1c619272891b3f73c1281c64b8af5c684e962d63
Tech/PocoM4.md
| ... | ... | @@ -43,55 +43,60 @@ https://forum.xda-developers.com/t/root-poco-m4-pro-4g-fleur-using-magisk.444919 |
| 43 | 43 | |
| 44 | 44 | Adapted from https://forum.xda-developers.com/t/unlock-bootloader-redmi-note-11s.4431675/ |
| 45 | 45 | |
| 46 | -1. Root |
|
| 47 | - - Install [mtkclient](https://github.com/bkerler/mtkclient) |
|
| 48 | - - Activate developer mode (About phone → All specs → MIUI version) |
|
| 49 | - - Turn on USB debugging and OEM unlocking |
|
| 50 | - - Turn off phone and disconnect |
|
| 51 | - - Run: |
|
| 52 | - - `mtk e metadata,userdata,md_udc` |
|
| 53 | - - plug phone in (still turned off) |
|
| 54 | - - phone detected: erases data |
|
| 55 | - - `mtk da seccfg unlock` |
|
| 56 | - - unlocks bootloader |
|
| 57 | - - `mtk reset` |
|
| 58 | - - reboots |
|
| 59 | - - Disconnect USB cable and reboot phone |
|
| 60 | - - When it boots a message is displayed warning that dm-verity is corrupted. Click the power button to dismiss and continue booting. |
|
| 61 | - |
|
| 62 | -2. Extract boot.img |
|
| 63 | - |
|
| 64 | - - from fastboot package: |
|
| 65 | - - MIUI version in Settings -> About phone -> MIUI Version (e.g. 13.0.6.0(RKEMIXM)) |
|
| 66 | - - [MIUI Updates Tracker](https://forum.xda-developers.com/t/miui-updates-tracker-redmi-note-11s-4g-poco-m4-pro-4g-fleur.4428655/) get matching Stable Fastboot update |
|
| 67 | - - Extract `vbmeta.img` _and_ `boot.img` |
|
| 68 | - |
|
| 69 | - - or from [Recovery v13.0.10.0](https://bigota.d.miui.com/V13.0.10.0.RKEMIXM/miui_FLEURGlobal_V13.0.10.0.RKEMIXM_8853bc0f31_11.0.zip) archive: |
|
| 70 | - ``` |
|
| 71 | - payload_dumper --partitions vbmeta,boot payload.bin |
|
| 72 | - ``` |
|
| 46 | +## 1. Root |
|
| 47 | +- Install [mtkclient](https://github.com/bkerler/mtkclient) |
|
| 48 | +- Activate developer mode (About phone → All specs → MIUI version) |
|
| 49 | +- Turn on USB debugging and OEM unlocking |
|
| 50 | +- Turn off phone and disconnect |
|
| 51 | +- Run: |
|
| 52 | + - `mtk e metadata,userdata,md_udc` |
|
| 53 | + - plug phone in (still turned off) |
|
| 54 | + - phone detected: erases data |
|
| 55 | + - `mtk da seccfg unlock` |
|
| 56 | + - unlocks bootloader |
|
| 57 | + - `mtk reset` |
|
| 58 | + - reboots |
|
| 59 | +- Disconnect USB cable and reboot phone |
|
| 60 | + - When it boots a message is displayed warning that dm-verity is corrupted. Click the power button to dismiss and continue booting. |
|
| 61 | + |
|
| 62 | +## 2. Extract boot.img |
|
| 63 | +From fastboot package: |
|
| 64 | + |
|
| 65 | + - MIUI version in Settings -> About phone -> MIUI Version (e.g. 13.0.6.0(RKEMIXM)) |
|
| 66 | + - [MIUI Updates Tracker](https://forum.xda-developers.com/t/miui-updates-tracker-redmi-note-11s-4g-poco-m4-pro-4g-fleur.4428655/) get matching Stable Fastboot update |
|
| 67 | + - Extract `vbmeta.img` _and_ `boot.img` |
|
| 68 | + |
|
| 69 | +or from [Recovery v13.0.10.0](https://bigota.d.miui.com/V13.0.10.0.RKEMIXM/miui_FLEURGlobal_V13.0.10.0.RKEMIXM_8853bc0f31_11.0.zip) archive: |
|
| 73 | 70 | |
| 74 | -3. Patch boot.img |
|
| 71 | +``` |
|
| 72 | +payload_dumper --partitions vbmeta,boot payload.bin |
|
| 73 | +``` |
|
| 75 | 74 | |
| 76 | - Patch boot.img for root using Magisk. |
|
| 75 | +## 3. Patch boot.img |
|
| 76 | +Patch boot.img for root using Magisk. |
|
| 77 | 77 | |
| 78 | - - Install [Magisk](https://github.com/topjohnwu/Magisk/releases/latest) |
|
| 79 | - - Copy `boot.img` to SD card |
|
| 80 | - - Magisk → install → patch a file (for each boot.img) |
|
| 81 | - - Copy patched boot image from Downloads (called `magisk_patched_*.img`) to SD Card |
|
| 78 | +- Install [Magisk](https://github.com/topjohnwu/Magisk/releases/latest) |
|
| 79 | +- Copy `boot.img` to SD card |
|
| 80 | +- Magisk → install → patch a file (for each boot.img) |
|
| 81 | +- Copy patched boot image from Downloads (called `magisk_patched_*.img`) to SD Card |
|
| 82 | 82 | |
| 83 | -4. Flash patched boot.img |
|
| 83 | +## 4. Flash patched boot.img |
|
| 84 | 84 | |
| 85 | - ``` |
|
| 85 | +``` |
|
| 86 | 86 | adb reboot bootloader |
| 87 | 87 | fastboot flash boot magisk_patched_*.img |
| 88 | 88 | fastboot flash vbmeta --disable-verity --disable-verification vbmeta.img |
| 89 | 89 | ``` |
| 90 | 90 | |
| 91 | -5. Patch inactive slot |
|
| 91 | +## 5. Patch inactive slot |
|
| 92 | 92 | |
| 93 | - - boot rooted phone |
|
| 94 | - - Magisk Install to Inactive slot |
|
| 93 | +- boot rooted phone |
|
| 94 | +- Magisk Install to Inactive slot |
|
| 95 | +- reboots to inactive |
|
| 96 | + - if there's nothing in that slot (fastboot) switch back |
|
| 97 | + ``` |
|
| 98 | +fastboot --set-active=other reboot |
|
| 99 | +``` |
|
| 95 | 100 | |
| 96 | 101 | |
| 97 | 102 | # Updating |