- Edited
I have used GrapheneOS for several weeks since I got rid of my old Samsung and I know that if you install a VPN GrapheneOS turns on Always-On VPN and Block Connections by default.
It works when the device is unlocked but once I reboot or update I don't see the 'Always-On/Block Connections without VPN Lock' icon on the screen before unlocking the device. I have sandboxed Google Play installed and I see GMScompat starting (Play store starts without the vpn connection?) and GrapheneOS downloads updates before unlocking without the VPN connected. The Always-on blocking doesn't seem to start before I unlock. After unlocking the device the Always-On VPN icon will appear in the corner after some delay.
From what little I understand about the system log files it looks like the VPN manager doesn't start before first unlock and the VPNAlwaysOnService from my provider (PIA) starts several seconds later.
I never had this with Samsung One UI, when I started the device it would be blocking all traffic before I unlocked the device but I don't think this is the case with GrapheneOS.
It looks like it has full connection and isn't blocking anything before I unlock and wait for my VPN app process to start.
Help is appreciated if anyone has any information about this or knows of a solution!
I want my device to block all connections before unlocking and after unlocking the device until my VPN connects like it did on my Samsung.