Root for Note Air 2? - Page 10

mergen3107 · 03-13-2022, 10:34 PM

Quote:

Originally Posted by readandread

OK, thanks that makes it much clearer. I did steps 1-2 which worked fine before as well, but I only a few folders and a big .bin file not an img file.

On mobile right now, but this is what matters:
1) the file is whatever it is originally in the decrypted update.zip. If it is boot.bin, then it is boot.bin
2) boot.bin should not be big. It is about 12 MB large (or somewhere in that vicinity)

yokos · 03-14-2022, 04:38 AM

Quote:

Originally Posted by mergen3107

On mobile right now, but this is what matters:
1) the file is whatever it is originally in the decrypted update.zip. If it is boot.bin, then it is boot.bin
2) boot.bin should not be big. It is about 12 MB large (or somewhere in that vicinity)

Incremental updates don't have any boot.img. Just a patch file is included
After updating firmware you have to use dd, using a booted older rooted boot.img, or edl to get the latest boot.img.

Warning: flashing an older boot.img (after a x.x.+1 firmware revision) on Max Lumi caused severe finger touch problems. Therefore we need the latest boot.img.

Renate · 03-14-2022, 10:32 AM

I'm looking for a beta tester for my Windows EDL client software.
You should have a Note Air 2 and have already found a compatible loader bin file.
This should simplify things for Windows users.
PM me for a download link.
Thanks

readandread · 03-14-2022, 12:36 PM

Quote:

Originally Posted by yokos

Incremental updates don't have any boot.img. Just a patch file is included
After updating firmware you have to use dd, using a booted older rooted boot.img

Warning: flashing an older boot.img (after a x.x.+1 firmware revision) on Max Lumi caused severe finger touch problems. Therefore we need the latest boot.img.

In the update file a have payload.bin that's 1.2GB large.

I had no luck with EDL on various platforms. Unfortunately, I can't devote any more time trying to figure out why EDL isn't working and getting the boot.img via it.

Maybe someone with a Note Air 2 could post the patched img file. That worked like charm last time. Maybe @Cascade94 will grace us with his presence and give us the juice

Update:

After doing a quick search I found what dd kinda means. After inputting the following command (just hooking up my devices normally, no recovery mode, EDL etc.):

Code:

dd if=/dev/block/bootdevice/by-name/boot_a bs=64M  of=/sdcard/boot_a.img

I got:

100663296 bytes (96 M) copied, 6.301492 s, 15 M/s
NoteAir2:/ # dd if=/dev/block/bootdevice/by-name/boot_a bs=64M of=/sdcard/boot_a.img
1+1 records in
1+1 records out
100663296 bytes (96 M) copied, 0.484554 s, 198 M/s

Then I did:

PHP Code:


			
d if=/dev/block/bootdevice/by-name/boot_b bs=64M  of=/sdcard/boot_b.img

1+1 records in
1+1 records out
100663296 bytes (96 M) copied, 0.468288 s, 205 M/s

as I saw there are two boot files (boot_a and boot_b). In my file explorer on the devices, these files do NOT have file endings. Not sure if that matters or not. I couldn't open these file on my Mac.

I also managed to pull of the system.img. Not sure if system.img is different from boot.img. Both boot.img are 100MB and system is 300MB.

Are these the boot files (currently still on v3.2) the ones we're looking for? However, when I update to v3.2.1 I wouldn't have root and couldn't pull this off on the new version. Or am I missing something?

Renate · 03-14-2022, 01:41 PM

Code:

C:\>edl.exe /lsdm636.bin
Found EDL 9008
HWID: 000cc0e100000000, MSM: 000cc0e1, OEM: 0000, Model: 0000
Sending sdm636.bin.............................................................................................................................................................. Ok
Firehose detected

C:\>edl.exe /pboot boot.img /t
Found EDL 9008
Writing config... Ok
Requesting GPT header... Ok
Receiving GPT header... Ok
Requesting GPT entries... Ok
Receiving GPT entries... Ok
Requesting image header... Ok
Receiving image header... Ok
Requesting read... Ok
Receiving boot.img...................................................................................................................................................................................................................................................................................................................................................................................................................... Ok

downeaster59 · 03-16-2022, 12:44 PM

Quote:

Originally Posted by Renate

I'm looking for a beta tester for my Windows EDL client software.
You should have a Note Air 2 and have already found a compatible loader bin file.
This should simplify things for Windows users.
PM me for a download link.
Thanks

Hi there! Here's the stuff you asked for!

Renate · 03-16-2022, 05:02 PM

Quote:

Originally Posted by downeaster59

Here's the stuff you asked for!

