I have been using droid-ify on GrapheneOS for a few years now; because F-Droid ui is terrible, and the privilege extention has been such a pain to configure and get working without issues on my previous lineageOS phone. Happy to see this major overhaul; and i'm glad the FPE is being phased out.
Since F-Droid (i.e., the repositories, not the app) builds all apps, a practical solution would be for the repositories (i.e., their signing keys) to be recognized by El Goog. Whether and how much help / obstacle the "maybe we do evil" company puts up for / against this is a different question.
It seems to me this is a blocker to use if google can restrict sideloading like this. Its not going to end with just get people requiring to register their app with an identity. Wont they be able to put presser on f-droid devs to lock out software they consider a threat to some business model?
If the issue Google has with sideloading is really just the rampant app piracy (and the malware that comes with cracked apps) that might be something F-Droid can accomodate.
Isn't it possible, however complicated, for users to undo the lockdown to install an app? The required 9 steps are noted at https://keepandroidopen.org/ for devices that use Google Play Services.
Irrespective, people should probably be migrating to a GrapheneOS or similar OS asap once the OS ships with a device.
I use F-Droid precisely because I don't want that. When https://news.ycombinator.com/item?id=38505229 happened - and when the same thing happens again in the future, because it will - I explicitly want F-Droid doing some basic due diligence on updates before shipping them to me. Cutting out the middleman is the opposite of what I want.
Counterpoint: I use NewPipe pretty much daily for watching YouTube. One day, YT introduced an API change that broke NewPipe, and so I patiently waited for an update.
A few days passed, and I eventually get a notification from NewPipe prompting for an update. But I can't install it just yet, because of mismatching signatures between the F-Droid and GitHub versions (yes, that's the point, I know...). The F-Droid build took so long to release, that in the meantime, another version of NewPipe came out...
This issue happens to some extent within liunux distros too. I think specifically for youtube maybe it would be beneficial for a single core library that deals with the API and is shared by every single project that cares to interface with youtube. Rather than dozens of projects trying to chase youtube changes and overburdening repository maintainers, there would only be a single library whose updates would be fast tracked. This also requires there to be mo embedding it in anything too, I don't know how feasible this would be on android, but it kinda already happens with yt-dlp in linux distros, but yt-dlp isn't a proper library nor does it deals with all youtube endpoints that a proper youtube frontend would require.
It would perhaps be nice if yt-dlp could eject it's youtube api handling into it's own project that is then augmented to handle anything youtube related and turns into THE library for dealing with youtube.. maybe even call it libyt :)
True. And especially for that use, I can imagine that the slow return around is actually a breaking problem. I think there are relatively few apps that need that kind of quick update, and I'm more concerned with malicious authors than that, but it would depend on precisely what you need out of your apps.
I tried it with 3 random apps for a while, but instantly got into issues. Two stopped updating due to Obtanium falling behind how app releases - for instance, developer changed version numbering scheme but Obtanium didn't expect that, so an outdated version was always presented. It wasn't fixed for quite a while.
I have 23 currently. It's surprising how fast it happened... I don't have any problems, but I don't pay much attention to it and apps seem to update automatically sometimes and after a manual refresh other times.
I tried Obtainium a while back and didn't like it too much, finding apps seemed difficult.
Then I discovered https://apps.obtainium.imranr.dev/ which makes it very easy. I feel like Obtainium should make this more obvious. It would help adoption a lot.
Very cool, the visual redesign was very much needed and I had been using Droid-ify for a while because of this. I'll switch back to the official app, congrats to the contributors!
In addition to F-Droid on the device, I'd love an F-Droid "package manager client" on a computer, that allows installing apps on an Android device via adb:
# update repo lists
fdr update
# upgrade all apps on the connected device
fdr upgrade
# search packages
fdr search vlc # lists org.videolan.vlc
# install on the device
fdr install org.mozilla.firefox
# download the apk
fdr download org.mozilla.firefox
# uninstall
fdr uninstall org.mozilla.firefox
Of course, all operations would verify the signatures first.
Amazing news! I mainly use the F-droid Basic version which does automatic updating of apps. The regular one needs user confirmation for updates if I remember correctly.
