TUTORIAL KOMPLIT BERGAMBAR membuat file BOOT.IMG untuk root flash TWRP android SONY Z5 COMPACT E5803 dan QUALCOM lainnya via PC
Cara membuat file BOOT.IMG untuk root android SONY e5803 dan SONY lainnya via PC
ada dua cara, cara-cara ini bisa untuk semua android dari SONY dengan OS 7.0 keatas
tapi cara pertama disini khusus saya menggunkan ponsel xperia z5 compact e5803
syarat wajib posel sudah di UBL (Unlock Boot Loader) nya
WAJIB jika belum UBL, maka tutorial UBL (Unlock Boot Loader) bisa lihat disini
ikuti semua petunjuknya hingga mendapatkan kodenya dan simpan, bisa berupa file.TXT atau .DOC karena nanti yang dibutuhkan hanya code berupa angka dan huruf.
CARA PERTAMA khusus ponsel SONY
silahkan download ini semua:
- firmware E5803_32.4.A.1.54_1298-5422_R1E
- flashtool 0.9.33.0 windows linux
- platform tools windows linux
- Minimal ADB Fastboot V1.4.3
- Rootkernel V5.23
- USB Driver Qualcom
- Xperia Driver
untuk CARA KEDUA
- platform tools windows linux
- TWRP_3.7.0_9-0-recovery_suzuran_2022-12-23
- Xperia driver
TAHAP EKSEKUSI CARA PERTAMA:
- install flashtool-0.9.33.0-windows
- ekstrak dan install Minimal ADB Fastboot
- ekstrak dan install install USB driver Qualcom
- ekstrak dan install install Xperia driver
- ekstrak platform tools
(JIKA PERLU) lakukan FLASHING ke OS tertinggi untuk z5 compact android 7.1.1
tutorial flashing bisa ke sini
--------------------------------------------------------------------------------------------------------
ada 2 cara untuk membuat BOOT.IMG dengan fitur ROOT
CARA 1: CARA INI FAVORIT SAYA
cara ini yaitu membuat BOOT.IMG dengan fitur ROOT melalui firmware.FTF
- buka file firmware.ftf, buka dengan aplikasi zip (7Zip, WinZip, Windows Compressed Folder)
- jalankan Flashtool -> Tools -> SIN Editor untuk mengekstrak kernel yang sudah di dapatkan tadi.
- ekstract file rootkernel.zip
masukkan kernel.elf yang di dapatkan tadi dalam satu folder dengan rootkernel berada
- buka folder platform-tools
- setelah muncul CMD, ketik perintah ini tanpa tanda petik:
pilih "Y" terus untuk menjawab semua pertanyaan
DONE
dan sudah jadi file BOOT.IMG dengan fitur ROOT
LANJUT PROSES flashing BOOT.IMG ke ponsel
- matikan ponsel lalu koneksikan ke PC via USB sambil menahan tombol (volume +) sampi lampu indikator biru menyala
- Buka folder platform-tools ketik CMD di address bar,
- lakukan tester terlebih dahulu dengan mengetik printah ini di CMD tanpa tanda petik:
"fastboot boot boot.img"
jika tidak ada FAILED maka lanjutkan dengan mengetik printah ini tanpa tanda petik:
"fastboot flash boot boot.img"
- nanti akan muncul "< waiting for any device >"
- lepas kabel USB lalu tekan dan tahan tombol (volume+) lagi sambil menancapkan kabel USB dari PC ke ponsel hingga indikator biru menyala.
nyalakan ponsel dan selamat ponsel anda sudah ROOTed
CARA KEDUA untuk semua PONSEL dengan chipset QUALCOM
cara ini membuat BOOT.IMG dengan fitur ROOT melalui ponsel yang saat ini akan di ROOT
- ekstrak platform-tools-latest-windows.zip
- pindah atau copy TWRP.img taruh dalam satu folder dengan platform tools tadi
- matikan ponsel lalu koneksikan ke PC via USB sambil menahan tombol (volume +) sampai lampu indikator biru menyala
setelah muncul CMD, ketik perintah ini tanpa tanda petik:
- TWRP SUDAH TERPASANG
selanjutnya proses pembuatan BOOT.IMG
- nyalakan ponsel pada mode recovery (TWRP) dengan menekan tombol (Power dan Volume-) secara bersamaan hingga bergetar lalu lepaskan
- tancapkan USB dari PC ke ponsel
- buka Minimal ADB Fastboot yang sudah terinstall dan ketikkan perintah dibawah ini tanpa tanda petik:
sekarang ketik perintah ini tanpa tanda petik:
ketik perintah ini tanpa tanda petik:
"dd if=(isi hasil dari perintah di atas) of=/sdcard/kernel.img"
CONTOH: dd if=/dev/block/platform/soc.0/f9824900.sdhci/by-name/boot of=/sdcard/kernel.img
jika berhasil maka anda bisa megambil file kernel.img di /sdcrad/(disini) bisa di memori internal, maupun ekternal.
