So which on of these are better for my pixel 7a if we consider these:

i dont care about leaving the bootloader unlocked

i want customization to my os as long as this is possible

i hate google so i dont want any google things or google spyware (i dont use any google service)

i need push notifications for some apps (maybe microg or sandboxed google play services)

i dont use esim or google pay so idc about these

i need A LOT of privacy and security to my data to the point that i want to block trackers for any app i use

i wanna use google camera as it is in stock rom but i dont want google spy shit. if i use a firewall would be ok?

Note: i can sacrifice locking the bootloader and customization for my privacy/security/not having spyware on my phone

Thanks in advance!

Edit: i just saw that there is iodé (which sees app trackers and i found it interesting) plus CopperheadOS Edit 2: THANK YOU ALL A LOT, your answers are the best, imma go with grapheneos and donate them also cause their job is the best

also i found this matrix for oses that helped me: https://eylenburg.github.io/android_comparison.htm !!!

    • ReakDuck
      link
      fedilink
      arrow-up
      4
      ·
      13 hours ago

      I still got a Pixel 5 with Graphene OS. Its 3 Years Old. Is it bad because its not a new phone?

      • jrgd@lemm.ee
        link
        fedilink
        English
        arrow-up
        7
        ·
        12 hours ago

        GrapheneOS only publishes updates for devices with active security updates. Your device is EOL and therefore won’t receive any further mainline updates. It still will receive extended support from the Android 14 legacy branch with whatever security patches arrive in upstream AOSP, but unlikely to see device-specific patches nor firmware patches. Your device isn’t getting the same care and attention that active devices are receiving nor will it receive any future versions of Android through GrapheneOS.

      • jet@hackertalks.com
        link
        fedilink
        English
        arrow-up
        2
        ·
        12 hours ago

        It’s not bad, but it has less of the newer security features.

        Also the longer a device exists, the more known exploits will be found.

        Like a good lock, phones will never keep someone out forever, they will just delay (for years)

  • Autonomous User@lemmy.world
    link
    fedilink
    English
    arrow-up
    41
    ·
    edit-2
    19 hours ago

    CopperheadOS is anti-libre software, extremely dangerous. We do not control it. It fails to include a libre software licence text file, like GPL. 🚩

  • pH3ra
    link
    fedilink
    arrow-up
    12
    ·
    edit-2
    16 hours ago

    This is my second iteration of CalyxOS, I used to rock a Pixel 4a and now I’m on a Fairphone 5, and I love it. It’s rock solid and never had a compatibility issue, although I heard that some banking apps might misbehave with microg, but not in my experience.
    Graphene has pretty much the same approach but instead of supporting microg, has decided to take the route of sandboxing Google Services, which is a better route for compatibility at the expense of letting some of your data leak through once in a while.
    /e/OS is a wonderful project on paper, but in my experience it was the one with more issues and bugs: they try to support as many devices and services as possible, providing a full environment that’s easy to setup for any user, but having to deal with so may things makes them a little hit or miss sometimes. Nonetheless I still believe they’re a great project that brings privacy to the less techy people with a (mostly) working ecosystem.
    LineageOS isn’t focused on privacy but in extending the life cycle of devices after they’ve been discontinued, so if your concern is to be private I’d go with something else.

    Don’t underestimate the bootloader locking feature: once your whole life is connected to one device, you don’t want a guy with a USB cable be able to access it in case of loss/theft. DON’T ASK ME HOW I KNOW IT.

    • math dealer@lemmy.worldOP
      link
      fedilink
      arrow-up
      2
      ·
      16 hours ago

      basically, i underestimate it cause in my country the thieves or anyone don’t even know what is the bootloader lol

      they are so uneducated cause our educational system is very old

  • bloopenguin@lemmy.world
    link
    fedilink
    arrow-up
    20
    ·
    edit-2
    19 hours ago

    I’ve personally tried Lineage, CalyxOS and Graphene. I’m currently on Graphene because it has the most app compatability and at least has higher security claims than Calyx which is more FOSS/privacy focused with microg vs graphenes sandboxed Google play.

    What really got me to switch was once banking apps started failing to work due to microg compatibility. That may or may not have been resolved by now.

    If Privacy and avoiding sending any data to Google is your priority I would do Calyx since you can get push notifications through microg without signing into Google and you can get apps anonymously through the aurora store.

    However if you want a better user experience I would suggest GrapheneOS with Sanboxed Google Play. It’s very solid and I haven’t had any issues getting any apps to work thus far.

    • scrooge101
      link
      fedilink
      arrow-up
      4
      ·
      17 hours ago

      I use 4 different European banking apps without issues on CalyxOS.

    • Bappity@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      edit-2
      19 hours ago

      do you have an alternative to Google wallet/other contactless apps not working on grapheneos for some dumb safetynet reason?