For people who are die-hard F Droid users, do you get all your apps from it? I have tried in the past but it seemed like even when I restricted my use to basics it was missing things I needed to make my phone feel useful. Wonder if it has gotten better.
Most of them, yeah. My main non-F-Droid apps are YT-Music, Google Maps, Duo auth, Bible, and my bank app. Firefox, podcasts, local music player, ebook reader, RSS reader, email client, Matrix client, XMPP client, audiobook player, calendar sync, KeePassDX, SyncThing, Nix terminal, etc are all F-Droid.
Yes, essentially. I do have the Guardian Project repository and I get a handful of applications from the Play Store (via Aurora Store), but everything else comes from F-Droid. If you want even more, you can add the IzzyOnDroid repository[0], but bear in mind that unlike F-Droid, applications are built by developers themselves, and the rules on FOSS-only licensing are less strict.
It did yesterday, for me.
Sometimes it doesn't work for a while and the dev needs some time catching up to what Google deliberately or inadvertently or indifferently put in the way of access to the place where apps are published (and they are published there, not because app creators deliberately chose Google out of many app distributors in some healthy competitive market; there is no choice).
The Aurora project accepts donations, if you want to hurry things along some time! And they have a donation button right there in the app listing, try doing that for yourapp in the PlayStore and see who comes knocking in 3...2..1 to make you a non-person.
It is not my main device, nor even my secondary device. It’s basically just a device I bought for cheap hoping that maybe I was lucky and it was actually pretty snappy. It’s not snappy :(
I occasionally watch a couple of YouTube videos on it and read a couple of HN posts on it, when my phone is out of battery or when I’m doing a backup of my phone and have left the phone on the table for that.
Anyway, aside from YouTube the other apps I have installed on it myself are all from F-Droid, including the DuckDuckGo browser that I use on it. I also have Signal on it, which I don’t remember if I installed from F-Droid or from Google Play.
My main device that I actually use a lot is an iPhone. And like I said I basically only use the tablet like a couple of hours a week and only to watch a couple of YouTube videos and read a couple HN threads, when I am not able to use my phone for those things.
What do you find is missing? The main apps I need Google Play for are apps that are tied to a specific company or government service (eg, banking apps, or HMRC). For pretty much all basic functions I think F-Droid does the job.
I use droid-ify as frontend; and it's been fine to use f-droid repos for most of my needs. I try to install my apps from there in general. Biggest issue for me is android auto capability usually requires the app to be installed from play store (CoMaps) and my music player app (GoneMAD) has a companion unlocker that is from paid app store.
I need banking and bunch of vendor related apps. I need play store for them; so not full on f-droid repos. But close-ish when it comes to phone functionality.
No... I use a combination of Aurora, Obtainium and F-Droid.
Unfortunately there are APP providers actively preventing their apps to work on graphene OS, so i own an extra use@home cheap broken glass iphone for these mandatory but non-graphene apps.
It is a pain and it is getting worse... I'm really tempted to get back to the Apple ecosystem for less shens but currently i cannot do this yet... It just feels wrong but the pain is real. I'm Lösung the fight of investing too mich of my time in things that just should work.
I wouldn't use F-Droid exclusively. Many apps can simply be downloaded from their respective webpages. GrapheneOS also has also its own very basic app store.
FDroid offers the guarantee that the apk was built from source, and at least some marginal safety in terms of having passed their security and analytics/ads checkers.
No I have Obtainium side by side with F-Droid. There are some closed source apps or apps that are not published on F-Droid (like Wireguard) that unfortunately I need. Obtainium is great for that.
Similar experience for me. I find f-droid a great supplement store but cutting out the default store entirely has felt like more of a commitment than I'm interested in so far.
When I need some category of app - say a note app or an audiobook player - I generally check F-Droid first.
If there's a good enough app on there, I generally stick with that as opposed to trying what Google Play has to offer.
I like having that prefiltering, knowing that the app will be open source, not trying to pull anything shady and not have ads or sell my data. On the Play Store, more often than not, at least one of those is not true.
