I think the reason GrapheneOS never did a GSI is because most of their security improvements rely on specific hardware calls that GSI abstractions don’t provide access to. This probably would still be an improvement over lineage though, just not as secure as base Graphene is.
the containerization features alone would make graphene worthwhile over other roms. i hear graphene can pass play integrity attestation inside those too.
It depends. I run GrapheneOS and it can pass everything except the most strict integrity check (which is just that you’re using a custom ROM at all).
In practice most apps don’t have any problems. Google assistant doesn’t really work for me but I’ve seen posts saying people have gotten it working. Google wallet and Google Pay are also explicitly blocked by google, so they will never work.
I think the reason GrapheneOS never did a GSI is because most of their security improvements rely on specific hardware calls that GSI abstractions don’t provide access to. This probably would still be an improvement over lineage though, just not as secure as base Graphene is.
Wait… an improvement over Lineage ? That alone makes it worth existing in the first place.
At first I thought, Graphene OS without it’s features… Why? But what you say sounds like it actually makes sense.
the containerization features alone would make graphene worthwhile over other roms. i hear graphene can pass play integrity attestation inside those too.
It depends. I run GrapheneOS and it can pass everything except the most strict integrity check (which is just that you’re using a custom ROM at all).
In practice most apps don’t have any problems. Google assistant doesn’t really work for me but I’ve seen posts saying people have gotten it working. Google wallet and Google Pay are also explicitly blocked by google, so they will never work.