Thanks, I plan on doing this when my phone dies. Just some questions:
A computer with a Chromium-based browser (e.g., Google Chrome, Brave, Microsoft Edge, Vivaldi?). Unfortunately, I must recommend Windows 10/11 here, because then you don’t have to mess around with any drivers; it’s the simplest option.
This is the first I’ve read this, how much of a pain is it to use Linux instead? I don’t have any Windows computers.
First of all, we need to make sure that our phone’s software is updated to the latest available version. For this purpose, we go to Settings -> System -> System update. If necessary, we update
How is this possible if the previous step skipped SIM and Wifi setup? I assume, if there’s updates, to setup Wifi then proceed?
securing the phone with a fingerprint; I personally am an advocate of this solution…
Recommend not doing this for users in the USA, as police can compel you to unlock biometric locks. Yes, it’s fucked up, that’s what happens when octogenarian fascists run all three branches of your government.
This is the first I’ve read this, how much of a pain is it to use Linux instead? I don’t have any Windows computers.
No issues at all. Not sure what drivers the author was referring to but using the web installer you pretty much just plug the phone in and click through some buttons.
Recently had a similar issue with Via, the app for keyboards. Basically, there was an issue with chrome talking to the hardware…Except some lifesaver recommended plugging my keyboard directly into my machine, bypassing the docking station (the thing causing me issues) and fixing my problem. So I’ve technically still never had a driver issue, only a shitty docking station experience.
GrapheneOS has guides for installing regardless of platform, here’s the relevant page on their official site.
GrapheneOS supports a “duress password” that you can enter to lock up the phone and securely erase any data stored - it’s designed for those situations (so just push that pin in if you’re in that situation).
This is the first I’ve read this, how much of a pain is it to use Linux instead? I don’t have any Windows computers.
You only need a browser that supports WebUSB.
Chrome and Brave support WebUSB on Linux.
How is this possible if the previous step skipped SIM and Wifi setup? I assume, if there’s updates, to setup Wifi then proceed?
I believe that vendors can include updates on the device that sit in the same fastboot space as you’ll be using to install Graphene. By running the system update, it applies any lingering patches, clearing the space for the Graphene install. The update (without SIM or Wifi) will only work if this is the case. So this step is more ‘ensure that there are no updates on the disk that will screw up the install’ than ‘make sure your phone is up to date’… since Graphene has its own methods for applying patches.
I feel as though having biometrics installed, Face ID and/or fingerprint, kind of defeats the purpose of a privacy OS. Where as pin and a duress pin would be the choice going forward and managing the phones security.
For daily use the fingerprint sensor is just practical. I use it with a secondary pin, so finger and a short pin hits the right balance of security and convenience for me.
If I cross borders or join a protest, biometrics are removed beforehand.
I don’t remember if I did my phone on Linux or windows, but depending on your Linux install you may or not have drivers pre installed. That’s more of a result of Linux installing only what you need, vs windows installing everything someone might need.
As for wifi/updating, I don’t see it as a necessary step on a new phone. However, for a new phone it may be worth loading the stock OS, and running with it for a day or 2 just to make sure everything (WiFi, battery life, cell, BT, etc) actually works before you go crazy troubleshooting a problem that was there out of the box.
Once you do get Graphene installed, you’ll then want to check for any updates.
While having Finger print on/off is everyone’s personal choice, it is pretty easy to lock down the phone. You can spam the wrong finger a few times and it will force the pin requirement or if you press and hold the power button a lockdown button appears, either way it only takes a few seconds.
Despite what the news would lead you to believe, most people aren’t talking to police every day. That being said, if you are going to be in an area with high police presence, than turning off the finger print is 100% recommended.
Linux works broadly across a wide range of hardware, but it’s not 100%. You can ``very easily test hardware compatibility with a Live USB install of most Linux distros. Windows is a way bigger driver pain in the ass if you ask me.
Thanks, I plan on doing this when my phone dies. Just some questions:
This is the first I’ve read this, how much of a pain is it to use Linux instead? I don’t have any Windows computers.
How is this possible if the previous step skipped SIM and Wifi setup? I assume, if there’s updates, to setup Wifi then proceed?
Recommend not doing this for users in the USA, as police can compel you to unlock biometric locks. Yes, it’s fucked up, that’s what happens when octogenarian fascists run all three branches of your government.
No issues at all. Not sure what drivers the author was referring to but using the web installer you pretty much just plug the phone in and click through some buttons.
Recently had a similar issue with Via, the app for keyboards. Basically, there was an issue with chrome talking to the hardware…Except some lifesaver recommended plugging my keyboard directly into my machine, bypassing the docking station (the thing causing me issues) and fixing my problem. So I’ve technically still never had a driver issue, only a shitty docking station experience.
GrapheneOS has guides for installing regardless of platform, here’s the relevant page on their official site.
GrapheneOS supports a “duress password” that you can enter to lock up the phone and securely erase any data stored - it’s designed for those situations (so just push that pin in if you’re in that situation).
CLI installation guide is perfect, thank you.
You only need a browser that supports WebUSB.
Chrome and Brave support WebUSB on Linux.
I believe that vendors can include updates on the device that sit in the same fastboot space as you’ll be using to install Graphene. By running the system update, it applies any lingering patches, clearing the space for the Graphene install. The update (without SIM or Wifi) will only work if this is the case. So this step is more ‘ensure that there are no updates on the disk that will screw up the install’ than ‘make sure your phone is up to date’… since Graphene has its own methods for applying patches.
I feel as though having biometrics installed, Face ID and/or fingerprint, kind of defeats the purpose of a privacy OS. Where as pin and a duress pin would be the choice going forward and managing the phones security.
It depends on your threat level.
For daily use the fingerprint sensor is just practical. I use it with a secondary pin, so finger and a short pin hits the right balance of security and convenience for me. If I cross borders or join a protest, biometrics are removed beforehand.
I put grapheneos on my current phone using my previous phone (samsung s22) and a usb c cable. Wasn’t hard at all, just had to follow the prompts.
I flashed my pixel to graphene on Linux without any issue. I used an arch based distro and temporarily installed Brave to perform the flash.
I flashed it on my 8a a couple of weeks ago using Chromium on EndeavourOS without issues.
I don’t remember if I did my phone on Linux or windows, but depending on your Linux install you may or not have drivers pre installed. That’s more of a result of Linux installing only what you need, vs windows installing everything someone might need.
As for wifi/updating, I don’t see it as a necessary step on a new phone. However, for a new phone it may be worth loading the stock OS, and running with it for a day or 2 just to make sure everything (WiFi, battery life, cell, BT, etc) actually works before you go crazy troubleshooting a problem that was there out of the box.
Once you do get Graphene installed, you’ll then want to check for any updates.
While having Finger print on/off is everyone’s personal choice, it is pretty easy to lock down the phone. You can spam the wrong finger a few times and it will force the pin requirement or if you press and hold the power button a lockdown button appears, either way it only takes a few seconds.
Despite what the news would lead you to believe, most people aren’t talking to police every day. That being said, if you are going to be in an area with high police presence, than turning off the finger print is 100% recommended.
Linux works broadly across a wide range of hardware, but it’s not 100%. You can ``very easily test hardware compatibility with a Live USB install of most Linux distros. Windows is a way bigger driver pain in the ass if you ask me.
Smooth installation here with Vivaldi on Ubuntu (or fedora, not sure as I was distro hoppping a lot at the time)