How To Guide [GN2200] simple recovery guide from fastboot + obtain root + more (THIS GUIDE SHOULD BE STICKIED)

Search This thread

dmtec

Member
May 20, 2018
38
18
OnePlus 6T
in this thread i am going to outline the method i used to restore my device to may security patch after completely botching my current install after trying to root, on august security patch.

a major hand to PsYk0n4uT for the suggestions he's posted in response to my problems, giving me the ability to figure out what's really going on here amongst other things.

(this is compatible with metropcs branded devices, therefore is compatible with t-mobile branded devices and so on)

anyways.

  1. download this may OTA i discovered somewhere online. (hint: if download quota is exceeded. make a copy to your gdrive, then put it in a folder. download the folder and you will bypass the quota)
  2. the OTA will contain msmdownloadtool, but it is unusable in it's current form because it's an internal tool. you're gonna want to download this tool off github to help assist in decrypting the .ofp file and flashing it's complete contents over automatically.
  3. extract the OTA zip, and place the tool from github in the same folder. if using linux, install the python requirements and if you're on windows, i would suggest replacing the adb/fastboot executables with current versions. probably shouldn't matter, but i did in this case.
  4. put your phone into fastboot and run the tool. further instructions depending on OS, are on the repository's page.
  5. after flashing i had to switch my active slot over to the prior inactive slot before i could boot.
  6. now that you've got your device downgraded, get through the initial setup, set it up offline, and put your phone into power saving mode so it can't automatically update (just in case)
  7. instead of using DSU sideloader to extract the files we need, we can use the same .ofp file that our images came from and extract its contents with this tool
  8. install magisk, copy your boot image over, patch the boot image, return it back to your computer, and enter fastboot mode.
  9. proceed to flash the boot image, and all 3 vbmeta images. (important: be sure to disable verification and disable verity when flashing your vbmetas)
  10. ???
  11. profit
i hope this can help anyone that's got a paperweight for a device at the moment, and help anyone who wants to root their device without a bunch of possible nonsense. in turn, hoping this can accelerate any possible development with this device.

protip: after getting everything installed and set up, install the systemless debloater module in magisk and download de-bloater from f-droid. "remove" the update service application (com.oplus.romupdate) and the software update tab in settings will now think you're on the latest security patch and will prevent your device from accidentally being updated. unless you want that to happen.

(6/30/2023) - because i'm waiting for someone to chime in about this being android 11, or it being outdated, etc. even if you start from this OTA version, once you're rooted you can use magisk to install an OTA and patch the inactive slot before reboot. if i still had this phone, i would update this guide, but i can only work from what i remember now.
 
Last edited:

PsYk0n4uT

Senior Member
mirrors:



And no problem man. Im glad others are sharing their knowledge and experience here. I've been focused on other things trying to make some progress on the device but still having to learn a lot along the way.
Hopefully we will have custom recovery soon. Looking promising so far and the real devs have given more time than I could possibly ever expect towards a device they don't even own.
For anyone wanting to know more about the people that are doing the leg work check out the team at https://t.me/Android_General_Chat The devs work hard to make these things happen so if you wanna help the cause consider making a contribution to them.
 
Last edited:

Alfa-Q L83r

New member
Nov 3, 2016
3
2
in this thread i am going to outline the method i used to restore my device to may security patch after completely botching my current install after trying to root, on august security patch.

a major hand to PsYk0n4uT for the suggestions he's posted in response to my problems, giving me the ability to figure out what's really going on here amongst other things.

oneplus seems to be weakly supporting this device because i tried to ask them again for the OTA (i mean, it's pulling from somewhere, right) and they told me that i'd need to send it into a service center for repair. what's the point of unlockable bootloaders if user error can't be corrected in some way.

(this is compatible with metropcs branded devices, therefore is compatible with t-mobile branded devices and so on)

anyways.

