diff --git a/static/install.html b/static/install.html index a3b38109..7b5c5cf4 100644 --- a/static/install.html +++ b/static/install.html @@ -64,12 +64,6 @@
You should have at least 2GB of free memory available.
You need the unlocked variant of one of the supported devices, not a locked carrier specific variant.
-To verify the download of the OS beyond the security offered by HTTPS, you need the
- signify tool. Some package repositories refer to it as signify
while
- others refer to it as signify-openbsd
due to a legacy mail-related tool
- with the same name. If you don't have a way to obtain signify from a trusted package
- repository, such as on Windows, skip the additional verification. This is an important
- step, but it only makes sense if you can chain trust from your existing OS install.
It's best practice to update the stock OS on the device to make sure it's running
the latest firmware before proceeding with these instructions. This avoids running
into bugs in older firmware versions. It's known that the early Pixel 2 and Pixel 2 XL
@@ -91,6 +85,24 @@
fastboot
from several years ago are still shipped by Linux distributions
like Debian and lack the compatibility detection of modern versions so they can soft
brick devices.
To verify the download of the OS beyond the security offered by HTTPS, you need the + signify tool. If you don't have a way to obtain signify from a trusted package + repository, such as on Windows, skip the additional verification. This is an important + step, but it only makes sense if you can chain trust from your existing OS + install.
+ +On many distributions, signify is available via a signify
package in
+ the official repositories. On Debian-based distributions, the package and command name
+ were renamed to signify-openbsd
. Following Debian tradition, the
+ signify
package and command are an unmaintained legacy mail-related tool for
+ generating signatures.
+