Gravel
A de-googled, hardened fork of the Pebble companion app for de-googled phones
新版本 0.3.3
PebbleOS updates for Core watches now follow Core's public changelog, and Settings > About > Choose a PebbleOS build lists newer builds. Watchfaces and apps with internet access off run their code inside Gravel again where Gravel can block UDP. Where it cannot, such as on LineageOS, CalyxOS and Android 9 and older, a switch in Settings > Apps > Watch App Permissions, on by default, lets that code run with Android System WebView 152 or newer.
Gravel is a de-Googled, hardened fork of the Pebble mobile app by Core Devices, for Pebble and Core Devices watches on GrapheneOS, LineageOS and other phones without Google Play services or Firebase.
The watch features are here: pairing, notifications and replies, calendar, music, health, weather, watchfaces and apps, firmware updates, and voice dictation. What is gone: Play services, Firebase, telemetry, analytics and crash reporting. The battery analytics page depended on that telemetry and has no data here, and the Pebble Index 01 ring and Index AI features do not work for now.
Hardening:
- Code that watchapps run inside Gravel gets no internet or location access until you grant it, per app, so some watchfaces and apps need a grant before they work fully. On phones where Gravel's UDP filter can't be turned on, such as LineageOS and CalyxOS, watchapps without internet access still run their code by default if Android System WebView is up to date. Their real-time connections (the kind video calls use) then depend on a single layer instead of two. You can turn that code off under Watch App Permissions. With an older WebView, that code does not run
- Classic PebbleKit, which broadcasts watch data to apps on your phone, is off by default; turn it on under Watch App Permissions if a companion app stops receiving watch data
- The speech engine runs in an isolated Android process
- Other exported Android interfaces are authorization-gated or removed, and plain-HTTP traffic is blocked
- Core watch firmware comes from the public PebbleOS releases and is verified before install
- App store searches are sent when you tap search, not while you type, with the search provider's analytics switched off
Dictation runs on the phone with whisper.cpp, built from source; the speech model is an optional, integrity-pinned download. You can also send dictation to your own transcription server over https. Weather locations can also be entered by latitude and longitude.
Gravel contacts the Core Devices and Rebble web services, Algolia when you search the app store, GitHub for firmware, and the model host when you download a speech model, as well as an app store source or transcription server you add yourself and any host a watchapp you grant internet access connects to. Where Gravel's UDP filter can't be turned on and a watchapp without that grant still runs its code (see Hardening above), that code's real-time connections depend on one layer instead of two.
Background location is used so location-based watchapps and weather work while the app is closed.
Gravel is not affiliated with or endorsed by Core Devices. "Pebble" and "Core Devices" are trademarks of their respective owners; Gravel is an independent fork of their GPLv3 source code.
The watch features are here: pairing, notifications and replies, calendar, music, health, weather, watchfaces and apps, firmware updates, and voice dictation. What is gone: Play services, Firebase, telemetry, analytics and crash reporting. The battery analytics page depended on that telemetry and has no data here, and the Pebble Index 01 ring and Index AI features do not work for now.
Hardening:
- Code that watchapps run inside Gravel gets no internet or location access until you grant it, per app, so some watchfaces and apps need a grant before they work fully. On phones where Gravel's UDP filter can't be turned on, such as LineageOS and CalyxOS, watchapps without internet access still run their code by default if Android System WebView is up to date. Their real-time connections (the kind video calls use) then depend on a single layer instead of two. You can turn that code off under Watch App Permissions. With an older WebView, that code does not run
- Classic PebbleKit, which broadcasts watch data to apps on your phone, is off by default; turn it on under Watch App Permissions if a companion app stops receiving watch data
- The speech engine runs in an isolated Android process
- Other exported Android interfaces are authorization-gated or removed, and plain-HTTP traffic is blocked
- Core watch firmware comes from the public PebbleOS releases and is verified before install
- App store searches are sent when you tap search, not while you type, with the search provider's analytics switched off
Dictation runs on the phone with whisper.cpp, built from source; the speech model is an optional, integrity-pinned download. You can also send dictation to your own transcription server over https. Weather locations can also be entered by latitude and longitude.
Gravel contacts the Core Devices and Rebble web services, Algolia when you search the app store, GitHub for firmware, and the model host when you download a speech model, as well as an app store source or transcription server you add yourself and any host a watchapp you grant internet access connects to. Where Gravel's UDP filter can't be turned on and a watchapp without that grant still runs its code (see Hardening above), that code's real-time connections depend on one layer instead of two.
Background location is used so location-based watchapps and weather work while the app is closed.
Gravel is not affiliated with or endorsed by Core Devices. "Pebble" and "Core Devices" are trademarks of their respective owners; Gravel is an independent fork of their GPLv3 source code.
反特徵
此應用程式可能有您不喜歡的功能。 瞭解更多！
版本
雖然在下方可選擇下載 APK 檔案，但要留意這樣的安裝方式將不會收到更新通知，是一種較不安全的下載方法。建議您先安裝 F-Droid 用戶端使用。
下載 F-Droid-
arm64-v8aarmeabi-v7a此版本需要 Android 8.0 或更高的版本。
此套件包由 F-Droid 建置和簽署，並保證與此原始碼 Tarball 保持一致。
-
arm64-v8aarmeabi-v7a此版本需要 Android 8.0 或更高的版本。
此套件包由 F-Droid 建置和簽署，並保證與此原始碼 Tarball 保持一致。
-
arm64-v8aarmeabi-v7a此版本需要 Android 8.0 或更高的版本。
此套件包由 F-Droid 建置和簽署，並保證與此原始碼 Tarball 保持一致。
新版本 0.3.2
Fixes Gravel closing right after opening on LineageOS-based phones. For now, a watchface or watchapp with internet access off does not run its code inside Gravel; an update that brings this back is in progress.
新版本 0.3.1
Turning off internet access for a watchface or app now covers more than web requests: Gravel blocks UDP sockets in its own process, and an app with internet access off runs in a sandboxed page set to allow no connections. Web pages inside Gravel lose HTTP/3 and WebRTC over UDP as a result. Changing the setting restarts the app's session. On Android 17, plain-HTTP connections to services on the phone itself are denied again, like all other plain HTTP.