[Guide] ROOT Pixel 3 XL Android 9.0.0 (Pie) Unlock/Lock Bootloader + Install Stock Images/TWRP Recovery/Systemless Root

[Homeboy76]

[Guide] ROOT Pixel 3 XL Android 9.0.0 (Pie) Unlock/Lock Bootloader + Install Stock Images/Custom kernels/TWRP Recovery/Systemless Root
August 2019 Security Patch​

Introduction

1. This Guide is for Pixel 3 XL owners that want to Root their phone, and enjoy the benefits of rooting it without installing a Custom ROM. However, for those that just can't live without a Custom ROM, take a look at 'Custom ROMs for Pixel 3 XL'.
2. This Guide also works for Pixel 3 owners: If, they download the correct files for their phone.

Update(s)

1. Factory/OTA Images - 09/03
2. Magisk Stable - Magisk-22.0 02/23
3. Magisk Beta - Magisk-22.0 02/23
4. Magisk Canary - Magisk-22001
5. TWRP - twrp-3.5.0_9-0-crosshatch.img/zip 12/28
6. SafetyNet - SafetyNetFix v1.1.1 01/16
7. SDK Platform-tools - r31.0.0 03/01
8. Custom Kernels
   • No Updated Custom Kernels
9. Custom ROMs
   • No Updated Custom ROMS

Disclaimers

1. I assume no responsibility for the malfunctioning/bricking of your phone.
2. The order of listed items i.e., Custom Kernels, Custom ROMS, etc. Does not indicate my preference for them. It is your responsibility to do the research before selecting an item.

Prerequisites

1. A Pixel 3 XL phone with an unlocked bootloader.
2. The latest Android 9.0.0 (Pie) Factory or OTA Image: "crosshatch" for Pixel 3 XL
   • Factory Image
     • 9.0.0 (PQ3A.190801.002, Aug 2019)
   • OTA Image
     • 9.0.0 (PQ3A.190801.002, Aug 2019)
3. Computer - With the latest SDK Platform-Tools: r31.0.0 installed.
   • Important: Update Platform Tools, regularly, for optimal performance.

Other Guides

• Pixel 3 XL Android 10.0 (Q)

Credits/Thanks/Recognitions

1. Heisenberg RETIRED FORUM MODERATOR - He set the standard for creating, detailed, Guides.
2. Those I may have, inadvertently, forgotten.

Index
(NOTE: These are not steps 1-12, they are individual sets of instructions).

1. Open a Command Prompt/Boot Fastboot Mode/Boot Recovery
   
   
   

   • Open Command Prompt on Computer
     1. Option 1 - Open File Explorer, click the platform-tools folder, press shift, right click, and select open command prompt here.
     2. Option 2 - Open File Explorer, click the platform-tools folder, highlight the directory information in the address bar or click the folder (left side of address bar) to highlight it type cmd and press enter.
     3. Notes:
        • If your computer only has 'open powershell here' in the context menu. Use option 2.
        • If you do not want to open a Command Prompt every time you want to use fastboot, add the path to the Platform-tools folder to Windows environment variables.
   • Boot fastboot mode:
     • Power off phone, press and hold the power and volume down buttons until you see Start.
   • Boot Recovery
     • Power off phone, press and hold the power and volume down buttons until you see Start. Use volume up/down button until you see Recovery mode. Press power button.
2. Test fastboot
   
   
   

   • Enable Developer Options - Tap Settings > About phone > Build number 7 times. Until you should see 'you are a Developer'.
   • Enable USB Debugging - Tap Settings > System > Advanced > Developer options >
     Enable USB Debugging.
   • Open a Command Prompt on your computer in the Platform-tools folder.
   • Boot fastboot mode on your phone (#1)
   • Connect the phone to the Computer.
   • At the prompt type: fastboot devices to verify communication with phone. It should return your phone's serial number.
3. Unlock Bootloader/Return Phone to Stock/Lock Bootloader
   
   
   

   • Unlock Bootloader
     
     
     

