Nexbook AMlogic root WORK!

[papamark]

Re: Nexbook AMlogic root WORK!

So this is with the 3G dongle, not sd card?

Sent from my PG86100 using Tapatalk 2

[bryman777]

Back to the same old problems.... U-boot is locked! Thus I cannot make a system.zip package as it will just come back with invalid signature again

We are going to have to find a u-boot.bin that is unlocked from some other M3 tablet or we will not get a stock ROM....

So once again, one problem solved and another stays

Anyway, I should have a system.zip this weekend.

Eegorr, yes please dump all the files from /system. Do you have a linux setup? As dumping to windows will blow all the symlinks and permissions.

To dump all the files and maintain all the lnks etc use this copy command from ADB


busybox cp -r --no-dereference --preserve=all system/* system2
where system2 is a directory on your linux box. That command will copy everything from /system to your Linux box. Then TAR the folder.

Bob

Is there a way to change the Checksum Verification?? Maybe trick it? or maybe edit the script in the build.p to the new checksum?

[bryman777]

I looked at the nand they put in these tablets. the nand can be locked from the factory, good thing is its limited to 300 nand scrubs, I think Ive bypassed that by now, lol. looks like im going to get a serial cable and try to get this thing going. If you ask why its because im stubborn and a hardware geek.
Ive been doing a lot of reading about u-boot, building u-boot , what it does and how it works, the past few days .
Heres a page with u-boot commands,.. http://www.stlinux.com/u-boot/using ..
maybe there are some commands you can figure out or a script you could run in terminal to unlock the u-boot ..
Bob try running these commands in a terminal .. maybe this will work .. not sure .. I found this here ..
not sure if you have looked at it yet. .. http://etutorials.org/Linux+systems/...er/9.5+U-Boot/ ..


.................................................. .................................................. ...............................................
Unlike other images we have downloaded to the target, you cannot use theimi command to check the image, since the U-Boot image downloaded was not packaged on the host using themkimage command. You can, however, usecrc32 before and after copying the image to flash to verify proper copying.
Now, unprotect the flash region where U-Boot is located so you can erase it (in this case, U-Boot occupies the flash region from 0x40000000 to 0x4003FFFF):

=> protect off 40000000 4003FFFFUn-Protected 5 sectorsErase the previous bootloader image:

=> erase 40000000 4003FFFFErase Flash from 0x40000000 to 0x4003ffff... doneErased 5 sectorsCopy the new bootloader to its final destination:

MAKE CHANGES HERE

=> cp.b 00100000 40000000 $(filesize)Copy to Flash... doneErase thefilesize environment variable set during the download:

=> setenv filesizeSave the environment variables:

=> saveenvSaving Enviroment to Flash...Un-Protected 1 sectorsErasing Flash.... doneErased 1 sectorsWriting to Flash... doneProtected 1 sectors ..

the reason for saving in this article is so you dont lose your image after you reset the device.. .................................................. ......................................

I belive the nextbook uimage with the boot paremeters in it is loading to ram disk then to boot.img kernel, some u-boots are set up this way because it passess off to the u-boot kernel/filesystem cleaner, other than having the ramdisk and kernel in the uimage together.
then u-boot mounts the bootloader from 0004000 to 00041000 , on the system.img . writes and mounts the root filesystem ..
So I see when you say all us bricked poeple would need is the boot.img, bootloader.img, uImage, and uImage recovery to get the recovery portion back in our tabs .. But we also need the usb_spl.bin/uboot.bin because this is the file that also creates the ram disk to provide space for it to be able to write to disk.

[eegorr]

Hi, just letting everyone know that I've successfully rooted the tablet and installed the full GAPPS package without any issues (play store, voice search, et all).
I used this package for the GAPPS http://goo.im/gapps/gapps-ics-20120429-signed.zip and just copied the contents of each subfolder to the appropriate place within the system directory after installing ES File Explorer and enabling root ability in the settings.

Also was able to freeze most of the garbage with TBPro and the tablet runs decently.
If there's anything I can assist with in getting a rooted image for everyone, let me know.
I've got access to every VM imaginable, linux, ubuntu, you name it, and I'm fairly well versed with android devices.

Also for anyone attempting their own root, it seems you need an ACTIVE sim card with an accessible data plan to pull this off since the script won't run until it establishes an actual data connection. I've tried all of Verizon's cards in it to no avail, only got lucky when i stumbled upon an activated pre-paid sim from AT&T.
Even if you enter the APN info for verizon, it won't link up, but the ATT/Cingular card found all it's APN info just by putting the card in.
I'm using a HUWEI (sp?) unlocked modem that claims to be able to do CDMA/GSM but I'm guessing my LTE cards weren't sufficient for the task.

