GrapheneOS - Sandboxed Google Play Services and Push Notifications

A review of GrapheneOS (grapheneos.org/) and how to install Sandboxed Google Play Services.
Device: Pixel 3a (Unsupported) web.archive.org/web/2022062302...
Version: 12
0:00 Introduction - Push Notifications
1:19 GrapheneOS Info - Features/Devices
2:39 First Boot and Features
4:53 System Apps
5:57 Install Google Play Services
8:55 Push Notifications Again
9:25 Unsupported Devices
9:56 Multiple User Profiles
12:05 Outro

[@paulbailey6251]

Good overview - GOS deserves more love! I also had it installed on a Pixel 3a until they stopped supporting it. I then installed CalyxOS on the Pixel 3a and that gets regulare updates, Android 13 and it runs just great. I now also have a Pixel 5 with GOS and this is my main device. Hope to see you do more on GOS.

[@CyberPunkEdu]

Thanks for the kind comments. GOS is really a nice OS. Good to hear that it is working well on the Pixel 5. I was looking into that for my main as well.

[@jedclampett6466]

Thank you for the information.

[@CyberPunkEdu]

You're welcome. I hope to show a bit more GrapheneOS on a supported device soon.

[@eniggma9353]

Good video.

[@CyberPunkEdu]

Thanks! Any questions or things you'd like to see related to GrapheneOS?

[@zed7389]

Thanks for video. What about protection from pc connection? Can whole phone be encrypted ?

[@CyberPunkEdu]

Thanks for the comment. The phone uses encryption as mentioned here: grapheneos.org/faq#encryption With "OEM unlocked" disabled and the bootloader locked, it helps mitigate the risk when connected to a pc. Security will depend mainly on the user's password at that point.

[@nirv]

That's odd. In my GrapheneOS for the Pixel Tablet, I don't have a "Sandboxed Google Play" option in the apps menu. Or anywhere (I searched settings).

[@CyberPunkEdu]

That is strange. I assume you have the latest version of GrapheneOS. Maybe it's something that isn't available on the tablet yet. I tried searching for others with the same issues, but I didn't find any mention. You could try asking in the forum: discuss.grapheneos.org/t/pixel-tablet

[@nirv]

@@CyberPunkEdu Turns out it's not installed by default. I had to hit APPS and then manually install "Google Play Services" and then the option in the menu appeared. 'Doh!

[@CyberPunkEdu]

Ah yes, that is the same on my device. Sorry if that wasn't clear. I'm glad it worked out and thanks for letting me know. @@nirv

[@reclee8333]

Can Graphene OS disable cellular connectivity so that your phone won't ping any cellular base station (even without SIM)? If not, are there apps which can do this?

[@CyberPunkEdu]

Hello, the only way is airplane mode to be sure that it's not pinging the network: grapheneos.org/faq#cellular-tracking

[@sajidkhanmahmood]

Does google pay and banking apps work since the bootloader is lockable

[@CyberPunkEdu]

I can use my banking apps, there is an extra step that is show in my video shorts. However, it might depend on each app. Google wallet works except not with nfc, so it might not be useful for everyone.

[@markjh1111]

If I download and use Google Voice, would that totally defeat the purpose of Graphene? Can it be sandboxed and therefore give me some privacy?

[@CyberPunkEdu]

From what I understand, the sandboxing of play services will still provide a level of privacy. Google Voice will talk to servers, but you can restrict other permissions, and sandboxed play services won't have access to other apps or the OS. All user-installed apps are sanboxed as well: www.reddit.com/r/GrapheneOS/comments/10wl2ok/comment/j7r669r/?

[@iamshewhowalksalone820]

Google Play Store shows it was installed from Google even though I used the Graphene OS repository for Sandboxed Google Play, is that normal? I wasn't receiving notifications when I missed a call, received a voicemail... I think I now have that resolved have switched to battery optimized, somewhere along the way I signed into my google account, now I can't log out as it doesn't give me that option, what do I need to do?

[@CyberPunkEdu]

It is normal for the sandboxed google play to say it was installed from google. To log out from the google account, go to t Settings -> Passwords & Accounts -> Then remove the Google account.

[@billnilsson]

I can't download anything in apps, it just says download failed with the message "unable to resolve host.." is there a way to solve this? I can't use any banking apps etc right now

[@CyberPunkEdu]

It sounds like there is either a connection issue, or something is no longer supported. Try using a different wi-fi connection, VPN, DNS, etc. Otherwise check to see if there is an OS update. Which device are you using?

[@billnilsson]

@@CyberPunkEdu It was the duckduckgo vpn, I'm sorry haha, thank you thou

[@CyberPunkEdu]

@@billnilsson Oh, I'm glad it sorted out ;)

[@molonlabe8792]

How do you know whether a device is supported or not?

[@CyberPunkEdu]

The supported devices will be listed here: grapheneos.org/releases

[@Yurij220]

Please, make a review on KDE Plasma Mobile?

[@CyberPunkEdu]

Great idea! I will consider how to do this. Thanks

[@hd9g]

Banking apps work?

[@CyberPunkEdu]

Most banking apps should work, but please see here how to do so kzbin.infoSFcIP8C0-n4 Also, the version of graphene on the Pixel 3a is outdated, but I use banking apps on the Pixel 5 with GrapheneOS.

[@klemensbofn9383]

I do wonder how long the GOS will be updated for P5 and thinking if LinageOS is not a better option here @@CyberPunkEdu. Maybe CalyxOS could do the trick as well, but I have no idea if banking apps and gpay will work there.