How To Guide Root achieved! Here's how to root the Red Magic 6 and Red Magic 6 Pro

Search This thread
the thing is... after wipe data same thing happened, nothing is solved, it just stuck here
177993910_807674610186945_3052667746436745170_n.jpg
 

adwinp

Senior Member
Jun 22, 2008
2,015
316
urandom
Can someone with the device, with a (re)locked bootloader, please check & confirm, whether the following process works:
1: delete all fingerprints & disable unlocking via fingerprint (remove screenlock altogether or via PIN only)
2: unlock the bootloader via:
Code:
fastboot oem nubia_unlock NUBIA_NX669J
Please pay attention as this is different from the generic fastboot flashing unlock
3: enable unlock via fingerprint & report if the fingerprint sensor works, else, the issue with calibration persists.
 
  • Like
Reactions: Nocturne Seigneur

bs3pro

Senior Member
Jul 24, 2020
270
47
Can someone with the device, with a (re)locked bootloader, please check & confirm, whether the following process works:
1: delete all fingerprints & disable unlocking via fingerprint (remove screenlock altogether or via PIN only)
2: unlock the bootloader via:
Code:
fastboot oem nubia_unlock NUBIA_NX669J
Please pay attention as this is different from the generic fastboot flashing unlock
3: enable unlock via fingerprint & report if the fingerprint sensor works, else, the issue with calibration persists.
Worth a shot, but I wouldn't expect anything different.
 

dana8h

New member
Feb 23, 2019
1
0
I've been up 24 hours dealing with bootloops. I finally found a way to root the phone and have it boot up! :ROFLMAO:




Youtube Video Tutorial:






For all those websites that claim the RM6 can be rooted with Kingroot, Kingoroot, iRoot, SuperSU... They are MISLEADING you into downloading their software. In other words, they are full of BS and you should INGORE them at all costs as Magisk is the ONLY proper way to root the RM6.



DO NOT USE KINGROOT, iROOT, KingoROOT, or ANY OTHER THIRD-PARTY ROOTING TOOLS PLEASE!! They steal your DATA and sell it. Magisk does not steal anything.






This procedure will require a wipe of your data.. TWICE! I'll explain why.

When you unlock the bootloader, it wipes your data. Normally you only have to wipe it once, flash the patched boot.img file with magisk, and be done.

However, it seems that users will need to perform another factory reset after flashing the patched boot image. I have no idea why but it works. Please make a note of this as it will be required or you will be stuck in a bootloop.




Requirments


1. Global ROM file
2. A payload dumper
3. Magisk APK to patch the boot img
4. A computer!







Here are the steps!


1. Unlock your bootloader. Make sure you enable OEM unlock in developer options. This WILL WIPE YOUR DEVICE! The command to unlock your bootloader is "fastboot flashing unlock"

2. Download the global rom from here: https://rom.download.nubia.com/Europe/NX669J/V312/NX669J-update.zip

3. You will need to download a payload dumper tool. This is due to the firmware being in a .bin file (payload.bin). Follow the link below on how to extract the global firmware:


I ended up Downloading Termux from the playstore and extracting it with python on my phone.

When you get it extracted, just move the boot.img and vbmeta.img files to your Desktop and on your phone :) Place it somewhere on your internal storage where you will remember!

4. Download
Magisk Manager onto your phone and install it. Select install "patch a file" option and select the boot.img you put on your phone.

Let magisk patch it. It will end outputting a file like "Magisk_Patchedxxx.img" Go ahead and copy that file to your Desktop.

5. Go onto your computer and open up command prompt. Change your directory to the Desktop ex. cd c:/Users/Your Name/Desktop

6. Type fastboot flash boot magisk_patched.img

7. Now make sure you have vbmeta.img on your desktop as well. We need to disable verity on the device. Type fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img

8. From the bootloader, reboot into your recovery and perform another factory reset!

9. Reboot the phone and voila! You now have root access!




Another thing to mention is that SafteyNet does NOT pass even with MagiskHide enabled. Please keep that in mind!


So far I've installed the Xposed Framework and some Magisk modules. All seems to work really well.

Happy Modding!


Thanks for sharing rooting
but i need TWRP for Redmagic 6 NX669J ?
if available please tellme?
 

SpongeBobbbb

New member
May 8, 2021
1
1
Can someone with the device, with a (re)locked bootloader, please check & confirm, whether the following process works:
1: delete all fingerprints & disable unlocking via fingerprint (remove screenlock altogether or via PIN only)
2: unlock the bootloader via:
Code:
fastboot oem nubia_unlock NUBIA_NX669J
Please pay attention as this is different from the generic fastboot flashing unlock
3: enable unlock via fingerprint & report if the fingerprint sensor works, else, the issue with calibration persists.

