?[ROOT][XT1607][XT1609][XT1625][XT1254] auto#initroot tethered jailbreak?? - Moto G4 Play ROMs, Kernels, Recoveries, & Other De

thread best viewed in browser not xda app
Code:
[CENTER]
_ _
_ _| | |_ _ _ _ _
___ _ _| |_ ___|_ _|_|___|_| |_ ___ ___ ___| |_
| .'| | | _| . |_ _| | | | _| _| . | . | _|
|__,|___|_| |___| |_|_| |_|_|_|_|_| |_| |___|___|_|
[/CENTER]
tethered jailbreak for bootloader-locked motos
motorola g4 play harpia amazon xt1607 + verizon xt1609
motorola turbo quark verizon xt1254
motorola g4 athene amazon xt1625
feature
double-click install
windows/mac/linux
disable ota updates*
disable amazon ads*
anti-bootloop protect*
working wifi/cellular/nfc/bt/fm
systemless root + mods with magisk
*see tips in post #2
install
download auto#initroot to computer
download magiskmanager apk to moto and install
connect moto to computer with usb cable then (re)boot moto into fastboot
double-click auto#initroot file and wait for moto to boot into jailbreak android
double-click auto#initroot file everytime you reboot moto to regain jailbreak android
uninstall
windows: double-click auto#initroot file and press "0" key when prompted
mac/linux: double-click auto#initroot file and press any key when prompted
see here for more uninstall info​
Click to expand...
Click to collapse
special thanks :
roee hay / aleph security for cve-2016-10277 / initroot
john wu for magisk / magiskmanager​

? donation are thankful ?​
what this is
i make tethered jailbreak for moto using cve-2016-10277 and initroot ideas
designed for bootloader locked motos with no root jailbreak
tethered jailbreak require computer to jailbreak
what this is not
how to use fastboot/adb/drivers
lazy posting before search
bootloader unlock
install step by step​
steps 1 and 2 run only once steps 3 and 4 needed each jailbreak after
1. download auto#initroot [here] to computer
download then unzip auto#initroot zip file
be sure auto#initroot file matches moto model#/software#
2. download magiskmanager apk [here] to moto and install
on moto enable : settings - security - “unknown sources”
on moto d/l latest magiskmanager 5.x apk and install
3. connect moto to computer with usb cable then (re)boot moto into fastboot
enter fastboot : “adb reboot bootloader” or
volume down + power at boot
4. double-click auto#initroot script and wait for moto to boot into jailbreak android
open folder unzipped in step 1-1
mac/linux users : may need to chmod +x auto#initroot script or fastboot binary
run script for computer OS and moto boot into jailbreak android
unplug usb cable and enjoy root jailbreak
run script every time moto boot into jailbreak android
read tip section for more
tips​
double-click auto#initroot to boot jailbreak android
windows : double-click auto#initroot bat file
linux : set *.sh to execute on double-click or make *.desktop file
mac : double-click auto#initroot command file
use /magisk/.core/service.d/ folder to run script at boot
use example below to make custom *.sh file(s) then put in /magisk/.core/service.d/ folder and chmod +x it​
anti-bootloop
stop ota update
stop amazon ad
stop bloat app and services
and more...
Code:
[/LIST]
#!/system/bin/sh
#move this to /magisk/.core/service.d/ folder after factory resets
#anti-bootloop -- allow harpia to reboot without computer
printf '\x31' | dd of=/dev/block/platform/msm_sdcc.1/by-name/utags bs=1 seek=90
#disable ota so #initroot not patched
pm disable com.motorola.ccc.ota
#disable bloat after factory reset
if [ ! -e "/cache/firstrun" ]; then
#disable amazon ad
pm disable com.amazon.phoenix
rm /data/data/com.android.systemui/files/boot.ad*
#add verizon xt1609 bloat
pm disable com.gotv.nflgamecenter.us.lite
pm disable com.vznavigator.Generic
#add amazon xt1607 bloat
pm disable com.amazon.widgets
pm disable com.amazon.clouddrive.photos
pm disable com.amazon.kindle
pm disable com.amazon.dee.app
pm disable com.amazon.drive
pm disable com.imdb.mobile
pm disable com.goodreads
pm disable com.audible.application
#create firstrun so only run once
touch /cache/firstrun
#end if statement
fi
#add new commands here
#end of script
exit 0
pfaq (probable frequent asked questions)​
q : why no bootloader unlock
a : need 0 days bug to set unlock qfuse
q : why jailbreak need tether
a : #initroot exploit stored in memory and gone after reboot
q : i need computer always to jailbreak android
a : yes but if no reboot always jailbreak android
q : i need computer always to boot moto
a : no use command in tips for anti-bootloop
q : i can reboot phone without computer and jailbreak android
a : no no use anti-bootloop to boot without computer but also lose jailbreak
q : must install magiskmanager before auto#initroot
a : no you can install before or after does not matter
q : must double-click only for jailbreak
a : double-click is easy but can also run script from terminal
q : must use script for jailbreak
a : no you can manually type fastboot commands in terminal
q : i put script in /magisk/.core/service.d/ why no run
a : chmod +x file.sh and it will run on jailbreak android boot
q : why no auto#initroot for my moto
a : cant do everything
q : i do everything right why no work
a : sometimes you must pull battery out moto and try again
q : auto#initroot work on non-moto
a : no moto only
q : how to disable #initroot
a : boot to fastboot run command below and #initroot never happen
Code:
fastboot oem config fsg-id “”
#initroot-able versions​
Code:
[COLOR="green"]XT1254 MCG24.251-5-5[/COLOR] <- do not upgrade past this version
[COLOR="green"]XT1607 MPIS24.241-2.35-1-13[/COLOR] <- do not upgrade past this version
[COLOR="green"]XT1607 MPI24.241-2.35-1[/COLOR]
[COLOR="green"]XT1609 MPIS24.241-2.35-1-17[/COLOR] <- do not upgrade past this version
[COLOR="green"]XT1609 MPIS24.241-2.35-1-13[/COLOR]
[COLOR="green"]XT1609 MPIS24.241-2.35-1-3[/COLOR]
[COLOR="green"]XT1609 MPI24.241-2.35-1[/COLOR]
[COLOR="green"]XT1625 NPJS25.93-14-4[/COLOR] <- do not upgrade past this version
[COLOR="Green"]XT1625 MPJ24.139-64[/COLOR]
[COLOR="Red"]XT1687 NPNS25.137-35-5[/COLOR] <- blocks #initroot
[COLOR="Green"]XT1687 NPN25.137-35[/COLOR] <- do not upgrade past this version
my comments​
make use of the custom scripts you can add to /magisk/.core/service.d/
even though bootloader lock systemless magisk help makes many mods
i hope people come up with creative ways to make these locked phones fun again
i only have xt1609 so cannot test everything myself
things may be broken for non-xt1609 moto and user must test
i thought using jailbreak sounded funny and since the root is tethered...
tethered jailbreak = tethered root
tethered root lasts until you reboot
dont reboot for month and you have root for month
initial #initroot poc was limited to root thru adb shell only
initial #initroot poc required you to be at computer for every reboot
auto#initroot gives us the ability to do system-edit like mods with magisk
auto#initroot is just a double-click away any time you need to re-root
this seems like the best possible case for bootloader-locked phone
other than bootloader unlock itself of course​
changelog​
july 19 2017 - initial release
august 3 2017 - added uninstall option to auto#initroot script + added amazon g5 play xt1687
august 6 2017 - added support for all windows versions​
error reporting​
users reporting issue should make report detailed as possible to increase chance of getting response.
details required:
1. on your phone go to settings > about phone and list:
model number
software variant/channel
android version
android security patch level
build number
2. which auto#initroot file are you using?
full name of auto#initroot folder or *.initroot file
3. what is the output from the auto#initroot script/command/bat file?
copy/paste the entire output log of command prompt/terminal window
screenshot would work if you are unable to copy/paste text
4. what os is on your computer?
windows 10 64-bit, windows 8.1 32-bit, os x 10.8.5, etc..
your report should answer all possible variables.
if error report already answered previously in thread then report will likely be ignored.
if more questions must be asked before it's possible to give you answer then report will likely be ignored.
Click to expand...
Click to collapse

Awesome work m8, hope everyone tests it ASAP .