> Also, F-Droid Privileged Extension (FPE) is not currently supported by 2.0. That means even if FPE is installed, F-Droid 2.0 won’t use it. This overhaul focused on full featured support for the Android “session” installer. That lets F-Droid run background updates on any recent Android version without requiring FPE. Like with any of the changes here, we welcome feedback.
This is a shame. Is the privileged extension a large maintenance burden?
Yes. F-droid allows that, you can have multiple repositories and ... a few of those even exist :)
I'm using that with 2.0 (or rather with F-droid Basic, but I noticed Basic was updated to the same that is described in article, but a while ago). It works just fine.
Can't you at least see and file issues and discussions on the respective app's code repo site? This is often although not always sufficient, as the repo owner can censor issues and discussions.
Google has for years censored app reviews anyway on its Play Store, and also allowed too many low-value reviews which drown out useful reviews.
Because nobody uses it except a handful of uber-nerds who can put up with wasting hours of time for "altruism".
The answer to freedom isn't another marketplace. It's legislation that requires Google and Apple to allow web installs without scare walls or deeply hidden permission toggles.
You should be able to just download an app. And Grandma should be able to do it.
There's nothing insecure about it in a world of sandboxing, permissions, scanning, blacklisting, etc. When the tech giants are more than happy to sell ads to malware, you know their "safety" stance is just economic moat protectionism.
---
Edit because of rate limits:
F-droid fans are cheering a small victory, yet losing the entire war.
This f-droid nonsense isn't the point. The point is the app store monopoly. That there are only two platforms and that both are almost completely locked down.
F-droid users don't even see that Google is purposefully allowing this as an antitrust sponge calculus. The minute they can convert more freedoms into dollars, they will.
> Because nobody uses it except a handful of uber-nerds who can put up with wasting hours of time for "altruism".
What? I'm not sure how you would manage to waste hours installing a single app and then using it to install other apps, and I'm not using it because of "altruism" (what does that even mean?), I'm using it because it's the best way to get apps.
> You should be able to just download an app. And Grandma should be able to do it.
> There's nothing insecure about it in a world of sandboxing, permissions, scanning, blacklisting, etc. When the tech giants are more than happy to sell ads to malware, you know their "safety" stance is just economic moat protectionism.
Even if you 100% trust Android's sandboxing and permissions, which is... not a choice I would personally make, I like it when my apps don't have scams or ads internally, either. I'm not worried about Grandma downloading any app off F-Droid; I am a little concerned about what happens if she can download any app being pushed by any random website.
Repo timestamp expected blah blah... toast coming out of nowhere is such a bad design. Really, the architecture in which you absolutely have to download the multi-MB index is as well.
Dear F-Droud, please stop redirecting me to the Mandarin version automatically without an option to read the original message. Just because I have a Chinese keyboard layout available.
> All new code in this effort uses modern Android code standards and designs. This gives us a codebase that is easier to maintain, test, and easier to extend with new features in the future.
No, this increases the overall complexity of the system. Android will hopefully eventually collapse under its own weight.
502 Bad Gateway
https://web.archive.org/web/20260924152713/https://f-droid.o...
I have been using droid-ify on GrapheneOS for a few years now; because F-Droid ui is terrible, and the privilege extention has been such a pain to configure and get working without issues on my previous lineageOS phone. Happy to see this major overhaul; and i'm glad the FPE is being phased out.
>I have been using droid-ify
After 10 years of F-droid, I'm bummed I only found droid-ify a couple of months ago. Sooo much better than F-droid.
Check out Neostore too. You'll love it.
Urgh such a shame to be written by LLM
What does the future of something like F-Droid look like once Google does their lock down next year?
Since F-Droid (i.e., the repositories, not the app) builds all apps, a practical solution would be for the repositories (i.e., their signing keys) to be recognized by El Goog. Whether and how much help / obstacle the "maybe we do evil" company puts up for / against this is a different question.
It seems to me this is a blocker to use if google can restrict sideloading like this. Its not going to end with just get people requiring to register their app with an identity. Wont they be able to put presser on f-droid devs to lock out software they consider a threat to some business model?
If the issue Google has with sideloading is really just the rampant app piracy (and the malware that comes with cracked apps) that might be something F-Droid can accomodate.