- ekstract file rootkernel.zip
masukkan kernel.img yang di dapatkan tadi dalam satu folder dengan rootkernel berada
- copy atau cut file kernel.img tadi ke folder rootkernel
- ketik CMD di address bar, lalu enter
- setelah muncul CMD, ketik perintah ini tanpa tanda petik:
"rootkernel kernel.img boot.img"
tekan "Y" terus menjawab semua pertanyaan
DONE
dan sudah jadi file BOOT.IMG dengan fitur ROOT
- matikan ponsel lalu koneksikan ke PC via USB sambil menahan tombol (volume +) sampai lampu indikator biru menyala
- buka folder platform-tools
- pindahkan file BOOT.IMG yang sudah root tadi jadi satu ke dalam folder platform-tools
- ketik CMD di address bar, lalu enter
- setelah muncul CMD, ketik perintah ini tanpa tanda petik:
"fastboot boot boot.img"
jika tidak ada FAILED maka lanjutkan dengan mengetik printah ini tanpa tanda petik:
"fastboot flash boot boot.img"
- nanti akan muncul "< waiting for any device >"
- lepas kabel USB lalu tekan dan tahan tombol (volume+) lagi sambil menancapkan kabel USB dari PC ke ponsel hingga indikator biru menyala.
nyalakan ponsel dan selamat ponsel anda sudah ROOTed
tujuan ROOT untuk saya adalah demi bisa uninstall aplikasi yang tidak penting sehingga kinerja ponsell lebih ringan dan ruang penyimpanan lebih lega
saya menggunakan es explorer untuk menguninstallnya karena lebih mudah , namun harus berhati-hati karena jika salah uninstall file system maka ponsel akan BOOTLOP
jika BOOTLOP bisa lakukan flashing ulang dan mulai lagi dari awal, atau lebih aman lakukan backup menggunakan TWRP
backup TWRP hanya berfungsi terhadap Firmware yang sama.
![firmware z5 compact E5803_32.4.A.1.54_1298-5422_R1E.ftf - Make sure you are with a Xperia Z5c Go to Menu > Settings > About phone > Model number is: E5803 or E5823. - Make sure bootloader is unlockable Open phone app, dial *#*#7378423#*#* > Service info > Configuration > Rooting status: Bootloader unlock allowed: Yes If No, you can cry, you cannot get further. In previous menu, go to SIM Lock and make sure all the networks start with []. If not, ask your Telecom provider the SIM unlock code. ### You must be logged as a Microsoft Windows administrator to run console commands below. ### When you lose control of Xperia Z5c, hold Power + Volume+ until phone restarts. ### READ THOSE WARNING COMMENTS Read all my tutorials at: https://github.com/djibe/Android-tutorials CHANGELOG v1. Initial release 1) DOWNLOAD FILES - djibe Xperia Z5 Compact pack: https://bit.ly/djibe-xperia-z5c or https://mega.nz/file/YbM2AZrJ#SIFuEObj7soHZFIX0OqQnLUQ22CJgR6YJrWe-K2zw1A (contains official Z5c USB drivers + adb + fastboot + XperiFirm by @IgorEisberg + Flashtool by Androxyde + recovery TWRP 3.7 by @Berni-0815 + microG_Remover + Magisk 28.1 + PlayIntegrityfix) + ROM LineageOS Unofficial 19.1: https://forum.xda-developers.com/t/rom-unofficial-12-s-lineageos-19-1-for-z5c-suzuran.4417131/ Download latest build (2025-02-19 or newer): https://mega.nz/file/jcUHgCLY#gw76wCovdfF6mSncjWgZoH8tN2uzAjhf3f2yHsmmsY0 | Backup: https://mega.nz/file/62w2CTAJ#HwHBimk7tcbZ3JkjPSDJbH8ICsoC-BYdnxZBs4-q4r4 Extract both files from .7z archive (.zip and .md5, don't extract zipfile content). ### Not working: encryption, payment, streaming (mirroring), VOLTE + BitGApps OMNI 12.1 ARM64: https://bitgapps.io + FTF: E5823_32.4.A.1.54_1298-5498_Customized-IT.zip from https://androidfilehost.com/?fid=11050483647474833416 or https://mega.nz/file/Qe8nkJIY#cQCRi6cNFrP503LYdGKi8cjlcFaUnbFJ3vp5DuME3gs Unzip it. + a microSD card. Unzip ROM from .7z container, copy ROM's zipfile, microG_Remover, BitGApps, Magisk apk + zip, PlayIntegrityFix on microSD card and insert it in phone. + Charge phone to 100%. 