chartene Try this?
https://grapheneos.org/usage#bugs-uncovered-by-security-features
There are various usage notes and FAQs on the web site.
chartene Try this?
https://grapheneos.org/usage#bugs-uncovered-by-security-features
There are various usage notes and FAQs on the web site.
yore Have you tried enabling Exploit protection compatibility mode for the app?
I actually did try that and didn't find it helped when I did.
de0u Try this?
https://grapheneos.org/usage#bugs-uncovered-by-security-features
There are various usage notes and FAQs on the web site.
I will read that tomorrow.
Thank you guys for the quick replies.
I literally just had success (and more importantly getting successfully logged in and moving past to the actual app screen) with the app install, a minute before getting notified of your replies. Some combination of various attempts of deleting the app, restarting the phone, installing again, enable network permissions and have wifi on/off, etc., finally did it. Though it doesn't inspire confidence in me, hahaha. I'd rather have actually figured out what I'd been doing wrong exactly, so I know what the heck was happening and what to do "next time"(?) This was very strange, I think.
I ended up getting it installed on my "third" of two extra user profiles (three total including the Owner profile). Like I said, this phone is brand new, and has had grapheneOS on it since the jump, but the phone has been totally unused. No apps were installed, nothing at all. Only settings (privacy, user interface/display/etc.) were configured. Owner app has nothing on it, nor the other two.
Time to get some rest. I'll update any relevant info, or follow up questions.
Thanks you guys. I appreciate it.
Oh - one quick follow up first, hah. I set the vpn app's settings to: Launch on system startup (connect on system start), Connect on Launch (connect when app is started), Connect on app update (after updates are done).
I wonder how these settings will play out with the grapheneOS Profiles being considered.
Eg: If I reboot phone, or it auto reboots (every 12 hours), it always reboots into the Owner profile. But when it does that, will the VPN be launched and connected?
I would guess that it won't... for one reason at least - because the app isn't even located on the Owner profile. I installed it to a secondary profile. I didn't install to the owner profile and then move it to a secondary or anything.
I'll try and test it out tomorrow.
Thanks again.
So, when the phone reboots (auto-reboot), it reboots into the owner profile. The owner profile is where you have to choose/set the wifi configurations. So when it reboots into the owner profile, and that profile doesn't have the vpn app on it, but it has wifi turned on (I can't turn it off for the owner profile, and on for a secondary profile), so it just connects to wifi without a vpn running.
This seems less than ideal.
1) So, for apps like this (vpn), would it make more sense to absolutely have it installed on the owner profile, for this exact reason?
2) Should I manually install the same vpn app on the owner profile now (the same way I did with the secondary profile)? Or will that create some kind of conflict? Meaning - should I uninstall it from the secondary profile, and then install it on the owner profile, and "push/install" it to the secondary profile from the owner profile using the multiple users area to install it to the secondary profile?
yore You don't need it in the Owner profile if your goal is to route your secondary user's traffic through a VPN. That is, of course, if you don't do anything in Owner that you want to route through a VPN.
Hmm. Ok.
Well, the goal would be to never have connections made, from the phone or any profile, without the vpn being connected.
So, I'm still not sure about question (2) and how I should do it.
Particularl considering that I have it installed on a secondary profile now, and not the owner, how should I (how would you) do it? Should I just log into owner profile and install it there too now? Or, should I delete it from the secondary profile, then install it on the owner profile and then "push"/install it to the secondary profile from the owner profile in the "multiple users" area?
I've watched videos on app stores (particularly sideofburritos vids). But I still have a question that might be stupid seeing as I've tried to understand this. If I can download/install an app via Aurora Store (google source/repository) or "direct" from the developper (eg: dev's website, or github/gitlab, or other), then what is the best choice, and why? I'm concerned with stuff like auto/updates.
Eg. of apps I was just looking at installing on the new pixel 7a which are available via Aurora Store and directly from either a dev's website or github/gitlab:
-K9 Mail app
-PIA VPN app
-KeePass (the DX version, for android) (I see this one on Aurora, and Github. When I click GetRepo, it takes me to github (here: https://github.com/Kunzisoft/KeePassDX/releases) and I don't know what to do there, haha. Firefighter? Fireproof? Autoform? I duno what the heck this is , other apps the dev made? Did they..."name" their app "updates"? I'm lost there.
There's also this github page for keepassdx https://github.com/Kunzisoft/KeePassDX...
Oh, wait. Maybe those are names of releases or "updates"? Under the "Firefighter" release, I now see "assets" and the apks. "Free" and "Libre"...what.
