2708+ enabled kernel [14MB ram with radio 2.22.27.08/2.22.28.25 & hboot 1.33.0013d]

[ezterry]

2708+ enabled kernel [14MB ram with radio 2.22.27.08/2.22.28.25 & hboot 1.33.0013d]

[SIZE=+1]Attention: The following will only work on phones that 32B devices; This includes ALL HTC Dreams (regardless of EBI1/EBI0; but only includes the original MT3G phones. Not the Magic 32A (sometimes called magic plus) without the audio jack or the Fender/MT3G 1.2 device with the audio jack.[/SIZE]
Fender/MT1.2 users see this thread for additional information.​

A little while back the MT3G-ota release hit the streets; With it on the MT3G was a new radio 2.22.27.08, and H-Boot 1.33.0013 allowing the new firmware to have access to 15MB additional ram. Since I've had some patches on our old radio/SPLs to bring that down to 14; however that still leaves us a long way to go.

Now I'm happy to announce the new radio can be used with the latest build of my latest kernel

This is at this point in time an advance process so please proceed with caution and read carefully, so you do not end up bricking your device.

!!!! IMPORTANT !!!!
The following SPL 1.33.0013d, was modified with HTC Dreams in mind.

However after some trial it appears to also be safe on the 32b Sapphire phones [aka MT3G]; And will provide benefits as bypassing any version/region checks on the NBH flashes and allowing 'fastboot erase system -w' to ensure cleaner wipes between installs.

Sapphire users may however also use the unmodified 1.33.0013 (this is not recommended for dream users due to the partition sizes, and lack of 'fastboot erase image' to simplify wipes between roms; or CustomMTD resizes.)
​

To Start you will need a fastboot enabled SPL such as 1.33.2003 or 1.33.2005 or 1.33.2010 or 1.42.2000 as I'm not distributing the new radio/SPL in a update.zip ..

[SIZE=+2]== Files ==[/SIZE]

From dream_2708kit.zip (mirrors):
> hboot-1.33.0013d.img (MD5: c35ff1159828a6186cb98a9cfaa81613)
> radio-2.22.27.08.img (MD5: 61aee7fd274d39ca85644286f231836e)

> EBI0 Recovery:
Dream: recovery-RA-dream-v1.7.0-cyan.img (MD5: 11ae63afee9813a9b76cb3f7fd5ac2ad) from here
32b Magic: recovery-RA-sapphire-v1.7.0G-cyan.img (MD5: 8846b53e3184d688e3e8a628ad81074f) from here

> Any Kernel installer (Only if you are not using a rom containing a 2708+ kernel) [choose 1]:

ezBiffTestKernel20110222-2708_S.zip (MD5: c6e4b6f34b9f4e5507090b678499198c) /*previously ezBiffTestKernel20101106-2708_S.zip*/
(for source code see this tag .. specifically the 2708+ patch is this: patch, additional details on this set of kernels is here).

ez-nightly236-cm-2708port_S.zip and other CM6.1nightly kernels. (source code and additional information on the CM Forum post)
CM-6.1-final uses the same code as the 271 nightly so install it after installing the rom and before rebooting. Note: if you find more than this line green with that kernel try 251, my 20101106 or pershoots kernels.

The most recent pershoot kernels also support the additional ram.

The ezgb2636 kernel series http://forum.xda-developers.com/showpost.php?p=14768272&postcount=2427

(Note: Any other 2708 ported kernels, or roms with such a kernel can be used without the above port files)​

> A Rom (note: many cm6 based roms block install because of the '1.33.0013d' bootloader Please use firerat's SpoofSPL)

Known to work:

- MT3G-Test3 from http://forum.xda-developers.com/showthread.php?t=811620
- Nandroid backups/SpoofSPL installs of CM6/CM6RC1/BiffMod/SparksMod/other derivatives will probably also work
- Biffmod2.1 2708+ port
- CM6-RC1 2708+ port
- CM6 final 2708+ port (unofficial)
- CM5.0.8 2708+ port

If you have an older rom you wish to port this post may be able to help you do it.

