STATUS //
Active
PLATFORM //
Pixel 10a
GrapheneOS
No sandboxed Google Play
LAST UPDATED //
July 2026
Bonfire is my Pixel 10a running GrapheneOS.
It replaced an older LineageOS and microG phone with a cleaner setup
built around GrapheneOS defaults and applications that do not depend on
Google Play services.
BASELINE //
Pixel 10a
GrapheneOS
Bootloader relocked
OEM unlocking disabled
No sandboxed Google Play installation
GrapheneOS defaults retained unless there is a clear reason to change
BROWSING //
Vanadium is my primary browser.
Brave is mostly kept for synchronized Nexus and administrative bookmarks,
and as a fallback when Vanadium is acting up.
APPLICATION APPROACH //
I prefer maintained, privacy-respecting applications that work without
Google Play services or mandatory accounts.
The current setup includes:
Capy Reader
HeliBoard
Markor
Syncthing
Tempus
Vanadium
NOTES AND FILES //
Markor handles ordinary Markdown notes.
Syncthing connects Bonfire to my existing Nexus Sync folder, keeping
notes available on the phone, Windows, and Nexus without depending on a
proprietary notes platform.
NETWORKING //
Tailscale is available when I need private remote access, but it is not
configured as an always-on VPN.
Android Private DNS remains on Automatic because local DNS and home.arpa
resolution are already handled by Firelink and Nexus.
The goal is to keep the phone minimal while maintaining usability,
without adding a bunch of telemetry or background services.