Edit: I appears from the "download" section of the github page that I'll have to use Obtanium along with this app if downloaded from github? (It shows: GitHub / Obtainium).
Thank you.
Edit: Found this, regarding keepass:
[Why a Libre and Free version?
All versions currently have the same usage features.
The Free version, for everyday use, is the basic version at the Google Play Store. It is compiled and signed by the developers, and sent to the Play Store to be cataloged by Google.
The Libre version is the version provided to have no proprietary code, and is not linked to any closed services. The app is automatically signed and compiled from the GitHub repository by F-Droid. It is possible to unlock the themes with a procedure.
In both cases, this versions are available on Github and signed by the creator of the app (since version 4.0.3).]
So..is the Free version better because it's signed by the dev's and not autosigned? Or the Libre version because no proprietary code and not linked to closed services (whatever that means exactly).
chartene If I can download/install an app via Aurora Store (google source/repository) or "direct" from the developper (eg: dev's website, or github/gitlab, or other), then what is the best choice, and why?
Its generally recommended to use Google Play or Obtainium to install apps, but I assume you're using Aurora to avoid GPlay, so (in my opinion) it would be better to use Obtainium if the app is available from Github.
I'll have to use Obtanium along with this app if downloaded from github? (It shows: GitHub / Obtainium).
You don't have to use Obtainium (hence the / in Github / Obtainium), but theres no sense in not using it, since its the best way to install and update apps from non-GPlay sources.
So..is the Free version better because it's signed by the dev's and not autosigned? Or the Libre version because no proprietary code and not linked to closed services (whatever that means exactly).
Entirely up to whether you're ok with proprietary code or not. Its likely that features could be lost (I have no idea what though) in the Libre version because of the removed proprietary code. So the decision would be between features (Free) and privacy (Libre).
Dumdum Its generally recommended to use Google Play or Obtainium to install apps, but I assume you're using Aurora to avoid GPlay, so (in my opinion) it would be better to use Obtainium if the app is available from Github.
You assume correctly. Why would Google Play be preferable over Aurora?
Dumdum You don't have to use Obtainium (hence the / in Github / Obtainium), but theres no sense in not using it, since its the best way to install and update apps from non-GPlay sources.
I'll have to watch SOB's video on Obtainium (I thought they spelled it Obtanium, my bad), I either missed (more likely forgot) or didn't realize that you could install the apps with Obtainium (thought it was only for updating apps acquired from sources like github).
"Obtainium allows you to install and update apps directly from their release pages, and receive notifications when new releases are made available." - From the Obtainium website: https://obtainium.imranr.dev/
The "Download Universal apk" link on that page opens a direct download from that site. I wonder what that's about; if that's preferred, or.. "safe".
The github page for it (which there's a link to on that obtainium website page) doesn't mention this obtainium website nor the "universal apk".
I'll try obtainium later on.
Dumdum Entirely up to whether you're ok with proprietary code or not. Its likely that features could be lost (I have no idea what though) in the Libre version because of the removed proprietary code. So the decision would be between features (Free) and privacy (Libre).
Hmm. Ok.
Thank you very much.
chartene Why would Google Play be preferable over Aurora?
A number of reasons such as GPlay is more secure (Aurora doesn't have certificate pinning for example), the overall unreliability and bugginess of Aurora, the fact that it utilises shared anonymous accounts which (as far as I know) isn't very secure and can prevent usage of the app if Google cracks down on the accounts (since account sharing is against GPlay rules). Users can still use Aurora if they wish. Using GPlay is just a recommendation/preferred if security is a priority.
The "Download Universal apk" link on that page opens a direct download from that site. I wonder what that's about; if that's preferred, or.. "safe".
I don't see why it wouldn't be safe. Its just linking to the relevant APK files from the latest release of Obtainium. Its no different than just navigating to the release page and downloading the APK yourself.
The github page for it (which there's a link to on that obtainium website page) doesn't mention this obtainium website nor the "universal apk".
It does mention the Obtainium website. On desktop you can see the obtainium.imranr.dev
link in the About section on the right side of the page, under "Get Android app updates straight from the source." On mobile, it is at the top of the page under the same "Get Android app updates" sentence.
As for the Universal APK, that's just referring to the app-release.apk
file in the Assets section which is a generic APK that is designed to work regardless of the particular architecture a device uses. This results in an APK that is larger than others (see the 58.6mb app-release.apk vs. the 22.3mb app-arm64-v8a-release.apk)
The only reason a user would need to use a "Universal APK" is if they don't know what architecture they use (or maybe for some reason, their architecture isn't available. For the record, the vast majority of modern mobile devices use the ARM64-v8a architecture.