Sector-by-sector backup of my entire phone’s internal drive before installing

de0u

Blonde I’d like to know what the procedure is if my phone needs warranty work, such as a new battery, please.

Many forum users have reported that sending a Pixel to Google for warranty repair while it is running GrapheneOS has worked. I think so far zero users have reported that warranty support was denied because the device was not running Google's stock OS.

Blonde If I hypothetically needed to revert GrapheneOS to the original Pixel 9 Android OS, how would I do that, please?

This question was already answered (de0u). I think it might be a good idea to click on the links that were shared in that post to see what they are about.

Blonde

de0u ryrona

Your reply is appreciated, thank you, please. Kindly may you explain why I shouldn’t use the administrator version of PowerShell on Windows 10 x64 Pro for installation, please?
The CLI guidelines state: “Avoid using the outdated Command Prompt or the administrator version of PowerShell.”

I have now unlocked the OEM, please.

To install Graphene OS on the command line, do I need to put the device in Fastboot Mode, please?
It states the following in Fastboot Mode, please:
“Fastboot Mode:
…
Device Status: Locked(unlockable)
…“

Is it necessary for me to unlock the ‘Device Status’, please?

I would appreciate it if you could share the best possible solution for these problems kindly, please.

de0u

Blonde To install Graphene OS on the command line, do I need to put the device in Fastboot Mode, please?

Yes. This is very clearly stated in the instructions.

Because it will not be possible to complete the installation unless you can read and follow the instructions, it would probably be helpful if you could provide some detail about why you asked this question.

Also, can you say why you are using the command-line installation process instead of the web installer?

Blonde

de0u

de0u Because it will not be possible to complete the installation unless you can read and follow the instructions, it would probably be helpful if you could provide some detail about why you asked this question.

My understanding was that it would be included under the OEM section, please.

de0u Also, can you say why you are using the command-line installation process instead of the web installer?

I’m privacy-conscious, thank you. Kindly ensure it’s for security and privacy, please.

Blonde

de0u

Please confirm if I should substitute ‘DEVICE_NAME’ and ‘VERSION’ with ‘Pixel 9’ and ‘2025081400’, please?

Blonde

I am unable to proceed from this section kindly, please.

"On Windows:

_cmd /c 'ssh-keygen -Y verify -f allowed_signers -I contact@grapheneos.org -n "factory images" -s DEVICE_NAME-install-VERSION.zip.sig < DEVICE_NAME-install-VERSION.zip'

Couldn't parse signature: missing header
verify: sshsig_armor: invalid format_
"

May you kindly please advise?

de0u

Blonde OEM unlocking must be done while the device is running Android, so it must be done before rebooting into fastboot mode, and can be done even before the PC fastboot tools are installed. Also, OEM unlocking is listed early because some locked devices can't do it at all.

Regardless, the instructions do very clearly state that booting into fastboot mode is a requirement, and also say how to check that it has happened.

de0u

Blonde The pathnames provided on the command line should be the names of the files that were downloaded. The substitution should be the same as the substitution done for the curl command.

Blonde

de0u The pathnames provided on the command line should be the names of the files that were downloaded. The substitution should be the same as the substitution done for the curl command.

I’m downloading all three files from these link:
https://grapheneos.org/releases#tokay
https://releases.grapheneos.org/tokay-install-2025081400.zip
https://releases.grapheneos.org/tokay-install-2025081400.zip.sig
https://releases.grapheneos.org/tokay-ota_update-2025081400.zip

Your explanation was unclear to me, may you clarify, please? Kindly may you explain that more simply, please?

Blonde

de0u

I’ve downloaded all three files into the C:\Pixel-9 (it shows c:\pixel-9 in PowerShell) folder, and I’m running PowerShell from that folder kindly, please.

I would appreciate it if you could correct the command for this specific situation and then provide me with a runnable command kindly, please?

de0u

Blonde I’m downloading all three files from these link:
https://grapheneos.org/releases#tokay
https://releases.grapheneos.org/tokay-install-2025081400.zip
https://releases.grapheneos.org/tokay-install-2025081400.zip.sig
https://releases.grapheneos.org/tokay-ota_update-2025081400.zip

The instructions say to download only two of those files. Why was the third downloaded?

Please understand that when using the command-line installation method it is very important to follow the directions exactly. It is close to impossible to permanently brick a phone while using the web installer, but it is possible to permanently brick a phone if the command-line instructions are not carefully followed.

Blonde

de0u

de0u The instructions say to download only two of those files. Why was the third downloaded?

Please note that I just noticed this.

Please help me with the CLI.

I suspect the problem began here: https://grapheneos.org/install/cli#obtaining-factory-images.

de0u

Blonde Please help me with the CLI.

Please acknowledge that continuing with the CLI method without carefully following the directions could permanently brick the phone.

Blonde

PS C:\pixel-9> curl -O https://releases.grapheneos.org/allowed_signers
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 104 100 104 0 0 104 0 0:00:01 --:--:-- 0:00:01 392

PS C:\pixel-9> curl -O https://releases.grapheneos.org/DEVICE_NAME-install-VERSION.zip
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 146 100 146 0 0 146 0 0:00:01 --:--:-- 0:00:01 848

PS C:\pixel-9> curl -O https://releases.grapheneos.org/DEVICE_NAME-install-VERSION.zip.sig
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 146 100 146 0 0 146 0 0:00:01 --:--:-- 0:00:01 719

PS C:\pixel-9> cmd /c 'ssh-keygen -Y verify -f allowed_signers -I contact@grapheneos.org -n "factory images" -s DEVICE_NAME-install-VERSION.zip.sig < DEVICE_NAME-install-VERSION.zip'
Couldn't parse signature: missing header
verify: sshsig_armor: invalid format

Blonde

PS C:\pixel-9> cmd /c 'ssh-keygen -Y verify -f allowed_signers -I contact@grapheneos.org -n "factory images" -s tokay-install-2025081400.zip.sig < tokay-install-2025081400.zip'

Good "factory images" signature for contact@grapheneos.org with ED25519 key SHA256:AhgHif0mei+9aNyKLfMZBh2yptHdw/aN7Tlh/j2eFwM

de0u

Blonde
Good "factory images" signature for contact@grapheneos.org with ED25519 key SHA256:AhgHif0mei+9aNyKLfMZBh2yptHdw/aN7Tlh/j2eFwM

??

Can you compare what was printed to what the instructions say should be printed?

Blonde

de0u

Yes, I appreciate it. It appears to say it succeeded, is that correct, please?

Blonde

Update:

I have just completed this action.

./flash-all.bat

My phone restarts itself every so often, please. What is the estimated completion time, please?

de0u

Blonde What is the estimated completion time, please?

I think it takes at least five minutes, but I don't think it takes more than 15 minutes. How much time it takes depends somewhat on what kind of computer you have.

de0u

If flashing finishes successfully, please follow the instructions for:

Locking the bootloader
Verifying the boot key hash
Disabling OEM unlocking

Blonde

de0u

de0u Locking the bootloader

Done

de0u Verifying the boot key hash

de0u Disabling OEM unlocking

It gets disabled via a setup guide, please. After enabling developer options, I made sure it was disabled, please.

de0u

de0u Verifying the boot key hash

Blonde ??

It's in the instructions!!!

https://grapheneos.org/install/cli#verified-boot-key-hash

« Previous Page Next Page »