[Guide] Root US OnePlus 8T KB2005 Unlocked

Search This thread
D

Deleted member 11043203

Guest
The folks on the oneplus forum are posting a lot of bugs with this update. I'm skipping it.

Only bug I have is after closing out music apps. It still loads it randomly and starts playing. Mainly just in quick settings even with the qs music control off or on
 

kjslabber

Senior Member
Mar 8, 2015
212
39
67
Northeast Ohio
OnePlus 8T
Other backups

Thanks to posts from @northmendo @TheUnkn0wn @FullOfHell @Keinta15 I have managed to get root.

I will post everything I did thoroughly along with the output to help any others who might have trouble

This is my current configuration:
About Phone > Build Number: Oxygen OS 11.0.1.2.KB05AA
About Phone > Android Version > Build Number: KB2005_15_201015

1. download the latest canary build for magisk here
2. download this "semi-broken" TWRP here
3. hook your phone to your PC and issue the following commands (adb devices & fastboot devices to make sure your PC recognizes your device each time)
- adb devices
- adb reboot bootloader
- fastboot devices
Code:
D:\android\OnePlus8T\platform-tools>adb devices
List of devices attached
********        device

D:\android\OnePlus8T\platform-tools>adb reboot bootloader

D:\android\OnePlus8T\platform-tools>fastboot devices
********       fastboot
- fastboot boot recovery.img
Code:
D:\android\OnePlus8T\platform-tools>fastboot boot recovery.img
Sending 'boot.img' (64964 KB)                      OKAY [  1.411s]
Booting                                            OKAY [  0.080s]
Finished. Total time: 1.559s

4. at this point your phone will have TWRP flickering\flashing every 2-3 secnonds
5. issue the following commands (adb devices to make sure the PC sees your device)
- adb devices
- adb shell
- dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
- dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
- exit
Code:
D:\android\OnePlus8T\platform-tools>adb devices
List of devices attached
********        recovery

D:\android\OnePlus8T\platform-tools>adb shell
OnePlus8T:/ # dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
196608+0 records in
196608+0 records out
100663296 bytes (96 M) copied, 0.197168 s, 487 M/s
OnePlus8T:/ # dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
196608+0 records in
196608+0 records out
100663296 bytes (96 M) copied, 0.189132 s, 508 M/s
OnePlus8T:/ # exit

6. pull the boot images from your phone to your PC and then reboot with these commands
- adb pull /sdcard/boot_a.img boot_a.img
- adb pull /sdcard/boot_b.img boot_b.img
Code:
D:\android\OnePlus8T\platform-tools>adb pull /sdcard/boot_a.img boot_a.img
/sdcard/boot_a.img: 1 file pulled, 0 skipped. 41.3 MB/s (100663296 bytes in 2.325s)

D:\android\OnePlus8T\platform-tools>adb pull /sdcard/boot_b.img boot_b.img
/sdcard/boot_b.img: 1 file pulled, 0 skipped. 41.5 MB/s (100663296 bytes in 2.314s)

D:\android\OnePlus8T\platform-tools>adb reboot

7. copy the boot_a.img from your PC (same folder as fastboot) to the phone
8. install magisk and launch magisk
9. select Magisk Install > Select and Patch a File
- navigate to the boot_a.img on your phone and click Let'g Go
10. magisk will patch your boot_a.img and place the patched boot image in your downloads folder
11. copy the magisk_patched.img to your PC (fastbot location)
- I renamed mine to magisk_patched_a.img becuase I patched both boot_a.img and boot_b.img just in case
12. issue the following commands (adb devices & fastboot devices to make sure your PC recognizes your device each time)
- adb devices
- adb reboot bootloader
- fastboot devices
- fastboot boot magisk_patched_a.img
Code:
D:\android\OnePlus8T\platform-tools>adb devices
List of devices attached
********        device

D:\android\OnePlus8T\platform-tools>adb reboot bootloader

D:\android\OnePlus8T\platform-tools>fastboot devices
********       fastboot

D:\android\OnePlus8T\platform-tools>fastboot boot magisk_patched_a.img
Sending 'boot.img' (98304 KB)                      OKAY [  2.122s]
Booting                                            OKAY [  0.079s]
Finished. Total time: 2.289s