Is it live or is it Memorex?

Code:

LUN   #  Name                   Start       Count  Type
---  --  ----------------  ----------  ----------  --------------------
 3    1  ALIGN_TO_128K_1            6          26    fde1604b
 5    1  ALIGN_TO_128K_2            6          26    6891a3b7
 4    8  abl_a                  56838         256  Inactive
 4   28  abl_b                 154342         256    bd6928a1
 4   43  apdp                  195271          64    e6e98da2
 4    5  bluetooth_a            47366         256  Inactive
 4   25  bluetooth_b           144870         256  Bluetooth
 4   11  boot_a                 65414       24576  Inactive
 4   31  boot_b                162918       24576  Boot
 4   58  catecontentfv         258019         256    e12d830b
 4   57  catefv                257891         128    80c23c26
 4   49  cateloader            208044         512  STI
 3    2  cdt                       32          32    a19f205f
 4   13  cmnlib64_a             90118         128  Inactive
 4   33  cmnlib64_b            187622         128  Common lib64
 4   12  cmnlib_a               89990         128  Inactive
 4   32  cmnlib_b              187494         128  Common lib
 3    3  ddr                       64         256    20a0c19c
 4   14  devcfg_a               90246          32  Inactive
 4   34  devcfg_b              187750          32    f65d4b16
 4   41  devinfo               195014           1    65addcf4
 4   42  dip                   195015         256    4114b077
 4    9  dsp_a                  57094        8192  Inactive
 4   29  dsp_b                 154598        8192    7efe5010
 4   17  dtbo_a                 90310        6144  Inactive
 4   37  dtbo_b                187814        6144    24d0d418
 4   20  featenabler_a          97478          32    741813d2
 4   38  featenabler_b         193958          32  Inactive
 0    5  frp                     8584         128    91b72d4d
 5    5  fsc                     1568          32    57b90a16
 5    4  fsg                     1056         512  Modem storage
 4    3  hyp_a                   1158         128  Inactive
 4   23  hyp_b                  98662         128  Hypervisor
 4   18  imagefv_a              96454         512  Inactive
 4   39  imagefv_b             193990         512    17911177
 4   10  keymaster_a            65286         128  Inactive
 4   30  keymaster_b           162790         128  Key master
 0    4  keystore                8456         128    de7d4029
 1    3  last_parti               934        1109  Empty
 2    3  last_parti               934        1109  Empty
 3    4  last_parti               320       32443  Empty
 4   59  last_parti            258275      790296  Empty
 5    6  last_parti              1600       31163  Empty
 4   46  limits                205739           1    10a0c19c
 4   51  logdump               241324       16384  Log dump
 4   48  logfs                 205996        2048    bc0330eb
 4    7  mdtp_a                 48646        8192  Inactive
 4   27  mdtp_b                146150        8192    3878408a
 4    6  mdtpsecapp_a           47622        1024  Inactive
 4   26  mdtpsecapp_b          145126        1024    ea02d680
 0   11  metadata             1106472        4096    988a98c9
 0    3  misc                    8200         256  Misc
 4    4  modem_a                 1286       46080  Inactive
 4   24  modem_b                98790       46080  FAT32
 5    2  modemst1                  32         512  Modem ST1
 5    3  modemst2                 544         512  Modem ST2
 4   53  multiimgoem           257740           8    e126a436
 4   54  multiimgqti           257748           8    846c6f05
 0   12  onyxconfig           1110568        6144  System
 0    2  persist                    8        8192  Persist
 4   15  qupfw_a                90278          16  Inactive
 4   35  qupfw_b               187782          16    21d1219f
 4   50  rawdump               208556       32768  RAM dump
 0    7  recovery_a           1057288       24576    d504d6db
 0    8  recovery_b           1081864       24576    352b8083
 4    1  rpm_a                      6         128  Inactive
 4   21  rpm_b                  97510         128  Resource/power mgmt
 4   56  secdata               257884           7    76cfc7ef
 4   45  splash                197383        8356  Splash
 4   44  spunvm                195335        2048    e42e2b4c
 0    1  ssd                        6           2  Secure SW download
 4   52  storsec               257708          32    02db45fe
 0    6  super                   8712     1048576    89a12de1
 4   47  toolsfv               205740         256    97745aba
 4    2  tz_a                     134        1024  Inactive
 4   22  tz_b                   97638        1024  TrustZone
 4   19  uefisecapp_a           96966         512    be8a7e08
 4   40  uefisecapp_b          194502         512  Inactive
 4   55  uefivarstore          257756         128    165bd6bc
 0   13  userdata             1116712    13385171  User data
 4   16  vbmeta_a               90294          16  Inactive
 4   36  vbmeta_b              187798          16    4b7a15d6
 0    9  vbmeta_system_a      1106440          16    1344859d
 0   10  vbmeta_system_b      1106456          16    fe3ab853
 1    1  xbl_a                      6         896  Bootloader
 2    1  xbl_b                      6         896  Bootloader
 1    2  xbl_config_a             902          32    5a325ae4
 2    2  xbl_config_b             902          32    5a325ae4