     1. This will erase all user data from the device!
     2. Backup your data
     3. Activate Developer Options: Tap Settings > About Phone > Tap Build Number until you see you are a Developer. Tap back > System > Advanced > Developer Options. Enable OEM Unlock and, USB Debugging.
     4. Boot fastboot mode
     5. Connect the phone to the Computer with USB cord.
     6. Open a Command Prompt on your computer and type fastboot flashing unlock and press enter.
     7. You should see a request for confirmation on your phone, use the volume keys to scroll and the power key to select.
     8. Allow the process to complete and then type fastboot reboot at the Command Prompt and press enter.
     9. When your phone reboots disconnect your usb cable.
     10. After unlocking your bootloader, you'll see a warning: You will see this warning until, you relock the bootloader.
   • Return Phone to Stock
     
     
     

     1. Backup your data/Internal storage
     2. Settings > System > Advanced > Reset Options > Erase all data (factory reset)
     3. Log in
     4. Set up phone
   • Lock Bootloader
     
     
     

     1. Important: Do not relock your bootloader until you have returned the device to Stock..
     2. This will erase all user data from the device!
     3. Boot fastboot mode
     4. Open a Command Prompt and type this at the Prompt: fastboot flashing lock
     5. You should see a request for confirmation on your phone, use the volume keys to scroll and the power key to select.
     6. Allow the process to complete, then type this at the Command Prompt: fastboot reboot
     7. Enable Developer Options: Settings > About phone > Tap Build number 7 times. Until you see 'you are a developer'.
     8. Tap Back > Developer options and toggle OEM Unlock off.
4. Install Factory Image keep or wipe data
   
   
   

   • Important Notes:
     1. Install the latest version of SDK Platform-Tools on your computer before you start installing the factory image.
     2. Backup your data
     3. Download the appropriate Factory Image: "crosshatch" for Pixel 3 XL to your Computer.
     4. Extract the factory Image to the platform-tools folder or the folder that has fastboot in it.
   • Keep Data
     
     
     

     1. Open the folder you extracted the Factory Image to and Edit the flash-all.bat file to remove -w from this command: fastboot -w update image-crosshatch-aa9a.999999.999.zip
     2. If you do not remove the -w your internal storage will be erased.
     3. After, you have edited the flash-all.bat file. Copy/Move these files to the Platform-tools folder:
        • bootloader-crosshatch-....img
        • flash-all.bat
        • image-crosshatch-....zip
        • radio-crosshatch-....img
     4. Boot fastboot mode
     5. Connect the phone to the Computer with USB cord.
     6. Open a Command Prompt in the Platform-tools folder on your computer.:
     7. Type flash-all at the Command Prompt and press enter.
     8. Reboot
     9. Do #7, #8 or #9 to root.
   • Wipe Data
     
     
     

     1. Open the folder you extracted the Factory Image to and Verify the flash-all.bat file has the -w in this command: fastboot -w update image-crosshatch-aa9a.999999.999.zip
     2. This will erase internal storage.
     3. After, you have verified the flash-all.bat file has the -w. Copy/Move these files to the Platform-tools folder:
        • bootloader-crosshatch-....img
        • flash-all.bat
        • image-crosshatch-....zip
        • radio-crosshatch-....img
     4. Boot fastboot mode
     5. Connect the phone to the Computer with USB cord.
     6. Open a Command Prompt in the Platform-tools folder on your computer.:
     7. Type flash-all at the Command Prompt and press enter.
     8. Reboot
     9. Do #7, #8 or #9 to root.
5. ADB Sideload
   
   
   

   • Stock Recovery
     
     
     

     • Full OTA Images for Nexus and Pixel Devices - Updating instructions
   • Custom Recovery TWRP
     
     
     

     1. Setup
        • -- On Your Phone
          1. The latest T.W.R.P. Custom Recovery
          2. Enable USB debugging
        • -- On Your Computer
          • Put the file you want to sideload in the Platform-tools folder.
     2. Sideload
        • -- On Your Phone
          1. Boot fastboot mode
          2. Use Volume Up/Down until you see Recovery mode
          3. When twrp boots, tap Advanced
          4. Tap ADB Sideload.
        • -- On Your Computer
          1. At the Command Prompt type:
             adb sideload <filename>.zip
          2. Ex., adb sideload example.zip
     3. When the install is finished, reboot system.
6. Extract/Flash boot.img
   