**Note:
New Alternative radio: RADIO-2.22.28.25.img (MD5: 8bfccfb9ee3f992137e5171aa892235b) file can be found in:
update_2.22.28.25_S.zip mirror md5: 2e384ab42da375458fdb135063b7536b


[SIZE=+2]== Installing ==[/SIZE]

(Note: Please Do read the information on the SPL below before actually installing)

1) Take a nandroid backup of your current rom (mandatory if you are trying to move the current rom to the new radio/SPL) to simplify things put any update.zips you expect to need on the SD card now
2) enter fastboot mode
3) flash the files and other operations via fastboot

fastboot flash recovery recovery-RA-dream-v1.7.0-cyan.img
fastboot flash radio radio-2.22.27.08.img
fastboot flash hboot hboot-1.33.0013d.img
fastboot reboot-bootloader

now you will see you have an s-on boot loader with 1.33.0013d as its version

fastboot erase system -w
fastboot erase boot

please remember while fastboot erase works; fastboot flash does not so be careful *not* to remove the recovery
4) Boot into recovery
5) install a system from backup or as a fresh rom some options are:

a. If you want your previous rom restore the nandroid backup
b. If you are installing the MT3G-Test3 flash 'MT3G-test3_S.zip' (no need to continue with these instructions as this is a 2708 port)
c. If you are installing BiffModV2.1-2708port_S.zip flash it as per These instructions using the 2708+ port instead of the BiffModV2.1.zip (you will not need to continue with the steps on this page)
d. Install your new rom as-per the roms instructions (if it is a 2708+ port do not proceed to step 6 unless you want my kernel instead of the rom creators)
​

6) If your rom doesn't come with a 2780+ port: Flash the anykernel for the new radio ezBiffTestKernel20110222-2708_S.zip
7) reboot and use as normal

[SIZE=+2]== Flashing From a Stock SPL ==[/SIZE]

* Magic 32b Users: if you have a 2.x radio with a 1.33.00xx SPL other than 1.33.0013/1.33.0013d please see This Post
* Dream Users: if you have 0.95.0000/0.95.3000/10.95.3000 see this post
* Dream Users: if you have a 3.x please re-read your rooting instructions, it will install 1.33.2005 for you and allow you to continue with these instructions.

[SIZE=+2]== Switching from 1.33.0013 to 1.33.0013d ==[/SIZE]

Any user that install 1.33.0013 or has rooted a stock 32b sapphire phone with 1.33.0013 pre-installed and wishes to switch to 1.33.0013d you may use the following update.zip:

update-1_33_0013-to-1_33_0013d_S.zip
MD5: a68743f0b0e40aec9e18cbd02e6128fa
(Note this will only work if you are migrating 1.33.0013->1.33.0013d otherwise it will prevent you from installing the update)

[SIZE=+2]== Important Information about 1.33.0013d ==[/SIZE]
A not quite so perfected SPL

1.33.0013d is based on the new 1.33.0013 released in the MT3G ota and allows access to the additional memory provided by the new radio. The original SPL however was very unfriendly to the Dream; and being a perfected SPL left quite a bit to be desired.

Please note 1.33.0013d is modified for use only on the dream and has a few of the problems fixed (but some cannot be changed due to the Perfected base SPL)

*) Fastboot mode is enabled (however very few commands are available)
*) fastboot erase works (allowing us the most important function of wiping the current system)
*) 'fastboot flash nbh' works and will skip most checks
*) SPL's partition layout (dream only): 91MB system 27MB cache 91.8MB data
(magic users will see a normal partition layout)

If you find yourself stuck without recovery!!

Dream
1) Download: orange-1.58.73.2.nbh (MD5: aca4dee0c1ece7e9773f2ecbdfbba7c0) (mirror)
2) enter fastboot and run 'fastboot flash nbh orange-1.58.73.2.nbh'
3) wait for the entire nbh to flash
4) boot into the bootloader again (it will be an engineering SPL 1.42.2000)
5) You can now re-flash the radio/hboot/recovery via fastboot that you wish to have installed.