      • andrew0@lemmy.dbzer0.com
        link
        fedilink
        arrow-up
        5
        arrow-down
        1
        ·
        15 hours ago

        I haven’t tried it myself, but you could get a Garmin watch and add your cards there. I believe you don’t need the phone connected afterwards to make payments.

  • fireshell
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    2
    ·
    13 hours ago

    Ubuntu – few applications, unstable: over time, some problems with the volume were, cured only reboot; there is no normal application Telegram (web client that the battery eats).

    CalyxOS is subjectively more convenient, F-Droid and RuStore download by machine, F-Droid installs an update machine, RuStore downloads and asks for /e/OS RuStore to download forcibly. Also on both MicroG systems, but on /e/OS, SBPay bent and didn’t work, on CalyxOS - no problem. Similar to applications, for example, for renting scooters: on /e/OS some problems, on CalyxOS - no problems. There are fewer problems with CalyxOS.

    With Sber, Rosselkhozbank and Unicredit, there are no problems there or there. Russian mail application does not work on any platform.

    The only plus/e/OS is what is in GooglePlay, but not in RuStore, it is easier to put: AuroraStore on CalyxOS makes you go out and log in all the time to update the installed applications; on /e/OS, what is installed in your home store, including with Google PlayStore applications is updated without problems by automaton.

  • j4k3@lemmy.world
    link
    fedilink
    English
    arrow-up
    16
    ·
    19 hours ago

    I use Graphene. I like the Auditor app and the ability to verify that the ROM is unaltered because you can never trust an orphan kernel like all mobile devices. If I ever give up possession of my device, I can verify if it was altered. I also have a way to wipe the device on locked login with no indication that the ROM is being wiped as provided by Graphene.

  • proceduralnightshade
    link
    fedilink
    arrow-up
    5
    ·
    14 hours ago

    There’s this article in a German IT sec blog which compares the more well-known privacy focused ROMs. If you have any way to translate it, you should check it out. It is a really nice addition to the Eylenburg comparison.

    i want customization to my os as long as this is possible

    I was rocking Ressurection Remix and Xposed on my old Note 4 and customized the hell out of it. I’m on Graphene now and I don’t miss it a bit. Maybe a little.

    Graphene can be installed on your phone via a web browser on a PC on laptop. You should install it and try it out, it’s very easy.

  • Fusty
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    5
    ·
    19 hours ago

    Only consider CalyxOS and GrapheneOS. Ideologues will push you exclusively towards GrapheneOS but it’s not th be-all solution for all people that they think it is. My current and previous phone are GrapheneOS. It’s fine. It does what I want. I don’t find it amazing only because it’s a phone, not a new discovery. I use GrapheneOS with F-Droid with all anti-features disabled in F-Droid settings and I have all the apps I need.

    Lineage will likely wirk with random phones, that dosn’t mean it’s quality. I say, if a phone OS works on LG, Samaung, Nokia, and a Chinese company phone, I don’t trust the stability of the OS.

    I see the name e/OS around, I don’t hear it ever mentioned in public discussions, I think it’s for Fairphone or one of those gimmick name phones.

    I’ve never heard of DivestOS before you mentioning it.

    • Foxitixation@lemmy.zip
      link
      fedilink
      English
      arrow-up
      3
      ·
      13 hours ago

      Why don’t you trust the stability of the OS if it works with LG, Samsung, Nokia, and a Chinese company phone?

      • kchr@lemmy.sdf.org
        link
        fedilink
        arrow-up
        3
        ·
        10 hours ago

        GP:s comment made me curious as well. Usually, if multiple hardware vendors are supported there are separate branches with different maintainers. It doesn’t necessarily mean that the main codebase is bloated as a result.

    • Undertaker@feddit.org
      link
      fedilink
      arrow-up
      6
      arrow-down
      2
      ·
      edit-2
      16 hours ago

      There is no reason for considering Calyx at all. Graphene and Divest are better in terms of security and privacy.

      If one want’s easy and convenient privacy, /e/ might be a valide option. No need for Calyx, Lineage or Iode

    • degen@midwest.social
      link
      fedilink
      English
      arrow-up
      4
      ·
      18 hours ago

      DivestOS has my attention as a graphene user. Not to switch, unless I ever get fed up with the pixel.

      Divested is behind the Mull and Mulch browsers, for what it’s worth. I never looked deeper than using Mull, but apparently Divested is one person.

      • kchr@lemmy.sdf.org
        link
        fedilink
        arrow-up
        4
        ·
        10 hours ago

        DivestOS sounds interesting but I am wary of any “mission-critical” software project (such as the firmware for my primary phone) that relies on a single person, for multiple reasons. Burnout and potential for social engineering by malicious actors being two of them.