This is something I built for my own use. Portions of the files (adbd, etc...) come from chainfire's original boot-to-root image.
This boot image has been modified to pass safetynet with an unlocked bootloader.
This image is NOT rooted in normal boot mode.
Stock recovery boots with adb enabled, and adb shell is rooted in recovery.
/data is accessible from recovery, but userdata is left encrypted.
Be careful if you modify /system/ dm-verity is still enabled.
Usage:
Code:
fastboot flash boot PixelXL_OPP4_PassSafetyNet_RecoveryRootedShell.img
Have fun: PixelXL_OPP4_PassSafetyNet_RecoveryRootedShell.img
You can boot twrp with this or is stock only.
caballon said:
You can boot twrp with this or is stock only.
Click to expand...
Click to collapse
It's the stock recovery binary renamed to recovery_org. recovery is replaced with a script that auto mounts system (ro) onto system_root, and userdata onto /data, and then launches the renamed stock recovery binary.
You can do just about anything you want from a root ADB shell provided you have the know-how.
Fenny said:
It's the stock recovery binary renamed to recovery_org. recovery is replaced with a script that auto mounts system (ro) onto system_root, and userdata onto /data, and then launches the renamed stock recovery binary.
You can do just about anything you want from a root ADB shell provided you have the know-how.
Click to expand...
Click to collapse
Thanks buddy.
Fenny said:
This is something I built for my own use. Portions of the files (adbd, etc...) come from chainfire's original boot-to-root image.
This boot image has been modified to pass safetynet with an unlocked bootloader.
This image is NOT rooted in normal boot mode.
Stock recovery boots with adb enabled, and adb shell is rooted in recovery.
/data is accessible from recovery, but userdata is left encrypted.
Be careful if you modify /system/ dm-verity is still enabled.
Usage:
Have fun: PixelXL_OPP4_PassSafetyNet_RecoveryRootedShell.img
Click to expand...
Click to collapse
I have to root again after flash this Right?
caballon said:
I have to root again after flash this Right?
Click to expand...
Click to collapse
Yes, but be aware that SuperSU fails safteynet on its own.
Fenny said:
This is something I built for my own use. Portions of the files (adbd, etc...) come from chainfire's original boot-to-root image.
This boot image has been modified to pass safetynet with an unlocked bootloader.
This image is NOT rooted in normal boot mode.
Stock recovery boots with adb enabled, and adb shell is rooted in recovery.
/data is accessible from recovery, but userdata is left encrypted.
Be careful if you modify /system/ dm-verity is still enabled.
Usage:
Code:
fastboot flash boot PixelXL_OPP4_PassSafetyNet_RecoveryRootedShell.img
Have fun: PixelXL_OPP4_PassSafetyNet_RecoveryRootedShell.img
Click to expand...
Click to collapse
I just tried flashing this and when flashing OPP4 followed by this kernel I cannot get past the white Google Bootloader screen. It just doesnt seem to work. Is there any special procedure that needs to be followed?
uodii said:
This is something I built for my own use. Portions of the files (adbd, etc...) come from chainfire's original boot-to-root image.
This boot image has been modified to pass safetynet with an unlocked bootloader.
This image is NOT rooted in normal boot mode.
Stock recovery boots with adb enabled, and adb shell is rooted in recovery.
/data is accessible from recovery, but userdata is left encrypted.
Be careful if you modify /system/ dm-verity is still enabled.
Usage:
I just tried flashing this and when flashing OPP4 followed by this kernel I cannot get past the white Google Bootloader screen. It just doesnt seem to work. Is there any special procedure that needs to be followed?
Click to expand...
Click to collapse
Nothing special required. In my experience it worked great as long as you don't root or attempt to flash TWRP. It is possible you will need to let OPP4 boot once in order for sdcardfs to be applied.
To pass SN with root, you can use the latest suhide, you don't need this kernel unless you DON'T want root in normal mode, and still want to pass SN with an unlocked bootloader.
Fenny said:
Nothing special required. In my experience it worked great as long as you don't root or attempt to flash TWRP. It is possible you will need to let OPP4 boot once in order for sdcardfs to be applied.
To pass SN with root, you can use the latest suhide, you don't need this kernel unless you DON'T want root in normal mode, and still want to pass SN with an unlocked bootloader.
Click to expand...
Click to collapse
Some when I tried this I:
- flashed OPP4
- flashed your kernel
- booted into the modded TWRP recovery that supports DP4
- flashed supersu
- reboot
---- This resulted in an endless loop on the G screen with a loading bar (waited about 15 minutes to no avail)
I also tried the above except I booted into the rom before flashing your kernel and proceeding with the process and got the same result.
I also tried the above omitting the installation of supersu altogether and the seemed to result in the worst behavior because it would reboot maybe 1 second after hitting the white google bootloader screen.
So currently i'm on OPP4 with supersu installed and everything is running fine, except as you state, I'm obviously not able to pass safetynet because of this. Any other suggestion as to what I may be doing wrong? Also point of note that I dont believe should make a difference, but I'm running this on Sailfish (Pixel) is there any reason why this kernel would not support it?
Lastly, was it difficult to modify this? Did you build this from source or unpack and modify the image itself?
Thanks for this! I was missing my Android Pay!
uodii said:
Some when I tried this I:
- flashed OPP4
- flashed your kernel
- booted into the modded TWRP recovery that supports DP4
- flashed supersu
- reboot
---- This resulted in an endless loop on the G screen with a loading bar (waited about 15 minutes to no avail)
I also tried the above except I booted into the rom before flashing your kernel and proceeding with the process and got the same result.