Renate · 03-17-2022, 09:05 AM

My Poke3 doesn't use A/B, but for users that do have that, be sure to get the correct boot image (i.e. boot_a or boot_b) when you need it for something. There are a number of ways to see which slot you are on, but normally the type GUID for a partition indicates if it's inactive (i.e. not the currently active slot).

readandread · 03-21-2022, 11:46 AM

Following @Cascade94 excellent example, I provide you with the stock and magisk patched images for v3.2.1. These are only for Note Air 2!

Just follow his instructions as they have not changed for v3.2.1.

Disclaimer: Please use at your own risk and backup before you do so.

Stock boot image
Magisk patched boot image

acarter5 · 04-16-2022, 03:30 PM

@cascade94 @readandread. How do I issue the `fastboot boot magisk_patched.img` command after entering bootloader mode? I get stuck on a screen w/ just the onyx logo on the device and I'm not able issue any adb commands to the device.

Plz & thank you!

Renate · 04-16-2022, 04:00 PM

You don't issue ADB commands to fastboot.
You probably don't have the driver for fastboot installed (if you have Windows).
You need to see what your device is presenting over USB.
Do you even have fastboot running?

Code:

fastboot devices

acarter5 · 04-16-2022, 04:42 PM

Oh! I didn't realize that fastboot was a separate executable (doh). Thanks I got it working!

acarter5 · 05-04-2022, 06:32 PM

I'm taking a crack at patching the boot_img after downloading the new v3.2.2 firmware and I'm getting stuck on the edl step.

shell output:

Code:

(env) MacBook-Pro:edl Home$ adb reboot edl
(env) MacBook-Pro:edl Home$ python edl r boot_a boot.img --memory=ufs --loader 0014d0e100000000_d40eee56f3194665_FHPRG.bin

Qualcomm Sahara / Firehose Client V3.60 (c) B.Kerler 2018-2022.
main - Using loader 0014d0e100000000_d40eee56f3194665_FHPRG.bin ...
main - Waiting for the device
main - Device detected :)
sahara - Protocol version: 2.1
main - Mode detected: sahara
sahara -
------------------------
HWID:              <my HWID>
CPU detected:      "SDM662"
PK_HASH:           <my PK_HASH>
Serial:           <my serial #>

sahara - Protocol version: 2.1
sahara - Uploading loader 0014d0e100000000_d40eee56f3194665_FHPRG.bin ...
sahara - 64-Bit mode detected.
sahara - Firehose mode detected, uploading...
sahara - Loader successfully uploaded.
main - Trying to connect to firehose loader ...
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
firehose - TargetName=
firehose - MemoryName=ufs
firehose - Version=
firehose - Trying to read first storage sector...
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')

I'm guessing I don't have libusb installed right on my machine? I'm on a mac (macOs Monterey v 12.3.1) and used `brew install libusb`. Do I need to add libsub executables to my path or something like that?

acarter5 · 05-05-2022, 12:27 PM

Quote:

Originally Posted by acarter5

I'm taking a crack at patching the boot_img after downloading the new v3.2.2 firmware and I'm getting stuck on the edl step.

shell output:

Code:

(env) MacBook-Pro:edl Home$ adb reboot edl
(env) MacBook-Pro:edl Home$ python edl r boot_a boot.img --memory=ufs --loader 0014d0e100000000_d40eee56f3194665_FHPRG.bin

Qualcomm Sahara / Firehose Client V3.60 (c) B.Kerler 2018-2022.
main - Using loader 0014d0e100000000_d40eee56f3194665_FHPRG.bin ...
main - Waiting for the device
main - Device detected :)
sahara - Protocol version: 2.1
main - Mode detected: sahara
sahara -
------------------------
HWID:              <my HWID>
CPU detected:      "SDM662"
PK_HASH:           <my PK_HASH>
Serial:           <my serial #>

sahara - Protocol version: 2.1
sahara - Uploading loader 0014d0e100000000_d40eee56f3194665_FHPRG.bin ...
sahara - 64-Bit mode detected.
sahara - Firehose mode detected, uploading...
sahara - Loader successfully uploaded.
main - Trying to connect to firehose loader ...
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
firehose - TargetName=
firehose - MemoryName=ufs
firehose - Version=
firehose - Trying to read first storage sector...
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')
DeviceClass - USBError(19, 'No such device (it may have been disconnected)')

I'm guessing I don't have libusb installed right on my machine? I'm on a mac (macOs Monterey v 12.3.1) and used `brew install libusb`. Do I need to add libsub executables to my path or something like that?

... nevermind folks, turns out a 3rd USB cable did the trick.

bazookajoe · 05-18-2022, 01:49 PM

Renate, how's your edl.exe going w/Note Air 2? I just ordered one I got major FOMO as they had one left in stock in Hong Kong. Should be in here in 10-20 days.

This thread has given me a headache already. I'm hoping I don't have to mess around with python on Windows and bklerer 'cos I lost it trying that on my Leaf. Looks like NA2 is a bit more complicated.

I'll help you test, though I always get the feeling you're the one helping me the entire time not really much use to you lol.

03-21-2022, 11:46 AM	#144
readandread Zealot Posts: 135 Karma: 380090 Join Date: Feb 2013 Device: Kindle Paperwhite (11th Gen) v5.14.2	Stock & Patched boot.img for firmware v3.2.1 (Note Air 2) Following @Cascade94 excellent example, I provide you with the stock and magisk patched images for v3.2.1. These are only for Note Air 2! Just follow his instructions as they have not changed for v3.2.1. Disclaimer: Please use at your own risk and backup before you do so. Stock boot image Magisk patched boot image

04-16-2022, 04:00 PM	#146
Renate Wizard Posts: 2,704 Karma: 11755151 Join Date: Feb 2012 Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5	You don't issue ADB commands to fastboot. You probably don't have the driver for fastboot installed (if you have Windows). You need to see what your device is presenting over USB. Do you even have fastboot running? Code: fastboot devices

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Note Air 2 vs. Note 5	downeaster59	Onyx Boox	8	11-25-2021 06:28 AM
Onyx Boox Note Air+	ayme08	Onyx Boox	25	07-19-2021 05:41 AM
[HELP] Bricked Note Air after 3.1 fw update	hedeon	Onyx Boox	7	05-03-2021 01:18 PM
Boox Note Air <-> Dropbox	ganymede	Onyx Boox	1	12-12-2020 09:47 PM
Note Air vs Note 3	Futuregrace	Onyx Boox	1	10-04-2020 01:27 AM

03-14-2022, 10:32 AM	#138
Renate Wizard Posts: 2,704 Karma: 11755151 Join Date: Feb 2012 Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5	I'm looking for a beta tester for my Windows EDL client software. You should have a Note Air 2 and have already found a compatible loader bin file. This should simplify things for Windows users. PM me for a download link. Thanks

03-17-2022, 09:05 AM	#143
Renate Wizard Posts: 2,704 Karma: 11755151 Join Date: Feb 2012 Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5	My Poke3 doesn't use A/B, but for users that do have that, be sure to get the correct boot image (i.e. boot_a or boot_b) when you need it for something. There are a number of ways to see which slot you are on, but normally the type GUID for a partition indicates if it's inactive (i.e. not the currently active slot).

04-16-2022, 03:30 PM	#145
acarter5 Junior Member Posts: 9 Karma: 10 Join Date: Feb 2022 Device: onyx boox note air	@cascade94 @readandread. How do I issue the `fastboot boot magisk_patched.img` command after entering bootloader mode? I get stuck on a screen w/ just the onyx logo on the device and I'm not able issue any adb commands to the device. Plz & thank you!

04-16-2022, 04:42 PM	#147
acarter5 Junior Member Posts: 9 Karma: 10 Join Date: Feb 2022 Device: onyx boox note air	Oh! I didn't realize that fastboot was a separate executable (doh). Thanks I got it working!

05-18-2022, 01:49 PM	#150
bazookajoe Connoisseur Posts: 81 Karma: 84358 Join Date: Mar 2022 Device: Onyx Leaf, excessive amount of Android devices	Renate, how's your edl.exe going w/Note Air 2? I just ordered one I got major FOMO as they had one left in stock in Hong Kong. Should be in here in 10-20 days. This thread has given me a headache already. I'm hoping I don't have to mess around with python on Windows and bklerer 'cos I lost it trying that on my Leaf. Looks like NA2 is a bit more complicated. I'll help you test, though I always get the feeling you're the one helping me the entire time not really much use to you lol.

Advert

Advert