Isn't it possible, however complicated, for users to undo the lockdown to install an app? The required 9 steps are noted at https://keepandroidopen.org/ for devices that use Google Play Services.
Irrespective, people should probably be migrating to a GrapheneOS or similar OS asap once the OS ships with a device.
Ah this is good to know. Awful it's required, but glad there is a work around.
Cool! Unfortunately I switched to Obtanium a year or so ago. I get all my apps from GitHub releases straight from the developers now.
I use F-Droid precisely because I don't want that. When https://news.ycombinator.com/item?id=38505229 happened - and when the same thing happens again in the future, because it will - I explicitly want F-Droid doing some basic due diligence on updates before shipping them to me. Cutting out the middleman is the opposite of what I want.
Counterpoint: I use NewPipe pretty much daily for watching YouTube. One day, YT introduced an API change that broke NewPipe, and so I patiently waited for an update.
A few days passed, and I eventually get a notification from NewPipe prompting for an update. But I can't install it just yet, because of mismatching signatures between the F-Droid and GitHub versions (yes, that's the point, I know...). The F-Droid build took so long to release, that in the meantime, another version of NewPipe came out...
This issue happens to some extent within liunux distros too. I think specifically for youtube maybe it would be beneficial for a single core library that deals with the API and is shared by every single project that cares to interface with youtube. Rather than dozens of projects trying to chase youtube changes and overburdening repository maintainers, there would only be a single library whose updates would be fast tracked. This also requires there to be mo embedding it in anything too, I don't know how feasible this would be on android, but it kinda already happens with yt-dlp in linux distros, but yt-dlp isn't a proper library nor does it deals with all youtube endpoints that a proper youtube frontend would require.
It would perhaps be nice if yt-dlp could eject it's youtube api handling into it's own project that is then augmented to handle anything youtube related and turns into THE library for dealing with youtube.. maybe even call it libyt :)
Have you added the NewPipe repo in F-Droid? I get updates this way pretty quickly.
https://newpipe.net/FAQ/tutorials/install-add-fdroid-repo/
True. And especially for that use, I can imagine that the slow return around is actually a breaking problem. I think there are relatively few apps that need that kind of quick update, and I'm more concerned with malicious authors than that, but it would depend on precisely what you need out of your apps.
Do you use a lot of apps with that?
I tried it with 3 random apps for a while, but instantly got into issues. Two stopped updating due to Obtanium falling behind how app releases - for instance, developer changed version numbering scheme but Obtanium didn't expect that, so an outdated version was always presented. It wasn't fixed for quite a while.
I have 23 currently. It's surprising how fast it happened... I don't have any problems, but I don't pay much attention to it and apps seem to update automatically sometimes and after a manual refresh other times.
Same for me. I typically search on F-Droid to find the apps and then add the github to Obtanium.
I tried Obtainium a while back and didn't like it too much, finding apps seemed difficult.
Then I discovered https://apps.obtainium.imranr.dev/ which makes it very easy. I feel like Obtainium should make this more obvious. It would help adoption a lot.
Fwiw, that link is documented in the readme at https://github.com/ImranR98/Obtainium so it's not hard for someone to find again.
Same, Obtanium is great.
What do you do for apps that don't have GitHub releases?
You can use it with non-github releases too, but it's super rare when one isn't available. In the case when Obtanium doesn't work, I just use F-Droid.
Didnt know this! Thanks for sharing !!
The update turnover is so fast for certain apps that I switched back to Fdroid.
Very cool, the visual redesign was very much needed and I had been using Droid-ify for a while because of this. I'll switch back to the official app, congrats to the contributors!
Great visual and usability update.
Even greater HN conversation about all the to-me-unknown alternatives. I used neostore as a replacement, but maybe time to try f-Droid again
In addition to F-Droid on the device, I'd love an F-Droid "package manager client" on a computer, that allows installing apps on an Android device via adb:
Of course, all operations would verify the signatures first.Like https://github.com/Hoverth/fdroidcl ? :)
Amazing news! I mainly use the F-droid Basic version which does automatic updating of apps. The regular one needs user confirmation for updates if I remember correctly.