I also tried the above omitting the installation of supersu altogether and the seemed to result in the worst behavior because it would reboot maybe 1 second after hitting the white google bootloader screen.
So currently i'm on OPP4 with supersu installed and everything is running fine, except as you state, I'm obviously not able to pass safetynet because of this. Any other suggestion as to what I may be doing wrong? Also point of note that I dont believe should make a difference, but I'm running this on Sailfish (Pixel) is there any reason why this kernel would not support it?
Lastly, was it difficult to modify this? Did you build this from source or unpack and modify the image itself?
Click to expand...
Click to collapse
The safteynet sauce is in the kernel cmdline. Not hard to reproduce, and trivial to detect. This probably won't work for long if the method gets popular.
And, yeah, this is an unpacked Marlin image. That is likely why your Sailfish is a no-go. It is not built from source.
Fenny said:
The safteynet sauce is in the kernel cmdline. Not hard to reproduce, and trivial to detect. This probably won't work for long if the method gets popular.
And, yeah, this is an unpacked Marlin image. That is likely why your Sailfish is a no-go. It is not built from source.
Click to expand...
Click to collapse
Yeaaaa work on final android o!!!!!
Booted twrp on Oreo and installed SuperSU and SU-Hide. Working and passing safetynet
Working fine here on the official release version (Oreo). Thanks!
Fenny said:
The safteynet sauce is in the kernel cmdline. Not hard to reproduce, and trivial to detect. This probably won't work for long if the method gets popular.
And, yeah, this is an unpacked Marlin image. That is likely why your Sailfish is a no-go. It is not built from source.
Click to expand...
Click to collapse
Any instructional guide that you followed on accomplishing this task? Would definitely love to do this for Sailfish
Booting in linux resulted in: FAILED (remote: dtb not found)
rockingondrums said:
Booting in linux resulted in: FAILED (remote: dtb not found)
Click to expand...
Click to collapse
Yeah, it won't fastboot boot. Just fastboot flash.
uodii said:
Any instructional guide that you followed on accomplishing this task? Would definitely love to do this for Sailfish
Click to expand...
Click to collapse
I could probably whip something up for the rooted adb part, but not all of this will be best practice, I think.
The kernel_cmdline patch is easy: Unpack boot image, edit the kernel_cmdline, repack.
If I find time I will do a write-up, I just have a suspicion it will get patched as soon as I do. xD
Related
Introduction
Disclaimer: While this TWRP has been tested by myself on my own device to flash, wipe and backup, I make no warranties as to it's performance. Use at your own risk.
WARNING: flashable version contains a kernel boot image which will be flashed to your device along with the recovery image.
Click to expand...
Click to collapse
Installation instructions
This recovery image is for the E6553 single SIM Z3+. Do not use it on another model.
This recovery image requires an unlocked bootloader. You will lose some functionality on your phone if you unlock your bootloader
Do your research and make sure you're using the latest version of the relevant tools if you do decide to unlock.
DO NOT enable MyXperia functionality if you've unlocked your bootloader. You will brick your device.
This first download of this recovery image CANNOT be flashed to your phone and must be used in fastboot mode only
The second download is a flashable recovery
Use the first version to flash the second dual-boot.zip version
Unzip the recovery.zip file to extract the recovery.img file to use in fastboot mode
Code:
C:\>adb reboot bootloader
C:\>fastboot boot recovery.img
C:\>adb push dual-boot.zip /sdcard/dual-boot.zip
C:\>adb push dual-boot.zip.md5 /sdcard/dual-boot.zip.md5
Click to expand...
Click to collapse
Now use the TWRP install feature to install dual-boot.zip. Follow the prompts of the Aroma graphical installer.
CAVEAT: this extends the boot time by about 5 - 10 seconds as ramdisk images need to be unpacked and there's a wait on a keypress to determine whether to enter recovery mode. In order to boot into recovery, press power on. When you see the yellow LED come on then press the down volume button once or twice. You will then boot into TWRP.
NOTE: the dual-boot.zip installs a new 28.0.A.8.251 kernel. If you're using the autoroot kernel from Devries you will need to flash SuperSU to re-root your device
This dual boot/recovery works by flashing the recovery image to the FOTAkernel partition. A custom ramdisk image contains the normal boot image. If the down volume keypress is detected, then the recovery ramdisk is automatically extracted from the FOTAKernel partition and flow of control switches to recovery. If no keypress is detected then the normal ramdisk is extracted and normal android boot ensues.
Those of you who installed version 1.0 please download and install this version 1.1 to fix the error with the startup of the trim area daemon
Download
Binary
Fastboot TWRP Recovery Image v2.8.7.0-e6553-1.0 for Z3+ E6553
Flashable TWRP Recovery Image v2.8.7.0-e6553-1.1 for Z3+ E6553 (MD5: 52d4b7d406308dbd457e8b94210b7c87)
Flashable TWRP Recovery Image v2.8.7.0-e6553-1.1 for Z3+ E6553 - MD5
Sources @ github
device_sony_kitakami
device_sony_ivy
Click to expand...
Click to collapse
Changelog
Code:
Current changelog: -- 29 September 2015
[new] v1.1 fix up problem in combined ramdisk preventing trim area daemon from starting correctly
[new] Flashable recovery - 28 September 2015
[new] Fixed various sys/class issues so that CPU temperature and LED / backlight control work correctly
[new] Updated to use 28.0.A.8.251 kernel (as opposed to the AOSP kernel)
[old] Initial release - 10 September 2015
Click to expand...