  1. download this may OTA i discovered somewhere online. (hint: if download quota is exceeded. make a copy to your gdrive, then put it in a folder. download the folder and you will bypass the quota)
  2. the OTA will contain msmdownloadtool, but it is unusable in it's current form because it's an internal tool. you're gonna want to download this tool off github to help assist in decrypting the .ofp file and flashing it's complete contents over automatically.
  3. extract the OTA zip, and place the tool from github in the same folder. if using linux, install the python requirements and if you're on windows, i would suggest replacing the adb/fastboot executables with current versions. probably shouldn't matter, but i did in this case.
  4. put your phone into fastboot and run the tool. further instructions depending on OS, are on the repository's page.
  5. after flashing i had to switch my active slot over to the prior inactive slot before i could boot.
  6. now that you've got your device downgraded, get through the initial setup, set it up offline, and put your phone into power saving mode so it can't automatically update (just in case)
  7. instead of using DSU sideloader to extract the files we need, we can use the same .ofp file that our images came from and extract its contents with this tool
  8. install magisk, copy your boot image over, patch the boot image, return it back to your computer, and enter fastboot mode.
  9. proceed to flash the boot image, and all 3 vbmeta images. (important: be sure to disable verification and disable verity when flashing your vbmetas)
  10. ???
  11. profit
i hope this can help anyone that's got a paperweight for a device at the moment, and help anyone who wants to root their device without a bunch of possible nonsense. in turn, hoping this can accelerate any possible development with this device.

protip: after getting everything installed and set up, install the systemless debloater module in magisk and download de-bloater from f-droid. "remove" the update service application (com.oplus.romupdate) and the software update tab in settings will now think you're on the latest security patch and will prevent your device from accidentally being updated. unless you want that to happen.
BROOOO you are EFFING AWESOME! MUCH LOVE!
 
  • Like
Reactions: dmtec

dmtec

Member
May 20, 2018
38
18
OnePlus 6T
Careful with this. Windows Defender flagged a virus when I tried to download it.
when you tried to download, what exactly? besides the OTA that doesn't have a valid link anymore, everything else I listed is coming straight from github so idk what you're talking about. even the OTA was safe though too, so yeah.

also PsYk0n4uT's links are fine as well. don't spread fud

this is the only sane guide on here for this device to actually produce a viable root method, and i stand by it.
 

roirraW "edor" ehT

Forum Moderator
Staff member
<Moderator Action>: Thread cleaned.

@chakan2, @dmtec, @halloweenm925,

This is for all three of you.

I don't have time to go through each one of your posts in these threads, but I'm going to say exactly one time in this thread, and one time only:
  • If another user's post breaks XDA's rules, then do not respond to the post. ONLY use the Report button on their post.
  • If another user's post doesn't break XDA's rules, but you just don't like it, then ignore it.
  • If you cannot control yourself, and keep yourself from responding and making accusations, then use the Ignore button on the users you can't control yourselves around.
If any of you continue this drama anywhere on XDA, and that includes via PM, then you will likely receive something more than this stern message. Some of you may still get something more than this as some other previous items are still being evaluated.

@roirraW "edor" ehT
 

Top Liked Posts

  • There are no posts matching your filters.
  • 4
    in this thread i am going to outline the method i used to restore my device to may security patch after completely botching my current install after trying to root, on august security patch.

    a major hand to PsYk0n4uT for the suggestions he's posted in response to my problems, giving me the ability to figure out what's really going on here amongst other things.

    (this is compatible with metropcs branded devices, therefore is compatible with t-mobile branded devices and so on)

    anyways.

    1. download this may OTA i discovered somewhere online. (hint: if download quota is exceeded. make a copy to your gdrive, then put it in a folder. download the folder and you will bypass the quota)
    2. the OTA will contain msmdownloadtool, but it is unusable in it's current form because it's an internal tool. you're gonna want to download this tool off github to help assist in decrypting the .ofp file and flashing it's complete contents over automatically.
    3. extract the OTA zip, and place the tool from github in the same folder. if using linux, install the python requirements and if you're on windows, i would suggest replacing the adb/fastboot executables with current versions. probably shouldn't matter, but i did in this case.
    4. put your phone into fastboot and run the tool. further instructions depending on OS, are on the repository's page.
    5. after flashing i had to switch my active slot over to the prior inactive slot before i could boot.
    6. now that you've got your device downgraded, get through the initial setup, set it up offline, and put your phone into power saving mode so it can't automatically update (just in case)
    7. instead of using DSU sideloader to extract the files we need, we can use the same .ofp file that our images came from and extract its contents with this tool
    8. install magisk, copy your boot image over, patch the boot image, return it back to your computer, and enter fastboot mode.
    9. proceed to flash the boot image, and all 3 vbmeta images. (important: be sure to disable verification and disable verity when flashing your vbmetas)
    10. ???
    11. profit
    i hope this can help anyone that's got a paperweight for a device at the moment, and help anyone who wants to root their device without a bunch of possible nonsense. in turn, hoping this can accelerate any possible development with this device.

    protip: after getting everything installed and set up, install the systemless debloater module in magisk and download de-bloater from f-droid. "remove" the update service application (com.oplus.romupdate) and the software update tab in settings will now think you're on the latest security patch and will prevent your device from accidentally being updated. unless you want that to happen.