This worked for the XT1609, wonderfully, in fact. Just dont install anything to /system and you should be gold .

autoprime said:
special thanks :
roee hay / aleph security for cve-2016-10277 / initroot
john wu for magisk / magiskmanager​
Click to expand...
Click to collapse
could this method works too on new Samsung Galaxy Note Fan Edition ? (Bootloader locked it seems... )
https://forum.xda-developers.com/note-fe

Voltz100999 said:
This worked for the XT1609, wonderfully, in fact. Just dont install anything to /system and you should be gold .
Click to expand...
Click to collapse
wise words! in fact, don't mess with system or boot and you should be good!
unless of course you know what you're doing and want to try to test things more.
wolfgart said:
could this method works too on new Samsung Galaxy Note Fan Edition ? (Bootloader locked it seems... )
https://forum.xda-developers.com/note-fe
Click to expand...
Click to collapse
no moto bug only unfortunately
to others...
as long as you used #initroot to boot...
the following should work if setup properly:
titanium backup
greenify
other apps that need root to run
systemless adblock
systemless xposed
any xposed modules that work on your model moto
any magisk modules that work on your model moto
this is pretty much like running a stock rooted rom... as long as you dont reboot.
when you do reboot you reboot into stock system with no root/magisk/xposed modifications...
until you re-run auto#initroot again from the computer.
get the phone all set up how you want it and you should be able to stay rooted the entire time you're away from the computer and never not have root/mods unless phones crashes randomly.. then you just deal with stock for a bit.
backup your data with titanium backup or helium or something before installing any mods and you mess up and end up having to factory reset to boot or something. make sure data is backed up to ext-sd, cloud, computer etc. if stored on internal sdcard you'll lose it when you factory reset.

@autoprime can you add this to the op, woke up to a couple ppl complaining about bootloops
To clear out the ramdisk address they need to run
fastboot oem config fsg-id ""
afterwards

jcase said:
@autoprime can you add this to the op, woke up to a couple ppl complaining about bootloops
To clear out the ramdisk address they need to run
fastboot oem config fsg-id ""
afterwards
Click to expand...
Click to collapse
i know you know..
but this command was explained in the second post of this thread as well as alternatives to avoid the bootloop entirely. i wish people could read. i have added the command to the first post for now... may add something to install script for easy uninstall.

I installed it on my xt1609 and it worked , then I tried to install systemless xposed in magiska, then the phone went to bootloop, I uninstalled iniroot by script and it can boot to the system .
But now I tried to install the iniroot again , it goes to bootloop again, it seemd system-less xposed did something to the system
What should I do now, thanks.

sswyu said:
I installed it on my xt1609 and it worked , then I tried to install systemless xposed in magiska, then the phone went to bootloop, I uninstalled iniroot by script and it can boot to the system .
But now I tried to install the iniroot again , it goes to bootloop again, it seemd system-less xposed did something to the system
What should I do now, thanks.
Click to expand...
Click to collapse
unplug moto and pull battery.. put battery back in and try to boot with auto#initroot again.
sometimes usb unplug and battery pull is needed for initroot to work.
if it still bootloops..
boot into fastboot
send: fastboot oem config fsg-id ""
boot into stock recovery and factory reset
now initroot should work again.
as long as system or boot is not modified then phone should always be safe
and at most just need a factory reset and
fastboot oem config fsg-id ""
to remove initroot completely and go back to a 100% stock phone.

Thank you, I think the systemless xposed in magiska did something so now the install script will only cause bootloop, maybe I should factory reset and try again, but without titanium backup , backup and restore is a pain in the ass. I will try later.

sswyu said:
Thank you, I think the systemless xposed in magiska did something so now the install script will only cause bootloop, maybe I should factory reset and try again, but without titanium backup , backup and restore is a pain in the ass. I will try later.
Click to expand...
Click to collapse
so pulling the battery and usb cable did not help?
why no titanium backup? it doesnt work with magisk? i have not tried this yet.

because now if I want to the boot to system I have to uninstall the script so no root no magiska no titanium backup.
the script works great fist time anyway, just anyone want to install xposed . YOU HAVE BEEN WARNED.

sswyu said:
because now if I want to the boot to system I have to uninstall the script so no root no magiska no titanium backup.
the script works great fist time anyway, just anyone want to install xposed . YOU HAVE BEEN WARNED.
Click to expand...
Click to collapse
ahh.. yeah you need to backup data with titanium before you start messing with it.
initroot > backup > mod moto
there are other users who have flashed systemless xposed and can still boot.. so lots of variables here.
hopefully ppl just test and report what works and we can all find the best way to do all this.

Thank you!!! I've been refreshing the SunShine download page praying for an update for droid turbo, XT1254 MCG24.251-5-5, unlocked, TWRP, and rooted! Thanks @autoprime & @jcase
Edit: I may have spoken too soon, installed superSU through TWRP, wiped dalvik/cache, rebooted, now stuck on moto powered by android screen...

Flashed a TWRP flashable zip and it booted, good to go!

JooseyJay said:
Thank you!!! I've been refreshing the SunShine download page praying for an update for droid turbo, XT1254 MCG24.251-5-5, unlocked, TWRP, and rooted! Thanks @autoprime & @jcase
Edit: I may have spoken too soon, installed superSU through TWRP, wiped dalvik/cache, rebooted, now stuck on moto powered by android screen...
Click to expand...
Click to collapse
Which supersu did you install? 2.62 is needed for DT I believe, reflash stock boot.img and reinstall supersu

What can and cant be done with this root on a locked bootloader? Would titanium backup and greenify work with this?

jcase said:
Which supersu did you install? 2.62 is needed for DT I believe, reflash stock boot.img and reinstall supersu
Click to expand...
Click to collapse
I had flashed version 2.46 on MCG24.251-5-5. I ended up flashing a SU4TL-49 stock rom and and supersu 2.46 worked with it.
I accidentally booted to system after installing twrp but before booting recovery, so I had to flash twrp a second time, as it got wrote over by stock recovery. Not sure if that had anything to do with it.

killerxda said:
What can and cant be done with this root on a locked bootloader? Would titanium backup and greenify work with this?
Click to expand...
Click to collapse
as long as you used #initroot to boot...
the following should work if setup properly:
titanium backup
greenify
other apps that need root to run
systemless adblock
systemless xposed
any xposed modules that work on your model moto
any magisk modules that work on your model moto
this is pretty much like running a stock rooted rom... as long as you dont reboot.
when you do reboot you reboot into stock system with no root/magisk/xposed modifications...
until you re-run auto#initroot again from the computer.
get the phone all set up how you want it and you should be able to stay rooted the entire time you're away from the computer and never not have root/mods unless phones crashes randomly.. then you just deal with stock for a bit.

Related

[EOL][Guide][Newbie] Resource/Help Thread [Noob Friendly][albus][Moto Z2 Play]