I had done this with RM5G
but when try to unlock with RM6 pro
it shows that

fastboot oem nubia_unlock NUBIA_NX669J FAILED (remote: 'unknown command') fastboot: error: Command failed
 
  • Like
Reactions: Nocturne Seigneur

adwinp

Senior Member
Jun 22, 2008
2,015
316
urandom
I used simple fastboot flashing unlock on mine and it worked fine. No adverse effects on fingerprint or anything else.
Which version of the firmware did you execute this action?
Most users in the past confirmed the fingerprint scanner would stop working after unlocking the BL, which would mean that this behaviour got changed in a recent update.
 

bob24260

Senior Member
Aug 30, 2010
544
147
Nubia Red Magic 6
Which version of the firmware did you execute this action?
Most users in the past confirmed the fingerprint scanner would stop working after unlocking the BL, which would mean that this behaviour got changed in a recent update.
4.1.2. was the software I used. I had the US or as it's more commonly known as, Global version. I've not suffered any ill effects. I've unlocked, relocked and unlocked again with zero bad consequences.
 

bob24260

Senior Member
Aug 30, 2010
544
147
Nubia Red Magic 6
Which version of the firmware did you execute this action?
Most users in the past confirmed the fingerprint scanner would stop working after unlocking the BL, which would mean that this behaviour got changed in a recent update.
This is a screen recording of my fingerprint working. I'll be glad to answer any other questions you might have.

 

adwinp

Senior Member
Jun 22, 2008
2,015
316
urandom
This is a screen recording of my fingerprint working. I'll be glad to answer any other questions you might have.
That's great news, thanks for taking the effort in sharing the screenrecording!
I do have 1 request - can you please flash the latest PHH GSI & report if you're able to boot; if this is the case, whether the fingerprint works as well?
Once you download the image, you can flash it via fastboot (after uncompressing it with 7zip):
fastboot flash system downloaded_file.img
You will also probably need to factory reset to avoid bootloops:
fastboot -w

Everything still works except the fingerprint. When the bootloader is unlocked, the fingerprint stops working.
v4.12 is the same build you based your instructions on - maybe this was fixed with the monthly security update?
Have you applied any OTA since? If you did, & since you encountered issues with the fingerprint sensor, would you be in a measure of trying relocking/unlocking again, & confirming whether the fingerprint sensor works for you after rooting?
 

bob24260

Senior Member
Aug 30, 2010
544
147
Nubia Red Magic 6
That's great news, thanks for taking the effort in sharing the screenrecording!
I do have 1 request - can you please flash the latest PHH GSI & report if you're able to boot; if this is the case, whether the fingerprint works as well?
Once you download the image, you can flash it via fastboot (after uncompressing it with 7zip):
fastboot flash system downloaded_file.img
You will also probably need to factory reset to avoid bootloops:
fastboot -w


v4.12 is the same build you based your instructions on - maybe this was fixed with the monthly security update?
Have you applied any OTA since? If you did, & since you encountered issues with the fingerprint sensor, would you be in a measure of trying relocking/unlocking again, & confirming whether the fingerprint sensor works for you after rooting?
I can give all this a go later this evening. I'm currently out with wife for Mother's day and I'll have to wait until I get home. Glad to help any way I can.
 
  • Like
Reactions: adwinp

bob24260

Senior Member
Aug 30, 2010
544
147
Nubia Red Magic 6
That's great news, thanks for taking the effort in sharing the screenrecording!
I do have 1 request - can you please flash the latest PHH GSI & report if you're able to boot; if this is the case, whether the fingerprint works as well?
Once you download the image, you can flash it via fastboot (after uncompressing it with 7zip):
fastboot flash system downloaded_file.img
You will also probably need to factory reset to avoid bootloops:
fastboot -w


v4.12 is the same build you based your instructions on - maybe this was fixed with the monthly security update?
Have you applied any OTA since? If you did, & since you encountered issues with the fingerprint sensor, would you be in a measure of trying relocking/unlocking again, & confirming whether the fingerprint sensor works for you after rooting?
I apologize for my tardiness in replying. Late night out. I restored my device to stock via flashing 4.1.2 over local update and relocked the bootloader. I then rerooted by patching boot with Magisk. Once I was up and running I checked fingerprint again and lo and behold my ability to use fingerprint was gone. I don't know what changed in the interim but the ability to use fingerprint was gone. I restored stock once more and relocked the bootloader then my fingerprint was back. Ive tried reproducing my initial steps to see if I'd done anything different to allow me to keep fingerprint and seems my ability to keep it after unlock is gone. As far as flashing a GSI, I believe I'm going to abstain from trying that until a suitable restore tool is available. Ive pushed my luck too far as it is and I don't want to end up with a $700 paperweight.
 

