Hovatek Forum DEVELOPMENT Android bv5500 plus root
Can't login? Please, reset your password.
Hovatek is recruiting! Apply Now


bv5500 plus root

bv5500 plus root

Pages (2): 1 2 Next
Denny83
Denny83
Denny83
Enthusiastic Member
6
11-09-2020, 04:58 PM
#1



I open this post as suggested me in this thread: https://www.hovatek.com/forum/thread-32664.html

my question - as i failed in create my own vbmeta.img was:

I'm managing with your tutorials to create my own vbmeta to flash a boot image...some questions:
1 if I unlock bootloader like you show in this post https://www.hovatek.com/forum/thread-32287.html - then i can sign vbmeta with the .pem key used to unlock bootloader?
2 I have a vbmeta image as in attached file vbmeta_info.txt; is it correct to make my vbmeta to run this command: python avbtool.py make_vbmeta_image --key denny2048.pem --algorithm SHA256_RSA2048 --flag 2 --chain_partition recovery:1:keys/recovery.bin --chain_partition vbmeta_sysstem:2:keys/vbmeta_system.bin --chain_partition vbmeta_vendor:4:keys/vbmeta_vendor.bin --chain_partition boot:3:keys/boot.bin --padding_size 12288 --output vbmeta-sign-custom.img
3 my vbmeta is    Image Size:  46976 bytes  ---how can i obtain vbmeta image with this size?
thanks for reply

Now i ask if someone could help me to create my own vbmeta, however i gained root following these steps:

Device: Model Blackview BV5500 PLUS Android 10 chipset MT6739
 
Requisites to root
Python 3.8.5 added to the path
Avbtool attached (version 1.2.0 source from this: https://android.googlesource.com/platfor...a5/avbtool)
Opessl added to path
SP FLASH tool (I used it to correct my errors and repair system after flashing wrong images, I did many errors to gain finally root access)
Adb and fastboot
Bv5500 plus stock ROM
The device has dm-verity that can’t be disabled in USER build, so to gain root you must only flash signed images…. It is signed with algorithm SHA256_2048
I tried to follow instructions to create my own vbmeta as explained in this thread https://www.hovatek.com/forum/thread-32664.html, but I wasn’t able…. In front of this post my question on how to create bmeta image….
 
I performed root this way:
1 installed magisk, patched boot.img from recovery stock and obtained my magisk_patched.img
2 verified my vbmeta as explained in this thread https://www.hovatek.com/forum/thread-32674.html
3 unlocked bootloader, for the device I simply entered fastboot mode and ran the command “fastboot flashing unlock”. It erased all my data.
4 I extracted public keys from vbmeta.img as explained in this thread https://www.hovatek.com/forum/thread-32667.html and then checked the dimension of the .bin file
5 generated my .pem key as explained in this guide https://www.hovatek.com/forum/thread-32662.html and then extracted the .bin file running this command “python avbtool extract_public_key --key xxxx.pem --output keys/xxxx.bin” where xxxx is the name of your key. In my case it is 2048.
6. used HEX editor to replace the public key of the boot partition with my public key and then saved the vbmeta file
7. signed magisk_patched.img with my public key as explained in this thread https://www.hovatek.com/forum/thread-32674.html running the command python3 avbtool add_hash_footer --image magisk_patched.img --partition_name boot --partition_size xxxxxxx--key xxxxx.pem --algorithm SHA256_RSA2048.
Obtain partition size by checking your image file as explained in the thread https://www.hovatek.com/forum/thread-32674.html
this command ran only in Linux environment

8 reboot device to bootloader e flashed vbmeta.img e magisk_patched_sign.img:
Fastboot flash vbmeta vbmeta.img
Fastboot flash boot magisk_patched_sign.img
 
Rebooted system and then reinstall magisk. It downloaded zip file, installed it rebooted system again and I was root.
 
Thanks to howatek
This post was last modified: 12-09-2020, 03:13 PM by X3non.
Attached Files
.txt
vbmeta info.txt
Size: 1.48 KB / Downloads: 25
.zip
avbtool.zip
Size: 33.95 KB / Downloads: 11
Tigryss
Tigryss
Tigryss
Newbie
4
12-09-2020, 07:40 AM
#2
Hi Denny!