The official page still downloads 1.23.2. I wonder when this will go live, and if the old app will auto-update.
Try F-Droid basic, it has this for a few weeks.
For people who are die-hard F Droid users, do you get all your apps from it? I have tried in the past but it seemed like even when I restricted my use to basics it was missing things I needed to make my phone feel useful. Wonder if it has gotten better.
Most of them, yeah. My main non-F-Droid apps are YT-Music, Google Maps, Duo auth, Bible, and my bank app. Firefox, podcasts, local music player, ebook reader, RSS reader, email client, Matrix client, XMPP client, audiobook player, calendar sync, KeePassDX, SyncThing, Nix terminal, etc are all F-Droid.
Yes, essentially. I do have the Guardian Project repository and I get a handful of applications from the Play Store (via Aurora Store), but everything else comes from F-Droid. If you want even more, you can add the IzzyOnDroid repository[0], but bear in mind that unlike F-Droid, applications are built by developers themselves, and the rules on FOSS-only licensing are less strict.
[0]: https://apt.izzysoft.de/fdroid/
does Aurora still work? Last few times I tried, I couldn't install anything.
It did yesterday, for me. Sometimes it doesn't work for a while and the dev needs some time catching up to what Google deliberately or inadvertently or indifferently put in the way of access to the place where apps are published (and they are published there, not because app creators deliberately chose Google out of many app distributors in some healthy competitive market; there is no choice).
The Aurora project accepts donations, if you want to hurry things along some time! And they have a donation button right there in the app listing, try doing that for yourapp in the PlayStore and see who comes knocking in 3...2..1 to make you a non-person.
Last used yesterday found no problem to install random application.
I have a slow, crappy tablet I bought on Temu.
It is not my main device, nor even my secondary device. It’s basically just a device I bought for cheap hoping that maybe I was lucky and it was actually pretty snappy. It’s not snappy :(
I occasionally watch a couple of YouTube videos on it and read a couple of HN posts on it, when my phone is out of battery or when I’m doing a backup of my phone and have left the phone on the table for that.
Anyway, aside from YouTube the other apps I have installed on it myself are all from F-Droid, including the DuckDuckGo browser that I use on it. I also have Signal on it, which I don’t remember if I installed from F-Droid or from Google Play.
My main device that I actually use a lot is an iPhone. And like I said I basically only use the tablet like a couple of hours a week and only to watch a couple of YouTube videos and read a couple HN threads, when I am not able to use my phone for those things.
What do you find is missing? The main apps I need Google Play for are apps that are tied to a specific company or government service (eg, banking apps, or HMRC). For pretty much all basic functions I think F-Droid does the job.
I use droid-ify as frontend; and it's been fine to use f-droid repos for most of my needs. I try to install my apps from there in general. Biggest issue for me is android auto capability usually requires the app to be installed from play store (CoMaps) and my music player app (GoneMAD) has a companion unlocker that is from paid app store.
I need banking and bunch of vendor related apps. I need play store for them; so not full on f-droid repos. But close-ish when it comes to phone functionality.
No... I use a combination of Aurora, Obtainium and F-Droid.
Unfortunately there are APP providers actively preventing their apps to work on graphene OS, so i own an extra use@home cheap broken glass iphone for these mandatory but non-graphene apps.
It is a pain and it is getting worse... I'm really tempted to get back to the Apple ecosystem for less shens but currently i cannot do this yet... It just feels wrong but the pain is real. I'm Lösung the fight of investing too mich of my time in things that just should work.
I wouldn't use F-Droid exclusively. Many apps can simply be downloaded from their respective webpages. GrapheneOS also has also its own very basic app store.
FDroid offers the guarantee that the apk was built from source, and at least some marginal safety in terms of having passed their security and analytics/ads checkers.
You lose all that if you go directly to source.
No I have Obtainium side by side with F-Droid. There are some closed source apps or apps that are not published on F-Droid (like Wireguard) that unfortunately I need. Obtainium is great for that.
Similar experience for me. I find f-droid a great supplement store but cutting out the default store entirely has felt like more of a commitment than I'm interested in so far.
I do, but then there is aurora store on f-droid for the gplay only apps.