Sapphire (MT3G)
1) Download SAPPIMG.nbh
2) enter fastboot and run 'fastboot flash nbh SAPPIMG.nbh'
3) Continue as per one click (flashreq) root instructions: http://www.getyourdroidon.com/wiki/index.php5?title=MyTouch_3G_One_Click_Root
​

If you just temporarily need an engineering SPL (and recovery is working):
(and have SPL 1.33.0013 + radio 2.22.27.08):
1) Nanroid backup
2) Flash (via recovery) ENG SPL 1.33.2005 **
3) do what you need to in the engineering SPL
4) reflash 1.33.0013d as above (install, reboot bootloader, fastboot erase)
5) restore nandroid

** Please remember if you have CustomMTD to remove it before flashing a SPL of Radio from recovery

fastboot erase without fastboot
I highly recommend dream users run 'fastboot erase system -w' as instructed above when first installing 1.33.0013d. However for sapphire users with 1.33.0013 (missing fastboot erase support) and for all users when away from your computer see this thread for a recovery executable zip to simulate fastboot erase.

[SIZE=+2]== Switching between Radios 2.22.27.08 and 2.22.28.25 ==[/SIZE]

To do this you can either restore the engineering SPL as above
Or use an advanced update.zip:

update_2.22.27.08_S.zip // [size=+1]mirror[/size]
md5: 412959f6887f9f8764bd285ad879e1c0

update_2.22.28.25_S.zip // [size=+1]mirror[/size]
md5: 2e384ab42da375458fdb135063b7536b

These zips have extended safety features.

1) Notice that you need to remove custom MTD (exists without flashing with warning)
2) prevents you from flashing if you currently have a different series of radio (ie. 1.22 or 3.22 .. it must be 2.22)
3) asks in a yes/no menu if you are sure that you want to install (with an extended warning for "unknown" SPLs that may cause problems. (1.33.0013/1.33.0013d/1.33.2005 are the 'known' SPLs)

It is *still* safer to use fastboot when possible however this is the method used by the OTA its self.. (just try to make sure you have a valid system first .. my checks attempt to avoid the most common potential issues.. but if you are crafty it can still cause a brick.)

 

[XBrav]

Alright Terry, I'll risk it! Update to come~

*EDIT*

Ok, this is impressive. Excellent work Terry. First thing I've noticed is in CM 6.1, Abduction 2 no longer has frame skips or blurring from buffering. Here's my memory status:

free
total used free shared buffers
Mem: 112700 111192 1508 0 312
Swap: 11264 11264 0
Total: 123964 122456 1508
#

 

[robuser007]

A Rom (note: many cm6 based roms block install because of the '1.33.0013d' bootloader I'm sure newer versions will allow it if you ask)

Use customMTD from Firerat!

 

[ezterry]

A Rom (note: many cm6 based roms block install because of the '1.33.0013d' bootloader I'm sure newer versions will allow it if you ask)

Use customMTD from Firerat!

Yes, and you can still save some /cache space (I shrunk it to 27.. but much more than that radio flashes will fail)

I have not personally tested it with this new combo but no reason it will break.. I find CustomMTD annoying when continuously re-flashing kernels frequently (even with the fact my anyspl script will keep the current CustomMTD partitions) This is particularly true when you need to know why the phone didn't boot.. Is it because the new memory layout failed, or did I forget a step with CustomMTD

 

[XxKOLOHExX]

So if we have a mytouch 3G we just use the OTA update to get radio and SPL flashed, then wipe then flash a rom then the kernel patch?

 

[levi47]

Custom nbh with compatible radio,recovery and rom?

Would it be possible to create a custom nbh with a compatible radio, recovery and rom? Would that allow you to flash everything at once and not worry about having incompatible radio+recovery+hboot+recovery?