   
   

   • Extract boot.img
     
     
     

     1. Use a File Explorer to extract the boot.img from the Factory Image.
     2. Extract the Factory Image file (crosshatch-pda1a.999999.999-factory-99a9a99a.zip) to a folder.
     3. Open the folder and, extract the Image file (image-crosshatch-aa9a.999999.999.zip).
   • Flash boot.img
     
     
     

     1. Flashing this file removes root.
     2. Open the folder you extracted the 'image file' to and copy the boot.img file to the platform-tools or to the folder that has fastboot in it.
     3. Boot fastboot mode
     4. Connect the phone to the Computer
     5. Open a Command Prompt and type the following command at the prompt:
        fastboot flash boot --slot all boot.img
     6. Reboot
7. Install T.W.R.P./Root/Reroot with Magisk and Pass SafetyNet.
   
   
   

   • Important notes:
     1. Set Pin before installing TWRP: Settings > Security & location >Screen lock > Pin
     2. Backup your data
     3. Download files - The listed files are used with #7, and #8.
        • T.W.R.P
          1. twrp-3.5.0_90-0-crosshatch.img - Download to your computer
          2. twrp-installer-3.5.0_90-0-crosshatch.zip - Download to your phone
        • Magisk App - Download to your phone
          • The latest Magisk Beta, or Stable zip. - Download to your phone
          • The latest Magisk Canary - Download to your phone
            
        • Custom Kernels - Download to your phone
          • No Updated Custom Kernels
        • Kernel Manager - Download to your phone
          • EX Kernel Manager
     4. Boot fastboot mode
     5. Connect the phone to the Computer with USB cord.
     6. Copy twrp-3.5.0_90-0-coral.img to the platform-tools folder or folder that has fastboot in it and rename it twrp.img.
     7. Open a Command Prompt in the Platform-tools folder on your computer.
     8. At the Command Prompt type: fastboot boot twrp.img and press enter.
     9. When TWRP boots, disconnect the phone from computer.
     10. If requested, swipe to allow modifications.
     11. Tap Install select twrp-installer-3.5.0_90-0-coral.zip, Swipe Slider to install
     12. Reboot Recovery
   • Root/Reroot
     
     
     

     1. Note(s):
        • If you are rerooting, tap Install, select Magisk's uninstaller.zip, Swipe the slider to install.
        • Some Custom Kernels can be updated by flashing via Kernel Manager without losing root. Check the Custom Kernel thread (OP - Installation/Instructions) to find out which Custom Kernels.
     2. With Custom Kernel (Optional)
        • No Updated Custom Kernels
     3. Without Custom Kernel
        • Tap Install, select Magisk Beta/Canary/Stable zip.
        • Swipe Slider to Install
        • Reboot System
8. Boot T.W.R.P./Root/Reroot with Magisk and Pass SafetyNet.
   
   
   

   • Backup your data
   • Download files - See #7 - Skip the twrp-installer
   • Boot fastboot mode
   • Connect the phone to the Computer with USB cord.
   • Copy twrp-3.5.0_90-0-coral.img to the platform-tools folder or folder that has fastboot in it and rename it twrp.img.
   • Open a Command Prompt on your computer.
   • At the Command Prompt type: fastboot boot twrp.img and press enter.
   • When TWRP boots, disconnect the phone from computer.
   • If requested, swipe to allow modifications.
   • Root/Reroot
     
     
     

     • Note: If you are rerooting, tap Install, select the latest Magisk's uninstaller.zip, Swipe the slider to install.
     • With Custom Kernel (Optional)
       • No Updated Kernels
     • Without Custom Kernel
       • Tap Install, select Magisk-Beta/Canary/Stable zip.
       • Swipe Slider to Install
       • Reboot System
9. Root/Reroot with Magisk and Pass SafetyNet.
   