Click to collapse
Thanks To
The regular contributors to the Z3+ forum, among others @[NUT], @ChrisJ951, @DHGE, @Devries, @zxz0O0, @Venkat Kamesh, @AndroPlus, @Sacktreter who pass on knowledge and who make the forum a lively and cooperative place
Click to expand...
Click to collapse
People who installed version 1.0 of the Flashable TWRP must please update to version 1.1 to correct a bug.
Awesome work.
Glad you were able to get the screen working for it! Boots up fine w/o issue for me
This is fantastic. Is there any way of getting this to work with a locked bootloader?
Sent from my Xperia Z3+
AMoosa said:
This is fantastic. Is there any way of getting this to work with a locked bootloader?
Sent from my Xperia Z3+
Click to expand...
Click to collapse
I'd venture to suggest that it's highly unlikely that locked bootloader recovery could work. The DM_VERITY is almost a guarantor of that. Just search for CONFIG_DM_VERITY or Verity in the Z3+ forums for more info.
Even if an exploit works, the second it modifies the system partition, the kernel panics and refuses to boot. The only way of preventing that is to flash a new kernel or edit the ramdisk to remove the verity key. And the only way to flash a new kernel / edit the ramdisk is to unlock the bootloader.
Thank you first for development... maazing!
I have unlocked the bootloader via Sony and then used an boot.img from Devries to root as root was my primary goal. I have flashbooted as per instructions the TWRP recovery.img that is provided here by the awesome dl12345 .
However the issue is that I am unable to boot to recovery after rebooting from TWRP. In other words the flashboot works and I am able to make a backup and use TWRP well but it doesn't seem to stick.
Am I doing something wrong. Should I have flashed a ROM first from xperfirm, Flashtools, and/or can I flash a kernel without it effecting the recovery. My knowledge is sketchy but I am totally up for testing if I can help.
elladroid said:
Thank you first for development... maazing!
I have unlocked the bootloader via Sony and then used an boot.img from Devries to root as root was my primary goal. I have flashbooted as per instructions the TWRP recovery.img that is provided here by the awesome dl12345 .
However the issue is that I am unable to boot to recovery after rebooting from TWRP. In other words the flashboot works and I am able to make a backup and use TWRP well but it doesn't seem to stick.
Am I doing something wrong. Should I have flashed a ROM first from xperfirm, Flashtools, and/or can I flash a kernel without it effecting the recovery. My knowledge is sketchy but I am totally up for testing if I can help.
Click to expand...
Click to collapse
This is correct behaviour. You're not actually flashing the recovery image, just temporarily booting a recovery kernel and associated ramdisk. Sony Xperia devices don't have a recovery partition, or more accurately, they don't have a bootloader than can check and load a boot image from a recovery partition.
Technically it's possible to make the boot image check for a ramdisk on another partition and use this instead of the normal ramdisk, but this is step two. Sony should be releasing an open recovery bootloader fairly soon for the Z3+ which will allow this recovery image to be flashed. It's already been released for other devices.
Until Sony releases open recovery for Z3+ or I spend the time trying to implement a feature that probably only has days or weeks of utility (until Sony releases the open recovery for Z3+) , you're stuck with a TWRP that you need to launch every time in fastboot mode.
On the first screen immediately after the TWRP logo comes up, the battery is always being reported at being 50%. Sometimes the correct number is displayed when in the flashing screen. Otherwise works great!
Also, link to Sony Z3+ windows drivers
How to install unsigned drivers in Windows 8.1/10 with secure boot
elladroid said:
Thank you first for development... maazing!
I have unlocked the bootloader via Sony and then used an boot.img from Devries to root as root was my primary goal. I have flashbooted as per instructions the TWRP recovery.img that is provided here by the awesome dl12345 .
However the issue is that I am unable to boot to recovery after rebooting from TWRP. In other words the flashboot works and I am able to make a backup and use TWRP well but it doesn't seem to stick.
Am I doing something wrong. Should I have flashed a ROM first from xperfirm, Flashtools, and/or can I flash a kernel without it effecting the recovery. My knowledge is sketchy but I am totally up for testing if I can help.
Click to expand...
Click to collapse
New version now flashable so that you can boot into recovery...read top post carefully before using.
serrin85 said:
On the first screen immediately after the TWRP logo comes up, the battery is always being reported at being 50%. Sometimes the correct number is displayed when in the flashing screen. Otherwise works great!
Also, link to Sony Z3+ windows drivers
How to install unsigned drivers in Windows 8.1/10 with secure boot
Click to expand...
Click to collapse
Fixed in latest version
http://www.kz3.eu:18998/dual-boot.zip link gives 404 ..
deecept said:
http://www.kz3.eu:18998/dual-boot.zip link gives 404 ..
Click to expand...
Click to collapse
Yes, I've temporarily disabled the link while I resolve a problem relating to the trim area daemon not starting up due to some peculiarity of the dual boot ramdisk. I'll reinstate it as soon as I fix the problem.
dl12345 said:
Yes, I've temporarily disabled the link while I resolve a problem relating to the trim area daemon not starting up due to some peculiarity of the dual boot ramdisk. I'll reinstate it as soon as I fix the problem.
Click to expand...
Click to collapse
Oh, ok, sweet! Looking to flash this to my Z3+. More than happy to test if needed =) Great work on these!!
deecept said:
Oh, ok, sweet! Looking to flash this to my Z3+. More than happy to test if needed =) Great work on these!!