This guide is outdated now. Please refer to the thread OPs of the respective projects.
Hi all, I am starting this thread with the very reason to educate and help newbies as well serve as a resource guide that could be used by all. I will try my best to update this thread often. You can ask any question regarding Moto Z2 Play aka albus here. Our XDA Community will try to help you. Make sure you always read before posting the same queries. If you're stuck in a problem, make sure you provide us with as much as information of what you were exactly doing and what happened along with your device details ofcourse.
Also remember that unlocking the bootloader will void your warranty. Relocking it won't give you back your warranty. If you are visiting a service center for repairs of any kind, they will come to know that you have unlocked your bootloader (you put a code on their site lol). But yea you can try your luck by visiting them after you lock your bootloader using the fastboot firmware.
No one, but you are responsible for whatever you do to your device. If something happens due to your ignorance or lack of backups or knowledge, only you are responsible, not the developer, not the XDA Community. Just read the respective posts, search (at XDA and at Google) before posting and you might probably find answers. Cheers.
Setting up adb/fastboot on your system:
These drivers are quite essential for every android user.
How to use?
Windows:
Minimal Fastboot/ADB: https://www.androidfilehost.com/?fid=745425885120698566
Just install the setup. Reboot your phone in bootloader mode (Power off and then press and hold power + vol down simultaneously) and connect via USB cable. On your computer, navigate to the directory where you installed them. Press shift+right click and choose Open Command Window / Powershell here. Type:
Code:
fastboot devices
If you get a serial number, fastboot is working.
For adb to work enable Developer Options and turn on USB Debugging on your device. Open Settings app on your device and go to About Phone section. Next, tap 7 times on Build Number and get the Developer Options enabled.
Now authorize USB Debugging by allowing it (Choose something like Always trust)
Type this on your command window / powershell window:
Code:
adb devices
Again it should return a serial number.
If both these fail, you might consider rebooting your computer or even installing (MDM) motorola device manager. Make sure you don't have any crappy or outdated drivers. (Always keep your system upto date ) Anything else, you'll have to google up things.
Motorola Device Manager:
For more info regarding adb/fastboot open this: https://developer.android.com/studio/command-line/adb.html
Linux users might need to install it from their respective package manager repos, Ubuntu for example:
Code:
sudo apt install android-tools-adb && sudo apt install android-tools-fastboot
Arch Linux on the other hand:
Code:
yaourt -S android-tools --noconfirm
Similarly for the other distros.
Commands are the same. fastboot needs to be used with sudo.
Unlocking the bootloader:
Unlocking Bootloader
>>> Unlocking Bootloader will overwrite any data stored on your device, backup your files before proceeding <<<
Unlocking Bootloader:
1- Register
Head to Motorola website https://motorola-global-portal.custhelp.com/app/standalone/bootloader/unlock-your-device-b and register your E-Mail ID.
Open Settings app on your device and go to About Phone section. Next, tap 7 times on Build Number and get the Developer Options enabled.
Head back to Main Settings Menu and go to Developer Options and switch the 'Allow OEM Unlock' option.
2- Getting Unique ID for each device
Reboot to Bootloader/fastboot mode (power off the device, then press the power and volume down buttons simultaneously).
On your computer, go to the directory where you installed the adb/fastboot drivers (or make sure this folder is in your $PATH to acess fastboot and adb system wide).
Open CMD/Powershell/bash in here. (Windows users might need to Shift+Right Click and choose "Open Command/Powershell Window here" , Linux users can open terminal as per their respective distro. Now , type
Code:
Code:
fastboot oem get_unlock_data
You will get something like this:
On a Windows Desktop, the returned string format would be:
Code:
(bootloader) 0240540162024205#4C4D3556313230
(bootloader) 30373as313630330df332323239#BD00
(bootloader) 8A672BA4746C2CE0a328A2AC0C39F95
(bootloader) 1A3E5#1F53280002000000000000000
(bootloader) 0000000
On a Mac OS Desktop, the returned string format would be
Code:
Code:
INFO0A40040192024205#4C4D3556313230
INFO30373731363031303332323239#BD00
INFO8A672BA4746C2CE02328A2AC0C39F95
INFO1A3E5#1F53280002000000000000000
INFO0000000
Paste together the 5 lines of output into one continuous string without (bootloader) or ‘INFO’ or white spaces. Your string needs to look like this:
Code:
0240540162024205#4C4D355631323030373as313630330df332323239#BD008A672BA4746C2CE0a328A2AC0C39F951A3E5#1F532800020000000000000000000000
3- Unlocking the device:
Check if your device can be unlocked by pasting this string in the specific field on the Motorola website, and clicking “Can my device be unlocked?”
NOTE: If your device is unlockable, a "REQUEST UNLOCK KEY" button will now appear at the bottom of that page. Click on it and wait for the unique code to be sent to your mail.
After you got the code type the following :
Code:
fastboot oem unlock your_code
and wait your device to reboot !
Flashing TWRP Recovery:
IMPORTANT NOTE :
At first boot twrp will ask for "Swipe to allow modifications for /system" and if you choose to allow it system partition will get modified. So if you choose to reboot back to OS without performing anything in twrp, the OS won't boot (as verity check is enabled in stock OS/kernel) . To avoid this you have to flash either SuperSU or flash any of the verity disabler zips there in xda.
Force encryption is enabled by default in stock OS and twrp will successfully decrypt /data at first boot if all goes well
If in case decryption doesn't go fine, twrp will popup a dialog box asking for password and that means decryption went wrong and you would need to format data once via twrp wipe options and reboot back to twrp for functioning of /data
Downloads : http://www.androiddevs.net/downloads/
Keep the twrp recovery file (.img extension) in the adb/fastboot folder
Reboot to bootloader, open cmd/bash and type:
Code:
fastboot flash recovery filename.img
(if you want permanent flash) or
Code:
fastboot boot filename.img
(if you want temporary
boot)
Now you must flash the verity disabler zip.
HIGHLY RECOMMENDED:
After the twrp is done and you have successfully rebooted to system, it is a good time to reboot to TWRP again and backup your phone. (System and Boot most necessary)
Flashing Stock ROM:
Will be updated as soon as the fastboot version of the stock ROM is available.
Unbricking your hard bricked/dead device:
Connect your device via the usb cable, extract this zip file to the adb/fastboot folder and then run:
blankflash.bat file if on windows; the .sh file if on linux.
Once this is completed, you must flash the full stock firmware via fastboot. This is MANDATORY.
Blankflash zip: http://cloud.vache-android.com/Moto/albus/blankflash/blankflash.zip
Reserved
please forgive the ignorance, but is this device fully unlockable in the same fashion that Nexus devices are, similar method if i'm reading this correctly? Im very used to unlockable bootloaders on VZW
OneArm said:
please forgive the ignorance, but is this device fully unlockable in the same fashion that Nexus devices are, similar method if i'm reading this correctly? Im very used to unlockable bootloaders on VZW
Click to expand...
Click to collapse
Yeah, I am not sure what is going on this time around with the VZW variant. Since the Droid Z was bootloader locked and the unlocked Z wasn't (but not VZW compatible) I am almost expecting the same here, but I keep being told that the unlocked version of the Z2 will work on Verizon so maybe they just don't care anymore. I mean, the unlocked Nexus 6 and VZW Nexus 6 were pretty much the same phone too, and both were bootloader unlockable.
The only thing that gives me pause from going out now and getting the VZW version vs the unlocked model (whenever its slated to come out) is that Motorola's Bootloader Unlock page doesn't have it listed (yet). Either it can be and they are behind on updating the list, or it can't... at which point the unlocked one will be listed with a (Except VZW Model) like the other phones have. But... if either version works on VZW... what's the point of making one unlockable and the other not? Seems like a waste of time.... of course VZW's past decisions on phones don't make sense in some aspects.
All I know is... I want one of these if they are unlocked. Once the keyboard mod is released I will be back to the nerdy bliss that is a sliding keyboard and making this phone the spiritual successor to the Droid 4.
After flash twrp when rebooting the mobile system, stopped in screen of bootloader unlocked .... how to proceed help me: /
---------- Post added at 06:05 PM ---------- Previous post was at 05:46 PM ----------
After installing TWRP it asked for the encryption password so I put it and it opened normal I went to restart> system, then appeared option to install the application twrp, I slipped it to be installed, then went on reboot> system and stopped on the screen Of bootloader unlocked .. help me: |
m.lucas said:
After flash twrp when rebooting the mobile system, stopped in screen of bootloader unlocked .... how to proceed help me: /
Click to expand...
Click to collapse
I have same issue yesterday and recovered by flashing Dm-verity and Forced Encryption Disabler via TWRP.
I think this issue is caused because SuperSU is NOT flashed correctly. Thus TWRP modifies system-area without disabling dm-verity, and results bootloop.
I have solved bootloop with disabler, but failure of installing SuperSU has not solved yet. Disabler seems no effect for FE...
SuperSU shows error message as below while flashing.
Code:
- Extracting ramdisk
--- Failure, aborting
As far as googleing this message, moto Z users have met same issue.
Ultimate solution is to extract, modify and rewrite boot.img:.
yunzo said:
I have same issue yesterday and recovered by flashing Dm-verity and Forced Encryption Disabler via TWRP.
I think this issue is caused because SuperSU is NOT flashed correctly. Thus TWRP modifies system-area without disabling dm-verity, and results bootloop.
I have solved bootloop with disabler, but failure of installing SuperSU has not solved yet. Disabler seems no effect for FE...
SuperSU shows error message as below while flashing.
Code:
- Extracting ramdisk
--- Failure, aborting
As far as googleing this message, moto Z users have met same issue.
Ultimate solution is to extract, modify and rewrite boot.img:.
Click to expand...
Click to collapse
how should I proceed? My device has no ROM only TWRP installed. :s
m.lucas said:
how should I proceed? My device has no ROM only TWRP installed. :s
Click to expand...
Click to collapse
Start TWRP, and you can transfer zip file from PC by using "adb push"
"adb sideload" may work too.
yunzo said:
I have same issue yesterday and recovered by flashing Dm-verity and Forced Encryption Disabler via TWRP.
I think this issue is caused because SuperSU is NOT flashed correctly. Thus TWRP modifies system-area without disabling dm-verity, and results bootloop.
I have solved bootloop with disabler, but failure of installing SuperSU has not solved yet. Disabler seems no effect for FE...
SuperSU shows error message as below while flashing.
Code:
- Extracting ramdisk
--- Failure, aborting
As far as googleing this message, moto Z users have met same issue.
Ultimate solution is to extract, modify and rewrite boot.img:.
Click to expand...
Click to collapse
Don't use SuperSU.
Use Magisk-v13.0(54e6a79)
https://forum.xda-developers.com/apps/magisk/beta-magisk-v13-0-0980cb6-t3618589
Junior Passos said:
Don't use SuperSU.
Use Magisk-v13.0(54e6a79)
https://forum.xda-developers.com/apps/magisk/beta-magisk-v13-0-0980cb6-t3618589
Click to expand...
Click to collapse
Thank you for information.
I have just tried Magisk, but failed with error message as below.
Code:
mounting /data/magisk.img to /magisk
! Magisk image mount failed...
Updater process ended with ERROR: 1
Error installing zip file '/sdcard/Magisk-v13.0(54e6a79).zip'
It is same for latest version (c4377ed).
yunzo said:
Thank you for information.
I have just tried Magisk, but failed with error message as below.
Code:
mounting /data/magisk.img to /magisk
! Magisk image mount failed...
Updater process ended with ERROR: 1
Error installing zip file '/sdcard/Magisk-v13.0(54e6a79).zip'
It is same for latest version (c4377ed).
Click to expand...
Click to collapse
Latest version don't work.
I use Magisk-v13.0(54e6a79) on my Moto Z2 Play.
Z2 Play stock ROM needed.
Anyone help to search complete stock Noughat Rom, for the Z2 Play (Indian retail unit model no XT 1710-10), I did not find yet. Please help will be highly appreciated.
---------- Post added at 03:32 AM ---------- Previous post was at 03:26 AM ----------
tywinlannister7 said:
Reserved
Click to expand...
Click to collapse
Z2 Play stock ROM needed.
Anyone help to search complete stock Noughat Rom, for the Z2 Play (Indian retail unit model no XT 1710-10), I did not find yet. Please help will be highly appreciated.
@niteshpant kindly edit your post and remove the reserved post from the quote.
Moreover, the links will be added here as soon as the firmware is available.
Junior Passos said:
Latest version don't work.
I use Magisk-v13.0(54e6a79) on my Moto Z2 Play.
Click to expand...
Click to collapse
As I wrote before, I have failed both of 54e6a79 and latest.
Error message on TWRP is same.
Have you met this message but rooted successfully after boot?
Today I tried system-mode SuperSU, and met boot failure which continues to show Motorola/lenovo logo.
It is different from dm-Verity failure (which shows unlock warning).
Stuck in TWRP, Help
I have successfully flashed the TWRP but now it is looping at TWRP and when try to do factory reset, in just seconds it is boot again and shows TWRP main screen again, moreover storage shows about 50000 mb in internal memory, secondly my memory card is not accessible, selection is not working only shows internal memory. As I think at this stage my bootloader(stock) is fine, original stock recovery is replaced by the TWRP 3110 . My factory Android rom is still there in my phone because twrp inernal memory option shows about 50000 mb space captured in internal storage. I have clear delvik and cache but all fails, how I can get the OS by the TWRP. I assume if my old OS has been erased then twrp should have give the "no OS install" massage but this is not happening in my case. Any help...... I am not doing something more due to complete device failure in this stage mainthing is this no factory rom image is available yet, very annoying issue.... regards

