I’m wondering what would be necessary to build GrapheneOS releases yourself, and regularly update your phone from your own servers, with your builds. The server for apps.grapheneos.org should also be replaced. Has anyone done this?

The documentation for GrapheneOS has a section about how to reproduce builds:

https://grapheneos.org/build#reproducible-builds

But it would be more involved than that.

  • BladeFederation@piefed.social
    link
    fedilink
    English
    arrow-up
    0
    ·
    2 days ago

    That sounds wildly unnecessary and resource intensive tbh. You’re already trusting their software, but you don’t trust…what? Their server security? Their signing process? Their honesty about the open source code being what you’re downloading? I’m really struggling to understand your thought process here.

    • communism@lemmy.ml
      link
      fedilink
      arrow-up
      0
      ·
      2 days ago

      Most people who build software from source do it for reasons other than trust. Could be for fun (I imagine the main reason why people do Linux From Scratch), could be for the same reason that compels some people to use Gentoo lol. OP didn’t say what their motivation was.

      edit: nvm, in other comments OP has said they’re concerned about an xz style of backdoor. In any case, I would still be interested to read about someone trying what OP is suggesting.