CalyxOS

Last updated
CalyxOS
Developer The Calyx Institute
OS family Unix-like (Android)
Source model Open source
Update method Over-the-air (OTA), ROM flashing
Package manager APK-based
Platforms arm, arm64
Official website calyxos.org

CalyxOS is an operating system for smartphones based on Android with mostly free and open-source software. It is produced by the Calyx Institute as part of its mission to "defend online privacy, security and accessibility." [1]

Contents

CalyxOS preserves the Android security model, using Android's Verified Boot system of cryptographic signing of the operating system, and running with a locked bootloader, [2] [3] partly thanks to an installer that guides the user through the process of unlocking and then re-locking the bootloader. [4]

History

The Calyx Institute annual reports [5] state CalyxOS was publicly launched during their 2018–2019 fiscal year. Inspiration included Tails and Qubes OS, and goals were said to be "completely open source", removing proprietary Google tracking, and including apps Tor, Signal and CalyxVPN for increased privacy. [6]

CalyxOS supports Google Pixel smartphones Pixel 3 and newer. [7] CalyxOS supports Fairphone 4. [8] [9] In March 2024, CalyxOS Fairphone 5 is officially supported. [10]

In April 2022, CalyxOS announced support for OnePlus 8T, 9, and 9 Pro. [8] However, in May 2022, CalyxOS announced OnePlus builds were pulled because of a bootloader "relock issue". [11] As of July 2022, according to CalyxOS the OnePlus relock issue had not been resolved. [12]

In May 2024, CalyxOS supports Pixel all types 3 - 8, Fold and Tablet, Fairphone 4 - 5 , Moto G32 - G52 and Shiftphone SHIFT6mq. [13]

Software

Software

name

Feature(s)Notes
Aurora StoreAlternative to the standard Google Play StoreAurora Store uses the same standard catalog of apps and installs apps directly from the Google servers to phone. [14] CalyxOS gives Aurora Store special privileges so that app updates can be automatically installed.
Chromium FOSS web browserBromite fork, succeeded DuckDuckGo mobile browser as the default web browser in June 2022. [15]
F-Droid Repository of FOSS applications for the Android platformCalyxOS gives F-Droid special privileges to streamline app updates, installs, and uninstalls. [16]
MicroG FOSS implementation of proprietary Google Play Services Some apps dependent on Google Play Services may not work with MicroG, use of MicroG is optional. [17]
Organic Maps Navigation app with privacyPrivacy-focused navigation app for driving, hiking, and cycling. Search for locations and navigate without a cell phone signal. [18]
SeedvaultEncrypted backup and restore application for AndroidThe Calyx Institute sponsored development of SeedVault [19] and an annual report states they "debuted SeedVault" during their 2019-2020 fiscal year. [20]

SeedVault is also used by LineageOS. [21] [22]

Signal Encrypted calling/messaging appFree, privacy-focused messaging and voice talk app, preinstalled as messaging app in CalyxOS. [23]

CalyxOS ships with MicroG as an open-source alternative to the Google Mobile Services, including Mozilla Location Services as an optional replacement to the location services provided by Google, but gives the user the option to disable microG and its location services. [24]

Reception

In October 2020, Moritz Tremmel reviewed CalyxOS. [25] A month later, Tremmel explained why he preferred CalyxOS over LineageOS. [26] A year later in September 2021, Tremmel further explained how CalyxOS was different from other ROMs because it did not require as much "fiddling". [27] Rahul Nambiampurath, writing for MakeUseOf in March 2021, termed CalyxOS, "[one of the] best [Android] ROMs for privacy ... offers the perfect middle ground between convenience and privacy". [28] In August 2021, Android Authority wrote CalyxOS "puts privacy and security into the hands of everyday users." [29]

In 2022, the book c't Sicher ins Netz: How to block out monitors and attackers, said "CalyxOS is one of the youngest custom ROMs, it will only celebrate its second birthday in summer 2022. With a built-in Datura firewall, VPN and Cloudflare DNS, Calyx promises more security than some other mobile systems." [30]