So since this is for a customer, so I may have to return it soon, but within the next day, if there's something I can do to further the progress, let me know.
Cheers!

Yeah, I mentioned you needed an active SIM card and a data plan. I also posted that Gapps package to my Google drive. Good to know it works!

Did you do anything with system permissions? Can you run Chrome on it? Did you try installing some of the apps that I wan't able to install?

Since you are, aparently, the only one who has a rooted tablet AND Linux available, maybe you can help Bob in unlocking u-boot for us, starting with the post before yours.

BTW, how much did you charge your customer to root his tablet? You should consider kicking some of it back to the board here in appreciation of the effort, especially if you can't help with u-boot.

[eegorr]

So this is with the 3G dongle, not sd card?

Sent from my PG86100 using Tapatalk 2

That's right. It's not simply connecting something to the USB port that will do it. An SD card won't cause the tablet to start ppp daemon. It is for internet communication - the same protocol is used for most DSL connections.

[ozymandiaz]

I've been experimenting with ppp service adb / terminal commands and apps trying to start init-pppd.sh without a 3g connection but not getting anywhere. Looks like unless Bob can get something usable through recovery or find the right signature keys we're limited to the 3g dongle method to get initial root and then build a ROM from there.

[eegorr]

Back to the same old problems.... U-boot is locked! Thus I cannot make a system.zip package as it will just come back with invalid signature again

We are going to have to find a u-boot.bin that is unlocked from some other M3 tablet or we will not get a stock ROM....

So once again, one problem solved and another stays

Anyway, I should have a system.zip this weekend.

Eegorr, yes please dump all the files from /system. Do you have a linux setup? As dumping to windows will blow all the symlinks and permissions.

To dump all the files and maintain all the lnks etc use this copy command from ADB


busybox cp -r --no-dereference --preserve=all system/* system2
where system2 is a directory on your linux box. That command will copy everything from /system to your Linux box. Then TAR the folder.

Bob

Sorry, no Linux here. How hard would it be for me to set up Ubuntu 10 (or some kind of Linux) as a VM under Windows 7?

Either that, or I could give you a directory listing with permissions (ls -l -R) like I did with the data directory - did you get a chance to look at that, BTW?

[Finless]

Easy!

Download Virtual BOX and Vbox extensions.
Install

Download Ubunto CD image

Setup Vbox and install Ubuntu into the VM.

You now have a working linux in a VM on windows 7.

Bob

[ozymandiaz]

Well, I gave up on alternate methods of starting that service exploit and bought a Huawei e220 on Amazon. It was a bit more expensive than the **** sources but since Eegor's tablet recognized the E220 I know the device will work (I'm on Tmobile and it will support their bands) and I get free 2-day shipping with Amazon prime so it'll be here Tuesday.

[eegorr]

Easy!

Download Virtual BOX and Vbox extensions.
Install

Download Ubunto CD image

Setup Vbox and install Ubuntu into the VM.

You now have a working linux in a VM on windows 7.

Bob

I'm downloading the files now...

How do I install the VM expansion pack (https://www.virtualbox.org/wiki/Downloads) which, I assume, I will need to use the USB ports?

Once the VM is in place, I guess I will have to install the Android SDK for Linux in it so I can run adb, right?

[eegorr]

I'm downloading the files now...

How do I install the VM expansion pack (https://www.virtualbox.org/wiki/Downloads) which, I assume, I will need to use the USB ports?

Once the VM is in place, I guess I will have to install the Android SDK for Linux in it so I can run adb, right?

Okay, VM is installed, Ubuntu 10.04.4 is installed and running. Now what?

[duandroid]

as long as you hav the sdk installed I believe this is the next step

Back to the same old problems.... U-boot is locked! Thus I cannot make a system.zip package as it will just come back with invalid signature again

We are going to have to find a u-boot.bin that is unlocked from some other M3 tablet or we will not get a stock ROM....

So once again, one problem solved and another stays

Anyway, I should have a system.zip this weekend.

Eegorr, yes please dump all the files from /system. Do you have a linux setup? As dumping to windows will blow all the symlinks and permissions.

To dump all the files and maintain all the lnks etc use this copy command from ADB


busybox cp -r --no-dereference --preserve=all system/* system2
where system2 is a directory on your linux box. That command will copy everything from /system to your Linux box. Then TAR the folder.

Bob

[Finless]

UBIFS - I GIVE UP!

Sorry guys... I spent all day on this. I cannot mount the file system dump (UBIFS) no matter what I try.

