Web installer

Prerequisites

• A Chromium-based browser, such as Chrome, Chromium or Edge. Other browsers have no WebUSB.
• At least 2 GB of free memory.
• The image set, unpacked into a folder.
• A good USB-C cable, plugged straight into the computer rather than into a hub.
• Only this phone connected to the computer over USB.
• On Linux, the udev rules for Android devices: android-sdk-platform-tools-common on Debian and Ubuntu, android-udev on Arch Linux.
• On Linux, stop fwupd, which can take over the phone's USB connection: sudo systemctl stop fwupd.service

Allowing unlocking

In Android on the phone, turn on OEM unlocking in Developer options, as Fairphone describes. The phone checks online first.

Note the build number in Settings > About phone. The install writes the Fairphone firmware the image set carries, and the phone must not already run a newer Fairphone release.

Connecting the phone

Turn the phone off. Hold Volume down while it starts, until it shows Fastboot Mode. Connect it to this computer and press Connect.

Unlocking the bootloader

The install writes firmware, so the phone needs two unlocks: the bootloader, then its critical partitions. Each one erases all data on the phone.

1. Press Unlock bootloader. On the phone, choose to unlock with the volume buttons and press Power.
2. The phone erases itself and restarts. Hold Volume down while it restarts, so that it returns to Fastboot Mode before Android starts.
3. If Android starts, turn the phone off. Then hold Volume down while it starts.
4. Press Connect, then Unlock critical partitions, and confirm on the phone the same way. Return to Fastboot Mode again.

Choosing the image set

Choose the image set's folder. The browser asks whether to upload it, but nothing leaves this computer. Only this page reads the files.

Before the first write, the installer checks every file it writes against the set's SHA256SUMS. This takes a minute or two.

Folder:

Or all of its files:

Installing

The install erases all data on the phone. It writes the firmware to both slots, then DiamaneOS to slot a, then empty data partitions. Leave the phone alone until it is finished.

For the system partitions the phone restarts into fastbootd, then back into Fastboot Mode. After each restart the browser may ask you to choose the phone again.

An image set that can be locked also installs its signing key, and the phone returns to Fastboot Mode for the lock. Any other set restarts into DiamaneOS.

The phone does not run a newer Fairphone release than the one in the image set.

Locking the bootloader

Choose the image set first.

Locking turns on full verified boot with DiamaneOS's key. Lock right after the install, before Android first starts.

• Finish every lock step before starting Android. Android's setup turns OEM unlocking off, and the bootloader can then no longer be locked safely.
• Stop if something fails. Do not repeat a lock command after an error.
• Locking erases all data on the phone.
• Each start then shows a yellow warning screen with the ID of the key the OS is signed with. This is expected: DiamaneOS boots with its own key, not Fairphone's.
• The installer locks only the bootloader, never the critical partitions.
• It never locks an image set that must stay unlocked, such as one signed with public test keys. Anyone can sign images with those keys.
• It locks only while the phone allows unlocking, so that a phone that fails to start can be unlocked again.

1. Leave the phone in Fastboot Mode after the install. Do not start Android.
2. Press Lock bootloader. The installer checks that the bootloader is still unlocked and that the phone allows unlocking.
3. Confirm on the phone with the volume and power buttons. The phone erases all data and restarts.
4. Hold Volume down while it restarts, so that it returns to Fastboot Mode. The installer then checks that the bootloader is locked. Choose Start on the phone.
5. The last setup screen offers to turn OEM unlocking off, and that choice is selected. Keep it. Turn it on again only to unlock the bootloader.

Returning to the stock OS

See returning to the stock OS. It removes the DiamaneOS key from the phone and installs Fairphone's factory package.