8 ms·

I wish that LineageOS could accept the "signature spoofing" patch that is needed for microg (possibly with a toggle switch that would be "off" by default), so t

I wish that LineageOS could accept the "signature spoofing" patch that is needed for microg (possibly with a toggle switch that would be "off" by default), so that we could avoid the need for the less-frequently-updated https://lineage.microg.org/ https://lineage.microg.org/ and properly install apps from Play Store without the Google Service Framework (that essentially give root access to Google on your smartphone). (and actually I also wish they could implement the shims developed by https://grapheneos.org/usage#sandboxed-google-play https://grapheneos.org/usage#sandboxed-google-play in order to sandbox the google play services, so that the user could choose between approach 1 (microg with signature spoofing) and approach 2 (sandboxed GSF) on any smartphone supported by LineageOS (grapheneos only supports Pixel phones due to their ability to relock the bootloader))

guillermin 4y ago
I'm getting bi-weekly updates on LineageOS for MicroG (Xiaomi Poco F3), which I consider more than enough.
- karteum 4y ago
  I have a Oneplus 5T (dumpling) and get much less frequent updates (which puzzles me : I though they would have an automated build system i.e. that all supported devices would have exactly the same updates at the same time...)
  - lazyier 4y ago
    Probably something is broken/fragile in the build for that particular image and the maintainer doesn't have a lot of time to fix it.
  - ysleepy 4y ago
    I have yet to jump to lineage with the 5T, does it run well? I've had so many phones have glitches like random reboots etc. before, I'm hesitant.
    - ssvss 4y ago
      I have been running lineage for more than a year in my OP5, I don't face any issues with it. I don't use microg. I have also rooted it with magisk, so that banking apps will work.
Markoff 4y ago
You can install apps from Play Store through Aurora store without GSF. But I agree with your sentiment.
- tymscar 4y ago
  You can’t install paid apps and your google account can be terminated at any point for using Aurora store. So it’s out of the question for a lot of people
  - colordrops 4y ago
    Other than paid apps you can use an anonymous or burner account for Aurora - no need to put your Google account at risk. You can also migrate off google and not worry about it.
    - Markoff 4y ago
      you don't need to provide any Google account, they provide dummy accounts within app I'm not sure about paid apps unable to install, never tried, I thought that's the whole point of signing in with your own account
m3adow 4y ago
Having the sandboxed Google Play services would be wonderful. I'm currently using LineageOS with microG and Aurora store, but quite a lot of apps do not properly run with microG. Having some kind of fallback alternative in a second user or even better a work profile would be great.
- colordrops 4y ago
  What apps dont run for you? Everything is working fine for me. Are you also using Magisk with the DenyList enabled?
  - mishafb 4y ago
    There's a payment app that detects the installation source is not google play store, and I haven't found a way to use it
  - ajvs 4y ago
    Uber maps are totally inaccurate when you try to zoom in/out with microG (even with Mapbox), unfortunately had to reinstall GApps because of this. Because of this I'd love to see GrapheneOS' sandboxed Google Play Services shims I'd love to see integrated into LineageOS.
    - alex-robbins 4y ago
      Not sure if this is acceptable to you, but Uber has a web app at <https://m.uber.com https://m.uber.com>. I seem to recall that you have to "request" access in order to use it, but it was an automated rubber-stamp thing. The only downside (besides what you'd expect for a web app vs a native app) is that you can't do fancy things like multiple destinations in one trip, or changing your destination on the fly. The Lyft equivalent is <https://ride.lyft.com https://ride.lyft.com>.
      - ajvs 4y ago
        Unfortunately the Uber web app is disabled for my country (UK).
hedora 4y ago
I'm on GrapheneOS for this reason. Sandboxed GSF isn't perfect, but it's good enough for use as a daily driver.
- 0xdeadb00f 4y ago
  Sandboxes GSF literally IS perfect though. I'd be interested to know what doesn't work for you.
- gear54rus 4y ago
  Can you share what's broken on this config?
user_7832 4y ago
I believe the reason Lineage doesn't do this (along with things like SafetyNet spoofing/passing) is to stay on the right side of Google et al. This way there's never a threat of a legal shutdown à la Vanced. If Lineage was backed by big foundations/folks with deep pockets that could change. I have no idea why GrapheneOS takes this risk, but am grateful to them nevertheless for the code.
- dTal 4y ago
  Perhaps I'm not understanding the issue - what legal standing does Google have to object? "Terms of service violation"?
  - user_7832 4y ago
    Partly that, but also a lot of/all of Google Services Framework is proprietary Google code. Other implementations reverse-engineer and modify it afaik. Google probably doesn't go after them because they're small, but LOS is the largest such organization and would be an easy target if Google were to sue. And also, even if it's technically legal, it's such lawsuits/slappsuits can entirely bring down an organization as legal fees can be very expensive. They probably want to err on the side of caution so that Google can't, and wouldn't care to, sue them.
    - colordrops 4y ago
      Is this your speculation or is that their stated reasoning?
      - kbenson 4y ago
        Nobody is talking about stated reasons, the question is what grounds Google would have to object on if they chose to. That means it's speculation.
      - user_7832 4y ago
        Edit: I'm no longer trusting my memory lol. Apparently security was why LOS didn't integrate it (see https://news.ycombinator.com/item?id=31171788 https://news.ycombinator.com/item?id=31171788). I'm still leaving my original reply below. The SafetyNet part is something I read from somewhere else, though unfortunately I don't remember if that was LOS or some random developer on reddit/XDA. You can treat most of this as (oft-repeated) speculation by users.
dimensionc132 4y ago
Install a custom rom such as MokeeOS which is derived from Lineage sans microg
jhoho 4y ago
I'd also love to see them forking CalyxOS' Datura firewall: https://calyxos.org/docs/tech/datura-details/ https://calyxos.org/docs/tech/datura-details/ It's so much handier when you don't have to navigate through each app's settings.

