Add section on devices with GrapheneOS preinstalled

1 files changed, 41 insertions, 0 deletions

diff --git a/static/faq.html b/static/faq.html
index 5fdfa73d..ce587795 100644
--- a/static/faq.html
+++ b/static/faq.html
@@ -110,6 +110,7 @@
                     <li><a href="#bundled-apps">Why aren't my favorite apps bundled with GrapheneOS?</a></li>
                     <li><a href="#roadmap">What is the roadmap for GrapheneOS?</a></li>
                     <li><a href="#install">How do I install GrapheneOS?</a></li>
+                    <li><a href="#preinstalled-devices">Can I buy a device with GrapheneOS preinstalled?</a></li>
                     <li><a href="#build">How do I build GrapheneOS?</a></li>
                     <li><a href="#donate">How can I donate to GrapheneOS?</a></li>
                     <li><a href="#upstream">Does GrapheneOS make upstream contributions?</a></li>
@@ -1833,6 +1834,46 @@
                 browser with WebUSB support.</p>
             </article>
 
+            <article id="preinstalled-devices">
+                <h2><a href="#preinstalled-devices">Can I buy a device with GrapheneOS preinstalled?</a></h2>
+
+                <p>There are various companies selling devices with GrapheneOS, something which is
+                permitted by the project's licensing provided that they make it clear that they're
+                not GrapheneOS or officially associated with the project.</p>
+
+                <p><strong>We are currently not affiliated with or endorse any company selling
+                devices with GrapheneOS. Our official recommendation is to buy a supported device
+                and install GrapheneOS yourself.</strong></p>
+
+                <p>Our official <a href="https://grapheneos.org/install/web">web installer</a>
+                is easy to use, and our <a href="https://grapheneos.org/contact#community">community</a>
+                is happy to help with the process should that be needed. On top of that, doing it
+                yourself will also likely be a lot cheaper, as you're avoiding having to pay the
+                premium of having someone else install GrapheneOS for you.</p>
+
+                <p>If you decide to buy a device with GrapheneOS installed regardless, here are the
+                things you should pay attention to before doing so, as well as the things you should
+                do after receiving the device:</p>
+
+                <ol>
+                    <li>Make sure that you're not buying an end-of-life or near end-of-life device.
+                    You should consult our <a href="https://grapheneos.org/faq#recommended-devices">
+                    recommended devices</a> section and choose one of the devices listed there.</li>
+                    <li>Verify that the device you have purchased is running genuine GrapheneOS. You
+                    can do this by checking the verified boot key hash. We provide the steps to do
+                    that in our <a href="https://grapheneos.org/install/web#verified-boot-key-hash">
+                    post-install steps</a>.</li>
+                    <li>After verifying that you're running genuine GrapheneOS, you should
+                    <a href="https://support.google.com/pixelphone/answer/4596836?hl=en#zippy=%2Cwith-your-phones-buttons-advanced">
+                    factory reset the device from recovery</a> to make sure that it has not been
+                    tampered with. This will wipe all your data, so make sure to do it before you
+                    start using your device.</li>
+                    <li>After factory resetting the device, we recommend setting up local or remote
+                    attestation via our <a href="https://grapheneos.org/install/web#hardware-based-attestation">Auditor
+                    app</a>.</li>
+                </ol>
+            </article>
+
             <article id="build">
                 <h2><a href="#build">How do I build GrapheneOS?</a></h2>