Custom Rom / rooting Options vor TB-125FU (Lenovo Tab M10 Plus 3rd Gen)

Search This thread

Tigrin

New member
Jun 6, 2023
4
0
I got a root adb shell on stock ROM and listed all the partions (in /dev/block/platform/bootdevice/by-name) and no obvious recovery partion.View attachment 5927957

anyone know what partion might be the recovery?
So I have been researching, this device doesnt have/need a recovery.img because its a a/b partioned device source I can't find any information about porting twrp to a/b devices without a recovery.img, I did try using this guide and used the stock boot.img as the recovery but that didn't work.

EDIT: so I used this guide to port TWRP and used this as the base TWRP recovery (uses the same chipset) however I got this error message when booting
recovery.png


the reason that I want to make a custom recovery is so I can flash opengapps via ADB, however the stock "recovery" won't allow flashing of unsigned .zip. is there a way to install opengapps.zip onto a GSI?
 
Last edited:

xd4d3v

Senior Member
Jun 18, 2009
720
69
So I have been researching, this device doesnt have/need a recovery.img because its a a/b partioned device source I can't find any information about porting twrp to a/b devices without a recovery.img, I did try using this guide and used the stock boot.img as the recovery but that didn't work.

EDIT: so I used this guide to port TWRP and used this as the base TWRP recovery (uses the same chipset) however I got this error message when booting
View attachment 5928835

the reason that I want to make a custom recovery is so I can flash opengapps via ADB, however the stock "recovery" won't allow flashing of unsigned .zip. is there a way to install opengapps.zip onto a GSI?
you should integrate gapps into the GSI by using a "kitchen" tool.
however, it's too much of a hassle for me, and i'd just go with a GSI that has gapps integrated.
 

JonW434

Member
Jan 23, 2020
38
7
It has been some years since I did any Android stuff, so all of this is a bit like learning it from scratch all over again.

If anyone else reading this thread and doesn't know very much, I've provided some links that helped me, in order to refresh my Android memory or learn some things that have changed since then.


I didn't realise that SafetyNet authentication is broken, even when using stock rom, as soon as bootloader is unlocked. I thought it was only when using a custom ROM or getting root access. I assume that no one has been able to get SafetyNet pass on this device so far. And it gives a very big reason for wanting root access in order to overcome this, if wanting to use banking apps etc. In terms of trying one of those 5 different methods.


There has been talk of A/B Partitioning for Seamless Updates, and I know almost nothing about this, I've only started seeing it talked about in the last few days, so I'm sharing that link for anyone else who needs some context. I know that most here already know this basic stuff, but posting as a point of reference.


This is an excellent overview of GSI showing the history of GSI and where the whole idea came from, and the implications of using it. He has many extra links showing extra information for any given subject. And the writer of the article even has a Lenovo tablet and installs a few.


A list of GSIs..

Goals

- an easy guide to make SafetyNet pass on this device, doing it manually via root access. Similar to the excellent GitHub GSI install guide posted by dcn1961.

- or finding a way to do it on one device and then adapt it into a custom rom, so that it can be automated into the install, with no root access is required. I've done this kind of thing on Windows before, but on Android I know very little about this, only that others seem to be able to do it for other phones or tablets. It would require a very advanced user. It may never happen on this model of tablet, but just saying.. it would be a nice thing to aim for in the long term.

- figuring out why the face lock thing prevents installation for some GSI roms but not for others. And what can be done to fix it.

- Widevine L1 doesn't seem possible on most unlocked Android devices. That means HD video for streaming will always be compromised. I've seen it possible with some Oneplus devices, but it needed some cooperation from the official sources of the firmware in order to work. It's a rare thing in order to unlock this and likely won't ever be possible for this device.

Therefore, it would seem that stock configuration might be the preferred option. But even with that, there seems to be a problem for some users running 100% stock, the Lenovo OTA updates can fail and won't complete to 100%, looping the update and it can never complete. Rescue with SMA fixes it, but isn't ideal in terms of having to factory reset and use restore backup all of the time. I haven't been able to find info on why this is happening for some users and not others. Either way, it's interesting to see what the possibilities there are one way or the other. For learning purposes etc.
 

xd4d3v

Senior Member
Jun 18, 2009
720
69
I forgot to disable the automatic updates after rooting, and after rebooting the system wouldn't start.
I ended up solving this by downloading the new firmware using RSA, and flashing the system.img.