   
   

   • Important Note(s):
     
     
     

     1. When doing a major upgrade i.e., Android 10 (Q) to Android 11 (R): I recommend doing a clean install. What is a clean install?
        • Doing a Factory reset prior to installing, major, update.
        • Using flash-all.bat file without removing the -w.
     2. Obtaining ROOT using the Magisk Beta, Canary or stable App to patch the Stock boot.img.
   • Download files:
     
     
     

     1. Magisk App - Download to your phone
        • Magisk Beta/Stable App
        • Magisk Canary App
     2. Custom kernels - Download to your phone
        • None
     3. Kernel Managers - Download to your phone
        • EX Kernel Manager
   • Patching boot.img
     
     
     

     1. Do #6 - Extract boot.img
     2. Install Magisk (Beta, Canary or Stable) App
     3. Open Magisk App
     4. Depending on the version of Magisk App installed: Set the Update Channel to Beta, Canary or Stable.
     5. Tap Install (next to Magisk)
     6. Tap, Select and Patch a File
     7. Select the boot.img file you extracted from the latest factory image.
     8. Tap the ✓ (Check Mark)
     9. Tap Let's Go
     10. When you see done, the boot.img has been patched (magisk_patched_xxxxxx.img), and stored in the download folder.
     11. The phone will reboot.
     12. Copy the patched boot.img file to your computer's Platform-tools folder or the folder that has fastboot.exe in it.
     13. Boot fastboot mode (#1)
     14. Connect the phone to the Computer with USB cord.
     15. Open a Command Prompt (#1) in the folder you copied the patched boot.img to.
     16. Type fastboot flash boot "name of patched boot".img without the quote marks at the Prompt and press enter.
     17. Type fastboot reboot at the Prompt and press enter.
     18. Important Notes:If your phone boot loops try one of the following options:
         • Flash the 'stock' boot.img to both slots: fastboot flash boot boot.img --slot all
         • Boot Safe Mode - Press Power Off button ==> Press Power Off until you see boot Safe Mode ==> Press Ok.
     19. Pass SafetyNet: #12 Mods - Magisk
10. Set Magisk App Update Chanel/Update Magisk
    
    
    

    • Set Magisk App Update Channel - Stable/Beta/Canary/Custom
      
      
      

      • Open Magisk App > Tap menu icon > Settings > Update Channel > Select Stable, Beta Canary or Custom.
    • Update Magisk
      
      
      

      1. When Magisk App notifies you of an update:
      2. Tap install.
      3. Select, Direct Install (Recommended)
      4. When it finishes installing
      5. Tap, Save Log
      6. Log location: /storage/emulated/0/MagiskManager/logs/install_log_...
      7. Tap, Reboot
      8. Done!
11. Custom ROMs for Pixel 3 XL
    
    
    

    • Need help with a Custom ROM?
      1. Follow the Installation Instructions in the OP of the Custom ROM you are trying to install.
      2. If you have a problem Installing the ROM, Search the thread of the Custom ROM you want to install for solutions to problem before posting a request for help on their thread.
    • ROMS
      
      
      

      1. Alpha/Beta
         
         
         

         • None
      2. Official
         
         
         

         • None
      3. Unofficial
         
         
         

         • None
12. Mods
    
    
    

    • Magisk
      
      
      

      1. Audio_Compatibility_Patch...
      2. Audio_Modification_Library...
      3. ViPER4Android_FX...
      4. [MODULE] MagiskHide Props Config - SafetyNet, prop edits, and more - v5.3.6 by Didgeridoohan
      5. MAGISK MODULE ❯ Universal SafetyNet Fix 1.1.0
    • Tulsadiver's
      
      
      

      1. 3 Minit Battery Mod December update by Tulsadiver
      2. Pixel Launcher Mods-ADB by Tulsadiver
      3. Tulsadiver Mods - ADB Installer by Tulsadiver
13. Other: TWRP Backup/TWRP
    
    
    

    • To Internal Storage
      
      
      

      1. Boot Recovery
      2. When twrp boots, tap Backup and select Partitions to backup
         • Boot
         • System Image
         • Data
      3. Tap Select Storage ==> internal storage
      4. Tap ok
      5. Swipe Slider to backup
      6. Your backup will be stored in /Storage/TWRP/...
    • To OTG-USB Storage
      
      
      

      1. Boot Recovery
      2. When twrp boots, tap Backup and select Partitions to backup
         • Boot
         • System Image
         • Data
      3. Insert USB-OTG
      4. Tap Select Storage ==> OTG-USB
      5. Tap ok
      6. Swipe Slider to backup
      7. Your backup will be stored in /Storage/TWRP/...

