[DEV][LB]ramdiskHijack - CM for locked bootloaders?

dh.harald · Feb 19, 2014

I try to implement 2nd-init method (Motorola Milestone/Defy/etc) to hijack ramdisk.
With this method, we can change stock ramdisk, and we can boot CM with stock kernel...
Here's KeiranFTW's original thread too: http://xdaforums.com/showthread.php?t=2608408, but I used 2nd-init instead of chroot

So, i'm done with following steps:
Successfully implement recovery and hijack ramdisk...
I can replace ramdisk contents with new one...
I can boot CM10.2, but it has defects:
Kernel and user space graphical drivers are mismatch, screen is yellowish (no blue), and a lots of mdp errors in dmesg, and no boot animation
no radio
there's some problem with /data/ / sdcard mount...

So i call for help, because i've limited time for this project, but it can interesting...

If you want to try it, do the following steps:
get hijack from here: https://github.com/dh-harald/hijack-ramdisk-huashan
get CM from source (preferred) or fxp, and delete boot.img from zip (and connected lines from update-script)
(optional) replace jelly.tar and recovery.tar to your device specific ramdisks, if you're on other device than Xperia SP
go to recovery, apply CM, (optional gapps), copy chargemon and hijack.tar to /system/bin and fix rights, and factory reset...
install 4.3 kernel only via flashtool (if you aren't on 4.3)...

Known problem, that you need original kernel modules too, to get wifi working (not tested)

I think, it's mainly CM configuration, but it maybe helps, when CM team starts to use Sony's 4.3 kernel based CM kernel...

Any helps are welcome...

Here's a screenshot about cm and locked bootloader and stock kernel... It's a bit confusing, because when i screenshot it via ddms, colors are fine, but in screen, there's no blue color, only yellow...

EDIT:
I've found that radio/fs problems are selinux related...

EDIT: Current status:
No wifi
No sdcard on /sdcard (only /data/media)
Got baseband, but still no radio
Visible glitches, yellowish screen (aosp <-> caf ?)

testnumero · Feb 19, 2014

hi,
have you checked this thread ?
http://xdaforums.com/showthread.php?t=2593806 and
http://xdaforums.com/showpost.php?p=49025628&postcount=22

dh.harald · Feb 19, 2014

testnumero said:
hi,
have you checked this thread ?
http://xdaforums.com/showthread.php?t=2593806 and
http://xdaforums.com/showpost.php?p=49025628&postcount=22

I use same method, like this, but i use 2nd-init instead of chroot... selinux prevents proper booting

dh.harald · Feb 20, 2014

ATM, i'm playing stock rom with 2nd-init, to minimalize differences..

I passed selinux problems with @Hashcode binaries, got bootlogo, and i've no selinux errors, etc.

Next problem is modem initialization:

== cut ==

Any idea?

I cut some sleeps, in script, and modem doesn't initialized before script runs 2nd-init.

Now it boots, but still no radio...

PAINfájdalom · Feb 20, 2014

dh.harald said:
I try to implement 2nd-init method (Motorola Milestone/Defy/etc) to hijack ramdisk.
With this method, we can change stock ramdisk, and we can boot CM with stock kernel...
Here's KeiranFTW's original thread too: http://xdaforums.com/showthread.php?t=2608408, but I used 2nd-init instead of chroot

So, i'm done with following steps:
Successfully implement recovery and hijack ramdisk...
I can replace ramdisk contents with new one...
I can boot CM10.2, but it has defects:
Kernel and user space graphical drivers are mismatch, screen is yellowish (no blue), and a lots of mdp errors in dmesg, and no boot animation
no radio
there's some problem with /data/ / sdcard mount...

So i call for help, because i've limited time for this project, but it can interesting...

If you want to try it, do the following steps:
get hijack from here: https://github.com/dh-harald/hijack-ramdisk-huashan
get CM from source (preferred) or fxp, and delete boot.img from zip (and connected lines from update-script)
(optional) replace jelly.tar and recovery.tar to your device specific ramdisks, if you're on other device than Xperia SP
go to recovery, apply CM, (optional gapps), copy chargemon and hijack.tar to /system/bin and fix rights, and factory reset...
install 4.3 kernel only via flashtool (if you aren't on 4.3)...

Known problem, that you need original kernel modules too, to get wifi working (not tested)

I think, it's mainly CM configuration, but it maybe helps, when CM team starts to use Sony's 4.3 kernel based CM kernel...

Any helps are welcome...

Here's a screenshot about cm and locked bootloader and stock kernel... It's a bit confusing, because when i screenshot it via ddms, colors are fine, but in screen, there's no blue color, only yellow...

EDIT:
I've found that radio/fs problems are selinux related...

when will be a good working ROM?

dooby-doo · Feb 20, 2014

Check this thread please.
@TiMiN8R time is limited too.