2) IMEI NUMBER On phone, go to Menu > Settings > About phone > Status > IMEI Information Note the IMEI. Store it. 3) INSTALL DRIVERS Commands below are for Windows 10/11 installation of unsigned drivers. ### For other Windows versions, Google "windows X install unsigned driver". On the keyboard of PC, use "Windows key + R" combo. In the command prompt that opens, type: Code: shutdown -r -t 0 -o This opens a Windows menu: Go to Troubleshooting > Advanced Options > Settings > Restart Upon restart, press on keyboard : key 7 - Disables drivers signature verification After boot, Start Flashtool Xperia Driver Pack 1.9 (from my pack), check the Flashmode Drivers, Fastboot drivers, Xperia Z5 Compact Device > Install. Authorize forcing the driver installation. 4) FIRMWARE NUMBER AND USB DEBUGGING On phone, go to Menu > Settings > About phone > Build number Make sure it is 32.4.A.1.54 (or higher) and tap 7 times on it to unlock Developer options. ### Don't go too fast if you are not with 32.4.A.1.54 firmware. Mine was 32.0.A.4.11 (Android 5.1.1) and we will upgrade it in a few chapters. Go to Menu > Settings > Developer options > USB debugging, switch it ON and confirm it in next Dialog. Within Developer options menu, switch ON OEM unlocking too. 5) GENERATE BOOTLOADER UNLOCK CODE First, whatever firmware you have, we need to unlock the bootloader. From your PC, go to: https://developer.sony.com/develop/open-devices/get-started/unlock-bootloader/ At the bottom of the page, in Select your device: Select Xperia Z5 Compact Enter your IMEI + check both checkboxes after this. Copy the unlock code. 6) FASTBOOT MODE Connect phone to USB with Android started. Open the flash/ folder from my pack. In Windows address bar, type "cmd" and hit Enter. A Windows Command window will open. Now type Code: adb devices Command returns: List of devices attached YT91190206 unauthorized If no Allow USB debugging? screen shows up on phone, disconnect and reconnect phone. Check ON always allow from this computer and tap on OK. Enter command: Code: adb reboot bootloader Phone restarts and a blue LED is active on top right corner. Now you can enter command: Code: fastboot devices Command returns: CB5A28GGWK fastboot ### If command throws an error, go to Windows Device Manager and make sure Android device is set as Sony Fastboot interface. ### If not you'll have to force this driver. We can go further. 7) UNLOCK XPERIA Z5C BOOTLOADER ### All data will be lost Fill the command with your Unlock Code: Code: fastboot oem unlock 0xYOURUNLOCKKEY confirm with Enter. After 2 seconds, it is displayed OKAY. Bootloader is unlocked ! Unplug phone to shut it down. Turn it on, wait during initialization. Tap big grey button when it appears to restart phone. Then fast configure it. Activate Developer options again to set USB debugging ON. Go to Security > Check Unknow sources. 8) UPGRADE FIRMWARE TO ANDROID 7.1 ### If your firmware is not 32.4.A.1.54, complete this chapter. If it is already, skip to next chapter. Install Flashtool.exe from my pack. Launch Flashtool64.exe (Sony Mobile Flasher by Androxyde). Click Flash Icon > Flashmode. Source folder: set download folder for FTF firmware file (Download folder in my case). In the firmwares panel, Sony Xperia Z5 Compact will be displayed. Click on the arrows to open subfolders > E5823 > Customized IT and finally select 32.4.A.1.54. Content panel will display many files. Check all Wipe Sin items: APPS_LOG, DIAG, PERSIST, SSD, USERDATA. Shutdown phone. Hold Volume- and plug phone to USB, release when LED is red. Wait till it becomes green. Then click Flash (still in Flashtool64). Wait during operations to complete, then unplug phone. Start it again and wait during first boot. Then when introduction screen is loaded, wait until the warning stops popping and tap on the big POWER OFF button. Then restart phone and fast configure it. You now have Android 7.1 with 32.4.A.1.54 firmware. Again, activate Developer console and USB debugging. Shutdown phone. 