3 ms·

So why does my android phone not allow sudo or chroot, and when I root it my bank application stops working, citing the EU payment service regulations? Virtuali

So why does my android phone not allow sudo or chroot, and when I root it my bank application stops working, citing the EU payment service regulations? Virtualization is not enabled too, even though the cpu supports it.

walterbell 2y ago
Recent Pixel devices support Android pKVM nested virtualization, with optional 2-way isolation, https://android-developers.googleblog.com/2023/12/virtual-machines-as-core-android-primitive.html https://android-developers.googleblog.com/2023/12/virtual-ma... Even if Android is compromised all the way up to (and including) the host kernel, the isolated VM remains uncompromised This allows virtualized Linux VMs on supported Pixels, running alongside Android, https://www.xda-developers.com/nestbox-hands-on/ https://www.xda-developers.com/nestbox-hands-on/ & https://www.esper.io/blog/android-dessert-bites-13-virtualization-on-pixel-6-379185 https://www.esper.io/blog/android-dessert-bites-13-virtualiz...
- diffeomorphism 2y ago
  When will that come to non-Pixel devices?
  - walterbell 2y ago
    Possibly when Qualcomm brings Oryon (with silicon support for nested virtualization) from laptops to smartphones in late 2024, https://www.androidauthority.com/qualcomm-snapdragon-oryon-cpu-2024-3378729/ https://www.androidauthority.com/qualcomm-snapdragon-oryon-c... & https://www.qualcomm.com/developer/blog/2024/01/gunyah-hypervisor-software-supporting-protected-vms-android-virtualization-framework https://www.qualcomm.com/developer/blog/2024/01/gunyah-hyper... > we have replaced pKVM with Gunyah Hypervisor Software – our own, more versatile hypervisor – on our Qualcomm Technologies’ chipsets. With Gunyah, we can use one hypervisor across use cases as varied as automotive, mobile broadband, IoT and wearables. We’ve upstreamed Gunyah for general use by the Android community.
Xeamek 2y ago
Chroot works fine though
- throwaway3306a 2y ago
  No, it doesn't. It requires root, and that breaks all the apps.

walterbell 2y ago

Recent Pixel devices support Android pKVM nested virtualization, with optional 2-way isolation, https://android-developers.googleblog.com/2023/12/virtual-machines-as-core-android-primitive.html https://android-developers.googleblog.com/2023/12/virtual-ma... Even if Android is compromised all the way up to (and including) the host kernel, the isolated VM remains uncompromised This allows virtualized Linux VMs on supported Pixels, running alongside Android, https://www.xda-developers.com/nestbox-hands-on/ https://www.xda-developers.com/nestbox-hands-on/ & https://www.esper.io/blog/android-dessert-bites-13-virtualization-on-pixel-6-379185 https://www.esper.io/blog/android-dessert-bites-13-virtualiz...

diffeomorphism 2y ago
When will that come to non-Pixel devices?
- walterbell 2y ago
  Possibly when Qualcomm brings Oryon (with silicon support for nested virtualization) from laptops to smartphones in late 2024, https://www.androidauthority.com/qualcomm-snapdragon-oryon-cpu-2024-3378729/ https://www.androidauthority.com/qualcomm-snapdragon-oryon-c... & https://www.qualcomm.com/developer/blog/2024/01/gunyah-hypervisor-software-supporting-protected-vms-android-virtualization-framework https://www.qualcomm.com/developer/blog/2024/01/gunyah-hyper... > we have replaced pKVM with Gunyah Hypervisor Software – our own, more versatile hypervisor – on our Qualcomm Technologies’ chipsets. With Gunyah, we can use one hypervisor across use cases as varied as automotive, mobile broadband, IoT and wearables. We’ve upstreamed Gunyah for general use by the Android community.

Xeamek 2y ago

Chroot works fine though

throwaway3306a 2y ago
No, it doesn't. It requires root, and that breaks all the apps.