[Tutorial] How to create a custom signed vbmeta.img for Unisoc using AVBtool
[Tutorial] How to create a custom signed vbmeta.img for Unisoc using AVBtool
25-11-2023, 03:13 PM
Hi. I have an Oukitel WP23 pro with Unisoc T606. I finally unlocked the bootloader, patched the boot.img, but can't for the life of me get the vbmeta to work after following this guide. Is there something wrong with the vbmeta file or is it just me being too amateur!. Can you please help me with this?.
This post was last modified: 25-11-2023, 03:14 PM by norrmann035.
Attached Files
25-11-2023, 04:31 PM
(25-11-2023, 03:13 PM)norrmann035 Hi. I have an Oukitel WP23 pro with Unisoc T606. I finally unlocked the bootloader, patched the boot.img, but can't for the life of me get the vbmeta to work after following this guide. Is there something wrong with the vbmeta file or is it just me being too amateur!. Can you please help me with this?.
Patched boot.img is not enough, it must be signed + signed custom vbmeta.
Since the manufacturer used own rsa key
Public key (sha1): d3c0b7e94718f5c4283291fbbef3594fe089cf97
If the leaked rsa4096_vbmeta.pem was used
Public key (sha1): 2597c218aae470a130f61162feaae70afd97f011
I already said it, it won't work, useless effort.
For this to work, you need a manufacturer's key, which you certainly won't get.
What was the unlocked bootloader?
This post was last modified: 25-11-2023, 04:34 PM by Gargoyle.
25-11-2023, 04:46 PM
(25-11-2023, 04:31 PM)Gargoyle(25-11-2023, 03:13 PM)norrmann035 Hi. I have an Oukitel WP23 pro with Unisoc T606. I finally unlocked the bootloader, patched the boot.img, but can't for the life of me get the vbmeta to work after following this guide. Is there something wrong with the vbmeta file or is it just me being too amateur!. Can you please help me with this?.
Patched boot.img is not enough, it must be signed + signed custom vbmeta.
Since the manufacturer used own rsa key
Public key (sha1): d3c0b7e94718f5c4283291fbbef3594fe089cf97
If the leaked rsa4096_vbmeta.pem was used
Public key (sha1): 2597c218aae470a130f61162feaae70afd97f011
I already said it, it won't work, useless effort.
For this to work, you need a manufacturer's key, which you certainly won't get.
What was the unlocked bootloader?
Can I flash a prerooted GSI?
25-11-2023, 04:56 PM
(25-11-2023, 04:46 PM)norrmann035(25-11-2023, 04:31 PM)Gargoyle(25-11-2023, 03:13 PM)norrmann035 Hi. I have an Oukitel WP23 pro with Unisoc T606. I finally unlocked the bootloader, patched the boot.img, but can't for the life of me get the vbmeta to work after following this guide. Is there something wrong with the vbmeta file or is it just me being too amateur!. Can you please help me with this?.
Patched boot.img is not enough, it must be signed + signed custom vbmeta.
Since the manufacturer used own rsa key
Public key (sha1): d3c0b7e94718f5c4283291fbbef3594fe089cf97
If the leaked rsa4096_vbmeta.pem was used
Public key (sha1): 2597c218aae470a130f61162feaae70afd97f011
I already said it, it won't work, useless effort.
For this to work, you need a manufacturer's key, which you certainly won't get.
What was the unlocked bootloader?
Can I flash a prerooted GSI?
If the bootloader is unlocked then yes
no need for custom vbmeta or patched boot
but there probably won't be many current ones.
25-11-2023, 05:33 PM
(25-11-2023, 04:56 PM)Gargoyle(25-11-2023, 04:46 PM)norrmann035(25-11-2023, 04:31 PM)Gargoyle(25-11-2023, 03:13 PM)norrmann035 Hi. I have an Oukitel WP23 pro with Unisoc T606. I finally unlocked the bootloader, patched the boot.img, but can't for the life of me get the vbmeta to work after following this guide. Is there something wrong with the vbmeta file or is it just me being too amateur!. Can you please help me with this?.
Patched boot.img is not enough, it must be signed + signed custom vbmeta.
Since the manufacturer used own rsa key
Public key (sha1): d3c0b7e94718f5c4283291fbbef3594fe089cf97
If the leaked rsa4096_vbmeta.pem was used
Public key (sha1): 2597c218aae470a130f61162feaae70afd97f011
I already said it, it won't work, useless effort.
For this to work, you need a manufacturer's key, which you certainly won't get.
What was the unlocked bootloader?
Can I flash a prerooted GSI?
If the bootloader is unlocked then yes
no need for custom vbmeta or patched boot
but there probably won't be many current ones.
How do I install SGI on my phone without boot.img and vbmeta-sign.img???.
This is a Unlock hack for iPlay 50 mini tablet on Unisoc Tiger T606, which is the same processor in my phone. And it worked. It probably works for all T606 and many more.
https://github.com/TomKing062/CVE-2022-3...r/releases
25-11-2023, 07:41 PM
(25-11-2023, 05:33 PM)norrmann035(25-11-2023, 04:56 PM)Gargoyle(25-11-2023, 04:46 PM)norrmann035(25-11-2023, 04:31 PM)Gargoyle(25-11-2023, 03:13 PM)norrmann035 Hi. I have an Oukitel WP23 pro with Unisoc T606. I finally unlocked the bootloader, patched the boot.img, but can't for the life of me get the vbmeta to work after following this guide. Is there something wrong with the vbmeta file or is it just me being too amateur!. Can you please help me with this?.
