We’re actively testing virtualization support and plan to have microdroid working shortly after Android 15 in a standard GrapheneOS build followed by adding an app for running virtual machines. We’d like to get that app at least started a couple months after Android 15. We don’t plan to expose anything more to third party apps, it shouldn’t be necessary.
I imagine you could get a super locked down QubesOS like environment, but I doubt it works out of the gate. Virtualization is stronger than sandboxing.
Thanks for info. My only concern is that my p6a GOS sometimes has a brain fart and is sluggish/doesnt bring up opened apps to close all, so i can only imagine forced feature = more sluggish behaviour.
See what happens. Not that i will go to stock.
Wish GOS would move to a faster phone like a samsung or something. Snapdragon cpu etc.
There are three main problems with linux VMs on PCs right now (and VMs/virtualization of hardware are essential for any serious level of security):
Lack of unbroken chain to root of trust (hardware)
Lack of secure hosts (Virtualization of i/o and guest vms from each other and internally)
Lack of secure guest VMs to actually run
Qubes solves only the second problem.
GOS Virtualization will solve first and second problems. 3rd problem can be fixed slowly since iffl you use disposable, unqiue VMs for everything, it’s not a big issue. GOS has stated somewhere on their website that they wanted to get into a linux hardening project if they had the resources, maybe that will solve the 3rd. Or maybe secureblue and fedora will.
Big boost for people who are looking for great security, instead of the reasonable one promised by Qubes. Plus you only need to secure one device now, instead of protecting laptop, phone, and PC from attacks like evil maid. I’d probably only use GOS with VMs and no longer buy laptops, since phone hardware will only get stronger, and most of my work wouldn’t be resource intensive.
Plus I remember reading that Microdroid project by Google is intended so that they can run every application in its own VM. Since microdroid is a minimal version of android, these application VMs would not be as resource intensive. This would be such a great feature, since now you dont even need to trust the various permission interactions and IP tables routing for apps, and can instead provide them with a minimal environment of their own.
Hasn’t exploded yet while I was using screen mirroring, so no I guess. Have you actually used the docking experience first hand or are you guessing it will explode based on third hand reviews and assumptions? I’d say try it before you bash it. Newer docks usually have their own battery and act as powerbanks.
For anyone not doing computationally heavy tasks, or who has their workflow mainly on cloud, it’s very easy to get by with even a good tablet mirrored on a larger screen, without even considering the upcoming desktop mode in android.
Phones can handle being docked, and can also cast their screens. Neither has been a problem so far in my devices, as long as it doesn’t run 24/7. As pixels become more repairable, I’d say battery health can always be corrected, as with any battery powered device. I’d be more wary of pagers and specific samsung phones.
Of course, unless people are running devices with swollen batteries and pay no attention to maintenance. Then I’d recommend people stay away from ALL battery powered electronics. Also there are always people who don’t care about security and privacy. Ig they can continue running debian on 10+ years old thinkpad with outdated firmware, this feature wouldn’t help the ideologically stunted fossbros.
Sorry for the long writeup, hope this clarifies! I am very excited for this.
While I hope that the article is right, it’s still a bit unclear if it’s actually true. It boils down to:
The devices GrapheneOS supports are thoroughly modern and will manage their own battery health automatically, far better than you ever could manually.
On the other hand, for laptops the overwhelming opinions is to limit your battery charge to 80% in the BIOS if you’re mostly leaving your laptop plugged in.