9) FLASH TWRP RECOVERY 3.7 Android is launched. Open a command on my /flash folder, type in console : Code: adb reboot bootloader Again grant USB debugging from this computer. Then when LED is blue: Code: fastboot flash recovery TWRP_3.7.0_9-0-recovery_suzuran_2022-12-23.img . Confirm with Enter. Wait, then once the confirmed success, type : Code: fastboot reboot , confirm with Enter Let phone restart, then shut it down. Let the command active. Hold Power + Volume- until phone vibrates and release buttons, wait during TWRP boot. 9) BACKUP CURRENT ROM You are now in TWRP recovery, Swipe to Allow Modifications. Go to Backup. Select Boot, FOTAKernel "Recovery", System, Data, OEM, LTALabel and Firmware partitions. Tap on Select Storage and select MicroSD Card. Swipe to Backup. Go to TWRP Home screen. Go to Wipe > Advanced Wipe > Select Dalvik, Cache, Data, Internal Storage, System and swipe to confirm erasing. Go to Wipe > Format Data, type yes and tap on botton right check icon. 10) INSTALL ROM, GAPPS AND MAGISK Back to TWRP home menu. Go to Install > Select Storage > Micro SD card > OK Select lineage*.zip. Swipe to confirm flash. ### If you get an error and flash fails, go to Reboot > Recovery and wait for TWRP to reboot. ### If you want to stay with MicroG (no Google apps), jump to next chapter. To remove microG and install GApps, we need extra steps. TWRP > Install > microG_Remover.zip ### If problems with microG_Remover: ### TWRP > Advanced > File Manager. ### Navigate to system > system > priv-app > DroidGuard. Tap on DroidGuard.apk > Delete and swipe. ### To return to parent folder, scroll to top and tap on (Up A Level). ### Repeat operation for: FakeStore, GmsCore and GsfProxy. Back to TWRP home screen > Reboot > Power Off. Boot to Recovery again: hold Power + Volume- until phone vibrates and release buttons, wait during TWRP boot. Back to TWRP > Go to Install > flash bitgapps*.zip Back to TWRP home screen > Reboot > Power Off. Reboot to Recovery, go to Install > flash Magisk*.zip Swipe to confirm flash. At the end, tap on Wipe Cache/Dalvik, swipe and Reboot System. Wait during boot. 11) ROOT (Optional) ### Needed to work with Netflix or Disney+ Do not connect to your Android account. Configure Android as you like. Don't try to set fingerprints at first setup. It will crash. ### If you copied bitgapps.conf, Android starts with SetupWizard. No need for extra work to be root. Magisk launches with Android. Superuser permissions can be managed from Magisk Manager app. Go to Files app > Menu > E5823 > Magisk*.apk and tap to Install Launch Magisk. You may need to install extra files. Agree (use Direct Install option if asked). Then in Magisk go to Settings > Hide the Magisk app, give it a name and switch Zygisk option ON. Go to Modules Tab > Install from Storage: PlayIntegrityFix (located in my archive) > Reboot. Unlock Developer options: go to Settings > About. At the bottom, tap 7 times on Build number. Go to Settings > System > Advanced > Developer options > Disable Android debugging (ADB). Reboot phone. On reboot, you can connect to Wi-Fi and test SafetyNet tests with an app like YASNAC. 12) TWEAKS Go to Settings > About phone > Tap 7 times on Build number. Go to Settings > System > Advanced > Developer options. Advanced restart switched ON (Hold power > Restart > Restart to recovery to access TWRP easily later) Android debugging switched ON Windows animation scale to Animation scale .5x Same for Transition animation scale and Animator duration scale to improve reactivity For faster GPS fix, use GPS Status and Toolbox and download A-GPS data. Your phone is a rocket, enjoy ;-) Thanks: LineageOS team, TWRP team, BitGApps team, @NeoArian, @TheHitMan, TopJohnWu ---------------------------------------------------- Boot to recovery: hold Power + Volume- until phone vibrates and release buttons](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh5uDmfbYDz1KpXdotKU69XfnYRRh_X4N0WU-sBUMmCuzm_zFJtYcB1JNlw5MNJKhTaeEfTgMjG0hyphenhyphen9PRGpVyjCSDrza0MDebjDXeqOJj3Z5unwyJVR53rEpPNOgqcZ323RQ9y-wclEUbV1qBvl-0nxXNxJcYXSHLbJp_SMYS-NJl8aOu0Z75DXFJehvn-L/w320-h292/a.jpg)


