GrapheneOS
- Which devices are supported?
- Also uses Verified Boot (including bootloader re-locking)
- Probably the best security hardening option
- Very fast security updates (~1-2 days after release by Google)
- Lots of drama about lead maintainer, who stepped down as tech lead 2024-04
- Google services sandbox not always reliable
- Apps banning GrapheneOS
Install
Web installer
- Docs: Web installer
- Install latest stock Android updates before flashing
- Enabling OEM unlocking:
- Settings > System > Developer options ->
OEM unlocking
-
Install android-udev: sudo pacman -S android-udev