GrapheneOS has experimental support for the Pixel 4 and 4 XL in the development branch, but it needs testing and lots of work to complete it. It's important to fully support these to be able to support the upcoming Pixel 4a and other current generation Qualcomm SoC devices too.
Conversation
Wi-Fi doesn't work yet since we disable dynamic kernel modules and the driver needs compatibility fixes for building it into the kernel even though it's supposed to be supported. Separately from that, some userspace fixes appear to be required for it. Probably not the only issue.
1
11
Supporting these reference devices enables much more easily porting to other devices and advances the project by supporting the latest and greatest SoC platform and hardware-based security features. Supporting the initial devices for a generation is always going to be hardest.
Replying to
Linux kernel drivers often have initialization issues when built into the kernel. They often initialize themselves as soon as possible instead of waiting until it's actually needed. That can cause them to try loading firmware or running userspace helpers before it's possible.
1
5
Disabling dynamic modules substantially improves the granularity of CFI, since otherwise the compiler assumes non-static functions can be called indirectly. This ends up uncovering more issues like this one where only assembly uses a function indirectly:
1
5
Also likely that we'll find new issues with hardened_malloc. AOSP and Qualcomm have improved code quality and testing over the years but we still find memory corruption bugs during regular use or running the standard test suite. Better than other SoC platforms but still a mess.
1
8