In 2023, CalyxOS was the one alternative phone operating system recommended by Carey Parker in the book "Firewalls Don't Stop Dragons". [31]

In a review in February 2023, the Kuketz Security blog said CalyxOS "offers a coherent overall package that should give users who want to (strongly) reduce their dependency on Google a good start" and said the integrated Datura Firewall works well. However, it criticized some previous delayed security updates and said the website does not "quite match what the present analysis revealed" regarding the information given to Google. [32] [ self-published source ]

See also

Related Research Articles

Rooting is the process by which users of Android devices can attain privileged control over various subsystems of the device, usually smartphones and tablets. Because Android is based on a modified version of the Linux kernel, rooting an Android device gives similar access to administrative (superuser) permissions as on Linux or any other Unix-like operating system such as FreeBSD or macOS.

<span class="mw-page-title-main">Fastboot</span> Recovery mode included in Android mobile operating system

Fastboot is a communication protocol used primarily with Android devices. It is implemented in a command-line interface tool of the same name and as a mode of the bootloader of Android devices. The tool is included with the Android SDK package and used primarily to modify the flash filesystem via a USB connection from a host computer. It requires that the device be started in Fastboot mode. If the mode is enabled, it will accept a specific set of commands, sent through USB bulk transfers. Fastboot on some devices allows unlocking the bootloader, and subsequently, enables installing custom recovery image and custom ROM on the device. Fastboot does not require USB debugging to be enabled on the device. To use fastboot, a specific combination of keys must be held during boot.

<span class="mw-page-title-main">Sailfish OS</span> Mobile operating system

Sailfish OS is a Linux-based operating system based on free software, and open source projects such as Mer as well as including a closed source UI. The project is being developed by the Finnish company Jolla.

Fairphone is a Dutch electronics manufacturer that designs and produces smartphones and headphones. It aims to minimise the ethical and environmental impact of its devices by using recycled, fairtrade and conflict-free materials, maintaining fair labor conditions throughout its workforce and suppliers, and enabling users to easily repair their devices through modular design and by providing replacement parts.

The Calyx Institute is a New York-based 501(c)(3) research and education nonprofit organization formed to make privacy and digital security more accessible. It was founded in 2010 by Nicholas Merrill, Micah Anderson, and Kobi Snitz.

Custom firmware, also known as aftermarket firmware, is an unofficial new or modified version of firmware created by third parties on devices such as video game consoles, mobile phones, and various embedded device types to provide new features or to unlock hidden functionality. In the video game console community, the term is often written as custom firmware or simply CFW, referring to an altered version of the original system software inside a video game console such as the PlayStation Portable, PlayStation 3, PlayStation Vita/PlayStation TV, PlayStation 4, Nintendo 3DS and Nintendo Switch. Installing custom firmware on some devices requires bootloader unlocking.

<span class="mw-page-title-main">CopperheadOS</span> Mobile operating system focused on privacy and security

CopperheadOS is a mobile operating system for smartphones, based on the Android mobile platform. It adds privacy and security features to the official releases of the Android Open Source Project by Google. CopperheadOS is developed by Copperhead, a Canadian information security company. It is licensed under Creative Commons BY-NC-SA 4.0, although its source code is not available for public download.

<span class="mw-page-title-main">LineageOS</span> Free and open-source operating system based on Android

LineageOS is an Android-based operating system for smartphones, tablet computers, and set-top boxes, with mostly free and open-source software. It is the successor to CyanogenMod, from which it was forked in December 2016, when Cyanogen Inc. announced it was discontinuing development and shut down the infrastructure behind the project. Since Cyanogen Inc. retained the rights to the Cyanogen name, the project rebranded its fork as LineageOS.

<span class="mw-page-title-main">Shiftphone</span> Modular easy-to-repair fair-trade smartphone series.

Shiftphone is a modular, easy-to-repair smartphone brand created by the company SHIFT in Germany. The company emphasizes fair trade and ecology, similar to Fairphone. Instead of tantalum capacitors made from coltan, ceramic capacitors are used for their manufacturing. So far, eleven model series have been released. The most recent release was the SHIFT6mq in June 2020. The upcoming device will be the SHIFTphone 8, scheduled for release in 2024.

