11-18-2023, 12:36 PM | #1 |
Onyx-maniac
Posts: 3,175
Karma: 12537601
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6
|
Rooting the Poke5
I bought a Poke5 half a year ago but kept on using my Poke3 because of two (for me) intolerable things that I had fixed on the Poke3 but hadn't on the Poke5. I prefer to root without Magisk if I can, with Magisk if I must.
So, the first step is to update to the latest Poke5 update. If you use Wifi on your device you could do the normal update. But since you need the update anyway, download the update to your desktop. Also, since the listing for this update just disappeared you can't do it directly on the device. Code:
Model: Poke5P Finger: Onyx/Poke5P/Poke5P:11/2023-11-17_05-41_3.5_801526b7d/6777:user/dev-keys Link: http://firmware-us-volc.boox.com/9ba08e866b3617763dadb55a2ccda422/update.upx Size: 1600986982 MD5: 9ba08e866b3617763dadb55a2ccda422 Code:
adb push update.upx sdcard am start -a onyx.settings.action.firmware If all you wanted to do was update to 3.5 without rooting, just stop now. Now you need to get stuff from the update.upx for your own nefarious purposes. We will be using DeBooxUpx.py. This has just been updated, so you need to grab DeBooxUpx.py and BooxKeys.csv and put them together somewhere. You need to have Python installed. It might handle .py files automatically or you might have to say "python DeBooxUpx.py". Code:
DeBooxUpx.py Poke5P update.upx update.zip This should make update.zip which is the same size, 1600986982 Now you use your normal unzipper (7zip or friends) to get payload.bin: Code:
7zip x update.zip payload.bin Now you want to get a few files out of that. You need https://drive.google.com/file/d/1Qps...lK6v2gJSi/view You can unzip this and there is only one file you need "payload_dumper.py". The other file is obsolete and you use the attached file "update_metadata_pb2.py". The two files must be put in the same directory. Code:
payload_dumper.py payload.bin Now get Magisk from https://github.com/topjohnwu/Magisk, "Latest release" and install it. Code:
adb push boot.img sdcard Code:
adb pull sdcard/Download/magisk_patched-12345678.img Now we're ready to burn! Code:
adb reboot fastboot fastboot devices fastboot getvar current-slot Code:
fastboot --disable-verity --disable-verification flash vbmeta_a vbmeta.img fastboot flash boot_a magisk_patched-12345678.img fastboot reboot Ok, this is intentionally complete so anybody can follow it if things change. Some civic-minded person can post completed things which will work only if your device is the same. Last edited by Renate; 11-26-2023 at 06:46 AM. |
11-25-2023, 06:51 PM | #2 |
Orisa
Posts: 2,000
Karma: 1035571
Join Date: Feb 2010
Location: Ireland
Device: Onyx Poke 5
|
So far, in a Windows 11 install, I've found the following:
Code:
Traceback (most recent call last): File "C:\Users\logse\Downloads\payload_dumper.py", line 64, in <module> assert magic == b'CrAU' ^^^^^^^^^^^^^^^^ AssertionError |
Advert | |
|
11-25-2023, 07:23 PM | #3 | |
Onyx-maniac
Posts: 3,175
Karma: 12537601
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6
|
Quote:
I'm not the biggest fan of Python. It's like cooking over at someone else's house. "Next we need some olive oil..." "Oh, I don't have any." With Python, the average program just dumps the stack if anything unexpected happens. Erm, that step should be: Code:
payload_dumper.py payload.bin Last edited by Renate; 11-26-2023 at 06:49 AM. |
|
11-25-2023, 09:00 PM | #4 |
Orisa
Posts: 2,000
Karma: 1035571
Join Date: Feb 2010
Location: Ireland
Device: Onyx Poke 5
|
Now I've had success.
|
12-23-2023, 08:11 AM | #5 |
Connoisseur
Posts: 69
Karma: 1134558
Join Date: Dec 2012
Location: Italy
Device: Cybook Opus, Onyx-Boox Poke5
|
After the display crack of my BookeenMuse-hd (RIP), i've returned to Onyx with a Poke5. This post to thanks Renate for her detailed instructions for my (successfuly) rooting fo my Poke.