![ubl android unlock boot loader android None of the following is my own novel work, I just took some time to go through the process step by step and document how to root the Z5 compact while preserving both the DRM keys (in a backup) and the functionality normally lost by unlocking the bootloader (using the DRM credentials patch). This post may serve as a tutorial for people starting to root their Z5 compact for the first time. The device I tested it with is an E5823 with German firmware (originally shipped with CDA 1298-1220_R1C) that was already updated to build 32.1.A.1.163 (Android 6.0, patch level 2016-02-01) via OTA. For devices with other CDA regions, please adapt accordingly by using the respective firmware files. 1. Backup settings and apps This will be required for restoring after unlocking the bootloader (which wipes the user data partition). For some reason, including the "-shared" option (i.e. contents of the internal emulated SD card, aka media storage) did not work, so make sure to save any media files (pictures takes with the camera, downloads, etc.) separately, e.g. via MTP. Use Sony backup to SDcard functionality adb backup -apk -all -f sony-xperia-z5c-noshared.ab 2. Backup TA partition (DRM keys) Downgrade to exploitable firmware release (LP). Note that downgrading without wiping will make the phone unstable and may cause an automatic reboot after 1-2 min. Therefore either manually wipe the phone during flashing (ticking the checkbox in Flashtool) or be quick with the second (root/backup TA) step. Download XperiFirm from http://xdaforums.com/crossdevice-dev/sony/pc-xperifirm-xperia-firmware-downloader-t2834142 (I use it under Linux with mono) - UPDATE: For downloading the .185 MM firmware, I had to update to XperiFirm 4.9.1. For downloading 32.2.A.0.253, I used XperiFirm 5.0.0. Download firmware build 32.0.A.6.200 for the root exploit based on CVE 2015-1805. I used E5823_StoreFront_1299-6910_32.0.A.6.200_R2B downloaded with XperiFirm 4.8.2 (or newer) on 2016-04-01 Download flashtool from http://www.flashtool.net/index.php, I used flashtool-0.9.20.0-linux.tar.7z (or newer version) Create FTF file in Flashtool with menu Tools->Bundles->Create Flash in flashmode (flashing system.sln takes 8-10 minutes, be patient...) Use temporary root exploit to backup TA partition (http://xdaforums.com/crossdevice-dev/sony/iovyroot-temp-root-tool-t3349597) I used iovyroot_v0.3.zip as of 2016-04-02 Connect USB in ADB mode adb push "root/iovyroot" "/data/local/tmp/iovyroot" adb push "root/backup.sh" "/data/local/tmp/backup.sh" open shell: adb shell chmod 777 /data/local/tmp/iovyroot chmod 777 /data/local/tmp/backup.sh mkdir /data/local/tmp/tabackup /data/local/tmp/iovyroot /data/local/tmp/backup.sh exit adb pull "/data/local/tmp/tabackup/" . 3. Upgrade again to MM and unlock bootloader with official method Create FTF from E5823_Customized DE_1298-1220_32.1.A.1.163_R1C with Flashtool and flash in flashmode. Optional: Verify that DRM keys are still OK: In dialer enter "*#*#service#*#*", then "Service tests" --> "Security" and it should look like this: MARLIN [Key OK] [Active] WIDEVINE [Key OK] [Active] CKB [Key OK] [Active] HUK: <device specific hex representation of key> PROPID_AID: 004 OTP_LOCK_CONFIG: 0155 OTP_LOCK_STATUS: LOCKED AUTH_ENABLE: 07 DEVICE_ID: <your device ID> FIDO_KEYS: Provisioned Factory Reset