When I need some category of app - say a note app or an audiobook player - I generally check F-Droid first.
If there's a good enough app on there, I generally stick with that as opposed to trying what Google Play has to offer.
I like having that prefiltering, knowing that the app will be open source, not trying to pull anything shady and not have ads or sell my data. On the Play Store, more often than not, at least one of those is not true.
> Also, F-Droid Privileged Extension (FPE) is not currently supported by 2.0. That means even if FPE is installed, F-Droid 2.0 won’t use it. This overhaul focused on full featured support for the Android “session” installer. That lets F-Droid run background updates on any recent Android version without requiring FPE. Like with any of the changes here, we welcome feedback.
This is a shame. Is the privileged extension a large maintenance burden?
Are you stuck on an older android version?
That page uses the term ''repository''' singular. Can additional repos be added in the way Neo Store allows?
Yes. F-droid allows that, you can have multiple repositories and ... a few of those even exist :)
I'm using that with 2.0 (or rather with F-droid Basic, but I noticed Basic was updated to the same that is described in article, but a while ago). It works just fine.
It's always been possible on F-Droid, I doubt they would change something like that.
And still no popularity rating, download count or any user review system whatsoever.
Can't you at least see and file issues and discussions on the respective app's code repo site? This is often although not always sufficient, as the repo owner can censor issues and discussions.
Google has for years censored app reviews anyway on its Play Store, and also allowed too many low-value reviews which drown out useful reviews.
Except the 2.0 does have a most popular apps section.
Because nobody uses it except a handful of uber-nerds who can put up with wasting hours of time for "altruism".
The answer to freedom isn't another marketplace. It's legislation that requires Google and Apple to allow web installs without scare walls or deeply hidden permission toggles.
You should be able to just download an app. And Grandma should be able to do it.
There's nothing insecure about it in a world of sandboxing, permissions, scanning, blacklisting, etc. When the tech giants are more than happy to sell ads to malware, you know their "safety" stance is just economic moat protectionism.
---
Edit because of rate limits:
F-droid fans are cheering a small victory, yet losing the entire war.
This f-droid nonsense isn't the point. The point is the app store monopoly. That there are only two platforms and that both are almost completely locked down.
F-droid users don't even see that Google is purposefully allowing this as an antitrust sponge calculus. The minute they can convert more freedoms into dollars, they will.
> Because nobody uses it except a handful of uber-nerds who can put up with wasting hours of time for "altruism".
This seems weirdly derogatory towards people that use F-Droid.
As an F-Droid user for idk how many years now, I'd say it's spot on!
> Because nobody uses it except a handful of uber-nerds who can put up with wasting hours of time for "altruism".
What? I'm not sure how you would manage to waste hours installing a single app and then using it to install other apps, and I'm not using it because of "altruism" (what does that even mean?), I'm using it because it's the best way to get apps.
> You should be able to just download an app. And Grandma should be able to do it.
> There's nothing insecure about it in a world of sandboxing, permissions, scanning, blacklisting, etc. When the tech giants are more than happy to sell ads to malware, you know their "safety" stance is just economic moat protectionism.
Even if you 100% trust Android's sandboxing and permissions, which is... not a choice I would personally make, I like it when my apps don't have scams or ads internally, either. I'm not worried about Grandma downloading any app off F-Droid; I am a little concerned about what happens if she can download any app being pushed by any random website.
This is very good to see. Classic F-Droid always seemed to fail at updating repos at least every week or so.
Repo timestamp expected blah blah... toast coming out of nowhere is such a bad design. Really, the architecture in which you absolutely have to download the multi-MB index is as well.
If only they improve the AndroidTV experience a bit
It's nice to see F-Droid going places.
I wish they would add ratings or even just comments
Dear F-Droud, please stop redirecting me to the Mandarin version automatically without an option to read the original message. Just because I have a Chinese keyboard layout available.
> All new code in this effort uses modern Android code standards and designs. This gives us a codebase that is easier to maintain, test, and easier to extend with new features in the future.
No, this increases the overall complexity of the system. Android will hopefully eventually collapse under its own weight.
Once GrapheneOS ships on devices, it and Samsung can in time pick up where Android stops.