    (6/30/2023) - because i'm waiting for someone to chime in about this being android 11, or it being outdated, etc. even if you start from this OTA version, once you're rooted you can use magisk to install an OTA and patch the inactive slot before reboot. if i still had this phone, i would update this guide, but i can only work from what i remember now.
    3
    bumping my own thread because people are being real extra after "bricking" their phones trying to get them working again
    2
    Really glad people are still working on this device. I've been away for a while and no longer have access to mine right now so just wanted to say thanks to those of you continuing the efforts
    2
    <Moderator Action>: Thread cleaned.

    @chakan2, @dmtec, @halloweenm925,

    This is for all three of you.

    I don't have time to go through each one of your posts in these threads, but I'm going to say exactly one time in this thread, and one time only:
    • If another user's post breaks XDA's rules, then do not respond to the post. ONLY use the Report button on their post.
    • If another user's post doesn't break XDA's rules, but you just don't like it, then ignore it.
    • If you cannot control yourself, and keep yourself from responding and making accusations, then use the Ignore button on the users you can't control yourselves around.
    If any of you continue this drama anywhere on XDA, and that includes via PM, then you will likely receive something more than this stern message. Some of you may still get something more than this as some other previous items are still being evaluated.

    @roirraW "edor" ehT
    1
    in this thread i am going to outline the method i used to restore my device to may security patch after completely botching my current install after trying to root, on august security patch.

    a major hand to PsYk0n4uT for the suggestions he's posted in response to my problems, giving me the ability to figure out what's really going on here amongst other things.

    oneplus seems to be weakly supporting this device because i tried to ask them again for the OTA (i mean, it's pulling from somewhere, right) and they told me that i'd need to send it into a service center for repair. what's the point of unlockable bootloaders if user error can't be corrected in some way.

    (this is compatible with metropcs branded devices, therefore is compatible with t-mobile branded devices and so on)

    anyways.

    1. download this may OTA i discovered somewhere online. (hint: if download quota is exceeded. make a copy to your gdrive, then put it in a folder. download the folder and you will bypass the quota)
    2. the OTA will contain msmdownloadtool, but it is unusable in it's current form because it's an internal tool. you're gonna want to download this tool off github to help assist in decrypting the .ofp file and flashing it's complete contents over automatically.
    3. extract the OTA zip, and place the tool from github in the same folder. if using linux, install the python requirements and if you're on windows, i would suggest replacing the adb/fastboot executables with current versions. probably shouldn't matter, but i did in this case.
    4. put your phone into fastboot and run the tool. further instructions depending on OS, are on the repository's page.
    5. after flashing i had to switch my active slot over to the prior inactive slot before i could boot.
    6. now that you've got your device downgraded, get through the initial setup, set it up offline, and put your phone into power saving mode so it can't automatically update (just in case)
    7. instead of using DSU sideloader to extract the files we need, we can use the same .ofp file that our images came from and extract its contents with this tool
    8. install magisk, copy your boot image over, patch the boot image, return it back to your computer, and enter fastboot mode.
    9. proceed to flash the boot image, and all 3 vbmeta images. (important: be sure to disable verification and disable verity when flashing your vbmetas)
    10. ???
    11. profit
    i hope this can help anyone that's got a paperweight for a device at the moment, and help anyone who wants to root their device without a bunch of possible nonsense. in turn, hoping this can accelerate any possible development with this device.

    protip: after getting everything installed and set up, install the systemless debloater module in magisk and download de-bloater from f-droid. "remove" the update service application (com.oplus.romupdate) and the software update tab in settings will now think you're on the latest security patch and will prevent your device from accidentally being updated. unless you want that to happen.
    BROOOO you are EFFING AWESOME! MUCH LOVE!