Patched boot.img is not enough, it must be signed + signed custom vbmeta.
Since the manufacturer used own rsa key
Public key (sha1): d3c0b7e94718f5c4283291fbbef3594fe089cf97
If the leaked rsa4096_vbmeta.pem was used
Public key (sha1): 2597c218aae470a130f61162feaae70afd97f011
I already said it, it won't work, useless effort.
For this to work, you need a manufacturer's key, which you certainly won't get.
What was the unlocked bootloader?
Can I flash a prerooted GSI?
If the bootloader is unlocked then yes
no need for custom vbmeta or patched boot
but there probably won't be many current ones.
How do I install SGI on Unisoc T606, and is there any GSI with root pre installd I can use?????.
This is a Unlock hack for iPlay 50 mini tablet on Unisoc Tiger T606, which is the same processor in my phone. And it worked. It probably works for all T606 and many more.
https://github.com/TomKing062/CVE-2022-3...r/releases
26-11-2023, 09:26 AM
(25-11-2023, 07:41 PM)norrmann035(25-11-2023, 05:33 PM)norrmann035(25-11-2023, 04:56 PM)Gargoyle(25-11-2023, 04:46 PM)norrmann035(25-11-2023, 04:31 PM)Gargoyle Patched boot.img is not enough, it must be signed + signed custom vbmeta.
Since the manufacturer used own rsa key
Public key (sha1): d3c0b7e94718f5c4283291fbbef3594fe089cf97
If the leaked rsa4096_vbmeta.pem was used
Public key (sha1): 2597c218aae470a130f61162feaae70afd97f011
I already said it, it won't work, useless effort.
For this to work, you need a manufacturer's key, which you certainly won't get.
What was the unlocked bootloader?
Can I flash a prerooted GSI?
If the bootloader is unlocked then yes
no need for custom vbmeta or patched boot
but there probably won't be many current ones.
How do I install SGI on Unisoc T606, and is there any GSI with root pre installd I can use?????.
My partition table:
fdl1
lk-fdl2
splloader
I_fixnv1_a
prodnv
miscdata
uboot_log
vbmeta_a
vbmeta_system_a
vbmeta_system_ext_a
vbmeta_vendor_a
vbmeta_product_a
vbmeta_odm_a
hypervsior_a
avbmeta_rs_a
common_rs1_a
common_rs2_a
l_modem_a
l_deltanv_a
l_lsdp_a
l_gdsp_a
l_agdsp_a
pm_sys_a
boot_a
vendor_boot_a
init_boot_a
dtbo_a
super
cache
blackbox
userdata
logo
fbootlogo
l_runtimenv1
mic
sysdumpdb
trustos_a
teecfg_a
sml_a
uboot_a
persist
metadata
splloader
splloader
______________________________
I use this to unlock the bootloader, a Unlock hack for iPlay 50 mini tablet on Unisoc Tiger T606, which is the same processor in my phone.
It probably works for all T606 and many more.
https://github.com/TomKing062/CVE-2022-3...r/releases
26-11-2023, 02:35 PM
(26-11-2023, 01:35 PM)Gargoyle Requirements for flashing GSIs
D$: fastboot erase system
Erasing 'system' FAILED (remote: 'operate fail')
Fastboot can't find a system partition to wipe???. And looking at my partitions, I can't find one either?.
Where can the OS be located?.
My partition table:
fdl1
lk-fdl2
splloader
I_fixnv1_a
prodnv
miscdata
uboot_log
vbmeta_a
vbmeta_system_a
vbmeta_system_ext_a
vbmeta_vendor_a
vbmeta_product_a
vbmeta_odm_a
hypervsior_a
avbmeta_rs_a
common_rs1_a
common_rs2_a
l_modem_a
l_deltanv_a
l_lsdp_a
l_gdsp_a
l_agdsp_a
pm_sys_a
boot_a
vendor_boot_a
init_boot_a
dtbo_a
super
cache
blackbox
userdata
logo
fbootlogo
l_runtimenv1
mic
sysdumpdb
trustos_a
teecfg_a
sml_a
uboot_a
persist
metadata
splloader
splloader
26-11-2023, 03:07 PM
(26-11-2023, 02:35 PM)norrmann035(26-11-2023, 01:35 PM)Gargoyle Requirements for flashing GSIs
D$: fastboot erase system
Erasing 'system' FAILED (remote: 'operate fail')
Fastboot can't find a system partition to wipe???. And looking at my partitions, I can't find one either?.
Where can the OS be located?.
My partition table:
fdl1
lk-fdl2
splloader
I_fixnv1_a
prodnv
miscdata
uboot_log
vbmeta_a
vbmeta_system_a
vbmeta_system_ext_a
vbmeta_vendor_a
vbmeta_product_a
vbmeta_odm_a
hypervsior_a
avbmeta_rs_a
common_rs1_a
common_rs2_a
l_modem_a
l_deltanv_a
l_lsdp_a
l_gdsp_a
l_agdsp_a
pm_sys_a
boot_a
vendor_boot_a
init_boot_a
dtbo_a
super
cache
blackbox
userdata
logo
fbootlogo
l_runtimenv1
mic
sysdumpdb
trustos_a
teecfg_a
sml_a
uboot_a
persist
metadata
splloader
splloader
did you reboot into fastbootd or bootloader?
Users browsing this thread:
2 Guest(s)
2 Guest(s)
Users browsing this thread:
2 Guest(s)
2 Guest(s)