guillermin 4y ago

I'm getting bi-weekly updates on LineageOS for MicroG (Xiaomi Poco F3), which I consider more than enough.

karteum 4y ago
I have a Oneplus 5T (dumpling) and get much less frequent updates (which puzzles me : I though they would have an automated build system i.e. that all supported devices would have exactly the same updates at the same time...)
- lazyier 4y ago
  Probably something is broken/fragile in the build for that particular image and the maintainer doesn't have a lot of time to fix it.
- ysleepy 4y ago
  I have yet to jump to lineage with the 5T, does it run well? I've had so many phones have glitches like random reboots etc. before, I'm hesitant.
  - ssvss 4y ago
    I have been running lineage for more than a year in my OP5, I don't face any issues with it. I don't use microg. I have also rooted it with magisk, so that banking apps will work.

Markoff 4y ago

You can install apps from Play Store through Aurora store without GSF. But I agree with your sentiment.

tymscar 4y ago
You can’t install paid apps and your google account can be terminated at any point for using Aurora store. So it’s out of the question for a lot of people
- colordrops 4y ago
  Other than paid apps you can use an anonymous or burner account for Aurora - no need to put your Google account at risk. You can also migrate off google and not worry about it.
  - Markoff 4y ago
    you don't need to provide any Google account, they provide dummy accounts within app I'm not sure about paid apps unable to install, never tried, I thought that's the whole point of signing in with your own account

m3adow 4y ago

Having the sandboxed Google Play services would be wonderful. I'm currently using LineageOS with microG and Aurora store, but quite a lot of apps do not properly run with microG. Having some kind of fallback alternative in a second user or even better a work profile would be great.

colordrops 4y ago
What apps dont run for you? Everything is working fine for me. Are you also using Magisk with the DenyList enabled?
- mishafb 4y ago
  There's a payment app that detects the installation source is not google play store, and I haven't found a way to use it
- ajvs 4y ago
  Uber maps are totally inaccurate when you try to zoom in/out with microG (even with Mapbox), unfortunately had to reinstall GApps because of this. Because of this I'd love to see GrapheneOS' sandboxed Google Play Services shims I'd love to see integrated into LineageOS.
  - alex-robbins 4y ago
    Not sure if this is acceptable to you, but Uber has a web app at <https://m.uber.com https://m.uber.com>. I seem to recall that you have to "request" access in order to use it, but it was an automated rubber-stamp thing. The only downside (besides what you'd expect for a web app vs a native app) is that you can't do fancy things like multiple destinations in one trip, or changing your destination on the fly. The Lyft equivalent is <https://ride.lyft.com https://ride.lyft.com>.
    - ajvs 4y ago
      Unfortunately the Uber web app is disabled for my country (UK).

hedora 4y ago

I'm on GrapheneOS for this reason. Sandboxed GSF isn't perfect, but it's good enough for use as a daily driver.

0xdeadb00f 4y ago
Sandboxes GSF literally IS perfect though. I'd be interested to know what doesn't work for you.
gear54rus 4y ago
Can you share what's broken on this config?

user_7832 4y ago

I believe the reason Lineage doesn't do this (along with things like SafetyNet spoofing/passing) is to stay on the right side of Google et al. This way there's never a threat of a legal shutdown à la Vanced. If Lineage was backed by big foundations/folks with deep pockets that could change. I have no idea why GrapheneOS takes this risk, but am grateful to them nevertheless for the code.

dTal 4y ago
Perhaps I'm not understanding the issue - what legal standing does Google have to object? "Terms of service violation"?
- user_7832 4y ago
  Partly that, but also a lot of/all of Google Services Framework is proprietary Google code. Other implementations reverse-engineer and modify it afaik. Google probably doesn't go after them because they're small, but LOS is the largest such organization and would be an easy target if Google were to sue. And also, even if it's technically legal, it's such lawsuits/slappsuits can entirely bring down an organization as legal fees can be very expensive. They probably want to err on the side of caution so that Google can't, and wouldn't care to, sue them.
  - colordrops 4y ago
    Is this your speculation or is that their stated reasoning?
    - kbenson 4y ago
      Nobody is talking about stated reasons, the question is what grounds Google would have to object on if they chose to. That means it's speculation.
    - user_7832 4y ago
      Edit: I'm no longer trusting my memory lol. Apparently security was why LOS didn't integrate it (see https://news.ycombinator.com/item?id=31171788 https://news.ycombinator.com/item?id=31171788). I'm still leaving my original reply below. The SafetyNet part is something I read from somewhere else, though unfortunately I don't remember if that was LOS or some random developer on reddit/XDA. You can treat most of this as (oft-repeated) speculation by users.

dimensionc132 4y ago

Install a custom rom such as MokeeOS which is derived from Lineage sans microg

jhoho 4y ago

I'd also love to see them forking CalyxOS' Datura firewall: https://calyxos.org/docs/tech/datura-details/ https://calyxos.org/docs/tech/datura-details/ It's so much handier when you don't have to navigate through each app's settings.