Share your Graphene OS setup. Here is mine.

intelligence

Thyself8991 So tell them to use something better.

W1zardK1ng

bluegrass
When you create a new contact or restoring from a contact backup (vcf) file there will be an option as 'Phone storage (not visible by other apps)', contacts stored under this section is visible only to the simple apps, you can restrict that access also if you want to.

https://ibb.co/948bdxy

omori

idk about y'all here's mine
alt text: goofy ahh phone setup um I got like apps everywhere cus I took lazy to organize my home screen 🗿
https://media.discordapp.net/attachments/1040362473410273361/1085554739174986010/Screenshot_20230315-092622.png

[deleted]

omori well I don't know what the others would say, but looking at your app setup nothing even suggests that you run Graphene. My first words were OMG and "you sure you don't want to go back to stock?" Because i can't tell the difference.

omori

[deleted] graphene better 👺🤺 so ion going back + u can't judge me 👴

[deleted]

I finally put everything in the same profile with GSF/GPServices because my threat model does not imply to not make connections to Google at all, for convenience, lower battery usage (than running multiple user profiles) and because I use Play Store to download apps the most secure way possible and I need Play Services to make my banking apps + Google apps work.
Installed :

Aegis (greatest app)
Aurora (for apps which cannot be installed on Play Store...)
Aves Gallery (greatest app)
Bitwarden
Brave (everyday's browsing)
K9 mail (for Posteo)
DAVx5 (could easily without it but why not)
Deepl
Etar
Feeder (greatest app)
IVPN (best VPN and app)
Newpipe (insane app)
Opendocumentreader (necessary to open other files than PDF...)
Organic maps (greatest app for me)
Rail Planner
Screen Time by Markus Fisch
Signal
Spotify
Telegram
Vanadium (default browser so unknown links open in it for better security than Brave)
Whatsapp
4 banking apps

Gboard
Google photos (to modify pictures)
Play Store
Goole voice recorder
Google messages (for RCS)
Google Speech Services (for navigation voice)

Graphene's Apps app
Graphene's calculator
Graphene's camera (would like to disable it)
Graphene's contacts
Graphene's files
Graphene's clock
Graphene's PDF viewer
Graphene's dialer

Grant minimal permissions to apps, especially Google ones

Mr_Compliance

proclaim

Hi, Which front end are you using for Lingva?
I found no app called Lingva on Fdroid but a few front ends came up.

PS: Very good of you to put your setup on GitHub.
I found it very useful.

proclaim

Mr_Compliance

Hi ,
go to https://lingva.ml/ and from Vanadium three dots on the right corner > click on "Install App" .
You don't need nothing more ! Lingva works as PWA app .

secretContainer

Owner: The basics so if in the worst case scenario I have to delete my other profiles, I'll have a profile that appears used
Color Note
Read You
1Password
Infinity for Reddit
AudioAnchor
Sony Headphones app

Main
Read You
1Password
Infinity for Reddit
Sony Headphones app
Molly IM (FOSS)
Tutanota
SimpleLogin
Proton Mail
NewPipe
Catima
Brave (everyday browser with Vanadium as default)
Joplin
Standard Notes
Simple Gallery Pro
Volumetric Weather (no location permissions)

Play Store: GSF enabled
Health services app
Provincial Services app
Color Note
Sony Headphones app
Brave
Points app
Banking apps
Costco app
Parking apps
Proton VPN
Play Store

Work
Work-related app to see timestamps and pay stubs
Bitwarden

School
Bitwarden
AnkiDroid

Games
A few free games off Aurora

Maps
Google Maps
Organic Maps
OsmAnd
Magic Earth
Color Note

[deleted]

hisar I also replaced the AOSP apps with the default apps (Camera, Calculator etc.) by Google with network permission turned off.

Just because they have no network permission it doesnt mean that there isnt a way to get those data on the cloud. Two apps can communicate with each other if there is "consent" between them. So google camera can access all files it created on android (including gos). Lets say it chooses to communicate metadata with play services, which has access to internet. Good luck.

[deleted]

[deleted] the privacy implications of having a sandboxed google (which can't realistically run without network and other permissions) installed should ideally be discussed in a separate thread and trying to point things like that out has already earned me two bans. Developers for some reason do not want to go near that and moderators religiously punish it. Another thing that might be beneficial to cook into the OS might be (since they already included call recorder and screen recorder) some sort of a network monitor and packet analyser. Until that happens there is no place for sandboxed google on my phone.

Murcielago

proclaim

Thank you for the very in-depth description of your setup on Github.

Do I understand correctly that you have updated your setup and are now only using the Owner Profile?

proclaim

Murcielago
Hi, yes now I use only the default profile .

Overlay1404

Profiles:

Owner - This is my default profile. No play services. I have had re-occurring issues with SMS not reliably being received by secondary profiles, which is why the owner profiles remains the daily driver profile. VPN enabled.
Driving - This for driving and auto-insurance app to get a discount. The insurance app is extremely intrusive which is why driving is its own profile.
Google - All apps that require play services or apps that I don't want on another profile (such as Taco Bell). VPN enabled.
Banking - Banking Apps. This also has play services installed but I prefer to keep banking apps separated. VPN enabled.
Work - All my work related apps. I get paid a stipend to use my phone for work. This is the profile dedicated to work.

Apps:

Not going to create a huge list of apps but I will list a few main ones
-Proton Mail and Drive for emails and photos.
-Wireguard for VPN. I may switch to AirVPNs Eddie app at some point to take advantage of the blocklist features since Vanadium does not provide any sort of content blocking but, since I do not have issues with ads and, the Eddie app is unreliable I have not made the switch.
-Obtanium as the primary way to update apps. I do not have an app store installed on my main profile.

Murcielago

proclaim

Thanks for the feedback - I hope you maintain your setup guide on Github - even if I set some things differently, I find your guide super helpful to work my way through after a fresh installation of GrapheneOS.

« Previous Page