Default avatar
invisibull 3 weeks ago
"There is no spoon" I was able to set up a new GrapheneOS for a family member without ever touching droidify or obtanium. First step, download @Zapstore APK directly from their github repo (use Vanadium for this). Once zapstore is installed you literally never ever have the need for Obtanium again.

Replies (8)

My main issue with Zapstore is the number of apps that are signed by Zapstore rather than the developer. It seems to me that you're relying on a single person and key to sign a lot of critical apps (Bitwarden, etc). Where Obtainium at least spreads the risk out (or it seems to anyway). Maybe it has the same problems and I'm mistaken somewhere. @Zapstore Either way, I tried Zapstore and just used it for apps like Amber that are signed by the Dev to make myself feel better. I ultimately gave up because Zapstore kept trying to update every app with no way of excluding the ones I didn't want it touching.
Default avatar
invisibull 3 weeks ago
@Matt - Just mute me, bro. I don't see an issue with it because they clearly display SHA256. Let's take Bitwarden latest release for example. This is a sha for the apk from their GitHub repo (copy/paste) sha256:fc8c8124650665270925648e0ec35bf7336f26058e3bd72eabf41d859727d220 You will see this same sha displayed in zapstore. Makes no huge difference who signs the release if keys match.
Default avatar
invisibull 3 weeks ago
There is no second best. Also 🖕to Saylor :D
Default avatar
invisibull 2 weeks ago
Nothing if you (1) can and (2) want to use it. I merely suggested an alternative path.