CalyxOS explained

CalyxOS
Developer:The Calyx Institute
Family:Unix-like (Android)
Source Model:Open source
Updatemodel:Over-the-air (OTA), ROM flashing
Package Manager:APK-based
Supported Platforms:arm, arm64

CalyxOS is an operating system for smartphones based on Android with mostly free and open-source software. It is produced by the Calyx Institute as part of its mission to "defend online privacy, security and accessibility."[1]

CalyxOS preserves the Android security model, using Android's Verified Boot system of cryptographic signing of the operating system, and running with a locked bootloader,[2] [3] partly thanks to an installer that guides the user through the process of unlocking and then re-locking the bootloader.[4]

History

The Calyx Institute annual reports[5] state CalyxOS was publicly launched during their 2018–2019 fiscal year. Inspiration included Tails and Qubes OS, and goals were said to be "completely open source", removing proprietary Google tracking, and including apps Tor, Signal and CalyxVPN for increased privacy.[6]

CalyxOS supports Google Pixel smartphones Pixel 3 and newer.[7] CalyxOS supports Fairphone 4.[8] [9] In March 2024, CalyxOS Fairphone 5 is officially supported.[10]

In April 2022, CalyxOS announced support for OnePlus 8T, 9, and 9 Pro.[8] However, in May 2022, CalyxOS announced OnePlus builds were pulled because of a bootloader "relock issue".[11] As of July 2022, according to CalyxOS the OnePlus relock issue had not been resolved.[12]

In May 2024, CalyxOS supports Pixel all types 3 - 8, Fold and Tablet, Fairphone 4 - 5, Moto G32 - G52 and Shiftphone SHIFT6mq.[13]

Software

!Softwarename!Feature(s)!Notes
Aurora StoreAlternative to the standard Google Play Store Aurora Store uses the same standard catalog of apps and installs apps directly from the Google servers to phone.[14] CalyxOS gives Aurora Store special privileges so that app updates can be automatically installed.
ChromiumFOSS web browserBromite fork, succeeded DuckDuckGo mobile browser as the default web browser in June 2022.[15]
F-Droid BasicRepository of FOSS applications for the Android platformCalyxOS includes a version of F-Droid called "F-Droid Basic" which allows for streamlined app updates, installs, and uninstalls without elevated privileges.[16]
MicroGFOSS implementation of proprietary Google Play ServicesSome apps dependent on Google Play Services may not work with MicroG, use of MicroG is optional.[17]
Organic MapsNavigation app with privacyA privacy-focused navigation app for driving, hiking, and cycling. The application uses OpenStreetMap for its map data. It can download maps on the device to be used for location information and navigation without an internet connection.[18]
SeedvaultEncrypted backup and restore application for AndroidThe Calyx Institute sponsored development of SeedVault [19] and an annual report states they "debuted SeedVault" during their 2019-2020 fiscal year.[20] SeedVault is also used by LineageOS.[21] [22]
SignalEncrypted calling/messaging appFree, privacy-focused messaging and voice talk app, preinstalled as messaging app in CalyxOS.[23]
CalyxOS ships with MicroG as an open-source alternative to the Google Mobile Services, including Mozilla Location Services as an optional replacement to the location services provided by Google, but gives the user the option to disable microG and its location services.[24]

Reception

In October 2020, Moritz Tremmel reviewed CalyxOS.[25] A month later, Tremmel explained why he preferred CalyxOS over LineageOS.[26] A year later in September 2021, Tremmel further explained how CalyxOS was different from other ROMs because it did not require as much "fiddling".[27] Rahul Nambiampurath, writing for MakeUseOf in March 2021, termed CalyxOS, "[one of the] best [Android] ROMs for privacy ... offers the perfect middle ground between convenience and privacy".[28] In August 2021, Android Authority wrote CalyxOS "puts privacy and security into the hands of everyday users."[29]

In 2022, the book c't Sicher ins Netz: How to block out monitors and attackers, said "CalyxOS is one of the youngest custom ROMs, it will only celebrate its second birthday in summer 2022. With a built-in Datura firewall, VPN and Cloudflare DNS, Calyx promises more security than some other mobile systems."[30]

In 2023, CalyxOS was the one alternative phone operating system recommended by Carey Parker in the book Firewalls Don't Stop Dragons.

In a review in February 2023, the Kuketz Security blog said CalyxOS "offers a coherent overall package that should give users who want to (strongly) reduce their dependency on Google a good start" and said the integrated Datura Firewall works well. However, it criticized some previous delayed security updates and said the website does not "quite match what the present analysis revealed" regarding the information given to Google.[31]

