RideDon'tSlide

@GrapheneOS @adfichter Just in case it helps anyone, I quickly tested it with secure app spawning disabled and compat mode on but the issue @adfichter describes persists. These are the official OS requirements for the app: https://help.agov.ch/?c=myphone&l=en It says installation exclusively from Play Store. I installed it from aurora store, so could it be a Play integrity issue in my case?

@adfichter @GrapheneOS I reached out to the agency providing the solution and to my surprise I got a nice reply that they acknowledge the need to support GrapheneOS and that they added it to the backlog of the company developing the app! They couldn't commit to a timeline, however. Feel free to DM me if you want more details.

@acetylcholin@mastodon.gamedev.place Exactly. i tried to put all admin access in it's own VLAN accessible via a single hardened jump host (via proxyjump in the SSH config), all via SSH key(s). If there is a web portal, I tunnel it via SSH to localhost. All connections are established with 'ssh '.

@acetylcholin@mastodon.gamedev.place what I would start with is setting up the .ssh/config file on your admin host to store aliases with all the connection information to automate connecting. It can also serve as a minimal documentation.