13. your phone will now boot temporarily running the patched magisk booted image
- this boot will take longer than normal
- this boot will also stay on a black screen after the bootanimation (give this some time and it will bring up your lock screen)
14. once booted this will be your temporary root
15. launch magisk and select Magisk Install > Direct Install (recommended)
16. reboot and enjoy



It's not a bad idea to backup your modems image and your persist image while you are using this semi-broke twrp and adb. The images to backup are posted here in the OP of this thread, https://forum.xda-developers.com/oneplus-8t/how-to/guide-how-to-root-oneplus8t-kb2001-t4178675. Then use adb pull command to extract and save images.
 

dreisus

Senior Member
Sep 13, 2011
272
33
Has anyone been able to successfully download and update the latest update. Tried unrooting didn't work. Switched slots and just received Qualcomm crash dump
 
D

Deleted member 11043203

Guest
you have to DD YOUR current booted kernel and patch it, boot it, and direct install it. If you get lucky booting another person's boot image, congratulations, but just DD it yourself from your booted up os and have no probs
 

Scrambler77

Member
Nov 3, 2020
18
0
you have to DD YOUR current booted kernel and patch it, boot it, and direct install it. If you get lucky booting another person's boot image, congratulations, but just DD it yourself from your booted up os and have no probs

Done it. Dumped my boot_a.img and bood_b.img images... patched both with Magisk and booted with fastboot.
Fastboot hangs on "fastboot mode" logo with both images.

I'll try again later.
 
D

Deleted member 11043203

Guest
Done it. Dumped my boot_a.img and bood_b.img images... patched both with Magisk and booted with fastboot.
Fastboot hangs on "fastboot mode" logo with both images.

I'll try again later.
Be sure to only flash one patched image and only boot the one that is the current booted slot. Remember it should hang about 20 seconds, so wait for it. That behavior is indicative of you booting the wrong boot for the wrong booted slot.
 

Scrambler77

Member
Nov 3, 2020
18
0
Be sure to only flash one patched image and only boot the one that is the current booted slot. Remember it should hang about 20 seconds, so wait for it. That behavior is indicative of you booting the wrong boot for the wrong booted slot.

I'm sorry... i surely was doing something wrong. Done it again and it worked... I was probably using the wrong boot image!
Many thanks!
 

Top Liked Posts

  • There are no posts matching your filters.
  • 3
    Thanks to posts from @northmendo @TheUnkn0wn @FullOfHell @Keinta15 I have managed to get root.

    I will post everything I did thoroughly along with the output to help any others who might have trouble

    This is my current configuration:
    About Phone > Build Number: Oxygen OS 11.0.1.2.KB05AA
    About Phone > Android Version > Build Number: KB2005_15_201015

    1. download the latest canary build for magisk here
    2. download this "semi-broken" TWRP here
    3. hook your phone to your PC and issue the following commands (adb devices & fastboot devices to make sure your PC recognizes your device each time)
    - adb devices
    - adb reboot bootloader
    - fastboot devices
    Code:
    D:\android\OnePlus8T\platform-tools>adb devices
    List of devices attached
    ********        device
    
    D:\android\OnePlus8T\platform-tools>adb reboot bootloader
    
    D:\android\OnePlus8T\platform-tools>fastboot devices
    ********       fastboot
    - fastboot boot recovery.img
    Code:
    D:\android\OnePlus8T\platform-tools>fastboot boot recovery.img
    Sending 'boot.img' (64964 KB)                      OKAY [  1.411s]
    Booting                                            OKAY [  0.080s]
    Finished. Total time: 1.559s

    4. at this point your phone will have TWRP flickering\flashing every 2-3 secnonds
    5. issue the following commands (adb devices to make sure the PC sees your device)
    - adb devices
    - adb shell
    - dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
    - dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
    - exit
    Code:
    D:\android\OnePlus8T\platform-tools>adb devices
    List of devices attached
    ********        recovery
    
    D:\android\OnePlus8T\platform-tools>adb shell
    OnePlus8T:/ # dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
    196608+0 records in
    196608+0 records out
    100663296 bytes (96 M) copied, 0.197168 s, 487 M/s
    OnePlus8T:/ # dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
    196608+0 records in
    196608+0 records out
    100663296 bytes (96 M) copied, 0.189132 s, 508 M/s
    OnePlus8T:/ # exit

