Virtualization will be coming to GrapheneOS

We’re actively testing virtualization support and plan to have microdroid working shortly after Android 15 in a standard GrapheneOS build followed by adding an app for running virtual machines. We’d like to get that app at least started a couple months after Android 15. We don’t plan to expose anything more to third party apps, it shouldn’t be necessary.

Can’t wait for this to come out.

16 Likes

I don’t know the way android works. Just using it. What does Virtualization by GrapheneOS bring to the table ?

Is this like traditional Virtual Machine but on Android or some kind of privacy feature ?

You will be able to run traditional VMs.

GOS home server incoming.

1 Like

Windows on GOS ?

Nice. Year of the (virtual) GNU/Linux Phone coming soon.

2 Likes

Okay, But generally, I don’t see the need to use VMs on a phone. Any real life scenarios ?

1 Like

I imagine you could get a super locked down QubesOS like environment, but I doubt it works out of the gate. Virtualization is stronger than sandboxing.

1 Like

Thanks for info. My only concern is that my p6a GOS sometimes has a brain fart and is sluggish/doesnt bring up opened apps to close all, so i can only imagine forced feature = more sluggish behaviour. :person_shrugging:
See what happens. Not that i will go to stock.
Wish GOS would move to a faster phone like a samsung or something. Snapdragon cpu etc.

There are three main problems with linux VMs on PCs right now (and VMs/virtualization of hardware are essential for any serious level of security):

  1. Lack of unbroken chain to root of trust (hardware)
  2. Lack of secure hosts (Virtualization of i/o and guest vms from each other and internally)
  3. Lack of secure guest VMs to actually run

Qubes solves only the second problem.

GOS Virtualization will solve first and second problems. 3rd problem can be fixed slowly since iffl you use disposable, unqiue VMs for everything, it’s not a big issue. GOS has stated somewhere on their website that they wanted to get into a linux hardening project if they had the resources, maybe that will solve the 3rd. Or maybe secureblue and fedora will.

Big boost for people who are looking for great security, instead of the reasonable one promised by Qubes. Plus you only need to secure one device now, instead of protecting laptop, phone, and PC from attacks like evil maid. I’d probably only use GOS with VMs and no longer buy laptops, since phone hardware will only get stronger, and most of my work wouldn’t be resource intensive.

Plus I remember reading that Microdroid project by Google is intended so that they can run every application in its own VM. Since microdroid is a minimal version of android, these application VMs would not be as resource intensive. This would be such a great feature, since now you dont even need to trust the various permission interactions and IP tables routing for apps, and can instead provide them with a minimal environment of their own.

So, you mean like Docking your Phone to a monitor if VMs become a thing ?

Wouldn’t your phone explode ?

1 Like

Hasn’t exploded yet while I was using screen mirroring, so no I guess. Have you actually used the docking experience first hand or are you guessing it will explode based on third hand reviews and assumptions? I’d say try it before you bash it. Newer docks usually have their own battery and act as powerbanks.

For anyone not doing computationally heavy tasks, or who has their workflow mainly on cloud, it’s very easy to get by with even a good tablet mirrored on a larger screen, without even considering the upcoming desktop mode in android.

Phones can handle being docked, and can also cast their screens. Neither has been a problem so far in my devices, as long as it doesn’t run 24/7. As pixels become more repairable, I’d say battery health can always be corrected, as with any battery powered device. I’d be more wary of pagers and specific samsung phones.

Of course, unless people are running devices with swollen batteries and pay no attention to maintenance. Then I’d recommend people stay away from ALL battery powered electronics. Also there are always people who don’t care about security and privacy. Ig they can continue running debian on 10+ years old thinkpad with outdated firmware, this feature wouldn’t help the ideologically stunted fossbros.

Sorry for the long writeup, hope this clarifies! I am very excited for this.

The best thing for battery health on Pixel devices is to keep your phone at 100% and plugged in.

While I hope that the article is right, it’s still a bit unclear if it’s actually true. It boils down to:

The devices GrapheneOS supports are thoroughly modern and will manage their own battery health automatically, far better than you ever could manually.

On the other hand, for laptops the overwhelming opinions is to limit your battery charge to 80% in the BIOS if you’re mostly leaving your laptop plugged in.

I edited my post to make it clearer.

Worth noting that right now you can use Termx + AndLinux and get full desktop linux on Graphene. There are a few kinks but it works.

1 Like

I would love to give up my laptop/desktop for GOS on a Pixel tablet, but I would need a few things:

  • Android desktop (how many years has Google been working on it now?)
  • Multi-monitor support
  • MicroSD slot on the tablet

Have you looked into support for USB-C based accessories?

This is WRONG and BAD for the battery.
The article by akc3n unfortunately gets almost everything wrong about batteries:

  • keeping the battery at 100% state-of-charge is bad
  • he has no idea how LiIon/LiPoly cells work on a chemical/physical level
  • he doesn’t understand overcharging in regards to LiIon cells
  • he advertises against slow charging which is actually good for the battery
  • he suggests wireless charging which is extra bad for the battery because of excess heat

Read this instead: BU-808: How to Prolong Lithium-based Batteries - Battery University

10 Likes