Reason: No device reset information found. Click to expand... Allow bootloader unlock in developer settings Follow steps from http://developer.sonymobile.com/unlockbootloader/unlock-yourboot-loader/ . There is not much to add here, as Sony describes the process well and in sufficient detail. Please note that this WILL WIPE YOUR DATA PARTITION, INCLUDING SHARED FILES. Make sure that you have a backup before executing this step (and best do it before downgrading to LP, because some parts will not work after the downgrade without a wipe, and may make the phone reboot after 1-2 min). Reboot in fastboot mode: hold volume-up and connect USB cable to turn on fastboot -i 0x0fce oem unlock <your unlock code> After unlock: check key status Blobs: generic error! HUK: generic error! PROPID_AID: 004 OTP_LOCK_CONFIG: 0155 OTP_LOCK_STATUS: LOCKED AUTH_ENABLE: 07 DEVICE_ID: <your device ID> FIDO_KEYS: Not provisioned, SUNTORY error Factory Reset Reason: No device reset information found. Optional: Try restoring TA partition (will lock bootloader again if successful!). This can be skipped entirely if you trust the tools used in this tutorial, but I chose to verify that restoring the DRM keys works as expected (not that you can do anything about it at that step if it doesn't work...). Flash E5823_StoreFront_1299-6910_32.0.A.6.200_R2B again with Flashtool Enable developer mode, connect USB in ADB mode adb push "root/iovyroot" "/data/local/tmp/iovyroot" adb push "root/restore.sh" "/data/local/tmp/restore.sh" adb push TA-02042016.img "/data/local/tmp/TA.img" open shell chmod 777 /data/local/tmp/iovyroot chmod 777 /data/local/tmp/restore.sh /data/local/tmp/iovyroot /data/local/tmp/restore.sh Flash E5823_Customized DE_1298-1220_32.1.A.1.163_R1C again with Flashtool Check key status --> exactly the same as before, so successfully restored Unlock again in fastboot mode (will wipe data again...) fastboot -i 0x0fce oem unlock <your unlock code> UPDATE: Updating to newer MM releases After the first version of this post, Sony has already released an updated MM firmware (.253 at the time of this writing). If at any point in time you wish to update to a newer release, start at this point of the tutorial. Theoretically, this should be possible without wiping. However, I would not try it without a backup. Create a backup, e.g. with adb backup or Sony backup. Download new firmware with XperiFirm. At the time of this writing, I used "E5823_Customized DE_1298-1220_32.2.A.0.253_R2C", downloaded with XperiFirm 5.0.0. Create FTF file in Flashtool with menu Tools->Bundles->Create Flash in flashmode (flashing system.sln takes 8-10 minutes, be patient...) 4. Root MM This will also give you TWRP recovery (which can be entered by pressing the volume up or down button a few seconds after power-on, as soon as the LED starts to change color). DEPRECATED Alternative 1: with custom kernel but original system image: http://xdaforums.com/z5-compact/general/root-e5823-marshmallow-t3336346 Download Androplus kernel from https://www.androidfilehost.com/?w=files&flid=52185 (I used v22c) Download TWRP 3.0 from http://xdaforums.com/z5-compact/orig-development/twrp-suzuran-twrp-3-0-t3334568 (I used "March 25, 2016 version") --> twrp-3.0-recovery.img Download SuperSU v2.71 beta from https://download.chainfire.eu/932/SuperSU/BETA-SuperSU-v2.71-20160331103524.zip With unlocked bootloader, you can now use fastboot mode. The easiest way is to do this from a running Android system: adb reboot bootloader Flash kernel: unzip Z5C_AndroPlusKernel_v22c.zip sudo fastboot flash boot boot.img Flash recovery: sudo fastboot flash recovery twrp-3.0-recovery.img Install SuperSU: boot into Android, copy BETA-SuperSU-v2.71-20160331103524.zip to internal storage (ADB sideload doesn't seem to work with