Click to expand...
Click to collapse
Download back online and problem fixed
Those who downloaded the 1.0 please download this 1.1 version and install to correct the problem with trim area daemon startup. Thanks
dl12345 said:
Download back online and problem fixed
Those who downloaded the 1.0 please download this 1.1 version and install to correct the problem with trim area daemon startup. Thanks
Click to expand...
Click to collapse
HI dl12345,
this recovery support Dual model? E6533
hi.question...i get remote: dtb not found error when trying to boot the recovery..any ideas?
didnt get a thing... how do i install?
please, release TWRP for 6533 too
we need custom recovery so bad
Dathrex said:
please, release TWRP for 6533 too
we need custom recovery so bad
Click to expand...
Click to collapse
Pleaseee ????
Brother, please, help us with twrp to E6533, please.
Enviado de meu E6533 usando Tapatalk
I have a brand new Pixel XL from Verizon that I received today and was successful in unlocking. However, I tried to root and now I am stuck on bootloop. I cannot post in DEVELOPMENT because I haven't posted here in years (haven't had ANDROID in a while). Can anyone help? I am able to access via fastboot (I believe) but I must be flashing the wrong images. I don't want to brick this nice new day-old device. I have been at it for 5 hours via research on my own, but now I am looking for someone that can help me via P.M. or what it may take. I really want to get back to enjoying this device! Thanks in advance!
bdsuser said:
I have a brand new Pixel XL from Verizon that I received today and was successful in unlocking. However, I tried to root and now I am stuck on bootloop. I cannot post in DEVELOPMENT because I haven't posted here in years (haven't had ANDROID in a while). Can anyone help? I am able to access via fastboot (I believe) but I must be flashing the wrong images. I don't want to brick this nice new day-old device. I have been at it for 5 hours via research on my own, but now I am looking for someone that can help me via P.M. or what it may take. I really want to get back to enjoying this device! Thanks in advance!
Click to expand...
Click to collapse
Read the third post in the thread below to get set up and back to stock. Then we will work on root. If you tried to root and you bootlooped it then you used the wrong SU.
https://forum.xda-developers.com/pixel/help/stupidly-bootloop-help-t3554242
1. Download a ROM. A stock version is probably in the forums somewhere if that's what you want.
2. Download TWRP image and zip from the TWRP thread.
3. Download SuperSU from the SuperSU thread.
4. Download a vendor image. There's no "official" vendor image thread AFAIK, but you can grab one from the Pure Nexus rom thread. NMF26V is compatible with all 7.1.1 ROMs & stock.
Now you have two options:
Fast: Put the ROM, TWRP(zip only), SuperSU and vendor image on USB flash drive, then connect the USB 3 to USB C adapter to your flash drive. Don't connect it to the phone yet. An external HDD/SSD should also work if that's all you've got.
Slow: While in TWRP(Instructions below) push the ROM, TWRP(zip only), SuperSU and vendor image files to your phone through ADB with "adb push C:\file_path\ /sdcard/" sans quotes. You will need to do this for each file, or alternatively push a folder containing the four files. adb file transfer is very slow.
5. Boot your phone to the bootloader, and connect it to your computer. This can be achieved by holding volume down and power from an off state.
Note: If your device is still bootlooping you won't be able to get to the bootloader. Hold volume up and power until the device shuts off to get out of the bootloop temporarily, then boot to bootloader.
6. In a command window, "fastboot boot twrp.img"
7. Connect your flash drive to your phone if you chose that option, or push the files through adb if you chose that option
8. Flash TWRP zip, ROM and vendor image. STAY IN TWRP
9. Return to TWRP's home screen > advanced > file manager. Scroll down until you see 'fstab.marlin'(in the root '/' directory). Tap on 'fstab.marlin' and delete it. Skipping this step means SuperSU won't install.
10. Flash SuperSU zip, reboot to system and you're done.
SDK
TonikJDK said:
Read the third post in the thread below to get set up and back to stock. Then we will work on root. If you tried to root and you bootlooped it then you used the wrong SU.
https://forum.xda-developers.com/pixel/help/stupidly-bootloop-help-t3554242
Click to expand...
Click to collapse
Just thought I'd update you...And I know I sound like I have no idea what I'm doing but traditionally I've never had issues like this But I am trying to get ADB to show the flash-all command. The one I have installed doesn't show that feature so I can't follow the tutorial. If you have a direct link to what I may be missing I would appreciate it otherwise I will update you once I figure it out.
bdsuser said:
Just thought I'd update you...And I know I sound like I have no idea what I'm doing but traditionally I've never had issues like this But I am trying to get ADB to show the flash-all command. The one I have installed doesn't show that feature so I can't follow the tutorial. If you have a direct link to what I may be missing I would appreciate it otherwise I will update you once I figure it out.
Click to expand...
Click to collapse
The link to the proper adb and fastboot are in the post i pointed you to.
Help with root and TWRP
TonikJDK said:
The link to the proper adb and fastboot are in the post i pointed you to.
Click to expand...