[ GUIDE ] [ ANDROID 10 ROOT ] [ HOW TO ] Patching Boot.img with Magisk

Here's how to root the Pixel 3 running on official and stock Android 10 release, step by step :
(not tested on Pixel 3 XL but it might work the same, just use the right firmware for your device)
What do you need :
> Pixel 3 phone with Android 10
> Unlocked bootloader on your Pixel device
> Latest ADB and FASTBOOT tools on your computer
1 ) Download the latest Android 10 factory image for your device ("Blueline" is the regular Pixel 3) :
Link > Android 10 factory image
2 ) Extract the "boot.img" file on your phone
3 ) Download latest Magisk Manager application on your phone and install it :
Link > https://forum.xda-developers.com/apps/magisk/official-magisk-v7-universal-systemless-t3473445
4 )Press on the Install Magisk button (the one on the top, not the Magisk Manager), then Install > Select and Patch a File and now select the Boot.img file you extracted earlier. When the process is done, just put the patched boot.img file on your computer in the same folder as your ADB and FASTBOOT tools, the file's name is magisk_patched
5 ) Enable adb debugging on your Pixel phone and connect it to your computer via USB.
Open a command prompt on your computer and migrate to the folder where the ADB and Fastboot tools are located.
(for exemple, for me it's : cd C:\\adb).
7 ) Reboot your phone to fastboot by typing adb reboot bootloader
8 ) Flash the Boot.img you just patched with magisk by typing fastboot flash boot magisk_patched.img
9 ) When i'ts done, reboot by typing fastboot reboot
10 ) Open your Magisk Manager app and chek if everything is good, and it should be ! You can now install Adaway after you enable Systemless root in the Magisk settings and rebooting your phone.
Note that this guide is actually for using adaway. I don't know if it will work for any other root related feature on your phone.
Great guide, thanks!
ibolito said:
11 ) Open your Magisk Manager app and chek if everything is good, and it should be ! You can now install Adaway after you enable Systemless root in the Magisk settings.
Click to expand...
Click to collapse
I would just add not to forget to reboot again after enabling Systemless hosts in the Magisk settings and before installing Adaway (or after installing any other module)
bafforosso said:
Great guide, thanks!
I would just add not to forget to reboot again after enabling Systemless hosts in the Magisk settings and before installing Adaway (or after installing any other module)
Click to expand...
Click to collapse
Thanks its done!
I get a "This site can't be reached" message when I click the link for magisk manager in step 3. Not sure if anyone else sees it.
Thank you for making this guide!
Thanks, works perfectly!
I think my boot.img was not patched successfully. The original file has 64 mb while the patched one has only 30 mb. I've already pdated to Android 10. When I try to path the boot.img I get the following error: FAILED (remote: Not allowed to flash (bootb))
Could anyone please send me his patched boot.img?
Oberbergler said:
I think my boot.img was not patched successfully. The original file has 64 mb while the patched one has only 30 mb. I've already pdated to Android 10. When I try to path the boot.img I get the following error: FAILED (remote: Not allowed to flash (bootb))
Could anyone please send me his patched boot.img?
Click to expand...
Click to collapse
Don't worry the new patched boot.img is 30mb, that's absolutely normal. Make sure you have unlocked your bootloader and that your phone's firmware matches the one you used to extract the boot.img. And also make sure your files are all in the same folder (adb and fastboot files + patched boot.img) and, most important of all, check if your platform tools (adb and fastboot) are up to date, then tell us if you managed to make it work.
If I updated via ota adb side load to 10. But used the boot.img from the factory image, would this explain why it did boot, however not one app would start. The system ui would then crash. Just trying to figure out where I screwed up. Thank you.
ibolito said:
Don't worry the new patched boot.img is 30mb, that's absolutely normal. Make sure you have unlocked your bootloader and that your phone's firmware matches the one you used to extract the boot.img. And also make sure your files are all in the same folder (adb and fastboot files + patched boot.img) and, most important of all, check if your platform tools (adb and fastboot) are up to date, then tell us if you managed to make it work.
Click to expand...
Click to collapse
Thanks man Everything was right but I forgot to update adb and fastboot. Now I have root
ignore me -- im idiot.
i am not sure if my pixel 3 is really rooted. all the apps requiring root says they are granted root access, but, for example, i cannot modify system files with a root file manager at all unlike i could with android 9. how can i confirm it is surely rooted?
So I have a problem, maybe someone can help me with.
Back in March I made the following post:
"I was running on the original September Update since I got the phone, I used this guide when I first rooted https://www.xda-developers.com/googl...r-root-magisk/
Today I decided it was time to update so I used this guide https://www.xda-developers.com/flash...-google-pixel/
Then I wanted to reroot my phone. So I bootet the TWRP image and flashed the magisk 18.1 zip. But after that I softbricked my phone and it wouldn't boot anymore.
So in my panic I flashed the TWRP zip and my phone worked again, but now everytime I try to flash the magsik zip the same thing happens, bootloop and back to flashing twrp.zip. "
After that didn't work, I tried flashing the magisk uninstaller, through twrp, but it exited with "Error 1" everytime. (Running TWRP 3.3.0)
So i decided to give up, because I had some personal stuff to take care of, but after Android 10 came out yesterday, I decided to give this another go.
I flashed the factory image without "-w" and everything is working fine. So today I followed this guide, double checked everything but after I flash the patched boot image I get stuck with a bootloop again... I can flash back the original boot image and everything works so it's not a huge deal, but right now I can't use google pay, because it says I'm rooted.
Any idea what I could do? Can't run the uninstaller and can't reroot... ???
thanks!
Have you checked if your patched boot.img matches the firmware on your phone?
Well it's the same one I used to flash the firmware.
I flashed yesterday without an issue and today I loaded that boot.img onto my phone, used the canary magisk manager to patch it and then transfered it back to my PC to flash it.
Edit: I'm thinking this might have to do with the fact that I couldn't uninstall magisk before.
I went back to Pie because Viper4Android doesn't work on 10. No matter what version. The Legacy version I usually use keeps asking me to install the driver like it had on previous phones when installs were borked.
GohanBurner said:
I went back to Pie because Viper4Android doesn't work on 10. No matter what version. The Legacy version I usually use keeps asking me to install the driver like it had on previous phones when installs were borked.
Click to expand...
Click to collapse
I had it working before I bodged a magisk module install
No luck here. The steps SEEM to work perfectly. Flashed the modified boot image, booted up fine, but magisk says it's still not installed. No root.
- Latest magisk canary
- Used the same firmware
- No errors anywhere along the way
Hey Mac users, I had to use the command fastboot flash boot_b magisk_patched.img
To get the patched image over to my phone. It worked out great. I was able to reboot,
and see the root in Magisk Manager.
YMMV
Thanks, worked like a charm on Linux with latest platform-tools! I thought I'd have to wait a lot longer to get root back on my device.
I have also tried this multiple times. No errors, but I can't edit system files or add modules.