Great work, we working on the same devices maybe if you have a time check to freenode #twrp channel.
X3non
X3non
X3non
Recognized Contributor
22,062
12-09-2020, 03:42 PM
#3
(11-09-2020, 04:58 PM)Denny83 ...
I'm managing with your tutorials to create my own vbmeta to flash a boot image...some questions:
1 if I unlock bootloader like you show in this post https://www.hovatek.com/forum/thread-32287.html - then i can sign vbmeta with the .pem key used to unlock bootloader?
2 I have a vbmeta image as in attached file vbmeta_info.txt; is it correct to make my vbmeta to run this command: python avbtool.py make_vbmeta_image --key denny2048.pem --algorithm SHA256_RSA2048 --flag 2 --chain_partition recovery:1:keys/recovery.bin --chain_partition vbmeta_sysstem:2:keys/vbmeta_system.bin --chain_partition vbmeta_vendor:4:keys/vbmeta_vendor.bin --chain_partition boot:3:keys/boot.bin --padding_size 12288 --output vbmeta-sign-custom.img
3 my vbmeta is    Image Size:  46976 bytes  ---how can i obtain vbmeta image with this size?
...

i take it that any attempt to disable dm_verity on this model get the device bricked? did you try unlocking critical partitions too?

1. You already unlocked bootloader of your device, so you don't need that guide. BTW that guide is meant for unisoc devices requiring identifier token to unlock their bootloaders
2. Your make_vbmeta command will be similar to that posted @ https://www.hovatek.com/forum/thread-35862.html ; check the Extra section
you'll need to create a folder named "phone" in the same location as the keys folder and copy your stock dtbo.img into this phone folder before running the make_vbmeta command
3. padding size (argument) will be the size of the original vbmeta in bytes. are you certain yours is really 46976? ensure to right click and check the properties of the file and copy the byte size value
X3non
X3non
X3non
Recognized Contributor
22,062
12-09-2020, 03:44 PM
#4
BTW your device might also be using the vbmeta_rsa2048.pem key in the link in my previous reply
you should try using that rather than using 4096 key
Tigryss
Tigryss
Tigryss
Newbie
4
13-09-2020, 06:10 AM
#5



(12-09-2020, 03:42 PM)X3non
(11-09-2020, 04:58 PM)Denny83 ...
I'm managing with your tutorials to create my own vbmeta to flash a boot image...some questions:
1 if I unlock bootloader like you show in this post https://www.hovatek.com/forum/thread-32287.html - then i can sign vbmeta with the .pem key used to unlock bootloader?
2 I have a vbmeta image as in attached file vbmeta_info.txt; is it correct to make my vbmeta to run this command: python avbtool.py make_vbmeta_image --key denny2048.pem --algorithm SHA256_RSA2048 --flag 2 --chain_partition recovery:1:keys/recovery.bin --chain_partition vbmeta_sysstem:2:keys/vbmeta_system.bin --chain_partition vbmeta_vendor:4:keys/vbmeta_vendor.bin --chain_partition boot:3:keys/boot.bin --padding_size 12288 --output vbmeta-sign-custom.img
3 my vbmeta is    Image Size:  46976 bytes  ---how can i obtain vbmeta image with this size?
...

i take it that any attempt to disable dm_verity on this model get the device bricked? did you try unlocking critical partitions too?

1. You already unlocked bootloader of your device, so you don't need that guide. BTW that guide is meant for unisoc devices requiring identifier token to unlock their bootloaders
2. Your make_vbmeta command will be similar to that posted @ https://www.hovatek.com/forum/thread-35862.html ; check the Extra section
you'll need to create a folder named "phone" in the same location as the keys folder and copy your stock dtbo.img into this phone folder before running the make_vbmeta command
3. padding size (argument) will be the size of the original vbmeta in bytes. are you certain yours is really 46976? ensure to right click and check the properties of the file and copy the byte size value

Hi guys, I would like to create twrp recovery and lineageOS 17.1 for this device are the steps similar to this rooting steps? I have 2 devices and the first one is already stucks in black screen downloading mode(waiting for dry out).
hovatek
hovatek
hovatek
Administrator
49,570
14-09-2020, 08:36 AM
#6
(13-09-2020, 06:10 AM)Tigryss Hi guys, I would like to create twrp recovery and lineageOS 17.1 for this device are the steps similar to this rooting steps? I have 2 devices and the first one is already stucks in black screen downloading mode(waiting for dry out).