Click to collapse
Thanks for your assistance. I now have root installed and I think I'm good except for one thing. I keep thinking TWRP is installed but for some reason when I reboot to bootloader, then select reboot recovery mode, it takes me to android recovery. I am used to recovery taking me to TWRP. I know TWRP works but I feel like I'm temporarily flashing it each time or something. I even installed the twrp app and I see I can flash zips that way, etc, but I wanted to know if you knew how to make the phone boot to TWRP in recovery? Or is that necessary?
bdsuser said:
Thanks for your assistance. I now have root installed and I think I'm good except for one thing. I keep thinking TWRP is installed but for some reason when I reboot to bootloader, then select reboot recovery mode, it takes me to android recovery. I am used to recovery taking me to TWRP. I know TWRP works but I feel like I'm temporarily flashing it each time or something. I even installed the twrp app and I see I can flash zips that way, etc, but I wanted to know if you knew how to make the phone boot to TWRP in recovery? Or is that necessary?
Click to expand...
Click to collapse
I dont do it that way on this phone. TWRP and SU are modifying the same parts of the phone, and there are cases where it could conflict. Rare, not a big deal, but since i don't need TWRP installed i don't.
To install it ypu first boot to it.
Fastboot boot twrpFilename.
Then from within TWRP you install the TWRP zip.
Make sure it is TWRP RC1
All set
Thanks again for your help. I am running pure ROM as I mentioned and I seem to like it. Do you K or if Franco works with Pure or do you have a suggestion on a good rom/kernel? Is there anything else that you can suggest I should be using with the new phone? I remember there used to be tools that you could install that allowed you to customize the system even further but the name escapes me. . Is there anything like that or even a theme tool which is a must have when you are rooted and running custom roms? No big deal if not. Very happy with where I stand now. Really appreciate you getting me back up and running!
You are most welcome. I don't ROM so I don't know what kernels work with what roms for sure. But my understanding is that they are all pretty universal. I run stock with Franco.
Other than that i dont mod much. Ad blocker, black themes and a few adjustments to Franco.
TonikJDK said:
You are most welcome. I don't ROM so I don't know what kernels work with what roms for sure. But my understanding is that they are all pretty universal. I run stock with Franco.
Other than that i dont mod much. Ad blocker, black themes and a few adjustments to Franco.
Click to expand...
Click to collapse
Perfect! Thanks yet again. Have a great remainder of the day!
bdsuser said:
Thanks again for your help. I am running pure ROM as I mentioned and I seem to like it. Do you K or if Franco works with Pure or do you have a suggestion on a good rom/kernel? Is there anything else that you can suggest I should be using with the new phone? I remember there used to be tools that you could install that allowed you to customize the system even further but the name escapes me. . Is there anything like that or even a theme tool which is a must have when you are rooted and running custom roms? No big deal if not. Very happy with where I stand now. Really appreciate you getting me back up and running!
Click to expand...
Click to collapse
Im running pure and elementalx with excellent results.
?Tapped from my pure pixelXl?
have you ever seen an issue where the phone boots to twrp even though everything was working fine? It starts happening if I do a restart. Then no matter what it boots into TWRP unless I wipe again? I believe it's happening after I flash root but I'm going out of my mind with trial and error. Any help would be appreciated.
bdsuser said:
have you ever seen an issue where the phone boots to twrp even though everything was working fine? It starts happening if I do a restart. Then no matter what it boots into TWRP unless I wipe again? I believe it's happening after I flash root but I'm going out of my mind with trial and error. Any help would be appreciated.
Click to expand...
Click to collapse
HELLO!!! I understand any frustrations you may be having, as the pixel devices have changed a good bit for us as far as development. Anyways. I'm just going to throw some knowledge out there, then proceed to help get you up and running!
You couldn't post in the development section because of your post count, but even if you could, it would have been in the wrong section and it would have been removed, or moved to the questions section.
Also, I see someone has pointed it out earlier, but I'll say it again just to make sure everything is clear. The command you were running "fastboot boot TWRP.img" only boots TWRP temporarily. You are suppose to have two files, one IMG file and one zip file. You boot the IMG file, then once you're in TWRP, you flash the zip file, then reboot to recovery and you will have installed TWRP properly.
With root, flashing wrong files or using the outdated root method will cause boot loops. The correct way to root (again already been said) is the get TWRP up and running, delete the fstab file (see earlier post) then flash SuperSU and reboot. Just throwing this out there Incase someone comes across it, if you manage to boot loop your device due to to rooting, you can fastboot flash franco's kernel and it will fix the bootloop (,but you won't have root) this isn't the correct way to fix it, but it will get you back up and running without downloading the large factory image.
***About to edit this post to continue giving more info***
Here is a correct guide and good template to get you running.
start by flashing a clean factory image, then let it boot and get it set up.
Reboot to fastboot, fastboot boot TWRP IMG then flash TWRP zip using the latest versions (RC1 is latest, pm me for more info).
Reboot the phone to recovery to ensure TWRP stuck.
Go-to advanced, file manager in TWRP and find the fstab.marlin file and delete.
Then you can go ahead and flash the latest SuperSU (I use 2.79 sr3) and when it's done reboot to system and verify root.
After rooting you can go ahead and flash a kernel if you want, I use elemental which you can flash in TWRP, but see the kernel instructions prior to flashing.
Reboot and you have a nice stock ROM with root and kernel.
For flashing Roms, kind of follow the same template, most Roms require you to flash part of or the whole latest factory image.
If your on a clean install, go ahead and install TWRP as mentioned above.
Then use TWRP to install whatever ROM you want per ROM developer instructions.
Side note, some Roms replace the TWRP with cwm or stock recovery, so it's always nice to flash the TWRP zip after flashing a ROM.
After flashing ROM, boot to system to make sure all is well, then boot back to recovery and follow instructions above for root/kernel.