    6. pull the boot images from your phone to your PC and then reboot with these commands
    - adb pull /sdcard/boot_a.img boot_a.img
    - adb pull /sdcard/boot_b.img boot_b.img
    Code:
    D:\android\OnePlus8T\platform-tools>adb pull /sdcard/boot_a.img boot_a.img
    /sdcard/boot_a.img: 1 file pulled, 0 skipped. 41.3 MB/s (100663296 bytes in 2.325s)
    
    D:\android\OnePlus8T\platform-tools>adb pull /sdcard/boot_b.img boot_b.img
    /sdcard/boot_b.img: 1 file pulled, 0 skipped. 41.5 MB/s (100663296 bytes in 2.314s)
    
    D:\android\OnePlus8T\platform-tools>adb reboot

    7. copy the boot_a.img from your PC (same folder as fastboot) to the phone
    8. install magisk and launch magisk
    9. select Magisk Install > Select and Patch a File
    - navigate to the boot_a.img on your phone and click Let'g Go
    10. magisk will patch your boot_a.img and place the patched boot image in your downloads folder
    11. copy the magisk_patched.img to your PC (fastbot location)
    - I renamed mine to magisk_patched_a.img becuase I patched both boot_a.img and boot_b.img just in case
    12. issue the following commands (adb devices & fastboot devices to make sure your PC recognizes your device each time)
    - adb devices
    - adb reboot bootloader
    - fastboot devices
    - fastboot boot magisk_patched_a.img
    Code:
    D:\android\OnePlus8T\platform-tools>adb devices
    List of devices attached
    ********        device
    
    D:\android\OnePlus8T\platform-tools>adb reboot bootloader
    
    D:\android\OnePlus8T\platform-tools>fastboot devices
    ********       fastboot
    
    D:\android\OnePlus8T\platform-tools>fastboot boot magisk_patched_a.img
    Sending 'boot.img' (98304 KB)                      OKAY [  2.122s]
    Booting                                            OKAY [  0.079s]
    Finished. Total time: 2.289s

    13. your phone will now boot temporarily running the patched magisk booted image
    - this boot will take longer than normal
    - this boot will also stay on a black screen after the bootanimation (give this some time and it will bring up your lock screen)
    14. once booted this will be your temporary root
    15. launch magisk and select Magisk Install > Direct Install (recommended)
    16. reboot and enjoy
    2
    We have root!
    All you have to do is follow these few steps and have a working adb / fastboot installation
    1 Download this patched boot image -
    https://www.androidfilehost.com/?fid=10763459528675569219
    2. Reboot your phone to the bootloader
    Code:
    adb reboot bootloader
    3. Boot from the patched image
    Code:
    fastboot boot magisk_patched.img
    4. Make sure you have the latest Magisk Manager Canary and do a direct install to patch your internal boot image on both slots.
    Latest Magisk Manager -> https://raw.githubusercontent.com/topjohnwu/magisk_files/canary/app-debug.apk
    Done!

    It seems like a lot of people are still having issues. If this doesn't work for you, then my boot image is slightly different than yours. You can follow the steps from this post to pull your stock boot image. After you do that you can just patch your stock image with Magisk Canary. Pull the patched image from your phone and use it in step 3 above.

    Special thanks to SAKO4444GODZ for pulling the stock boot img first
    2
    Here's a semi-broken TWRP that allows su access through adb: https://drive.google.com/file/d/1dRXJj7HZcqlNsHlVcNH0qR3sNx_uBA__
    DO NOT FLASH, ONLY USE WITH BOOT COMMAND!
    Code:
    fastboot boot recovery.img
    adb shell
    dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
    dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
    exit
    adb pull /sdcard/boot_a.img boot_a.img
    adb pull /sdcard/boot_b.img boot_b.img

    I borked my boot_a by flashing it with boot_b (boot_b was broken on my device), so I was unable to obtain a working boot_a.img. If someone could kindly share their KB2005 boot_a.img that would be nice.
    2
    If anybody is still having issues, I wrote a quick guide here that should work for every variant and every rom release, and only requires adb and fastboot. It uses your existing boot.img so you don't have to go hunting for any packages.
    1
    D
    Deleted member 11043203
    I decided to take the risk and flashed the patched recovery from the EU 2003 version, it worked and I have root adb shell. I'm about to extract the 'boot.img'.
    Funny I tried this too

    Didn't work