Question ROMs or roote methods?

I just got one of these bad boys and i about rooted it and flashed an older models ROM before i realized i had the 2021 model
I imagine we will have to wait for stock firmware to show up before we can root
[Edited to clean up instructions]
I have the xt2117-4 version of the moto g power 2021 and the following worked for me to get root Using Magisk.
There is only one issue I had and this was because of Magisk. Some apps have issue's using fingerprint if Magisk is not set correctly. I will add the setting to fix fingerprint on apps at end. As always try at your own risk.
if you have a pin or security code remove it as touch screen for me did not work so had to manually type in twrp adb commands to backup boot and not knowing how to add security codes to twrp adb backup fails.
You need to have unlocked your bootloader and usb drivers from Motorola and phone in usb debug mode in developer options.
Now plug in usb cable to computer and phone
On the PC
Install adb (plenty of info on this and other sites how to do this). Then get moto g play twrp recovery image #1 from
BuildBox
mirror.theogpanda.workers.dev
Put it into adb folder on PC and rename it recovery.img
Start phone in bootloader mode by using power and volume down button
Once phone is in bootloader mode on pc at command prompt in adb directory run
fastboot boot recovery.img
this side loads it and does not replace your recovery.
Once twrp is fully loaded on your phone on the pc at command prompt in adb directory run
adb shell twrp backup B
this will back up boot.emmc.win to twrp directory on your phone and can be seen using a file explorer. The twrp folder is at the same levels as photos, alarms, etc
After backup is completed, hold down power button until phone reboots. I cannot remember if it boots to the phone or bootloader, at this point we want to boot to phone and allow usb file transfer.
Now use windows file explorer and copy boot.emmc.win to the pc and rename it boot.img and then put it in the adb directory. Reboot phone to bootloader again and in command prompt in adb directory run.
fastboot boot boot.img
this sideloads it and makes sure it boots right.
Put the phone to usb transfer mode again then copy boot.img to the download folder of the phone and install Magisk following method 2 from this guide
How to Install Magisk and Root Android Devices with it [2 Methods]
In this comprehensive guide, we will show you how to install Magisk Universal Systemless Interface to root Android devices. There are two different methods to install it – First…
www.thecustomdroid.com
Once rooted and finding a app that finger prints do not work on you can hide Magisk from the app. In Magisk manager click on shield at bottom. Click on magisk hide grey bar and select only apps not working as I heard putting in to many can cause issues (cannot verify but why try) Now programs should work with fingerprint.
Don't forget to keep original boot.img incase you have to restore it
If you loaded Magisk and are having problems with banking app look at this post and he has another setting in Magisk that you can change to fix this. It is under the heading "a note about mobile banking apps".
Rooting with Magisk
Just a heads up to anyone who is wondering about root for this phone - I successfully rooted it with Magisk. It was pretty easy. Basically I just followed the same steps as outlined in this thread, which was for rooting last year's Moto G Stylus...
forum.xda-developers.com
kbwojo said:
I imagine we will have to wait for stock firmware to show up before we can root
Click to expand...
Click to collapse
Stock firmware maybe available with LMSA' s Flash rescue option
Rescue and Smart Assistant (LMSA)(Motorola/Lenovo Only)
Rescue and Smart Assistant LMSA: Lenovo's Motorola Smart Assistant (PC) For Lenovo and Motorola Devices Only Rescue and Smart Assistant (LMSA) is an official tool installs on PC. Can help to manage smart device (include all Lenovo android phone...
forum.xda-developers.com
Fun... I made my first brick using that panda build box link.
kbwojo said:
[Edited to clean up instructions]
I have the xt2117-4 version of the moto g power 2021 and the following worked for me to get root Using Magisk.
There is only one issue I had and this was because of Magisk. Some apps have issue's using fingerprint if Magisk is not set correctly. I will add the setting to fix fingerprint on apps at end. As always try at your own risk.
if you have a pin or security code remove it as touch screen for me did not work so had to manually type in twrp adb commands to backup boot and not knowing how to add security codes to twrp adb backup fails.
You need to have unlocked your bootloader and usb drivers from Motorola and phone in usb debug mode in developer options.
Now plug in usb cable to computer and phone
On the PC
Install adb (plenty of info on this and other sites how to do this). Then get moto g play twrp recovery image #1 from
BuildBox
mirror.theogpanda.workers.dev
Put it into adb folder on PC and rename it recovery.img
Start phone in bootloader mode by using power and volume down button
Once phone is in bootloader mode on pc at command prompt in adb directory run
fastboot boot recovery.img
this side loads it and does not replace your recovery.
Once twrp is fully loaded on your phone on the pc at command prompt in adb directory run
adb shell twrp backup B
this will back up boot.emmc.win to twrp directory on your phone and can be seen using a file explorer. The twrp folder is at the same levels as photos, alarms, etc
After backup is completed, hold down power button until phone reboots. I cannot remember if it boots to the phone or bootloader, at this point we want to boot to phone and allow usb file transfer.
Now use windows file explorer and copy boot.emmc.win to the pc and rename it boot.img and then put it in the adb directory. Reboot phone to bootloader again and in command prompt in adb directory run.
fastboot boot boot.img
this sideloads it and makes sure it boots right.
Put the phone to usb transfer mode again then copy boot.img to the download folder of the phone and install Magisk following method 2 from this guide
How to Install Magisk and Root Android Devices with it [2 Methods]
In this comprehensive guide, we will show you how to install Magisk Universal Systemless Interface to root Android devices. There are two different methods to install it – First…
www.thecustomdroid.com
Once rooted and finding a app that finger prints do not work on you can hide Magisk from the app. In Magisk manager click on shield at bottom. Click on magisk hide grey bar and select only apps not working as I heard putting in to many can cause issues (cannot verify but why try) Now programs should work with fingerprint.
Don't forget to keep original boot.img incase you have to restore it
Click to expand...
Click to collapse
Is there a way to root the xt2117-1 version without a pc?
Knox-jack said:
Is there a way to root the xt2117-1 version without a pc?
Click to expand...
Click to collapse
No
Rooting these phones is dead simple. If you boot into bootloader mode, you can find your device's codename. Look for your codename on the lolinet site, select your varient, and download your firmware. Be sure to share the codename here so links can be updated.
Then you unlock your bootloader, patch boot.img you got from the firmware archive with Magisk, and flash the patched image through fastboot.
Seen any Roms for this floating around?
pontifier said:
Fun... I made my first brick using that panda build box link.
Click to expand...
Click to collapse
Did you FLASH recovery.img, instead of BOOT recovery.img?
It's pretty hard to perma brick phones these days. You can probably reflash device with LMSA -
Rescue and Smart Assistant (LMSA)(Motorola/Lenovo Only)
Rescue and Smart Assistant LMSA: Lenovo's Motorola Smart Assistant (PC) For Lenovo and Motorola Devices Only Rescue and Smart Assistant (LMSA) is an official tool installs on PC. Can help to manage smart device (include all Lenovo android phone...
forum.xda-developers.com
kbwojo said:
[Edited to clean up instructions]
I have the xt2117-4 version of the moto g power 2021 and the following worked for me to get root Using Magisk.
There is only one issue I had and this was because of Magisk. Some apps have issue's using fingerprint if Magisk is not set correctly. I will add the setting to fix fingerprint on apps at end. As always try at your own risk.
if you have a pin or security code remove it as touch screen for me did not work so had to manually type in twrp adb commands to backup boot and not knowing how to add security codes to twrp adb backup fails.
You need to have unlocked your bootloader and usb drivers from Motorola and phone in usb debug mode in developer options.
Now plug in usb cable to computer and phone
On the PC
Install adb (plenty of info on this and other sites how to do this). Then get moto g play twrp recovery image #1 from
BuildBox
mirror.theogpanda.workers.dev
Put it into adb folder on PC and rename it recovery.img
Start phone in bootloader mode by using power and volume down button
Once phone is in bootloader mode on pc at command prompt in adb directory run
fastboot boot recovery.img
this side loads it and does not replace your recovery.
Once twrp is fully loaded on your phone on the pc at command prompt in adb directory run
adb shell twrp backup B
this will back up boot.emmc.win to twrp directory on your phone and can be seen using a file explorer. The twrp folder is at the same levels as photos, alarms, etc
After backup is completed, hold down power button until phone reboots. I cannot remember if it boots to the phone or bootloader, at this point we want to boot to phone and allow usb file transfer.
Now use windows file explorer and copy boot.emmc.win to the pc and rename it boot.img and then put it in the adb directory. Reboot phone to bootloader again and in command prompt in adb directory run.
fastboot boot boot.img
this sideloads it and makes sure it boots right.
Put the phone to usb transfer mode again then copy boot.img to the download folder of the phone and install Magisk following method 2 from this guide
How to Install Magisk and Root Android Devices with it [2 Methods]
In this comprehensive guide, we will show you how to install Magisk Universal Systemless Interface to root Android devices. There are two different methods to install it – First…
www.thecustomdroid.com
Once rooted and finding a app that finger prints do not work on you can hide Magisk from the app. In Magisk manager click on shield at bottom. Click on magisk hide grey bar and select only apps not working as I heard putting in to many can cause issues (cannot verify but why try) Now programs should work with fingerprint.
Don't forget to keep original boot.img incase you have to restore it
Click to expand...
Click to collapse
I have tried this method on a linux system and a windows version and yhe twrp program always goes to straight to a lockscreen and doesnt stay
kbwojo said:
[Edited to clean up instructions]
I have the xt2117-4 version of the moto g power 2021 and the following worked for me to get root Using Magisk.
There is only one issue I had and this was because of Magisk. Some apps have issue's using fingerprint if Magisk is not set correctly. I will add the setting to fix fingerprint on apps at end. As always try at your own risk.