adwinp

Senior Member
Jun 22, 2008
2,015
316
urandom
I apologize for my tardiness in replying. Late night out. I restored my device to stock via flashing 4.1.2 over local update and relocked the bootloader. I then rerooted by patching boot with Magisk. Once I was up and running I checked fingerprint again and lo and behold my ability to use fingerprint was gone. I don't know what changed in the interim but the ability to use fingerprint was gone. I restored stock once more and relocked the bootloader then my fingerprint was back. Ive tried reproducing my initial steps to see if I'd done anything different to allow me to keep fingerprint and seems my ability to keep it after unlock is gone. As far as flashing a GSI, I believe I'm going to abstain from trying that until a suitable restore tool is available. Ive pushed my luck too far as it is and I don't want to end up with a $700 paperweight.
Thank you for taking the time to test again! The silver lining for us being the ability to restore FP by restoring stock.
If you ever feel the need, you can probably restore stock from a GSI by dumping the system.img partition with a payload dumper then flash it again via fastboot. Or dump the system partition with dd when in rooted/magisk mode, copy it from the sdcard to your PC & likewise, flash via fastboot to restore.
 
  • Like
Reactions: bob24260

bob24260

Senior Member
Aug 30, 2010
544
147
Nubia Red Magic 6
Thank you for taking the time to test again! The silver lining for us being the ability to restore FP by restoring stock.
If you ever feel the need, you can probably restore stock from a GSI by dumping the system.img partition with a payload dumper then flash it again via fastboot. Or dump the system partition with dd when in rooted/magisk mode, copy it from the sdcard to your PC & likewise, flash via fastboot to restore.
I already have the dumped system image but I'm real leary about doing it because I'm reading where people are having issues flashing system via fastboot. My 6 pro is my daily and at the moment I don't have any back up devices. My financial status dictates that I don't flush my only phone down the proverbial toilet. If I had a suitable backup device I'd be a bit more adventurous with my modding but at this time it's not feasible for me.
 
  • Like
Reactions: adwinp

adwinp

Senior Member
Jun 22, 2008
2,015
316
urandom
cuz having to patch a boot.img on a phone is a sign that a custom recovery cant be flashed. its typically dangerous to do this figuring you have nowhere to do a back up to. plus, look at the replies...only a few. seriously man?
Any person tampering with his/her device outside of the intended operating parameters should be aware of the risks. That person shouldn't be executing these activities if they don't even know what rooting is/means.
Moreover, there's a disclaimer in the OP of this thread, & you get another warning when unlocking the bootloader itself. We don't have a custom recovery yet, as it's a new device & no one took ownership of preparing a TWRP for the RM6 yet - again, not a problem.
That said, apart from the fact of wiping the userdata due to unlocking, there's not much risk.
You can, at all times, restore partitions by flashing the factory data from payload extracts.
In addition, you don't really need to flash the boot image - you can always just boot it via fastboot boot & if it works, commit the flash.
 
  • Like
Reactions: Rootmaster906

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    Success. Thank you for your thread. Maybe we can get a Kernal going. Here's the modules needed. Install props last. Go in terminal run props module. Pick me fingerprint. Xoamoi then select number 30. It's the Xoami mi 3. Yes reboot. Then clear date and catch in both play store apps in settings. Turn magisk hide on in magisk app. Select play store and click all the bubbles not just the one pre enabled. Reboot device. Go in playstore turn off play protect. Now you are hidden.
    Screenshot_2021-05-21-17-49-28-983.png
    Screenshot_2021-05-21-17-43-42-279.png
  • 6
    I've been up 24 hours dealing with bootloops. I finally found a way to root the phone and have it boot up! :ROFLMAO:







    Join our Discord Channel







    Youtube Video Tutorial:






    For all those websites that claim the RM6 can be rooted with Kingroot, Kingoroot, iRoot, SuperSU... They are MISLEADING you into downloading their software. In other words, they are full of BS and you should INGORE them at all costs as Magisk is the ONLY proper way to root the RM6.



    DO NOT USE KINGROOT, iROOT, KingoROOT, or ANY OTHER THIRD-PARTY ROOTING TOOLS PLEASE!! They steal your DATA and sell it. Magisk does not steal anything.






    This procedure will require a wipe of your data.. TWICE! I'll explain why.

    When you unlock the bootloader, it wipes your data. Normally you only have to wipe it once, flash the patched boot.img file with magisk, and be done.