KeiranFTW · Feb 25, 2014

I know this sounds crazy, but don't stop the sdcard service and some of the RIL services in hijack.sh.. and then see what happens.
The stock RAMdisk already starts some of these

You'll also probably need stock binaries too such as:
hostapd
wpa_supplicant
stock firmware files at /etc/firmware
/etc/wifi/calibration
libhardware_legacy.so

Hope I helped..

Sent from my C5303 using Tapatalk

KeiranFTW · Feb 26, 2014

So looks like you have got baseband working but radio interface layer does not seem to be.. good work we are getting there

Sent from my C5303 using Tapatalk

KeiranFTW · Feb 26, 2014

here is my own attempt: https://github.com/keiranFTW/huashan_ramdisk-hijack

follow there for progress

diabolus81 · Feb 27, 2014

Nice to know someone still fight with this

and i hope there will be a winning fight :good:

SapoPT · Mar 10, 2014

KeiranFTW said:
here is my own attempt: https://github.com/keiranFTW/huashan_ramdisk-hijack

follow there for progress

Did you get any promissing results yet?

KeiranFTW · Mar 10, 2014

SapoPT said:
Did you get any promissing results yet?

We have CyanogenMod 10.2 running on a locked bootloader, everything works bar GPS.... so huge progress

Sent from my C5303 using Tapatalk

SapoPT · Mar 10, 2014

KeiranFTW said:
We have CyanogenMod 10.2 running on a locked bootloader, everything works bar GPS.... so huge progress

Sent from my C5303 using Tapatalk

Really? Thats very good, congratz. Do you think the method you are using could be used in other Xperia devices? (Ex. Xperia Go)

jancarlos1597 · Mar 10, 2014

KeiranFTW said:
We have CyanogenMod 10.2 running on a locked bootloader, everything works bar GPS.... so huge progress

Sent from my C5303 using Tapatalk

Y'all guys are amazing, thanks for this, this are very good news, thanks yay!

Cheers!

diabolus81 · Mar 10, 2014

KeiranFTW said:
We have CyanogenMod 10.2 running on a locked bootloader, everything works bar GPS.... so huge progress

Sent from my C5303 using Tapatalk

Great news !

:good:

KeiranFTW · Mar 11, 2014

SapoPT said:
Really? Thats very good, congratz. Do you think the method you are using could be used in other Xperia devices? (Ex. Xperia Go)

Yeah I think that it could (and should) work. The only thing is that it is hard testing on a locked bootloader, because if you mess up you have to reflash whole system again, gain root again and all that.
Xperia Go uses different board to Xperia SP (novathor v krait) so it may be a hard task.

I have an Xperia U, which is very similar to Xperia Go as far as I know, just it doesn't charge, I need to solder pins back onto board (long story short water damage). If I can fix it I'll see what I can do.

Sent from my C5303 using Tapatalk

baga255 · Jun 17, 2014

KeiranFTW said:
Yeah I think that it could (and should) work. The only thing is that it is hard testing on a locked bootloader, because if you mess up you have to reflash whole system again, gain root again and all that.
Xperia Go uses different board to Xperia SP (novathor v krait) so it may be a hard task.

I have an Xperia U, which is very similar to Xperia Go as far as I know, just it doesn't charge, I need to solder pins back onto board (long story short water damage). If I can fix it I'll see what I can do.

Sent from my C5303 using Tapatalk

Do you think it would be possible to use this method to hijack ramdisk on Xperia Z?
It also has a Krait board as Xperia SP.
I want to try porting it to Xperia Z, but I don't have nearly as much experience in developing. So I'd like to know your opinion before I start searching more into the subject

Thanks!

sijav · Jun 18, 2014

KeiranFTW said:
We have CyanogenMod 10.2 running on a locked bootloader, everything works bar GPS.... so huge progress

Sent from my C5303 using Tapatalk

wow!! JUST WOW!! I really like to do it for xperia ZR, I've tried to port omni which was aosp based to cm kernel and it worked with just replacing some libs and it is now perfect! but this process is much more interesting!! for CM11!!
also about that glitches? I think it's because of the hw composer lib, it might appear on logcat too

MARKOZD15 · Jun 20, 2014

Hy guys! Really awesome work!

So will there be available CM11 or CM10.2 for XZ1 with lockedbootloader soon?

mchlbenner · Aug 20, 2014

How could get this working on the z1s.
Thanks

Sent from my C6916 using xda premium

[DEV][LB]ramdiskHijack - CM for locked bootloaders?

Senior Member

Attachments

Senior Member

Senior Member

Senior Member

Member

Member

Inactive Recognized Developer

Inactive Recognized Developer

Inactive Recognized Developer

Senior Member

Senior Member

Inactive Recognized Developer

Senior Member

Senior Member

Senior Member

Inactive Recognized Developer

Senior Member

Senior Member

Senior Member

Senior Member

Similar threads

Top Liked Posts