Repository navigation
No. RestlessOS is an unofficial GSI based on GrapheneOS. It replaces only the system partition, the kernel, firmware and vendor drivers stay the ones from your device. Some GrapheneOS features are removed, disabled by default or can't be provided by a GSI at all. See the README for the full list.
No. GrapheneOS's security model depends on hardware, firmware, bootloader and kernel it controls. On a GSI these come from your vendor and are outside the project's control, and hardware-backed attestation doesn't work. RestlessOS is hardened, but it makes no security guarantees.
We highly recommend keep updated your firmware and vendor with its latest release available and by extension keep updated your RestlessOS system as soon a new build is available.
There is no device list. Any device that meets the Prerequisites can try it. Test it with DSU first, or check the Telegram group for reports from the same device.
RestlessOS is a TrebleDroid GSI for devices that GrapheneOS doesn't support. It is not a replacement for GrapheneOS where GrapheneOS is available.
- Your device officially supports GrapheneOS. Install upstream GrapheneOS instead (https://grapheneos.org).
- Not having the full GrapheneOS security model is unacceptable for you. A GSI can't provide it and you must get a GrapheneOS's supported device.
- Your device isn't supported by GrapheneOS and you want a hardened, privacy-respecting system image anyway, knowing its limits.
- You want to experiment with it.
- You want to contribute to the project for make it better and give support to more devices!
RestlessOS's system image is more hardened than LineageOS or other AOSP-based ROMs, because it inherits GrapheneOS's userspace. So even if that its positive, its not a guarantee: the vendor kernel and firmware stay outside our control and unaudited.
Keep updated your device's vendor and firmware at its latest release possible.
The ext4 image works everywhere. The EROFS image is smaller but needs kernel support. See Downloads.
The image ships no browser. Open the Apps store, it lists Vanadium on its front page and keeps it updated. Any other browser works too.
Iron Fox is available through Acresscent which can also be downloaded from App Store.
Sandboxed Google Play can be installed from the Apps store, as on GrapheneOS. microG can be used instead, see below.
Yes. Add the microG F-Droid repository to F-Droid and install microG Services and microG Companion from it. Signature spoofing for microG is built in and the installer accepts microG-signed packages, so no module or patch is needed.
Push notifications work with microG on build 17.0.0-202611021750 or newer.
microG and sandboxed Google Play use the same package names, install only one of them. If notifications stop working after switching or restoring data, see Troubleshooting.
Hardware-backed attestation doesn't work on a GSI, so apps that require a strong integrity verdict can refuse to run. Workarounds (Play Integrity Fix, keyboxes) are not supported.
Root isn't covered by support. Secure app spawning breaks Magisk and KernelSU, so it's disabled by default.
Hardening features that break some vendor drivers are disabled by default. Enable them in Settings > Treble Settings > Hardening or Settings > Exploit protection.
No. Updates are flashed manually without wiping data, see Updating. zsync2 can be used to download only the changed blocks.
Use the release build. Debug builds are only for collecting logs when asked to, see Reporting issues and logs.
No. DSU is only for checking if your device boots RestlessOS. Bug reports and logs are accepted only from a real installation.
There are no ETAs. Builds are released when they are ready.
In the Support & Discussions channel of the Telegram group. Don't open GitHub issues for questions.
Open an issue on GitHub with logs, see Reporting issues and logs. Also check Troubleshooting for known issues.