See also

Notes and References

  1. Web site: About The Calyx Institute - Calyx Institute. 2021-11-02. calyxinstitute.org.
  2. Web site: Security FAQ . 2023-03-03 . calyxos.org.
  3. Web site: Android Security Bulletins . 2023-03-03 . calyxos.org.
  4. Web site: CalyxOS: Google-freies Android . 2023-04-13 . Linux-Magazin . de-DE . Bei der Installation wird auch der Geräteschlüssel von Google gegen einen von CalyxOS ausgetauscht. Das ermöglicht einen verifizierten Bootvorgang und stellt sicher, dass sich nur von CalyxOS signierte Updates installieren lassen. Um den Schutz zu aktivieren, fragt der Installer am Schluss, ob er den Bootloader wieder sperren soll, was es zu bestätigen gilt. Anschließend ist die CalyxOS-Installation startklar..
  5. Web site: Financials and Annual Reports - Calyx Institute . 2022-07-26 . calyxinstitute.org.
  6. Web site: Annual Report 2018-2019 . 2022-09-19 . 2022-07-26 . https://web.archive.org/web/20220726135051/https://calyxinstitute.org/rails/active_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--4d66864f7b045d0be684406cf134fc7607100ef3/CalyxInstituteAnnualReport2018-2019FINAL.pdf?content_type=application%2Fpdf&disposition=inline%3B+filename%3D%22CalyxInstituteAnnualReport2018-2019FINAL.pdf%22%3B+filename%2A%3DUTF-8%27%27CalyxInstituteAnnualReport2018-2019FINAL.pdf . bot: unknown .
  7. Web site: CalyxOS . 2022-07-30 . calyxos.org.
  8. Web site: Fairphone 4, OnePlus 8T, OnePlus 9 test builds now available . 2022-07-30 . calyxos.org.
  9. Web site: Device Support . calyxos.org . 11 October 2023.
  10. Web site: Fairphone 5, March update progress . calyxos.org . 11 May 2024.
  11. Web site: May 2022 Security update - Fairphone 4, OnePlus 8T, 9, 9 Pro . 2022-07-30 . calyxos.org.
  12. Web site: OnePlus Android 12 firmware - relocking no longer works . 2022-07-30 . calyxos.org.
  13. Web site: Install CalyxOS. 2024-05-07. calyxos.org.
  14. Web site: Aurora Store . 2022-09-29 . calyxos.org.
  15. Web site: June 2022 Security update - Pixels . live . https://archive.today/20221025201805/https://calyxos.org/news/2022/06/08/june-update-pixels/ . 2022-10-25 . en-US.
  16. Web site: F-Droid . 2022-09-29 . calyxos.org.
  17. Web site: microG . 2022-08-01 . calyxos.org.
  18. Web site: Organic Maps: Offline Hike, Bike, Trails and Navigation . 2023-08-24 . 13ea2c58.organicmaps.pages.dev . en.
  19. Web site: SeedVault - Calyx Institute . 2022-07-23 . calyxinstitute.org.
  20. Web site: Annual Report 2019-2020 . bot: unknown . https://web.archive.org/web/20220726135158/https://calyxinstitute.org/rails/active_storage/disk/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdDRG9JYTJWNVNTSWRRbFYxU21GWWRGRTNURWRJVGpGQk5FdFVZalJVUVVVeEJqb0dSVlE2RUdScGMzQnZjMmwwYVc5dVNTSnRhVzVzYVc1bE95Qm1hV3hsYm1GdFpUMGlRMkZzZVhoZlFXNXVkV0ZzVW1Wd2IzSjBYekl3TWpCZlJrbE9RVXd1Y0dSbUlqc2dabWxzWlc1aGJXVXFQVlZVUmkwNEp5ZERZV3g1ZUY5QmJtNTFZV3hTWlhCdmNuUmZNakF5TUY5R1NVNUJUQzV3WkdZR093WlVPaEZqYjI1MFpXNTBYM1I1Y0dWSkloUmhjSEJzYVdOaGRHbHZiaTl3WkdZR093WlUiLCJleHAiOiIyMDIyLTA3LTI2VDEzOjU2OjU3Ljg4M1oiLCJwdXIiOiJibG9iX2tleSJ9fQ

    --51cc2b1f808a27865be731aad6025fbd1eb86c3d/Calyx_AnnualReport_2020_FINAL.pdf?content_type=application%2Fpdf&disposition=inline%3B+filename%3D%22Calyx_AnnualReport_2020_FINAL.pdf%22%3B+filename%2A%3DUTF-8%27%27Calyx_AnnualReport_2020_FINAL.pdf

    . 2022-07-26 . 2022-09-19.
  21. Web site: LineageOS adopts SeedVault as its open source backup solution. Skanda. Hazarika. November 4, 2020. XDA Developers.
  22. Web site: Hazarika . Skanda . 2021-03-31 . LineageOS 18.1 based on Android 11 is here for nearly 60 devices . 2023-04-13 . XDA Developers . en.
  23. Web site: Signal . 2022-09-29 . calyxos.org.
  24. Web site: 2021-11-13 . 5 De-Googled Android-based Operating Systems . 2023-04-13 . It's FOSS . en . Instead of not shipping the Google Mobile Services (GMS) and leaving users to figure stuff out by themselves (flashing gapps etc), CalyxOS ships with microG. However, you can choose to enable/disable it, thus, giving you total control. [...] Uses Mozilla Location Services instead of Google’s Location Services.
  25. Web site: Moritz Tremmel. 2020-10-19. CalyxOS im Test: Ein komfortables Android mit einer Extraportion Privacy. 2021-02-02. Golem.de. de.
  26. Web site: Tremmel. Moritz. November 10, 2020. Bye-bye, Lineage OS!. live. 2021-11-02. www.golem.de. de. https://web.archive.org/web/20201112014608/https://www.golem.de/sonstiges/zustimmung/auswahl.html?from=https%3A%2F%2Fwww.golem.de%2Fnews%2Fandroid-bye-bye-lineage-os-2011-151899-3.html . 2020-11-12 .
  27. Web site: Tremmel. Moritz. CalyxOS: Google-freies Android. 2021-11-02. Linux-Magazin. de-DE.
  28. Web site: 2021-03-29. What's the Best Privacy-Focussed Android ROM?. 2021-11-02. MUO. en-US.
  29. Web site: Gary Explains: Linux turns 30, Tesla's D1 chip, Power⚡️ over Ethernet & more!. 2021-11-02. Android Authority. en-US.
  30. Book: c't-Redaktion . c't Sicher ins Netz: So sperren Sie Überwacher und Angreifer aus . 2022-05-18 . Heise Medien GmbH & Co. KG . 978-3-95788-313-1 . de.
  31. Web site: Kuketz . Mike . February 10, 2023 . CalyxOS: De-Googled geht anders – Custom-ROMs Teil2 . February 11, 2023 . Kuketz IT-Security blog.