The problem is that no matter what I do now, I can't re-root.
O copied the new boot.img to the tablet, patched it with magisk, and then flashed it with fastboot.
every time it reboots into a black screen, where I can do anything, but it does respond to holding the power button (I get the restart, shut down, lock down menu) and it responds to adb commands.


Any one has other ideas for me to try? I can't really restore the whole thing to stock, as the tablet is shared.
 

JonW434

Member
Jan 23, 2020
38
7
Has anyone successfully used SP Flash to revert to stock, or is everyone going with the official tool (RSA) only? The problem with RSA is that it forces you onto the latest version. Sometimes that's a good thing, sometimes it's not.

If I were in your position above, I would try going back to the version you were running before the update. It may not work but it only takes fives mins to try if you have a backup of that ROM.

I've successfully been able to do this with my Motorola phone (using the Motorola equivalent of SP Flash). I can update in either direction (an earlier or a more recent update), and when going forwards, a factory reset isn't required. It means being able to stay on Android 12 for example. RSA forces you onto Android 13 now. The process is faster than an official update.

If no one else has tried SP Flash, I'll be trying this at some point in the near future. I have the tablet now and can start some experiments. I'm new to MediaTek devices, but below is a list of tools that can potentially be used. At this point, I'm expecting to use SP Flash Tool because I'm expecting that it's all that will be required. But it would be nice to also find a way to backup current firmware installed on the device (it's possible apparently). Especially being able to make a backup of a modified/custom/GSI rom.

SP Flash tool (version 5.xx using a scatter file)
Multiport tool
NCK Pro box
Miracle box (scatter)
Miracle box (.bin)
Infinty CM2 MTK
 

eversaevel

New member
Jul 17, 2023
1
0
Is there an easier way of getting adoptable storage to work? I did a few sm commands on my son's 32GB tablet in order to force the 128G sd card adoptable, but every reboot it forgets about all apps installed on that SD (which he then has to reinstall etc). Would using another GSI or so help?
 

Majd97

New member
Sep 14, 2020
4
0
Hello everyone
I got a new tablet Lenovo tablet TB128 Qualcomm that comes with sim card but unfortunately I couldn't unlock bootloader due to the Qualcomm processor!!
I went for the site called ZUI "https://m.zui.com/iunlock" to unlock it and they give me wrong IMEI , for further information go to this thread: https://forum.xda-developers.com/t/wrong-imei-in-zui-com.4006137/
I tried more times to unlock it by the site and search many times on the internet but all my efforts go away.
please help me!!
 

joeblowma

Senior Member
Oct 26, 2012
64
29
Edmonton
Just to put it out there, I just got offered the android 13 update and when I went to reflash the unmolested boot.img to do a factory reset, it got stuck on the orange notice screen. I managed to put the magisk bootloader back using button combinations (power + vol down to force off, power + vol up to force fasboot) and then I shocked myself...

I used RSA to update to android 13, it relocked the bootloader in the process so I had to redo all that, but now I'm rooted again. Just shocked RSA finally works.
 

GuyInDogSuit

Senior Member
Jan 4, 2009
5,940
1,363
41
Lancaster, CA
Nintendo Switch
OnePlus 7T
Just to put it out there, I just got offered the android 13 update and when I went to reflash the unmolested boot.img to do a factory reset, it got stuck on the orange notice screen. I managed to put the magisk bootloader back using button combinations (power + vol down to force off, power + vol up to force fasboot) and then I shocked myself...

I used RSA to update to android 13, it relocked the bootloader in the process so I had to redo all that, but now I'm rooted again. Just shocked RSA finally works.


Glad to hear that. I hate some of the UI changes A13 (Leno-blow's skin of it, anyway) made to this tablet. And it feels a lot less smooth or snappy than A12 did. Sigh. Wish there were some custom ROMs for this. I might look into that GSI mentioned a few times here, at this rate.
 