if you have a pin or security code remove it as touch screen for me did not work so had to manually type in twrp adb commands to backup boot and not knowing how to add security codes to twrp adb backup fails.
You need to have unlocked your bootloader and usb drivers from Motorola and phone in usb debug mode in developer options.
Now plug in usb cable to computer and phone
On the PC
Install adb (plenty of info on this and other sites how to do this). Then get moto g play twrp recovery image #1 from
BuildBox
mirror.theogpanda.workers.dev
Put it into adb folder on PC and rename it recovery.img
Start phone in bootloader mode by using power and volume down button
Once phone is in bootloader mode on pc at command prompt in adb directory run
fastboot boot recovery.img
this side loads it and does not replace your recovery.
Once twrp is fully loaded on your phone on the pc at command prompt in adb directory run
adb shell twrp backup B
this will back up boot.emmc.win to twrp directory on your phone and can be seen using a file explorer. The twrp folder is at the same levels as photos, alarms, etc
After backup is completed, hold down power button until phone reboots. I cannot remember if it boots to the phone or bootloader, at this point we want to boot to phone and allow usb file transfer.
Now use windows file explorer and copy boot.emmc.win to the pc and rename it boot.img and then put it in the adb directory. Reboot phone to bootloader again and in command prompt in adb directory run.
fastboot boot boot.img
this sideloads it and makes sure it boots right.
Put the phone to usb transfer mode again then copy boot.img to the download folder of the phone and install Magisk following method 2 from this guide
How to Install Magisk and Root Android Devices with it [2 Methods]
In this comprehensive guide, we will show you how to install Magisk Universal Systemless Interface to root Android devices. There are two different methods to install it – First…
www.thecustomdroid.com
Once rooted and finding a app that finger prints do not work on you can hide Magisk from the app. In Magisk manager click on shield at bottom. Click on magisk hide grey bar and select only apps not working as I heard putting in to many can cause issues (cannot verify but why try) Now programs should work with fingerprint.
Don't forget to keep original boot.img incase you have to restore it
Click to expand...
Click to collapse
Hello. I just got one of these on accident. Meant to get a G9 Power. Oh well. I will still love it. Having rooted countless phones and a great many Motos, I went to root mine without looking for instructions. I fastboot flashed the entire RETUS from lolinet, magisk patched and flashed the new kernel, and then booted to a phone without a working digitizer. Not only that, but when I flashed the original back on it, it didn't fix it. Still no digitizer. I then flashed the entire RETUS again, including the same kernel, and it fixed, but of course I had to set everything up again. I made a fastboot command list though, for flashing firmware from lolinet, if anyone could use it. It's on my computer though. I'll have to share it later. I just made this post to warn others of possible problems with a magisk-patched boot.img.
And also to thank @kbwojo . I've many times wished we could use twrp from a command line. Where did you learn that? Is there a manual?
Oh, BTW, the codename for xt2117-4 is borneo.
arkansawdave74 said:
Hello. I just got one of these on accident. Meant to get a G9 Power. Oh well. I will still love it. Having rooted countless phones and a great many Motos, I went to root mine without looking for instructions. I fastboot flashed the entire RETUS from lolinet, magisk patched and flashed the new kernel, and then booted to a phone without a working digitizer. Not only that, but when I flashed the original back on it, it didn't fix it. Still no digitizer. I then flashed the entire RETUS again, including the same kernel, and it fixed, but of course I had to set everything up again. I made a fastboot command list though, for flashing firmware from lolinet, if anyone could use it. It's on my computer though. I'll have to share it later. I just made this post to warn others of possible problems with a magisk-patched boot.img.
And also to thank @kbwojo . I've many times wished we could use twrp from a command line. Where did you learn that? Is there a manual?
Oh, BTW, the codename for xt2117-4 is borneo.
Click to expand...
Click to collapse
I did try a few things that didn't work. What I ended up doing was just flash boot the original boot.img and that basically reset magisk
Just giving an update and a thanks again to @kbwojo . I finally booted a patched kernel by patching a kernel extracted with twrp in the command line. All the kernels from lolinet caused me to lose touch support after patching, even if I was running the same version the kernel was from. But when I patched it after pulling the kernel with twrp, all is good. Whew. That was different.
Well i have done it. I have rooted my phone .
moto g power (2021)
model XT117-4
Android version 10
basebrand version : HA10_18.534.0273R BORNEO_NA_CUST
Kernel version 4.19.95-perf + #1 Wed Mar 31 12:08:54 CDT 2021
After extensive reading multiple threads i found one and followed the attemt using magisk and no twrp installed.
1st Magisk installed on phone
2nd Install magisk and then patch using the boot.img from a mirror site for Borneo
3rd (not sure yet) Install magisk and then patch file recovery.img (originaly TWRP 3.4 renamed)
renamed the 2 magisk files accordingly to boot and recovery
Fastboot flash boot boot.img
fastboot flash recovery recovery.img
restarted phone directly back into fastboot mode
selected recovery option and started the phone
Sucessful Root!!!!
slickmojo said:
Well i have done it. I have rooted my phone .
moto g power (2021)
model XT117-4
Android version 10
basebrand version : HA10_18.534.0273R BORNEO_NA_CUST
Kernel version 4.19.95-perf + #1 Wed Mar 31 12:08:54 CDT 2021
After extensive reading multiple threads i found one and followed the attemt using magisk and no twrp installed.
1st Magisk installed on phone
2nd Install magisk and then patch using the boot.img from a mirror site for Borneo
3rd (not sure yet) Install magisk and then patch file recovery.img (originaly TWRP 3.4 renamed)
renamed the 2 magisk files accordingly to boot and recovery
Fastboot flash boot boot.img
fastboot flash recovery recovery.img
restarted phone directly back into fastboot mode
selected recovery option and started the phone
Sucessful Root!!!!
Click to expand...
Click to collapse
Can anyone confirm this works?
Just bought a G Power 2021 after thinking it was supported for custom roms already. It should just be arriving today and if i can't unlock the bootloader and root it I'm going to be returning it and getting the 2020, which I'm already considering even if i can be rooted.
Thank you
MyNameIsEarlB said:
Can anyone confirm this works?
Just bought a G Power 2021 after thinking it was supported for custom roms already. It should just be arriving today and if i can't unlock the bootloader and root it I'm going to be returning it and getting the 2020, which I'm already considering even if i can be rooted.
Thank you
Click to expand...
Click to collapse
the 2021 can be rooted, that is what I use with root, and heavily modified UI. You can even change things so system is writable (but will need a computer with linux, or a VM to complete the process), after bootloader unlocked and rooted. But does not presently have any custom ROMs for the device, however some in this branch of the forums have cited they are working on one. If I had the time to, I'd tinker and try my hand at porting LineageOS, or similar fairly easy to port, since TWRP is mostly done or doable for 99% of these devices, there are some that still have touch issues, and that seems to be all digitizer and screen related like mentioned in this thread. As long as you restore yours from the Motorola software and grab your stock files, when they are restored, it has touch, you know you can always fix it back even if a test flash of TWRP has no touch. But then it is not that hard to build from those files the TWRP, even in Android Image Kitchen. I made mine have touch support the hackish way before the compiled way.
So it can absolutely be done, just play things smart with it is all keeping backups of vital files and so on so you have stock even with data loss as the worst that would happen from messing about.
Edit: You will need to keep the device online, wifi and cell data for at least a day if not two before bootloader unlock option in settings will usually permit being toggled on. I know in my experience I got mine on a Friday, and it was not till Sunday about mid-day that it popped, and I'd check it every few hours that I was awake otherwise in that time.
Onoitsu2 said:
the 2021 can be rooted, that is what I use with root, and heavily modified UI. You can even change things so system is writable (but will need a computer with linux, or a VM to complete the process), after bootloader unlocked and rooted. But does not presently have any custom ROMs for the device, however some in this branch of the forums have cited they are working on one. If I had the time to, I'd tinker and try my hand at porting LineageOS, or similar fairly easy to port, since TWRP is mostly done or doable for 99% of these devices, there are some that still have touch issues, and that seems to be all digitizer and screen related like mentioned in this thread. As long as you restore yours from the Motorola software and grab your stock files, when they are restored, it has touch, you know you can always fix it back even if a test flash of TWRP has no touch. But then it is not that hard to build from those files the TWRP, even in Android Image Kitchen. I made mine have touch support the hackish way before the compiled way.
So it can absolutely be done, just play things smart with it is all keeping backups of vital files and so on so you have stock even with data loss as the worst that would happen from messing about.
Edit: You will need to keep the device online, wifi and cell data for at least a day if not two before bootloader unlock option in settings will usually permit being toggled on. I know in my experience I got mine on a Friday, and it was not till Sunday about mid-day that it popped, and I'd check it every few hours that I was awake otherwise in that time.
Click to expand...
Click to collapse
Thank you very much!
I'm perfectly happy with needing to make my own custom ROM. I've never done it, but I've been wanting to for quite some time. At least a few years.
The last 2 android phones I've been using couldn't even be rooted. Long story short, i bought a redmi 5, got it all setup great, then moved and the only service around my new area is Verizon so i sold that, bought a note 5, couldn't root it, bought a pinephone which i do love, but the battery life is really bad. So I've been using my note 5 that's close to a decade old so I'm just looking for a phone with root and a good battery life.
Look forward to getting mine rooted!
Quick question, hopefully doesn't derail too much. Wondering if there is any work being done on the XT2165-5 model? Can't seem to find anything on it?