/e/ is a fork of LineageOS, an Android-based mobile operating system, and associated online services. /e/ is presented as privacy software that does not contain proprietary Google apps or services, and challenges the public to "find any parts of the system or default applications that are still leaking data to Google."

<span class="mw-page-title-main">GrapheneOS</span> Android-based mobile operating system

GrapheneOS is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel devices, including smartphones, tablets and foldables that is recommended by Edward Snowden.

<span class="mw-page-title-main">MicroG</span> Free and open-source alternative to Google Android libraries

MicroG is a free and open-source implementation of proprietary Google libraries that serves as a replacement for Google Play Services on the Android operating system. It is maintained by German developer Marvin Wißfeld. In a presentation, Wißfeld described microG as "the framework to create a fully-compatible Android distribution without any proprietary Google components".

iodéOS Android-based operating system

iodéOS is an Android-based mobile operating system developed by French company iodé. The operating system is a fork of LineageOS and does not include Google Play Services, instead using MicroG as a free and open-source replacement.

<span class="mw-page-title-main">Bootloader unlocking</span> Process of disabling secure device booting

Bootloader unlocking is the process of disabling the bootloader security that makes secure boot possible. It can make advanced customizations possible, such as installing a custom firmware. On smartphones this can be a custom Android distribution or another mobile operating system. Some bootloaders are not locked at all, others can be unlocked using a standard command, others need assistance from the manufacturer. Some do not include an unlocking method and can only be unlocked through a software exploit.

<span class="mw-page-title-main">Fairphone 4</span> Fourth phone model of the company Fairphone

Fairphone 4 is a smartphone designed and marketed by Fairphone. It succeeds the Fairphone 3+ and was succeeded by the Fairphone 5. It was announced on 30 September 2021, and was available for order on 25 October 2021.

<span class="mw-page-title-main">Pixel 6a</span> 2022 Android smartphone developed by Google

The Google Pixel 6a is an Android smartphone designed, developed, and marketed by Google as part of the Google Pixel product line. It serves as a mid-range variant of the Pixel 6 and Pixel 6 Pro. The device was announced on May 11, 2022 as part of Google I/O's keynote speech.

<span class="mw-page-title-main">DivestOS</span> Android-based mobile operating system

DivestOS is an operating system based on the Android mobile platform. It is a soft fork of LineageOS that aims to increase security and privacy with support for end-of-life devices. As much as possible, it removes unnecessary proprietary Android components and includes only free-software.

<span class="mw-page-title-main">PixelExperience</span> Mobile operating system based on Android

PixelExperience is an open-sourced custom ROM, or Android distribution, based on the stock Android AOSP that aimed to provide a bloat-free, stock-android, Pixel-like experience to a wide range of Android devices. The project, initiated by a community of developers in 2017, focused on delivering a clean, minimalistic, and visually appealing user interface reminiscent of Google's Pixel devices. Pixel Experience was designed to be as close to stock Android as possible, with a focus on reliability, security, stability, performance, battery life, and useful customizations.