    However, it seems that users will need to perform another factory reset after flashing the patched boot image. I have no idea why but it works. Please make a note of this as it will be required or you will be stuck in a bootloop.




    Requirments


    1. Global ROM file
    2. A payload dumper
    3. Magisk APK to patch the boot img
    4. A computer!







    Here are the steps!


    1. Unlock your bootloader. Make sure you enable OEM unlock in developer options. This WILL WIPE YOUR DEVICE! The command to unlock your bootloader is "fastboot flashing unlock"

    2. Download the global rom from here: https://rom.download.nubia.com/Europe/NX669J/V312/NX669J-update.zip

    3. You will need to download a payload dumper tool. This is due to the firmware being in a .bin file (payload.bin). Follow the link below on how to extract the global firmware:


    I ended up Downloading Termux from the playstore and extracting it with python on my phone.

    When you get it extracted, just move the boot.img and vbmeta.img files to your Desktop and on your phone :) Place it somewhere on your internal storage where you will remember!

    4. Download
    Magisk Manager onto your phone and install it. Select install "patch a file" option and select the boot.img you put on your phone.

    Let magisk patch it. It will end outputting a file like "Magisk_Patchedxxx.img" Go ahead and copy that file to your Desktop.

    5. Go onto your computer and open up command prompt. Change your directory to the Desktop ex. cd c:/Users/Your Name/Desktop

    6. Type fastboot flash boot magisk_patched.img

    7. Now make sure you have vbmeta.img on your desktop as well. We need to disable verity on the device. Type fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img

    8. From the bootloader, reboot into your recovery and perform another factory reset!

    9. Reboot the phone and voila! You now have root access!




    Another thing to mention is that SafteyNet does NOT pass even with MagiskHide enabled. Please keep that in mind!


    So far I've installed the Xposed Framework and some Magisk modules. All seems to work really well.

    Happy Modding!


    1
    7. Now make sure you have vbmeta.img on your desktop as well. We need to disable verity on the device. Type fastboot --disable-verity --disable-verification vbmeta vbmeta.img
    You're missing the "flash" command inside, as such:
    Code:
    fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img

    A couple of questions:
    1: does the phone retain full functionality? radio (BT/A2DP/different wifi bands/fingerprint scanner/camera)?
    2: have you tried using an empty vbmeta?
    1
    You're missing the "flash" command inside, as such:
    Code:
    fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img

    A couple of questions:
    1: does the phone retain full functionality? radio (BT/A2DP/different wifi bands/fingerprint scanner/camera)?
    2: have you tried using an empty vbmeta?
    Everything still works except the fingerprint. When the bootloader is unlocked, the fingerprint stops working.

    As for flashing empty vbmeta images, I have not tried it. I know some devices you may have to flash an empty vbmeta img at last resort but I was able to boot it up using the stock vbmeta.
    1
    Yes usually you just flash stock vbmeta.img via fastboot: fastboot flash vbmeta vbmeta.img --disable-verity --disable-verification should try it out...
    1
    Fingerprint scanner should work after relocking the bootloader. As for flashing a GSI, there's no custom recovery for this device yet so I can't test any GSI roms yet.
    In this case, would you be able to run the following tests & share findings?
    1: reflash stock boot, relock BL - check if fingerprint scanner is fixed
    2: flash rooted boot.img (disable vbmeta), relock BL - check if fingerprint is fixed
    If that would be the case, we could copy the calibration data from such a device; the data would be in /mnt/vendor/persist/goodix - I checked the stock ROM & it's not in there meaning it probably gets copied over during boot or mount-binded.

    The last theory I want to check is the link between BL lock status & the fingerprint scanner - if some people have reported success with fixing the scanner with the builtin tool, there's a chance that the system framework or some other app is checking for the bootloader lock status & disabling the fingerprint if the former is unlocked. I've dumped the stock firmware but couldn't find a goodix dedicated apk, hence my hunch that it's a framework overlay. We would need to identify where the code is stored, decompile, find the security checking routine, disable, recompile & check agian - assuming it's not in any of the native libraries or the binary.
    Assuming the access to the fingerprint scanner is indeed baked into the framework, using an AOSP GSIs would mean that the system would get unrestricted access to the fingerprint scanner, thus no blocking issue.

    Thus (& addressing the 2nd part of your previous response), I'd suggest a 3rd test:
    3: flash phh GSI or LOS GSI. The reason for the latter is because LOS usually has a wider range of hardware supported via hardware overlays.
    You don't need a custom recovery to flash GSIs as these are fastboot images, so the following should suffice:
    Code:
    fastboot flash system gsi.img
    fastboot -w