 

[Homeboy76]

Reserved 1

 

[Homeboy76]

Reserved 2

 

[Homeboy76]

Reserved 3

 

[State.of.mind]

Nice guide. It will be very resourceful. I am going to wait to root my 3XL. I tried to follow a couple of guides, but I end up in a boot loop.

 

[bamemanxxa3416]

Worked great and thanks for the detailed guide

Sent from my [device_name] using XDA-Developers Legacy app

 

[jaxenroth]

Nice. Root up and running w/o issues. Even got rid of the gesture navigation.

 

[Maty360414]

can you update the OS via OTA with once you root the phone?

 

[State.of.mind]

Nice. Root up and running w/o issues. Even got rid of the gesture navigation. View attachment 4624655

How do you get past "No Valid Slot To Boot"

 

[JeromeLeung]

How do you get past "No Valid Slot To Boot"

Read Section 9.A.3. Need to switch your Magisk Manager over to Canary in order to install Magisk 17.4. Stable channel is v17.2 which is what is causing you to see that error.

 

[State.of.mind]

Read Section 9.A.3. Need to switch your Magisk Manager over to Canary in order to install Magisk 17.4. Stable channel is v17.2 which is what is causing you to see that error.

Thanks. I tried that method. I'm not sure what's causing it. Could it be that I am not typing "fastboot reboot" at the end of the flash? I normally just press start.

 

[bamemanxxa3416]

Verify the URL you typed in settings for Canary setup, a typo could have that result maybe. I followed the same instructions and it went right through

Sent from my [device_name] using XDA-Developers Legacy app

 

[Golf c]

Updated from 17.3 to 17.3 hotfix. Direct install method. No problems

 

[jaxenroth]

How do you get past "No Valid Slot To Boot"

Set magisk to custom, add this url https://raw.githubusercontent.com/topjohnwu/magisk_files/master/canary_builds/release.json
than you should have option to update magisk. patch boot.img and flash.

 

[UltraM8]

Anyone already rooted here? If so pm me pls, I have some questions regarding audio that requires root.

 

[lawtalking]

I rooted fine this morning, but am getting a "couldn't install a system update" error message. I know otas won't work on a rooted phone, but I do not see any factory images for a new patch or any discussion of a new ota. Anyone not rooted get an update?

 

[seagypsy59]

I rooted fine this morning, but am getting a "couldn't install a system update" error message. I know otas won't work on a rooted phone, but I do not see any factory images for a new patch or any discussion of a new ota. Anyone not rooted get an update?

It happened to me right after unlocking the bootloader. I let it update because I was curious. I have a Verizon sim in the unlocked variant. It updated the build number to the Verizon version. I pulled the sim, flashed back to Google factory image. Rooted the phone, got some things set up, put the Sim back in, update failed. Screw Verizon!

 

[masri1987]

flash-all bat gives me errors that it cannot find system.img and other files, despite the fact that it's there?

 

[ridobe]

flash-all bat gives me errors that it cannot find system.img and other files, despite the fact that it's there?

Show me a picture of your folder where you are launching the flash-all.

Sent from my crosshatch using XDA Labs

 

[masri1987]

Show me a picture of your folder where you are launching the flash-all.

Sent from my crosshatch using XDA Labs

It has the nerve to tell me that "image-crosshatch-pd1a.180720.030.zip" could not be found in the directory despite it being right there.
This is a common trend for me trying to execute this.

---------- Post added at 08:22 PM ---------- Previous post was at 08:11 PM ----------

Show me a picture of your folder where you are launching the flash-all.

Sent from my crosshatch using XDA Labs

and then when i do get it to recognize the image.zip file
I get this result instead

Update:
So I updated my platform tools and it's working now.
Now to try to root again :|

Final Update:
Updated my entire ADB setup despite it being setup in July, ran the factory image flash-all file, wiped everything, rerooted and i'm back up and running successfully.
Something was missing from my ADB\platform tools setup that the pixels depend on.