How To Guide N20 5G [CPH2459] - Unlock/Root/Safetynet (Step-by-Step)

These instructions are for the CPH2459 – Unlocked Nord N20 50
I wanted to give back and distribute an easy to follow step-by-step guide as many were asking for a complete guide and I had a little time to create it today. Hopefully this will help kick off some good dev for the device as we are light currently.
I take no responsibility for any issues with your device and do not have backups in the steps, so use at your own risk as always...
COMPLETE STEPS......
Update your phone to the latest OS/patch level over Internet OTA from 1+ and reboot
Verify you are running OS/patch à CPH2459_11_C_10 (latest at time of this)
Enable developer options by clicking on the build number until activation appears (Under Setting-->About-->Version)
Enable Unlock bootloader in the new Developers Options section now in the Phone menu
Enable USB debugging under the new Developers Options
Plug in your phone with usb connected to pc and select transfer files if prompted
Download and extract install latest ptools-n20.zip (with included patched boot files)
Open a windows command prompt in the folder that you extracted the platform tools into
Run adb devices and be sure the phone shows up as a device that is attached
Accept device fingerprint if asked
Run command to boot to bootloader: adb reboot bootloader
Run command to ensure connection in bootloader to your phone: fastboot devices
Run Command to unlock bootloader: fastboot flashing unlock
Lave command prompt open
Use volume keys to select “unlock bootloader” then press “power” to unlock
The device will reset and will now be unlocked
After phone boots, complete the quick setup
Repeat step #3, #5-6, #9-12
In Command prompt where platform tools are installed run command: fastboot flash boot a.img
Reboot phone and you will be patched
Install Magisk 25.2 App from official repo & Enable Zygisk in settings
Enable Magisk hide and reopen the app
Add your google account if not already added and use Play Store or use Aurora store to install Safetynet Checker by flink apps
Run Safetynet checker and notice the device fails 2 checks
Transfer 2 zip files included to your phone: Shamiko & Safetynet fix. These will help hiding root and will allow your phone to pass Safetynet fixes
Install both zips under module section in Magisk. (you can do 1…don’t reboot when asked, then do other and reboot to activate both)
Run Safetynet Checker again and you should pass all checks.
Viola…you are unlocked/rooted/patched and pass safetynect checks.....ENJOY!
I will update here on how to take future OTAs as more come out and if time allows.
NOTES: Files in platform tools
a.img = boot_a.img magisk patched
b.img = boot_b.img magisk patched (just in case)
boot_a.img = Unpatched a (just in case)
boot_b.img = Unpatched b (just in case)
==============================================
2/3/23 UPDATE: How to take an OTA and preserve root
==============================================
1. First, Under developer options, make sure the option to apply automatic updates on reboot is ENABLED. (If you do not do this, you will loose root)
2. Unroot the device. We wont completely remove Magisk, just restore images. To do this Open Magisk, click uninstall magisk, and only click "restore images". DO NOT REBOOT!
3. Check for software updates. Install OTA update after downloaded. DO NOT REBOOT!
4. Open Magisk again and now reinstall it but select "inactive slot" for the option.
5. REBOOT. Boot will take about 30 seconds to apply.
You are now updated
ScarletWizard said:
Thank you for this I will post this on the telegram channel
Click to expand...
Click to collapse
What is the link to the telegram chan?
mvincent2k said:
What is the link to the telegram chan?
Click to expand...
Click to collapse
My CPH2459 crappped out on me, and I have had little luck since moving from GN2200 to this model and could use a backup if you could lend a hand
mvincent2k said:
What is the link to the telegram chan?
Click to expand...
Click to collapse
OnePlus Nord N20 | Official
You can view and join @oneplusnordn20 right away.
t.me
ScarletWizard said:
Incorrect link
Click to expand...
Click to collapse
Can you share the right channel.
mvincent2k said:
These instructions are for the CPH2459 – Unlocked Nord N20 50
I wanted to give back and distribute an easy to follow step-by-step guide as many were asking for a complete guide and I had a little time to create it today. Hopefully this will help kick off some good dev for the device as we are light currently.
Click to expand...
Click to collapse
Damn son, your attention to detail is admirable! Very thorough and well-documented. Thanks.
Can I use this on the new ota update
mvincent2k said:
a.img = boot_a.img magisk patched
Click to expand...
Click to collapse
killerex said:
Can I use this on the new ota update
Click to expand...
Click to collapse
No you would need an updated img if you are on the latest upgrade. I no longer have an N20 to test with otherwise would create one for the group. Someone else may possibly.
How? I'm not updated yet can guide me how to do it.thank
killerex said:
How
Click to expand...
Click to collapse
Search the other XDA threads here for this device. A few explain how to extract payload and patch.
If you are on the previous update, see the update to my instructions just posted on how to take the OTA and stay rooted with Magisk
I'm getting installation error.. I'm in previous update
mvincent2k said:
These instructions are for the CPH2459 – Unlocked Nord N20 50
I wanted to give back and distribute an easy to follow step-by-step guide as many were asking for a complete guide and I had a little time to create it today. Hopefully this will help kick off some good dev for the device as we are light currently.
I take no responsibility for any issues with your device and do not have backups in the steps, so use at your own risk as always...
COMPLETE STEPS......
Update your phone to the latest OS/patch level over Internet OTA from 1+ and reboot
Verify you are running OS/patch à CPH2459_11_C_10 (latest at time of this)
Enable developer options by clicking on the build number until activation appears (Under Setting-->About-->Version)
Enable Unlock bootloader in the new Developers Options section now in the Phone menu
Enable USB debugging under the new Developers Options
Plug in your phone with usb connected to pc and select transfer files if prompted
Download and extract install latest ptools-n20.zip (with included patched boot files)
Open a windows command prompt in the folder that you extracted the platform tools into
Run adb devices and be sure the phone shows up as a device that is attached
Accept device fingerprint if asked
Run command to boot to bootloader: adb reboot bootloader
Run command to ensure connection in bootloader to your phone: fastboot devices
Run Command to unlock bootloader: fastboot flashing unlock
Lave command prompt open
Use volume keys to select “unlock bootloader” then press “power” to unlock
The device will reset and will now be unlocked
After phone boots, complete the quick setup
Repeat step #3, #5-6, #9-12
In Command prompt where platform tools are installed run command: fastboot flash boot a.img
Reboot phone and you will be patched
Install Magisk 25.2 App from official repo & Enable Zygisk in settings
Enable Magisk hide and reopen the app
Add your google account if not already added and use Play Store or use Aurora store to install Safetynet Checker by flink apps
Run Safetynet checker and notice the device fails 2 checks
Transfer 2 zip files included to your phone: Shamiko & Safetynet fix. These will help hiding root and will allow your phone to pass Safetynet fixes
Install both zips under module section in Magisk. (you can do 1…don’t reboot when asked, then do other and reboot to activate both)
Run Safetynet Checker again and you should pass all checks.
Viola…you are unlocked/rooted/patched and pass safetynect checks.....ENJOY!
I will update here on how to take future OTAs as more come out and if time allows.
NOTES: Files in platform tools
a.img = boot_a.img magisk patched
b.img = boot_b.img magisk patched (just in case)
boot_a.img = Unpatched a (just in case)
boot_b.img = Unpatched b (just in case)
==============================================
2/3/23 UPDATE: How to take an OTA and preserve root
==============================================
1. First, Under developer options, make sure the option to apply automatic updates on reboot is ENABLED. (If you do not do this, you will loose root)
2. Unroot the device. We wont completely remove Magisk, just restore images. To do this Open Magisk, click uninstall magisk, and only click "restore images". DO NOT REBOOT!
3. Check for software updates. Install OTA update after downloaded. DO NOT REBOOT!
4. Open Magisk again and now reinstall it but select "inactive slot" for the option.
5. REBOOT. Boot will take about 30 seconds to apply.
You are now updated
Click to expand...
Click to collapse
Thank you for this! Glad to see people are picking up the slack. I havent updated yet because im worried about having to battle tighter restrictions that newer versions of android inevitably bring. I wont be able to use the images as i have the gn2200 but grateful for the how to guide on updating. Didnt realize it was quite that easy. Im still on May on one device and July on the other tho recently had to downgrade it to restore it in an emergency situation and was thankfully able to do all the flashing from the may device otg
PsYk0n4uT said:
Thank you for this! Glad to see people are picking up the slack. I havent updated yet because im worried about having to battle tighter restrictions that newer versions of android inevitably bring. I wont be able to use the images as i have the gn2200 but grateful for the how to guide on updating. Didnt realize it was quite that easy. Im still on May on one device and July on the other tho recently had to downgrade it to restore it in an emergency situation and was thankfully able to do all the flashing from the may device otg
Click to expand...
Click to collapse
Not a problem. Always glad to help the community out!
Very nice. I'm expecting delivery of one of these phones tomorrow. It already has Android 12 installed on it. So, I'm wondering if it's safe to use the attached image files to root it or should I go through the process of having Magisk patch the phone's existing a and b images?
Raybo58 said:
Very nice. I'm expecting delivery of one of these phones tomorrow. It already has Android 12 installed on it. So, I'm wondering if it's safe to use the attached image files to root it or should I go through the process of having Magisk patch the phone's existing a and b images?
Click to expand...
Click to collapse
Just make sure your using a12 boot image if your trying to use a posted one.balso be sure to use the same security patch boot image as the system you already have installed.
Safest bet is to use the DSU sideloader method to pull your own boot image and then patch it if your unsure of which patched boot image to use. It's a little more complicated but pulling your own boot image will ensure that you have an exact match for your device.
If you have or can locate and obtain an unpatched boot image that matches your system. You should have one on hand just in case the patched boot image doesn't work so that you can simply reflash your stock image in that case.
A mismatching boot image can lead to an unbootable state so you need to be prepared.
You shouldn't have to worry much about anything crazy or unrepairable so long as your flashing boot images made for the device your flashing them to. Just don't flash boot images from a completely different device as that can cause you to end up with any sort 9f crazy weird issues that may not even be fixable.
Raybo58 said:
Very nice. I'm expecting delivery of one of these phones tomorrow. It already has Android 12 installed on it. So, I'm wondering if it's safe to use the attached image files to root it or should I go through the process of having Magisk patch the phone's existing a and b images?
Click to expand...
Click to collapse
By any chance you got the latest boot.img
Will this work on a GN2200?
NO
Followed instructions and it worked. BUT, can't update the firmware. When I try to restore images in Magisk it says they don't exist. So I can't update to the latest firmware. Suggestions?
alipps1 said:
Followed instructions and it worked. BUT, can't update the firmware. When I try to restore images in Magisk it says they don't exist. So I can't update to the latest firmware. Suggestions?
Click to expand...
Click to collapse
I recently ran into this on another device and had to fix so you are in luck. I believe something broke with magisk running on 13 during the last OTA with security, so here are the steps...
1) Unhide and Uninstall magisk app completely and Update to the latest canary version of magisk apk here and restart: https://github.com/topjohnwu/Magisk
2) Verify it sees magisk installed and has latest build.
3) Try restoring images again and it may work.
If that does not work...
1) You will need to do a full unroot...which technically should not work if the images were not present, but it does, so images are present (proving it is a bug)
2) You will need to complete the full procedure of patching the boot image again yourself.
3) Extract payload and patch the boot.img per instructions in this forum, then flash per my instructions above.
FYI. I did this on the current version of the OS and then did the restore images and upgrade to take the OTA and prove the bug and that OTA updates will work as in the instructions above in the future again, which it did.
Alternatively, you could also update the to the latest OTA after unrooting and just do it once, but I wanted to play it safe just in case Google updated something in the latest 13 builds blocking magisk... So your choice, but please post back here how you make out.
Good luck

