How to make a full disk image for backup

larry1234

I bought an unlocked Pixel 7a so that I could install Graphene OS. I've managed to do that successfully (although I'm not very Android savvy). In connection with my PCs it has been my practice to do a frequent automatic back up not only my user data but also my system partition. It has saved me a lot of grief when I've had to recover from problems that have occurred with the OS. I want to do the same thing with my Pixel 7a (although a much less frequent backup of the system-related directories) so it's easier to restore the phone with all the tweaks and settings I've selected in order to suit my needs and preferences.

I've done extensive searching online about how with a Graphene OS I can back up the system-related directories but have not found any clearcut ways to proceed. There's no TWRP for this phone, and I've had a lot of grief trying to use OrangeFox. I've been able to back up the super partition (which includes system, system_dlkm, system_ext, product, vendor, vendor_dlkm) without rooting the phone, but have been stymied when trying to back up other non-user data and non-app partitions, e.g., boot, init_boot, etc. ADB pull commands don't seem to be relevant for my purpose. (BTW, I'm planning to use a more standard approach than a bit-by-bit copy to back up my user data and apps.) I'm aware that using dd commands will work with Android phones with more typical OSs but it requires rooting the phone. Rooting a phone running Graphene OS is frowned upon, and I understand Magisk doesn't play well with Graphene OS. So I'm stuck. I'm hoping some folks on this forum with a much deeper understanding of the Graphene OS can help. I'd really like to stick with the Graphene OS for all the reasons you well know

Thanks very much in advance.
Larry

de0u

larry1234 The short answer is: that's not how it works.

Because Android in general, and GrapheneOS in particular, are designed to resist extraction of private data when (not "if") apps are compromised or the kernel is compromised, or even if the device is disassembled, there are non-trivial barriers to bulk-extracting storage in the described fashion.

Also because of exploit resistance, some encryption keys that protect app data aren't present anywhere in regular storage, they are held by a special security processor. Any app data encrypted with one of those keys will be unreadable if it's restored onto a different device, or even if it's restored onto the same device after the device has been wiped.

It is possible to build a custom version of GrapheneOS with security features disabled, but regular GrapheneOS doesn't have a "temporarily switch off security" function (because then malware would use that function).

Novaliss

larry1234
I recommend reading e.g. this thread:
https://discuss.grapheneos.org/d/32630-my-backup-restore-thread-tips-tricks-my-experience

larry1234

Thanks to both de0u and Novalissoide for taking the time to reply. I now understand that the strong privacy GOS provides makes it virtually impossible to back up my phone's system directories in the way I back up my PC system partition (which, by the way, is creating an image file via Macrium Reflect). I also have followed up checking out the suggested URL. The reason I posted was to see if there was anything I was missing about a way to backup to entire phone in the way I back up my entire PC.

At this point let me add that I'm not a typical cellphone user in that primarily I use it to make a call and browse the Internet when I'm away from my landline and laptop at home. I installed Graphene not so much for its strong privacy as to get away from Google. I simply didn't like the idea of providing Google access to info about everything I was using the phone to do and enabling them to make use of it, and Graphene was the best way to de-Google the phone. I had seen that there was a fork that might reduce Graphene's security enough to perform the sort of backup I was hoping to do ([removed link to guide for rooting]) but didn't know enough about OSs to feel completely comfortable going that route. I decided I can live with backing up my just my user data and apps (at least those that can be backed up) and then reinstalling the standard Graphene OS (and re-establishing my preferred settings) if I ever need to do so. Thanks again to the forum members for their replies.

Note: removed a link to a guide for rooting. People who wish to root their devices can do so, but I don't want people to find that stuff or links to it here. Rooting isn't recommended.