOS on a Pixel 8 Pro. I've been super happy with it since I switched from iOS.
Graphene on Pixel 8 here, also pretty happy with it. Previously had a Pixel 3a with Graphene.
Went with lineage since I grew up on cyanogenmod.
Not sure why GrapheneOS is getting down voted so much here, did I miss something recent that happened?
I've been using GrapheneOS on my Pixel 6a for around 2 years and really like it.
If I couldn't use GOS though, I would probably go with DivestOS. I haven't looked deep into other alternative Android ROMs.
I use phones that are at least 5 year old and cost 100€ max. Graphene supports only new pixel phones, so I never got to use it. I put LineageOS with MicroG on every phone and I'm super happy with it.
Btw, is there a stripped down from AOSP custom rom around? I only want to use my old phone as alarm clock but standby holds only a week, despite the battery being rather big. My old Galaxy S3 with custom rom and BBS optimized held a month at least.
Lineageos with no apps is light enough, I think.
But that's what i did. Still only a week.
I use Calyx on a Fairphone 4. It's not totally degooglified, since it comes with MicroG which is used to connect to Google services. I use Aurora Store and a couple of original Google Apps like Gboard too (none of my Google apps can access the internet, since they're behind the built-in firewall). It works well except call functionality which can be wonky and there's the issue that a lot of apps from Play don't work well with MicroG. I only use a small selection of Play apps though, so it doesn't bother me too much.