Allright, I took the plunge yesterday evening because I was already 2 updates behind.
So, updated Magisk first to v23 (app+module), unrooted and ran 2 OTA's in sequence. First OTA took me to 12.0.4.0_QJZEUXM, second OTA took me to 12.0.1.0_RJZEUXM. In advance I had already downloaded the complete ROM's from the Xiaomi website, patched the boot.img and transferred this to my SD card.
OTA's and re-rooting went fine (using my own guide in this topic
), albeit that apparantly the safetynet now seems to fail. Has anyone else have this experience?
----------
Edit: after some searching on google it appears Google has changed the attestation of these devices. Anyway, I've managed to get the device to pass after tweaking some settings:
1) Enabling Magisk hide in the Magisk app helped me pass the basic integrity test. Apparantly hiding Magisk is disabled by default now, which I had missed at first.
2) Next downloading the latest version of Safetynetfix by KDragon. Latest version can be found here:
https://github.com/kdrag0n/safetynet-fix/releases . Installation instructions and the ins and outs of how the attestation works and how KDragon managed the work around is described here:
https://www.thecustomdroid.com/fix-safetynet-hardware-attestation-guide/ , a must read!
3) Install the aforementioned zip file in Magisk and reboot the phone.
4) Attestation is reverted back from Hardware to Basic and all passes ok now!
This is working for me on a
JOYEUSE device.