just flashed new phone w/ ; a pleasant experience and the only hiccup was my outdated fastboot on Debian (easy w/ the instructions on graphene website). I'd still like to see by default but it takes a few seconds to grab+install. Bravo 🤓
Conversation
F-Droid has issues blocking us from bundling it especially with the privileged extension. Even if the technical issues were addressed, we want GrapheneOS to be permissively licensed including the ability to make a locked down device. F-Droid's GPLv3 license is incompatible.
2
4
We're planning on making our own automatic update system for apps in GrapheneOS for out-of-band updates to apps like Vanadium without synced release cycles. It will be very minimal and focused on usability, correctness and security in the spirit as our over-the-air update app.
1
2
It may initially be based on forking our over-the-air update app and having it do background app updates instead. It can then be extended to verifying a signature for the metadata index in advance which would be a requirement for extending to be able to install new packages.
It will only be able to install modern apps targeting API 28+ which makes things a lot simpler. Only apps targeting API < 23 are incompatible with automatic updates due to the legacy permission model with user-facing permissions granted at install/update time instead of runtime.
1
2
thx for all the updates on this. That all sounds great and a wise approach; I'll be along for the ride and so will friends and family I can convince to take the leap.
1
1