 

[ezterry]

So if we have a mytouch 3G we just use the OTA update to get radio and SPL flashed, then wipe then flash a rom then the kernel patch?

Yes.. I hope.. my warning is I'm unsure how my hacked partitions on the 1.33.0013d spl will behave so you want to use the actual 1.33.0013 SPL.

I have not tested [given my lack of MT3G to test on] so I'm waiting on results. (I've asked in the official MT3G OTA thread) unless I goofed the memory map for 32b sapphire is the same as the modified one for 32b dreams.

 

[ezterry]

Would it be possible to create a custom nbh with a compatible radio, recovery and rom? Would that allow you to flash everything at once and not worry about having incompatible radio+recovery+hboot+recovery?

Um... not really .. least the rom is best left out.. from 1.33.2005 or 1.33.2003 or 1.42.2000 I might be able to make it install the newer versions via hacksed nbh.. or more likely DREAIMG.zip

But 1.33.0013 still requires the HTC signature so you need a signed file (such as the orange rom with engineering SPL .. thus why I mention it as emergency recovery)

That said so long as you flash those files with the correct checksum from fastboot this is fairly safe.. worst is you will need to flash the nbh.

 

[XxKOLOHExX]

Yes.. I hope.. my warning is I'm unsure how my hacked partitions on the 1.33.0013d spl will behave so you want to use the actual 1.33.0013 SPL.

I have not tested [given my lack of MT3G to test on] so I'm waiting on results. (I've asked in the official MT3G OTA thread) unless I goofed the memory map for 32b sapphire is the same as the modified one for 32b dreams.

Okie dokies lol will try and get the newest Radio and SPL flashed and try this kernel out

 

[XBrav]

Hey Terry,

Is this RADIO actually compatible with the 1.33.2005 hboot? If so, maybe the flashers should verify that the recovery with the new 2x radio works before flashing a new hboot.

Just a thought though. It worked fine for me. I personally rebooted to verify that the EBI0 AmonRa recovery worked before flashing the new radio and hboot.

 

[Firerat]

I'll have to give this a go after the weekend

I trust the hboot 1.33.0013d is a full Eng SPL


btw, I'm guessing the reference to CustomMTD is to 'fake the SPL' so you can flash a ROM and effectively bypass its assert checks

 

[ezterry]

I'll have to give this a go after the weekend

I trust the hboot 1.33.0013d is a full Eng SPL


btw, I'm guessing the reference to CustomMTD is to 'fake the SPL' so you can flash a ROM and effectively bypass its assert checks

No its not a full Eng SPL ..I unlocked what I could.. but the perfected SPL didn't just prevent you from accessing many things.. it didn't have the code at all.

(I do have fastboot erase so it won't be that painful for CustomMTD you just need to make sure you *don't* need to flash recovery from fastboot)

We need a (real not hacked) 1.33.2013 SPL (for my google inconvenience someone decided to re-branded 1.33.2005 to get around a ro.bootloader check)

Hey Terry,

Is this RADIO actually compatible with the 1.33.2005 hboot? If so, maybe the flashers should verify that the recovery with the new 2x radio works before flashing a new hboot.

Just a thought though. It worked fine for me. I personally rebooted to verify that the EBI0 AmonRa recovery worked before flashing the new radio and hboot.

2005 will "work" but most roms won't so its hit or miss.. THe best way is to flash all 3 (recovery+radio+SPL) .. one reason to do it from fastboot is to ensure we can re-enter fastboot. While the SPL is not optimal for correcting things.. the Orange NBH will install a full engineering SPL to fix anything that went wrong.

Adding in between steps is just going to make this more likely to brick someone (as it is you can be on any engineering SPL/radio and use my instructions safely) This is of course one reason why I only have fastboot images .. there are many warnings more than dangerSPL if we are to try this from recovery.

 

[XBrav]

Fair enough. As you said, you can backtrack with that Orange NBH, so no worries. Still running strong here.

 

[bubert]

So if we have a mytouch 3G we just use the OTA update to get radio and SPL flashed, then wipe then flash a rom then the kernel patch?