How To Guide [GUIDE][ROOT][MAGISK] How to Root ACE 2/11R with Magisk without TWRP

Hello everyone hope you are all keeping well.
Since I believe that many of you don't know about this, I've decided to share the steps I've done in order to root the OP 11R ( ACE 2 )
I cannot be responsible if you brick your device. Your phone, your choices, your responsibility!
1 - Unlock the bootloader (if you haven't done it already...beware that this will erase all of your user data). To do so, you must:
Enable developer options
Enable the "OEM unlocking" option
Enable USB debugging
Have both adb and fastboot, from SDK Platform Tools available on your PC
Connect your phone to your PC using the USB cable and run the following commands:
adb devices
adb reboot bootloader
(so your phone will reboot into fastboot mode)
fastboot flashing unlock
(device should now unlock)
fastboot reboot
(device reboots with an unlocked bootloader and data partition wiped so set up the device from scratch again)
2 - Download OP 11R stock boot.img that you may find later on this post, that matches your current build.
Copy the boot.img to your devices internal memory
Leave a copy of it on your PC (on the same folder you have adb and fastboot...you never know if you will need to use it again in the future...to restore the stock boot.img, aka revert to stock...)
Indian Boot.img A_0.8 - download
3 - Download latest Magisk Manager from HERE and install it on your phone
4 - Open Magisk Manager App and press:
Install
Select and Patch a File
Browse to the path where you saved stock boot.img and select it
Magisk Manager will now patch the boot image and store it in [Internal Storage]/Download/magisk_patched.img
5 - Copy the patched boot image from your device to your PC (Store it on the same folder where you have adb and fastboot)
6 - Flash the patched boot image to your phone by running these commands (remember, you must have patched boot image on the same folder you have adb and fastboot and, of course, your device must be connected to your PC...)
adb reboot bootloader
fastboot flash boot magisk_patched.img
fastboot reboot
7 - After the phone boots up, hopefully with a normal boot (almost feels like nothing happened....), install/open Magisk Manager App again and watch Magisk doing it's magic!
8 - Enjoy!
All credits goes to topjohnwu and his incredible work with Magisk.
Why title says NORD 2T?
firoz3321 said:
Why title says NORD 2T?
Click to expand...
Click to collapse
MB ... typo
Thank you for detailed steps.
Is there any benefit with KernelSU over this method ?
I always used Magisk on OP8, but recently saw an article for OP11 with Kernel SU.
Also is there MSM tool support to recover softbriked device ?
firoz3321 said:
Thank you for detailed steps.
Is there any benefit with KernelSU over this method ?
I always used Magisk on OP8, but recently saw an article for OP11 with Kernel SU.
Also is there MSM tool support to recover softbriked device ?
Click to expand...
Click to collapse
Sorry but there is no msm tool available for new OnePlus devices. + You can use Fastboot enhance tool from github to recover softbrick , magisk is always recommended for rooting because of ease of steps and simple to use
Hello, thanks for the detailed instructions. Today I updated to A. 10, and unfortunately lost my root access. Without the root cannot extract the boot image. If you're already updated and have a backup of A. 10 boot, can you please share?
saifsohel said:
Hello, thanks for the detailed instructions. Today I updated to A. 10, and unfortunately lost my root access. Without the root cannot extract the boot image. If you're already updated and have a backup of A. 10 boot, can you please share?
Click to expand...
Click to collapse
i didn't got the update yet ... + oxygen updater also showing A.08. i will update this post soon as I got update
shiki_senpai said:
i didn't got the update yet ... + oxygen updater also showing A.08. i will update this post soon as I got update
Click to expand...
Click to collapse
Then remember to take a backup of the boot before rebooting. I messed up big time.
Thanks for the detailed information man. Can I know if bootloader unlock decreases widevine L1 to L3? As this was case with my OP6

Categories

Resources