There’s always a chance any app, even from fdroid, will require play services, but that’s still highly unlikely. You should be fine with fdroid alone, yes.
can confirm, I’m running GrapheneOS right now with F-Droid and some extra repos as my only app store, it works fine for me. but I don’t use banking apps (web browsers do fine for that), and I’m using a de-Firebase-d version of Signal (Molly F-Droid) so no issues so far with no GMS and no SafetyNet.
edit: I should add that a new GrapheneOS update just released, this is in the release notes:
disable anti-competitive code being injected by the Play Store into apps choosing to enable “App integrity > Automatic protection” when there’s a valid Play Store source stamp signature (proving that it’s an unmodified app from the Play Store, so we aren’t disabling an integrity check) since it prevents using the apps on GrapheneOS when apps also choose to enable “App integrity > Store listing visibility” with either the “Device integrity checks” or “Strong integrity checks” values enforcing having a device licensing Google Mobile Services and running the stock OS (circumventing this is protected by the DMCA exemption for jailbreaking)
so it looks like the devs are actively working around this issue and making changes to allow those checks to pass even without the ROM licensing GMS.
Long as you beware that F droid apps could be malware or some other kind of bad actors. It’s a free range marketplace just be smart. Just because something is FOSS or open source doesn’t mean it’s free of bad stuff.
Interesting. If I just don’t use any apps from the play store and only use stuff from fdroid with no play services I should see no issues though yeah?
There’s always a chance any app, even from fdroid, will require play services, but that’s still highly unlikely. You should be fine with fdroid alone, yes.
can confirm, I’m running GrapheneOS right now with F-Droid and some extra repos as my only app store, it works fine for me. but I don’t use banking apps (web browsers do fine for that), and I’m using a de-Firebase-d version of Signal (Molly F-Droid) so no issues so far with no GMS and no SafetyNet.
edit: I should add that a new GrapheneOS update just released, this is in the release notes:
so it looks like the devs are actively working around this issue and making changes to allow those checks to pass even without the ROM licensing GMS.
The guys over at GrapheneOS removedslap Google regularly, and I love it.
Long as you beware that F droid apps could be malware or some other kind of bad actors. It’s a free range marketplace just be smart. Just because something is FOSS or open source doesn’t mean it’s free of bad stuff.