this experimental TWRP at the moment...) boot into TWRP by pressing volume-up when LED blinks immediately after turning on (and choose option "Keep Read Only" for the system partion) Install SuperSU zip --> systemless mode DEPRECATED Alternative 2: with modified system partition: http://xdaforums.com/z5-compact/development/kernel-stock-kernel-dm-verity-sony-ric-t3350341 RECOMMENDED Alternative 3: with stock kernel patched for root and original system partition: http://xdaforums.com/xperia-z5/development/root-automatic-repack-stock-kernel-dm-t3301605 Download rootkernel_V4.51_Windows_Linux.zip from URL above (or the newest version available at that time) and unpack Patch the kernel from your currently flashed Sony firmware release: Flashtool -> Tools -> SIN Editor to extract the kernel from kernel.sin in the directory created by XperiFirm --> .elf file Copy latest SuperSU*.zip (v2.76 at the time of this last update) to the folder where rootkernel*.zip was extracted to. Note: if using the firmware 32.2.A.0.224, you will need the latest beta SuperSU.zip from https://download.chainfire.eu/964/SuperSU/BETA-SuperSU-v2.74-2-20160519174328.zip . For 32.2.A.0.253 (the latest at the time of this update), use SuperSU v2.76 (non-beta). ./rootkernel.sh kernel.elf kernel-patched.elf My personal recommendation for the options: don't disable RIC, install TWRP, don't install busybox, install DRM fix sudo fastboot flash boot kernel-patched.elf ./flash_dk TA-02042016.img DK.ftf Flash DK.ftf with flashtool for a more complete restore of DRM-based functionality with the original TA partition backup UPDATED: Thanks to ninestarkoko for pointing out that also the AndroPlus kernel disables dm-verity to enable more flexibility for root-using apps. Originally I assumed that dm-verity would still be intact with alternative 1, which in fact it is not. As of 2016-05-11, I used alternative 3 instead of alternative 1. Now that Xposed can be installed system-less (http://xdaforums.com/xposed/unofficial-systemless-xposed-t3388268), it should be possible to use with dm-verity intact. However, I have not tried this so far. 5. [Optional] Install Xposed Sony MM firmware no longer seems to have the odex problem documented in http://xdaforums.com/crossdevice-dev/sony/z4-z5-z5c-fix-camera-fc-installing-t3246962/, so no additional steps before/after "normally" installing Xposed are required Download latest arm64 "sdk23" framework from http://dl-xda.xposed.info/framework/ (I used v81) UPDATE: There is now a system-less version v86, which may even support OTA upgrades of the system image. At the time of this last update, I used the version linked from http://xdaforums.com/xposed/unofficial-systemless-xposed-t3388268. Download XposedInstaller_3.0-alpha4.apk from http://xdaforums.com/showthread.php?t=3034811 and install UPDATE: For the system-less Xposed version, instead use XposedInstaller_by_dvdandroid.apk from http://xdaforums.com/xposed/unofficial-systemless-xposed-t3388268. Install xposed-v86.1-sdk23-topjohnwu.zip via TWRP 6. Restore functionality relying on DRM credentials Note: This is not necessary if you used alternative 3 for rooting above - that one already includes the DRM fix in the patched kernel image. Using TWRP flashed in the step before, flash the ZIP to patch Sony credentials checks from http://xdaforums.com/xperia-z5/development/sony-credentials-restore-unlocking-t3296383 . Copy drmrestore.zip from above link to internal storage and install via TWRP That's it!](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhR8p4gJcIu3MXAFldvDW3NU8NFlVaw24Ti_kLAbMT5AUhZCpPb0Ybu-Vdap5iM38gnvFVvDolPCtKrDzwhdpYCPC9Hjo9EmwHANjYz7zDiY0ZSO0VbOpwdnKKN5mpYXp7E35RZzDyi_dVr7fmGu-aIaXMSY5tnBRV7WjbzzdRCROA3PSUuEVEDSXNo9fur/w320-h91/a4.jpg)
















Comments
Post a Comment