You'll need to create a new thread for this to avoid a mixup

Note!
We have a reply schedule for Free Support. Please upgrade to Private Support if you can't wait.
gratefultraveller
gratefultraveller
gratefultraveller
Enthusiastic Member
5
13-04-2021, 10:21 AM
#7
(11-09-2020, 04:58 PM)Denny83 I open this post as suggested me in this thread: https://www.hovatek.com/forum/thread-32664.html

my question - as i failed in create my own vbmeta.img was:

I'm managing with your tutorials to create my own vbmeta to flash a boot image...some questions:
1 if I unlock bootloader like you show in this post https://www.hovatek.com/forum/thread-32287.html - then i can sign vbmeta with the .pem key used to unlock bootloader?
2 I have a vbmeta image as in attached file vbmeta_info.txt; is it correct to make my vbmeta to run this command: python avbtool.py make_vbmeta_image --key denny2048.pem --algorithm SHA256_RSA2048 --flag 2 --chain_partition recovery:1:keys/recovery.bin --chain_partition vbmeta_sysstem:2:keys/vbmeta_system.bin --chain_partition vbmeta_vendor:4:keys/vbmeta_vendor.bin --chain_partition boot:3:keys/boot.bin --padding_size 12288 --output vbmeta-sign-custom.img
3 my vbmeta is    Image Size:  46976 bytes  ---how can i obtain vbmeta image with this size?
thanks for reply
...

Hi Denny,

may I ask you where you found the Bv5500 plus stock (recovery) ROM and which version it is? I have been dl'ing a lot of different rar-compressed files, but they were all corrupt or empty Sad I have the BV5500 Plus as well, Build number BV5500Plus_EEA_E353_V1.0_20201021V13, which I would like to root. I am working to get the scatter file at the moment, sofar without success.

I would really appreciate your reply.

Regards, gratefultraveller
This post was last modified: 13-04-2021, 10:41 AM by gratefultraveller.
Denny83
Denny83
Denny83
Enthusiastic Member
6
13-04-2021, 11:36 AM
#8
(13-04-2021, 10:21 AM)gratefultraveller
(11-09-2020, 04:58 PM)Denny83 I open this post as suggested me in this thread: https://www.hovatek.com/forum/thread-32664.html

my question - as i failed in create my own vbmeta.img was:

I'm managing with your tutorials to create my own vbmeta to flash a boot image...some questions:
1 if I unlock bootloader like you show in this post https://www.hovatek.com/forum/thread-32287.html - then i can sign vbmeta with the .pem key used to unlock bootloader?
2 I have a vbmeta image as in attached file vbmeta_info.txt; is it correct to make my vbmeta to run this command: python avbtool.py make_vbmeta_image --key denny2048.pem --algorithm SHA256_RSA2048 --flag 2 --chain_partition recovery:1:keys/recovery.bin --chain_partition vbmeta_sysstem:2:keys/vbmeta_system.bin --chain_partition vbmeta_vendor:4:keys/vbmeta_vendor.bin --chain_partition boot:3:keys/boot.bin --padding_size 12288 --output vbmeta-sign-custom.img
3 my vbmeta is    Image Size:  46976 bytes  ---how can i obtain vbmeta image with this size?
thanks for reply
...

Hi Denny,

may I ask you where you found the Bv5500 plus stock (recovery) ROM and which version it is? I have been dl'ing a lot of different rar-compressed files, but they were all corrupt or empty Sad I have the BV5500 Plus as well, Build number BV5500Plus_EEA_E353_V1.0_20201021V13, which I would like to root. I am working to get the scatter file at the moment, sofar without success.

I would really appreciate your reply.

Regards, gratefultraveller

Hi
I downloaded stock from from this link
http://www.mediafire.com/file/462zrc7qyh...9.rar/file

then i rooted my phone as described in this post
Denny83
Denny83
Denny83
Enthusiastic Member
6
13-04-2021, 11:39 AM
#9
also try this link
https://romprovider.com/blackview-bv5500-plus-firmware/

I used BV5500Plus_S1_200629 stock firmware
X3non
X3non
X3non
Recognized Contributor
22,062
14-04-2021, 12:20 PM
#10



(13-04-2021, 10:21 AM)gratefultraveller ... I have the BV5500 Plus as well, Build number BV5500Plus_EEA_E353_V1.0_20201021V13, which I would like to root. I am working to get the scatter file at the moment, sofar without success.

you could backup firmware from your device ; see https://www.hovatek.com/forum/thread-21970.html
Pages (2): 1 2 Next
Users browsing this thread:
 1 Guest(s)
Users browsing this thread:
 1 Guest(s)
YtWhTl
live chat
whatsapp telegram instagram