From a7848665f1ca6df2a2d3e1073cf7a925a47b588b Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Mon, 3 Jun 2019 12:26:29 -0400 Subject: adjust approach to header links --- static/install.html | 33 +++++++++++++-------------------- 1 file changed, 13 insertions(+), 20 deletions(-) (limited to 'static/install.html') diff --git a/static/install.html b/static/install.html index fe53443e..b6a248d1 100644 --- a/static/install.html +++ b/static/install.html @@ -20,7 +20,7 @@ - + @@ -38,10 +38,11 @@
-

Install

+

+ Install +

- Prerequisites - + Prerequisites

You should have at least 2GB of free memory available.

You need the unlocked variant of one of the supported devices, not a locked carrier @@ -66,8 +67,7 @@ from several years ago are still shipped by Linux distributions like Debian and lack the compatibility detection of modern versions so they can soft brick devices.

- Enabling OEM unlocking - + Enabling OEM unlocking

OEM unlocking needs to be enabled from within the operating system.

Enable the developer settings menu by going to Settings ➔ System ➔ About phone and @@ -76,8 +76,7 @@ 'Enable OEM unlocking' setting. This requires internet access on devices with Google Play Services.

- Unlocking the bootloader - + Unlocking the bootloader

First, boot into the bootloader interface. You can do this by turning off the device and then turning it on by holding both the Volume Down and Power buttons.

@@ -85,8 +84,7 @@
fastboot flashing unlock

The command needs to be confirmed on the device.

- Obtaining factory images - + Obtaining factory images

The initial install will be performed by flashing the factory images. This will replace the existing OS installation and wipe all the existing data.

@@ -96,8 +94,7 @@ gpg --verify blueline-factory-2019.04.01.19.zip.sig blueline-factory-2019.04.01.19.zip

When this signing key is replaced, the new key will be signed with it.

- Flashing factory images - + Flashing factory images

Reboot into the bootloader interface to begin the flashing procedure.

Next, extract the factory images and run the script to flash them. Note that the @@ -115,8 +112,7 @@ TMPDIR="$PWD/tmp" ./flash-all.sh

You should now proceed to locking the bootloader before using the device as locking wipes the data again.

- Locking the bootloader - + Locking the bootloader

Locking the bootloader is important as it enables full verified boot. It also prevents using fastboot to flash, format or erase partitions. Verified boot will @@ -131,14 +127,12 @@ TMPDIR="$PWD/tmp" ./flash-all.sh reset.

Unlocking the bootloader again will perform a factory reset.

- Disabling OEM unlocking - + Disabling OEM unlocking

OEM unlocking can be disabled again in the developer settings menu within the operating system after booting it up again.

- Verifying installation - + Verifying installation

Verified boot authenticates and validates the firmware images and OS from the hardware root of trust. Since GrapheneOS supports full verified boot, the OS images @@ -162,8 +156,7 @@ TMPDIR="$PWD/tmp" ./flash-all.sh device. That makes it best to get the pairing done right after installation. You can also consider setting up the optional remote attestation service.

- Replacing GrapheneOS with the stock OS - + Replacing GrapheneOS with the stock OS

Installation of the stock OS via the stock factory images is the same process described above. However, before locking, there's an additional step to fully revert -- cgit v1.3.1