I believe the dump is good from eegorr but it is just not working. I can create a NEW UBIFS system and mount it no problem. But no matter what I do I cannot seem to get this UBI dump to mount.

I honeslty give up guys. I have worked on this for several days now. I have ggogled and searched and found all kinds of UBIFS information but it just does not work with this image.

For those that want to try more here are links I have saved about UBIFS and mounting it in linux:

This link the text is hosed up so unless you know what your reading and doing.. it's hard to work with. The the prnciples work.

http://www.slatedroid.com/topic/3394-extract-and-rebuild-a-ubi-image/

Then you have this wonderul UBIFS information using nand sim

http://www.linux-mtd.infradead.org/faq/ubifs.html#L_ubifs_extract

and this which you will need for the modprobe nanadsim command to make the correct size of MTD

http://www.linux-mtd.infradead.org/faq/nand.html#L_nand_nandsim

Then understand UBI is a wrapper around a UBIFS file system. So we are dealing with 2 things here. I learned this today and created my own file system UBIFS and then ubinize command to make a UBI image. It works. I can create my own and mount it. But again something is up with the system.img from this damn Nextbook tablet. I just cannot get it to work.

Finally... I share with you all my different commands I tried to do... This is not a script... Just different commands and strategies.

sudo modprobe mtdram total_size=614400
sudo cat /proc/mtd


sudo apt-get install mtd-tools
sudo modprobe -v mtd
sudo modprobe -v jffs2
sudo modprobe -v mtdram total_size=256000 erase_size=256
sudo modprobe -v mtdchar
sudo modprobe -v mtdblock
sudo dd if=ubuntu-9.0.5.Release.jffs2 of=/dev/mtd0
sudo mount -t jffs2 /dev/mtdblock0 ~/Documents/plugpc/image

sudo modprobe -v mtdram total_size=512000 erase_size=256


sudo modprobe mtdblock
sudo modprobe nandsim first_id_byte=0x20 second_id_byte=0xac third_id_byte=0x00 fourth_id_byte=0x15 cache_file=/tmp/nandsim.bin
sudo modprobe ubi
sudo modprobe ubifs
sudo ubiformat /dev/mtd0
sudo ubiattach /dev/ubi_ctrl -m 0
sudo ubimkvol /dev/ubi0 -N system -s 640MiB
sudo ubiupdatevol /dev/ubi0_0 ubi.img
sudo mount -t ubifs ubi0:system /mnt/ubi

sudo modprobe nandsim first_id_byte=0xec second_id_byte=0xd3 third_id_byte=0x51 fourth_id_byte=0x95 cache_file=nandsim.bin

sudo ubiformat /dev/mtd0 -f ubi.img
sudo ubiformat /dev/mtd0 -s 512 -f ubi.img
sudo ubiformat /dev/mtd0 -s 512
sudo ubiformat /dev/mtd0 -O 512 -f ubi.img


sudo ubiupdatevol /dev/ubi0_0 ubi.img

sudo mount -t ubifs /dev/ubi0:system system

sudo mount -t ubifs /dev/ubi0_0 system

sudo mount -t ubifs /dev/mtd0 system

sudo ubidetach -p /dev/mtd0

sudo ubiattach -O 512 -m 0

sudo ubiattach -O 512 /dev/ubi_ctrl -m 0


sudo ubinize -o ubi.img -p 128KiB -m 512 -s 256 config.ini

sudo ubinize -o ubi.img -p 128KiB -m 2048 -s 256 config.ini

sudo ubinize -o ubi.img -p 256KiB -m 512 config.ini

--vid-hdr-offset 2048

sudo dd if=system.img of=/dev/mtd0 bs=2048

I am sorry guys but I am stumped at this point!

Bob

[Finless]

Again guys I am sorry..... I tried my best working with something I do not have or have a solid knowledge of.

I can make ROMs for AMlogic devices so it's not total rocket science. But reverse engineering this dump is just beyond me right now

I have learned a lot more but obviously not enough. To be honest what sucks the worst is not having a stock ROM to work with

I have to call it quits guys... I am no longer making headway and now I am just banging my head against the wall

I will stay tuned here for any progress and help as I can but again for now... I have to move on. Sorry

P.S. _fun on XDA is the most knowledgeable guy on AMlogic. If you can get him to help, I think headway can be made.


Bob

[obriens500]

Patch for aml ?

Hello

I am new to the forum, I was over at xda and saw this post and did not know if it could be of any use.

http://forum.xda-developers.com/showthread.php?t=2017866&page=5

Regards
Sean


My tablet is a next8p12
aml8726-m3 Cortex A9