Doesen`t the official OTA flashes the Perfect SPL?

 

[XxKOLOHExX]

Doesen`t the official OTA flashes the Perfect SPL?

Yeah that's what I'm trying to do now haha

 

[bubert]

Yeah that's what I'm trying to do now haha

) Good luck with that. Ain`t touching that thing .. i`ve semi-bricked my mt3g once .. don`t wanna do it again !

 

[sisterchick]

Custom MTD

Great job, sir! This is a milestone.

Just for those following behind, I had difficulties trying to patch the recovery to use Firerat's Custom MTD partition. I wasn't able to flash a ROM or reflash the recovery in fastboot. Used the NBH Orange to start over and all is well.

UPDATE: Well, it wasn't as well as I thought! I still can't install a ROM or restore backup. Fixing to reformat SD and see if I don't have some file corruption problems.

 

[XxKOLOHExX]

) Good luck with that. Ain`t touching that thing .. i`ve semi-bricked my mt3g once .. don`t wanna do it again !

LOL Will let you know what happens after

 

[jinxhyped]

Ok... I'll be the first to go and break something...

I followed the installation step by step and fastboot flashed Recovery/Radio/Hboot with no issues. On Fastboot my info reads

DREAM PVT 32B SHIP S-ON
HBOOT 1.33.0013d (DREA21000)
CPLD-4
RADIO-2.22.27.08
Oct 21 2009,22:33:27

and after fastboot Erase system-w/boot still no problems & RA-dream-v1.7.0 loads just fine.

Flash Zip from Recovery in this order
MT3G-Test2 flash 'MT3G-test2_S.zip
MT3G-test2-market-fix_S.zip
ezBiffTestKernel20101106-2708_S.zip

All with no error messages in REcovery. On Reboot system now, My rogers Flash Screen pops up for about 30 seconds and then reboots again. about 15 seconds later I'm back into recovery. If I reboot from there it performs the same loop.

This was originally a Post-911 factory patched dream that I gained root on with exploid. I've now had problems installing anything other than a CM5 nandroid backup done with 3.22 & DangerSPL. FYI, I did a nandroid just prior to fastboot flashing this and it does nothing but put me into an endless cycle of rebooting to the flash screen.

I realize that there's something up with this dream that I'm missing, since this problem is occuring with any Radio/SPL combos. I think at this point I can safely say that I know just enough about this whole process to bugger something up

 

[XBrav]

Ok... I'll be the first to go and break something...

I followed the installation step by step and fastboot flashed Recovery/Radio/Hboot with no issues. On Fastboot my info reads

DREAM PVT 32B SHIP S-ON
HBOOT 1.33.0013d (DREA21000)
CPLD-4
RADIO-2.22.27.08
Oct 21 2009,22:33:27

and after fastboot Erase system-w/boot still no problems & RA-dream-v1.7.0 loads just fine.

Flash Zip from Recovery in this order
MT3G-Test2 flash 'MT3G-test2_S.zip
MT3G-test2-market-fix_S.zip
ezBiffTestKernel20101106-2708_S.zip

All with no error messages in REcovery. On Reboot system now, My rogers Flash Screen pops up for about 30 seconds and then reboots again. about 15 seconds later I'm back into recovery. If I reboot from there it performs the same loop.

This was originally a Post-911 factory patched dream that I gained root on with exploid. I've now had problems installing anything other than a CM5 nandroid backup done with 3.22 & DangerSPL. FYI, I did a nandroid just prior to fastboot flashing this and it does nothing but put me into an endless cycle of rebooting to the flash screen.

I realize that there's something up with this dream that I'm missing, since this problem is occuring with any Radio/SPL combos. I think at this point I can safely say that I know just enough about this whole process to bugger something up

One thing you might want to try is flashing just the ROM and market fix, reboot, let it start up, then reboot back into recovery and flash the kernel. Here's proof it's working on a Rogers Dream with CM 6.1: