To sum it up:
0a. Reflash phone with the original Uniherzt image from their google disk
https://drive.google.com/drive/folders/0By1nhWOmuw2KdDhTUlFOZHpXQjg
using their SPflash tool (works under Windows (on Linux you may try Wine), the MTK driver needs to be properly installed and phone detected in device manager - everyting is on Unihertz gdrive)
- 2020110320_g63v71c2k_dfl_eea.zip at that time for EU AtomL
The SPflash tool is not very intuitive, generally it is enought to pres Scan and wait until it detects the phone (phone reboot needed), then press "Start all".
This way you'll make sure you can get phone from any bricked state, also the phone software will be at known version and clean.
0b. On the phone switch on developer mode, switch on oem unlocking, adb reboot bootloader, fastboot flashing unlock - othewise it is not possible to flash anything. (now the message the phone is not trusted starts to appear).
1. Install LATEST Magisk 23.0 apk on the phone (
https://github.com/topjohnwu/Magisk)
2. Extract "boot.img" from Unihertz image
3. Transfer "boot.img" onto your SD card (or whatever - adb push, mtp).
4. Use Magisk on your phone to install it into your "boot.img" (see magisk github doc)
5. Transfer the modified "boot.img" (different name! magisk_patched*.img) back onto your computer.
6. Boot your phone into bootloader - adb reboot bootloader
7. Disable vmbeta verification:
fastboot flash --disable-verification --disable-verity vbmeta vbmeta.img
fastboot flash --disable-verification --disable-verity vbmeta_system vbmeta_system.img
fastboot flash --disable-verification --disable-verity vbmeta_vendor vbmeta_vendor.img
8. "fastboot flash boot boot.img" to flash the magisk modified "boot.img".
fastboot reboot
9. Open Magisk, you should see it is installed (not only in ramdisk) and there is a menu for superuser capabilities.
10. adb shell; su -; allow