Recommendation for deGoogled OS's
from pineapplelover@lemm.ee to degoogle@lemmy.ml on 18 Sep 2023 05:29
https://lemm.ee/post/8362574

My pixel 5 is currently running on grapheneOS and will be unsupported soon so I’m looking to switch over to CalyxOS for an extended support. Are there any other deGoogled OS’s you guys recommend?

#degoogle

threaded - newest

[deleted] on 18 Sep 2023 05:40 next collapse
.
EddyBot@feddit.de on 18 Sep 2023 05:52 next collapse

CalyxOS helped prolonging the life of my Pixel 3 for almost two years
eould recommend

Cheradenine@sh.itjust.works on 18 Sep 2023 06:13 next collapse

divestos.org/index.html

[deleted] on 18 Sep 2023 09:07 next collapse
.
Maoo@hexbear.net on 18 Sep 2023 09:07 next collapse

My handwavy rec is:

  • CalyxOS

  • LineageOS - microG (the one releaswd by the microg people)

  • LineageOS stock

It’s a shame GrapheneOS doesn’t offer longer support. The best option is probably to get a newer pixel like the 7a but that costs money of course.

pranqster@infosec.pub on 18 Sep 2023 14:51 collapse

The reason that Graphene doesn’t do this is because the device is no longer receiving upstream security patches for firmware, bootloader, etc. If all you care about is privacy and simply having a deGoogled device, then by all means. But, security-wise, you are potentially running a vulnerable device. ROMs like Lineage and Calyx continue to roll the security patch counter, but aren’t actually able to apply patches to those components. Security-wise, microG is also not an implementation I would recommend. Thus, Graphene is probably the only one I would recommend.

Maoo@hexbear.net on 18 Sep 2023 20:57 next collapse

Yeah this is why getting a new pixel is probably best from a security perspective. Planned obsolescence is frustrating and expensive, though, so not everyone can reasonably buy a new phone every 3 years.

pranqster@infosec.pub on 19 Sep 2023 06:29 collapse

Yeah, updating every 3 years is not something that everyone can afford. Newer Pixels are up to 5 years of security updates, though. Hopefully they can keep pushing this limit.

Maoo@hexbear.net on 19 Sep 2023 10:21 collapse

Indeed! Also at least the price point of the 7a isn’t terrible.

pineapplelover@lemm.ee on 19 Sep 2023 05:53 collapse

Understandably so. But I don’t really like the design choices of the newer pixels. I hope there’s a phone in development that still has a fingerprint sensor at least. Audio jack and sd card seems less and less likely.

pranqster@infosec.pub on 19 Sep 2023 06:25 collapse

Yeah, I totally hear that as well.

caos@feddit.de on 18 Sep 2023 11:14 next collapse

I would recommend DivestOS. If you need MicroG, there is also iodeOS. I would recommend this over /e/OS because system apps can also be selected or uninstalled.

LiveLGNProsper@lemmy.world on 18 Sep 2023 14:58 next collapse

Calyx OS or Divest OS as the relock the bootloader unlike lineage OS.

pineapplelover@lemm.ee on 19 Sep 2023 05:51 collapse

Didn’t realize lineageos doesn’t relock bootloader. That’s a big no no for me then. I might stick with calyx or divest

LiveLGNProsper@lemmy.world on 19 Sep 2023 13:20 next collapse

Yeah that’s how I feel about it too

hempster@lemm.ee on 20 Sep 2023 09:06 collapse

Why is relocking bootloader important?

pineapplelover@lemm.ee on 20 Sep 2023 18:08 collapse

Huge security risk for tampering

ippokratis@lemmy.ml on 18 Sep 2023 16:23 next collapse

Your options in aftermarket OS fall in to 3 categories imao

  1. those that support relocking the bootloader (grapheme,calyx,divest, other smaller projects maybe)

  2. vanilla roms with signature spoofing permission so that you can have microg on them. Some even come with microg preinstalled (/e/,lode,Los4mg) And some are gmscomat compatible (voltage,awaken,spark). There are plenty but they don’t care about signed images and relocking.

  3. some unofficial build from any of the above from a maintainer that cares to sign his own images so that you can relock your BL as your device supports it.

sounddrill@lemmy.antemeridiem.xyz on 19 Sep 2023 12:36 collapse

Honestly, with FBE, I wouldn’t bother with bootloader relocking

You get all the disadvantages of a locked bootloader with none of the advantages(strong integrity or widevine L1 certification)

Instead, FBE allows you to wipe data but not access it without pin, or whatever

If your recovery doesn’t have support for decryption, it just doesn’t access data!

ExtremeDullard@lemmy.sdf.org on 19 Sep 2023 04:34 next collapse

Calyx offers fully automated install scripts. If you’ve never installed an Android ROM before and don’t know anything about it, they really make installing CalyxOS a breeze.

LineageOS is less obvious, but no more difficult to install than any other ROM if you know how it’s done.

RandyButternubs@lemmy.nz on 19 Sep 2023 12:14 next collapse

manually de googling the stock rom

southernwolf@pawb.social on 19 Sep 2023 13:28 next collapse

I’d definitely try CalyxOS first, as it’ll be the closer experience to what you’ve had in GOS. There’s also DivestOS as well, but you’re gonna be more limited there since it won’t have MicroG (be default, not sure if it can be added in?) So it won’t have any real access to play store apps. You’ll probably get another 2-3 years out of CalyxOS on your pixel 5 if I had to guess. All depends on how long they can keep the security updates going for it.

LineageOS is a fantastic option, and eventually even when CalyxOS stops getting updates, LOS is absolutely a good choice to continue in using your device for long after the official support window. Just make sure you go with the version with MicroG so Play store apps mostly work as they should.

MotherFlocker@jlai.lu on 20 Sep 2023 09:58 collapse

Calyx and LOS are almost the same, but Calyx is slightly better in terms of community and automated upgrades.