References

  1. "About The Calyx Institute - Calyx Institute". calyxinstitute.org. Retrieved 2021-11-02.
  2. "Security FAQ". calyxos.org. Retrieved 2023-03-03.
  3. "Android Security Bulletins". calyxos.org. Retrieved 2023-03-03.
  4. "CalyxOS: Google-freies Android". Linux-Magazin (in German). Retrieved 2023-04-13. Bei der Installation wird auch der Geräteschlüssel von Google gegen einen von CalyxOS ausgetauscht. Das ermöglicht einen verifizierten Bootvorgang und stellt sicher, dass sich nur von CalyxOS signierte Updates installieren lassen. Um den Schutz zu aktivieren, fragt der Installer am Schluss, ob er den Bootloader wieder sperren soll, was es zu bestätigen gilt. Anschließend ist die CalyxOS-Installation startklar.
  5. "Financials and Annual Reports - Calyx Institute". calyxinstitute.org. Retrieved 2022-07-26.
  6. "Annual Report 2018-2019" (PDF). Archived from the original on 2022-07-26. Retrieved 2022-09-19.{{cite web}}: CS1 maint: bot: original URL status unknown (link)
  7. "CalyxOS". calyxos.org. Retrieved 2022-07-30.
  8. 1 2 "Fairphone 4, OnePlus 8T, OnePlus 9 test builds now available". calyxos.org. Retrieved 2022-07-30.
  9. "Device Support". calyxos.org. Retrieved 11 October 2023.
  10. "Fairphone 5, March update progress". calyxos.org. Retrieved 11 May 2024.
  11. "May 2022 Security update - Fairphone 4, OnePlus 8T, 9, 9 Pro". calyxos.org. Retrieved 2022-07-30.
  12. "OnePlus Android 12 firmware - relocking no longer works". calyxos.org. Retrieved 2022-07-30.
  13. "Install CalyxOS". calyxos.org. Retrieved 2024-05-07.
  14. "Aurora Store". calyxos.org. Retrieved 2022-09-29.
  15. "June 2022 Security update - Pixels". Archived from the original on 2022-10-25.
  16. "F-Droid". calyxos.org. Retrieved 2022-09-29.
  17. "microG". calyxos.org. Retrieved 2022-08-01.
  18. "Organic Maps: Offline Hike, Bike, Trails and Navigation". 13ea2c58.organicmaps.pages.dev. Retrieved 2023-08-24.
  19. "SeedVault - Calyx Institute". calyxinstitute.org. Retrieved 2022-07-23.
  20. "Annual Report 2019-2020" (PDF). Archived from the original on 2022-07-26. Retrieved 2022-09-19.{{cite web}}: CS1 maint: bot: original URL status unknown (link)
  21. Hazarika, Skanda (November 4, 2020). "LineageOS adopts SeedVault as its open source backup solution". XDA Developers.
  22. Hazarika, Skanda (2021-03-31). "LineageOS 18.1 based on Android 11 is here for nearly 60 devices". XDA Developers. Retrieved 2023-04-13.
  23. "Signal". calyxos.org. Retrieved 2022-09-29.
  24. "5 De-Googled Android-based Operating Systems". It's FOSS. 2021-11-13. Retrieved 2023-04-13. Instead of not shipping the Google Mobile Services (GMS) and leaving users to figure stuff out by themselves (flashing gapps etc), CalyxOS ships with microG. However, you can choose to enable/disable it, thus, giving you total control. [...] Uses Mozilla Location Services instead of Google's Location Services
  25. Moritz Tremmel (2020-10-19). "CalyxOS im Test: Ein komfortables Android mit einer Extraportion Privacy". Golem.de (in German). Retrieved 2021-02-02.
  26. Tremmel, Moritz (November 10, 2020). "Bye-bye, Lineage OS!". www.golem.de (in German). Archived from the original on 2020-11-12. Retrieved 2021-11-02.
  27. Tremmel, Moritz. "CalyxOS: Google-freies Android". Linux-Magazin (in German). Retrieved 2021-11-02.
  28. "What's the Best Privacy-Focussed Android ROM?". MUO. 2021-03-29. Retrieved 2021-11-02.
  29. "Gary Explains: Linux turns 30, Tesla's D1 chip, Power⚡️ over Ethernet & more!". Android Authority. Retrieved 2021-11-02.
  30. c't-Redaktion (2022-05-18). c't Sicher ins Netz: So sperren Sie Überwacher und Angreifer aus (in German). Heise Medien GmbH & Co. KG. ISBN   978-3-95788-313-1.
  31. Parker, Carey (2023), Parker, Carey (ed.), "Odds and Ends", Firewalls Don't Stop Dragons: A Step-by-Step Guide to Computer Security and Privacy for Non-Techies, Berkeley, CA: Apress, pp. 541–558, doi:10.1007/978-1-4842-9036-1_13, ISBN   978-1-4842-9036-1 , retrieved 2023-04-13
  32. Kuketz, Mike (February 10, 2023). "CalyxOS: De-Googled geht anders – Custom-ROMs Teil2". Kuketz IT-Security blog. Retrieved February 11, 2023.