How to Sandbox Google Apps?

saskguy

Hello - so I created a second user on my phone with GrapheneOS and with Aurora Store I was about to install some of my paid apps. However I wanted to install Google Services Framework first to see if that would be enough to allow my app to run and if not then install Google Play Services and Google Play Store. Perhaps a stupid question but where do I find these .apk files? I assume Aurora would have it but cannot find them there. I then searched the actual Google Play Store and there were not there either, what am I missing?

Themble

saskguy You open the "Apps" app and there you find them at the bottom.

saskguy

Thanks! After installing the Google Services Framework and Google Play Store. I have downloaded the apps that I paid for. Do most people go into network settings and stop Google from connecting to the Internet? Or do you let them connect as they are segregated into the sandboxed account?

[deleted]

saskguy Or do you let them connect as they are segregated into the sandboxed account?

It makes sense to allow Network to both of them

saskguy do you let them connect as they are segregated into the sandboxed account?

What do you mean by 'segregated into the sandboxed account'?

matchboxbananasynergy

Google Play Services on GrapheneOS are just regular apps you install. The compatibility layer that GrapheneOS adds just makes it so they can learn to live with being installed as regular apps.

I feel like there might be a misunderstanding here, so I'm just reiterating that there's no special sandbox for the Google apps. They're sandboxed the exact same way as with other apps you'd install.

Our Features page and Usage guide contains a lot more information about how it works which you might find helpful:

https://grapheneos.org/usage#sandboxed-google-play
https://grapheneos.org/features#sandboxed-google-play