Last edited:

hugehead83

Senior Member
Feb 4, 2009
98
46
Houston, TX
Google Pixel C
Moto X4
Just to put it out there, I just got offered the android 13 update and when I went to reflash the unmolested boot.img to do a factory reset, it got stuck on the orange notice screen. I managed to put the magisk bootloader back using button combinations (power + vol down to force off, power + vol up to force fasboot) and then I shocked myself...

I used RSA to update to android 13, it relocked the bootloader in the process so I had to redo all that, but now I'm rooted again. Just shocked RSA finally works.
So if I am running Android 12 with root, I can use the latest RSA tool to upgrade to Android 13, re-root, and not have to do a factory reset and lose all my apps/data?
 

SwedishForenger

Senior Member
Mar 26, 2021
365
74
Hi, I'm wondering if you can help me figure out a problem I've never encountered before using 'fastboot'. I have had a few Mediatek phones over the last few years that have given me an insight into how to flashing and rooting, using all kind of tools and tricks. However, using the familiar fastboot on this tablet, is giving me a headache. Using adb devices, gives me the usual phone name. booting in to fastboot with 'adb reboot bootloader' and then 'fastboot devices', gives me the usual phone name, which indicates that the drivers for the fastboot are correct for this device. And giving the fastboot reboot command, restarts the tablet. But unlocking the bootloader with fastboot flashing unlock,fastboot oem unlock,fastboot oem unlock-go,fastboot flashing unlock_critical, Will ABSOLUTELY not work ????. And I can't for the life of me, understand what's going wrong!. If I replace the tablet with one of my other MediaTeck phones and type 'fastboot flashing unlock' it works perfectly. What am I doing wrong here?.

I have no love for Android 13 and I don't think the spec in this tablet is built for it either. so I want to flash som GSI Android 11 and make it go smooth and fast in place of all the Bling, whistle an bells crap Android 13 brings, and the bugging down of the unit with it.
 

GuyInDogSuit

Senior Member
Jan 4, 2009
5,940
1,363
41
Lancaster, CA
Nintendo Switch
OnePlus 7T
Hi, I'm wondering if you can help me figure out a problem I've never encountered before using 'fastboot'. I have had a few Mediatek phones over the last few years that have given me an insight into how to flashing and rooting, using all kind of tools and tricks. However, using the familiar fastboot on this tablet, is giving me a headache. Using adb devices, gives me the usual phone name. booting in to fastboot with 'adb reboot bootloader' and then 'fastboot devices', gives me the usual phone name, which indicates that the drivers for the fastboot are correct for this device. And giving the fastboot reboot command, restarts the tablet. But unlocking the bootloader with fastboot flashing unlock,fastboot oem unlock,fastboot oem unlock-go,fastboot flashing unlock_critical, Will ABSOLUTELY not work ????. And I can't for the life of me, understand what's going wrong!. If I replace the tablet with one of my other MediaTeck phones and type 'fastboot flashing unlock' it works perfectly. What am I doing wrong here?.

I have no love for Android 13 and I don't think the spec in this tablet is built for it either. so I want to flash som GSI Android 11 and make it go smooth and fast in place of all the Bling, whistle an bells crap Android 13 brings, and the bugging down of the unit with it.


Is "Enable OEM unlocking" toggled on in your developer settings?
 

SwedishForenger

Senior Member
Mar 26, 2021
365
74
Is "Enable OEM unlocking" toggled on in your developer settings?
Yes all of that, and the ADB drivers from the Lenovo rescue program. I can communicate with the bootloader. I can ask for the tablets ID by 'fastboot devices' command, and and also ask it to reboot the tablet with the 'fastboot reboot' command. And the bootloader responds by rebooting the tablet. The drivers are the ones that the Lenovo rescue program uses to restore or flash new updates.

I went into the installed 'Programdata' folder and took the drivers from there.

https://pcsupport.lenovo.com/us/en/downloads/ds101291-rescue-and-smart-assistant-lmsa

How can all fastboot commands work, apart from 'Unlocking the bootloader ???.
 