As far as the problem you're having now, it usually comes from flashing outdated SuperSU images. Do a search for 2.79 sr3 and use it to root (pm me if you need help)
You might have to start clean one more time, And flash factory image.
noidea24 said:
HELLO!!! I understand any frustrations you may be having, as the pixel devices have changed a good bit for us as far as development. Anyways. I'm just going to throw some knowledge out there, then proceed to help get you up and running!
You couldn't post in the development section because of your post count, but even if you could, it would have been in the wrong section and it would have been removed, or moved to the questions section.
Also, I see someone has pointed it out earlier, but I'll say it again just to make sure everything is clear. The command you were running "fastboot boot TWRP.img" only boots TWRP temporarily. You are suppose to have two files, one IMG file and one zip file. You boot the IMG file, then once you're in TWRP, you flash the zip file, then reboot to recovery and you will have installed TWRP properly.
With root, flashing wrong files or using the outdated root method will cause boot loops. The correct way to root (again already been said) is the get TWRP up and running, delete the fstab file (see earlier post) then flash SuperSU and reboot. Just throwing this out there Incase someone comes across it, if you manage to boot loop your device due to to rooting, you can fastboot flash franco's kernel and it will fix the bootloop (,but you won't have root) this isn't the correct way to fix it, but it will get you back up and running without downloading the large factory image.
***About to edit this post to continue giving more info***
Here is a correct guide and good template to get you running.
start by flashing a clean factory image, then let it boot and get it set up.
Reboot to fastboot, fastboot boot TWRP IMG then flash TWRP zip using the latest versions (RC1 is latest, pm me for more info).
Reboot the phone to recovery to ensure TWRP stuck.
Go-to advanced, file manager in TWRP and find the fstab.marlin file and delete.
Then you can go ahead and flash the latest SuperSU (I use 2.79 sr3) and when it's done reboot to system and verify root.
After rooting you can go ahead and flash a kernel if you want, I use elemental which you can flash in TWRP, but see the kernel instructions prior to flashing.
Reboot and you have a nice stock ROM with root and kernel.
For flashing Roms, kind of follow the same template, most Roms require you to flash part of or the whole latest factory image.
If your on a clean install, go ahead and install TWRP as mentioned above.
Then use TWRP to install whatever ROM you want per ROM developer instructions.
Side note, some Roms replace the TWRP with cwm or stock recovery, so it's always nice to flash the TWRP zip after flashing a ROM.
After flashing ROM, boot to system to make sure all is well, then boot back to recovery and follow instructions above for root/kernel.
As far as the problem you're having now, it usually comes from flashing outdated SuperSU images. Do a search for 2.79 sr3 and use it to root (pm me if you need help)
You might have to start clean one more time, And flash factory image.
Click to expand...
Click to collapse
There is absolutely no need to delete the fstab file anymore. That only needed to be done when TWRP was still alpha 2, and almost three versions of su earlier.
ALL roms replace TWRP with stock recovery unless you are using lineage then you will get Cyanogenmod recovery, so reflashing TWRP before booting into system is a must.
If you are flashing root and or custome kernel and end up in a bootloop, flashing the stock boot.img to both slots via:
'fastboot flash --slot _a boot boot.img'
'fastboot flash --slot _b boot boot.Img'
will fix the issue and you will be able to boot up just fine. Again you will have to reboot into TWRP from the bootloader and reflash the zip. When you are done flashing the boot.img's you might as well just
'Fastboot boot TWRP-file.img'
Then install the zip!
Note: Do not use if you have multiple users (including a guest user)
Lots more information here: https://plus.google.com/u/1/+DeesTroy/posts/i33ygUi7tiu
I strongly recommend that kernel developers start building the touch drivers into the kernel instead of depending on modules to ensure a fully functional TWRP since recovery is now part of the boot partition.
Be careful about what you install on your device as far as kernels and ROMs go. I think there is a high potential for losing the ability to decrypt because of the OS and patch level tags that are included in the boot image and the anti-rollback features that Google has implemented.
MTP does not work in TWRP on the Pixel 2 and will not work until we have time to update the TWRP MTP implementation. You may still use adb to push and pull files.
Pixel devices have 2 "slots" for ROMs / firmware. TWRP will detect whichever slot is currently active and use that slot for backup AND restore. There are buttons on the reboot page and under backup -> options to change slots. Changing the active slot will cause TWRP to switch which slot that TWRP is backing up or restoring. You can make a backup of slot A, switch to B, then restore the backup which will restore the backup of A to slot B. Changing the slot in TWRP also tells the bootloader to boot that slot.
The zip install method installs TWRP to both slots.
Installation:
If you already have TWRP installed: Download the latest zip and install the zip using TWRP.
If you do not already have TWRP installed: Download both the img and the zip. Copy the zip to your device. You will need to have fastboot binaries and the correct drivers installed. Power off your device completely. Hold volume down and turn on the device. Your device should now be in the bootloader. Connect the device to your PC. Open a command window and run the following command from the proper location:
fastboot boot path/to/twrp.img
This will temporarily boot TWRP on your device. If you are using a lockscreen pin/pattern/password and do not get prompted to enter your passord, reboot to the bootloader and try again. Go to install and browse to the zip and install the zip. If you are currently rooted, you will need to reflash the stock boot image before installing TWRP. After installing the stock boot image, follow the instructions for installing TWRP. Once TWRP is installed, you will need to reflash root.
If you accidently flash TWRP to your device using fastboot instead of temporarily booting the image, you will need to download the latest factory image for your device and reflash the boot image.
3.2.1-1 has working decrypt with the February security patch!
3.2.1-2 fixes some zip install errors
3.2.3-1 supports decrypting Android 9.0 Pie even with a pin / pattern / password set
Pixel 2:
https://twrp.me/google/googlepixel2.html
https://dl.twrp.me/walleye/
Pixel 2 XL:
https://twrp.me/google/googlepixel2xl.html
https://dl.twrp.me/taimen/
Reserved!
Awesome to see the progress here, thank you for working on it and dealing with all the impatient requests. Will definitely be keeping an eye on this thread ?
Hurray for progress!
fastboot boot /path/to/twrp.img reboots into TWRP, but it never goes past the teamwin splash screen. I am able to reboot the phone normally after that, so no biggie.
I don't have time now to mess with figuring out how to get you logs, but I'll do that later this evening. Just wanted to give you a quick "what happened when I tried it."
And THANK YOU for working on this for us so quickly!
Edit: The logs are posted here:
https://forum.xda-developers.com/pixel-2-xl/development/twrp-alpha-pixel-2-xl-t3698148/post74363478
This makes me smile. Thanks Troy and TeamWin!
Thanks Dees_Troy and Team for getting this started!
Things are looking up, thanks guys!
Awesome to see action with this phone! Thanks!!
You da man
sharkie405 said:
fastboot boot /path/to/twrp.img reboots into TWRP, but it never goes past the teamwin splash screen. I am able to reboot the phone normally after that, so no biggie.
I don't have time now to mess with figuring out how to get you logs, but I'll do that later this evening. Just wanted to give you a quick "what happened when I tried it."
And THANK YOU for working on this for us so quickly!
Click to expand...
Click to collapse
Here are those logs.
Nice! Great to see the progress
Thanks for the progress guys. Has anyone tried flashing root from TWRP yet? I wonder if this process would work, if we used this modded TWRP... https://forum.xda-developers.com/pixel-xl/how-to/guide-how-to-systemlessly-root-pixel-xl-t3660324
sharkie405 said:
Here are those logs.
Click to expand...
Click to collapse
Did you try unlocking critical?
cwalker0906 said:
Did you try unlocking critical?
Click to expand...
Click to collapse
Yes, I've already unlocked critical.
Sent from my Pixel 2 XL using XDA Labs
Great to see...this is the start!
I unlocked the bootloader without critical and was able to bootloader into twrp. No just figuring out a way to get root.
bggold said:
I unlocked the bootloader without critical and was able to bootloader into twrp. No just figuring out a way to get root.
Click to expand...
Click to collapse
From here we should be able to push ADB shell comands to edit build.prop right?
I just fastboot booted your .img. All functioning as expected except for the issues that you indicated.
Rebooted back to system without any issues.
Thank You Great Job!
chazall1 said:
I just fastboot booted your .img. All functioning as expected except for the issues that you indicated.
Rebooted back to system without any issues.
Thank You Great Job!
Click to expand...
Click to collapse
Have you unlocked critical?
Sent from my Pixel 2 XL using XDA Labs
Hey there,
The reasons I modified the stock boot image was to:
*Be able to keep TWRP even with a non-rooted device.
*Disable DM-Verity checks to be able to modify the system partition to add an anti theft app that doesn't get removed if a performs a factory reset. (from phone settings or stock recovery)(ofcourse he could flash TWRP etc. but he would need some knowledge to do that, I doubt most thieves have this).
The only stuff I changed:
*Removed DM-Verity setting from DTB tree on kernel
*Commented out this part from init.rc in the ramdisk:
HTML:
service flash_recovery /system/bin/install-recovery.sh
class main
oneshot
This is the part that reflashes the stock recovery on every boot.
I'm running latest OTA (5.0.3) on my Oneplus 5T.
So if anybody minds testing and confirming this works? (it does on my device)
You can download the image here:
http://www.mediafire.com/file/5eexidj8rxddx9x/boot_NoVerity_NoAutoFlash.img
Oh and on a side note, I did this to learn so if you don't trust this you don't have to download it.
But I'd still love to hear what you think about the idea?
Greetings,
Down...
What about this anti theft app? How It works?
Deltalfa said:
What about this anti theft app? How It works?
Click to expand...
Click to collapse
It's called Cerberus.
I wanted to be able to install it as a system app without it getting wiped because of DM-Verity.
So I would install Cerberus, move to system/priv-app (as root). Then remove root and TWRP to return back to Stock recovery.
This way the thief will notice nothing when resetting the phone (either trough system settings or trough stock recovery).
The only way he can get rid of Cerberus if by flashing TWRP but I doubt he would do that.
how to modified the stock boot image in miui to Disable DM-Verity ?
Hi, is this zip still valid for latest 8.1 releases with Project Treble?
Thank you!
mom4751 said:
Hi, is this zip still valid for latest 8.1 releases with Project Treble?
Thank you!
Click to expand...
Click to collapse
I reply to myself.
No, this mod is old and likely is not good for Project Treble ROMs.
Flash this mod instead: https://forum.xda-developers.com/android/software/universal-dm-verity-forceencrypt-t3817389
This one has worked perfectly on my OP5T but i had to change recovery.
I started with official TWRP 3.2.3.0 but after flashing universal-dm-verity-forceencrypt it started to bootloop into recovery.
I had to flash Codeworkx TWRP instead. You can take it from here:
https://forum.xda-developers.com/oneplus-5t/development/recovery-twrp-3-2-1-0-oreo-8-0-8-1-t3729673
First, I followed a tutorial precisely and ended up with a bootloop. It was just stuck at the white screen with a G. This was only after flashing the patched_boot.img file that Magisk gave me. I searched for hours online for an answer for that, and my device isn't listed when I type "adb devices." It's just blank. I uninstalled and reinstalled the drivers, I used different usb ports, different cables, I'm using the latest Google usb drivers, as well as the latest adb/fastboot files.
I wanted to push twrp to my phone via ADB, so I can flash magisk that way and fix this issue. I've read that it fixed my problem for other people, but sadly I'm unable to so far. When I try using the command "adb push twrp.zip /sdcard/" I get the following error:
"adb: error: failed to get feature set: no devices/emulators found"
In case anyone was wondering this is the tutorial I initially followed: https://youtu.be/M-0NIUUvYI4
I really don't know where to go from here. I've been looking around for 6 hours straight. All help is most appreciated.
Fastboot boot the twrp img file, then once you're in twrp, adb push the twrp zip file, and the stock boot image (extract it from whatever security update you're on). Then, adb push the magisk zip file (instead of a patched boot image) and download and adb push a custom kernel as well.
Flash the stock boot img, then twrp zip, then a custom kernel to retain touch functionality within twrp (I recommend flash kernel) and finally flash the magisk zip file and once you reboot, you should be good to go.
rickysidhu_ said:
Fastboot boot the twrp img file, then once you're in twrp, adb push the twrp zip file, and the stock boot image (extract it from whatever security update you're on). Then, adb push the magisk zip file (instead of a patched boot image) and download and adb push a custom kernel as well.
Flash the stock boot img, then twrp zip, then a custom kernel to retain touch functionality within twrp (I recommend flash kernel) and finally flash the magisk zip file and once you reboot, you should be good to go.
Click to expand...
Click to collapse
Thanks for the response, Ricky. I tried using the ADB sideload feature in TWRP but it just stuck at "Starting ADB sideload feature..." and eventually fails. Then I used a flash drive and connected it to the phone via the adapter, and that worked. Unfortunately, after flashing those files it was still stuck at the same bootloop screen. I went back to TWRP and now the usb flash drive isn't being recognized. What should I do?
Edit: I was able to FINALLY get it out of the bootloop! I tried this script earlier and it didn't work, but it was because I didn't have the critical partitions unlocked (https://forum.xda-developers.com/pixel-2/development/tool-deuces-bootloop-recovery-flashing-t3725778). Unlocked them, ran the script, works perfectly now. However, now I'm going to root it via TWRP and use the files you mentioned. Will do that tomorrow after sleep!
rickysidhu_ said:
Fastboot boot the twrp img file, then once you're in twrp, adb push the twrp zip file, and the stock boot image (extract it from whatever security update you're on). Then, adb push the magisk zip file (instead of a patched boot image) and download and adb push a custom kernel as well.
Flash the stock boot img, then twrp zip, then a custom kernel to retain touch functionality within twrp (I recommend flash kernel) and finally flash the magisk zip file and once you reboot, you should be good to go.
Click to expand...
Click to collapse
Hey I just wanted to inform you that I did get it working after continuing where I left off last. Thanks for your help, Ricky. It's much appreciated. Now I'm just gonna investigate on how to update OTA with magisk.
Mr December said:
Hey I just wanted to inform you that I did get it working after continuing where I left off last. Thanks for your help, Ricky. It's much appreciated. Now I'm just gonna investigate on how to update OTA with magisk.
Click to expand...
Click to collapse
If your going the OTA route, which, personally, I wouldn't if your bootloader is "fully" unlocked, you'll need to completely unroot, and return back to stock recovery. Not trying to deter you, I just think that fastbooting the monthly factory images is much easier, with fewer chances for errors. Not to mention, if you know the proper technique, you won't lose any data :good:
Badger50 said:
If your going the OTA route, which, personally, I wouldn't if your bootloader is "fully" unlocked, you'll need to completely unroot, and return back to stock recovery. Not trying to deter you, I just think that fastbooting the monthly factory images is much easier, with fewer chances for errors. Not to mention, if you know the proper technique, you won't lose any data :good:
Click to expand...
Click to collapse
That sounds sick to me. :laugh: Would you mind pointing me in the right direction to a tutorial that has the proper technique to get it done without losing any data?
Mr December said:
That sounds sick to me. :laugh: Would you mind pointing me in the right direction to a tutorial that has the proper technique to get it done without losing any data?
Click to expand...
Click to collapse
This is how I do my monthly updates
Badger50 said:
This is how I do my monthly updates
Click to expand...
Click to collapse
Thanks bro I'll give it a shot today :laugh:
Badger50 said:
This is how I do my monthly updates
Click to expand...
Click to collapse
Hey I'm not exactly sure which factory image I should choose. When I was rooting the phone the tutorial said to use the image with the same build number. My current build number is "OPM1.171019.018, Feb 2018", and I'm assuming what I should do is use this one "OPM2.171019.029, Apr 2018"?
https://developers.google.com/android/images#taimen
Mr December said:
Hey I'm not exactly sure which factory image I should choose. When I was rooting the phone the tutorial said to use the image with the same build number. My current build number is "OPM1.171019.018, Feb 2018", and I'm assuming what I should do is use this one "OPM2.171019.029, Apr 2018"?
https://developers.google.com/android/images#taimen
Click to expand...
Click to collapse
You are correct :good: