Installation is disallowed to prevent breaking gmscompat

axy_david

Hello, up until and including android 13 i could install microg and everything worked perfectly, however in a14 I get this error:
installer failed - INSTALL_FAILED_SESSION_INVALID: Installation of com.google.android.gms is disallowed to prevent breaking gmscompat

I won't get into the semantics into why I don't use sanboxed gapps, microg works good for what I need.
How can I bypass this annoying message and install microg anyway?
Where's the code facilitating this block and are there any flags to override it?

CyberOtter

axy_david This has been discussed in https://discuss.grapheneos.org/d/4290-sandboxed-microg/17

Please also read https://grapheneos.org/#never-google-services

GrapheneOS

axy_david You're still using the Google Play code in the app sandbox as part of the apps using it. Not clear what you're trying to achieve.

axy_david Play Integrity's device integrity (CTS profile match) is checking for a Google certified OS. GrapheneOS is not a Google certified OS. People have been spoofing it elsewhere by having the OS pretend to have a build fingerprint and other information matching a Google certified OS and device. The strong verification mode can't be spoofed since it uses hardware attestation. They also enforce hardware attestation for device models known to have working hardware attestation which means you need to spoof being a legacy device model without it. As soon as a service moves to strong verification, the spoofing no longer works. The spoofing will stop working at all once they phase out allowing legacy devices to pass device integrity without hardware attestation. It's a time limited approach that's known to be approaching the end of the road. It can be seen that they're heavily cracking down on spoofing by adding more weak blockers for it before the final end of it with enforced hardware attestation. Their weak blockers for spoofing the non-hardware verification mean that the spoofing is increasingly not reliable or consistently working for people anymore as it was before. Apps are also moving to strong verification. Not clear exactly what you aim to accomplish but it's not going to work out and microG isn't going to help you with it. GrapheneOS doesn't have this spoofing and we've determined there's little point in adding it due to the window of opportunity to do it coming to an end. Apps need to be convinced to permit using GrapheneOS via https://grapheneos.org/articles/attestation-compatibility-guide.

axy_david

CyberOtter CTS profile matching doesnt work, also I dont understand, why would you actively block people from installing what they want.

matchboxbananasynergy

axy_david Also, on your comment about CtsProfileMatch, that doesn't pass with microG either.

matchboxbananasynergy

This is not what's happening. That messages is supposed to prevent people from installing play services from sources outside of the "Apps" app and the Play Store, which are the two recommended ways to do so.

Where you are trying to install microG from? It seems to re-use the same app ID which is why you're coming across that message.