  • Like
Reactions: GuyInDogSuit

GuyInDogSuit

Senior Member
Jan 4, 2009
5,940
1,363
41
Lancaster, CA
Nintendo Switch
OnePlus 7T
Anyone know of a way to re-enable disabled apps? I can reboot to Android but mere seconds after I unlock the screen, it reboots to recovery. I have dev tools on but it doesn't seem to have debugging and I can't get into it fast enough to toggle it on.
 

SwedishForenger

Senior Member
Mar 26, 2021
365
74
Anyone know of a way to re-enable disabled apps? I can reboot to Android but mere seconds after I unlock the screen, it reboots to recovery. I have dev tools on but it doesn't seem to have debugging and I can't get into it fast enough to toggle it on.
i don't remember exactly, years ago since I used these commands.

adb shell pm list packages -d : display all disabled apps
adb shell pm list packages -3 : apps only I have installed

adb shell pm uninstall -k --user 0 appname -- Exsample:

adb shell pm uninstall -k --user 0 com.google.play
adb shell cmd package install-existing com.google.play

adb shell suspend --user 0 com.google.play
adb shell unsuspend --user 0 com.google.play

adb shell disable com.google.play
adb shell enable com.google.play
 

Top Liked Posts

  • There are no posts matching your filters.
  • 5
    For sure, it would be nice to kill that serial port notification on mine too.
    It's pretty simple, definetly a very annoying message...go to settings, apps, see all apps, click the 3 dot menu at top right, show system, go to android system, notifications, turn off developer messages
    3
    Hmm, resetting with the "Rescue and Smart Assistant" tool from Lenovo doesn't work either.
    We discussed copiously how broken their "smart" assistant is. They seem to have prioritized security, oddly as we can root it fairly easily, over end users being able to restore software problems.

    I have no idea why the process of having root even after reflashing the unmodified bootloader doesn't let updating work without a factory reset, but with Swift Backup I'm able to use root to backup around 95% of everything, put the clean bootloader, factory reset, update, root again and restore nearly everything in around an hour (mostly spent waiting).

    After doing it twice inside a month or so... I'm almost at the point of trying some GSI ROMs instead.
    3
    ok, so ur just pulling the boot img from one of the GSI roms...im just trying to pull the stock boot img...do you happen to know where one can download the stock firmware for this device, this is my 1st lenovo tablet
    LMSA. https://pcsupport.lenovo.com/us/en/downloads/ds101291-rescue-and-smart-assistant-lmsa
    Use this tool. Install and explore the file and folder structure it creates. Interrupt the process before it flashes your tablet for it will erase the files you need from your computer if you don't. Use trial and error here.
    3
    Since the original question was about root, Ill keep this going

    I was able to download the most recent ROM from Lenovo rescue which was super simple, it downloads the ROM first and wont start the flash till you click the button. I did retrieve the stock boot.img, patched it, and flashed it, rebooted and had root. Heres where the many hours of fun started...I realized my wifi wasnt working (good sign something was messed up during flash). I realize the ROM downloaded from the Lenovo Rescue was newer then my old ROM. So I had flashed the newer boot.img over the old ROM (not good). I went back to Lenovo rescue to actually make use of the rescue and flash a full ROM. After completion I became stuck in fastboot mode. I could boot to recovery but not system and every restart or shutdown and restart would go straight to fastboot.

    I did try to manually flash the ROM using what i thought was the right files and order (using flashinfo.txt as the order and MT6768_Android_scatter.txt for the partition names for each image). Everything flashed successfully, but upon reboot I was still stuck in fastboot mode. I tried everything I could think of and even ran the Lenovo Rescue a few times.

    After many hours, I came across this command for fastboot..."fastboot set_active a" which finally allowed me to boot into system. I assume this tablet uses the A/B slot partitions, but I think they only make use of the A for boot? Thats my thought

    So next is too try to patch the correct disc.img for my current rom (which is the latest from Lenovo Rescue) and flash again making sure to flash to the boot_a partition and hopefully everything goes like it should

    Hopefully that command helps someone save many hours if they find themselves stuck in fastboot mode while rooting and/or flashing.
    2
    I created a Root guide for my Lenovo M10 Plus 3rd Gen (TB125FU)

    It is located here