Now, it's time to debloat it :-) HP |
Advert | |
|
03-28-2024, 02:14 PM | #6 |
Junior Member
Posts: 7
Karma: 10
Join Date: May 2023
Device: Onyx Boox Nova Air
|
These instructions worked with my Palma and firmware 3.5.1 (08a88fc4595cd359a9e337bb3893b856) that came out a few days ago. Thanks a lot for taking the time to post it here!
|
04-24-2024, 10:47 AM | #7 |
Onyx-maniac
Posts: 3,175
Karma: 12537601
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6
|
I don't know how I missed this, but there is a Firehose loader for QCS2290 (Poke5, Leaf2).
https://github.com/bkerler/Loaders/b..._ddr_fhprg.elf With a full, raw backup you've got a "get out of jail free" card. In worst case you might have to open the case to short test points first. OTOH, the Poke5 does work with "EDL cables", so that would be rare. Code:
C:\>edl /r poke5.img Found EDL 9008, configuring... nope, configuring... nope, configuring... ok Requesting info on LUN 0... ok Requesting read poke5.img... ok, reading 100% ok C:\>dir poke5.img 04/24/2024 07:29 31,331,450,880 poke5.img Last edited by Renate; 05-02-2024 at 08:43 AM. |
04-25-2024, 08:38 PM | #8 |
Onyx-maniac
Posts: 3,175
Karma: 12537601
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6
|
I'm working on some stuff for a custom recovery on the Poke5.
There's been some major changes since the Poke3: /dev/graphics/fb0 is now /dev/dri/card0 (but /dev/ebc still exists). The old update-binary is out and the "update engine" is in. One of the things that had always been a pain was resetting in recovery (without the recovery process). I whipped up a little reboot executable and it's neat that it works through ADB too. It explicitly tells you what's up with the BCB. Code:
C:\adb reboot recovery # going from system to recovery with stock reboot C:\>adb reboot # going from recovery to system with custom reboot Was: boot-recovery Now: <empty> Rebooting |
04-25-2024, 10:04 PM | #9 | |
Connoisseur
Posts: 52
Karma: 10
Join Date: Jan 2024
Device: Boox Note Air 3
|
Quote:
Thanks. |
|
04-25-2024, 10:25 PM | #10 |
Onyx-maniac
Posts: 3,175
Karma: 12537601
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6
|
|
04-29-2024, 11:18 AM | #11 |
Onyx-maniac
Posts: 3,175
Karma: 12537601
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6
|
Oh, I just noticed an update:
Code:
Model: Poke5P (English) Finger: Onyx/Poke5P/Poke5P:11/2024-03-13_10-15_3.5.1_cb7eaef7e/7997:user/dev-keys Link: http://firmware-us.boox.com/c07f713991056ef618ce707994b0aa70/update.upx Size: 1,629,542,746 MD5: c07f713991056ef618ce707994b0aa70 |
05-19-2024, 11:48 AM | #12 |
Connoisseur
Posts: 59
Karma: 10
Join Date: May 2024
Device: Poke3, Poke5, Leaf2.
|
Can we use this way to root Poke 3 devices?
|
05-19-2024, 12:25 PM | #13 |
Onyx-maniac
Posts: 3,175
Karma: 12537601
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6
|
|
05-19-2024, 12:52 PM | #14 |
Connoisseur
Posts: 59
Karma: 10
Join Date: May 2024
Device: Poke3, Poke5, Leaf2.
|
but there is no any payload.bin file in unzipped folder of Update.zip
"Now you use your normal unzipper (7zip or friends) to get payload.bin" |
05-19-2024, 01:23 PM | #15 |
Onyx-maniac
Posts: 3,175
Karma: 12537601
Join Date: Feb 2012
Device: Nook NST, Glow2, 3, 4, '21, Kobo Aura2, Poke3, Poke5, Go6
|
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Poke5! | Renate | Onyx Boox | 110 | 10-30-2024 10:08 PM |
Color Need help un-rooting! | banjobama | Nook Color & Nook Tablet | 4 | 03-23-2012 10:08 AM |
Color re-rooting | MusingCoyote | Nook Developer's Corner | 4 | 01-01-2012 07:18 PM |
What is rooting? | Belle2Be | Nook Developer's Corner | 23 | 02-11-2011 08:05 PM |
Rooting? | PomMom12 | Nook Developer's Corner | 4 | 12-24-2010 02:52 PM |