[Tutorial] Unlock Bootloader, get root and valid Safetynet

[valunthar]

Nope same steps, I'm using LOS 18.1 as well.

Install magisk 22.1, install safetynet fix from github link, enable magisk hide and inside disable google play services and other google services.
Currently you can't check safetynet inside magisk app, you get Safetynet API error. Just install another safetynet check app like safetynet test:

SafetyNet Test - Apps on Google Play

SafetyNet device compatibility test

play.google.com

That was the missing piece, I was relying on Magisk's safetynet check rather than an alternative. Using the third party check passed. Thank you

 

[XNine]

Nope same steps, I'm using LOS 18.1 as well.

Install magisk 22.1, install safetynet fix from github link, enable magisk hide and inside disable google play services and other google services.
Currently you can't check safetynet inside magisk app, you get Safetynet API error. Just install another safetynet check app like safetynet test:

SafetyNet Test - Apps on Google Play

SafetyNet device compatibility test

play.google.com

YOU BEAUTIFUL HUMAN BEING YOU!

I was smacking my head as I just got my P5 yesterday and rooted it. Couldn't figure out why banking apps were opening but safetynet failing in Magisk. I was coming here to see what the hell I did wrong and lo and behold, your answer was right! THANK YOU THANK YOU THANK YOU!

 

[Raz0Rfail]

I added this topic on first post.

 

[swayjd]

Currently passing SafetyNet but still can't use Google Pay.

I am able to add a Card (usually not possible with Root) but can't enable NFC - "Phone doesn't meet security requirements".

In the Play app, no problems with Play Protect and Play Protect certification shows Device is certified.

Any ideas?

 

[jackowy]

Currently passing SafetyNet but still can't use Google Pay.

I am able to add a Card (usually not possible with Root) but can't enable NFC - "Phone doesn't meet security requirements".

In the Play app, no problems with Play Protect and Play Protect certification shows Device is certified.

Any ideas?

Try this https://forum.xda-developers.com/t/working-magisk-with-google-pay-as-of-gms-17-1-22-on-pie.3929950/

 

[lvbel248]

19/04/21:​

There is currently a problem with magisk checking safetynet. When you check safetynet in magisk, you get a safetynet API error. Either use an alternative Safetynet app e.g. Safetynet Test or install the magisk canary app. I heard it was fixed there, but don't know for sure.​

SafetyNet Test - Apps on Google Play

SafetyNet device compatibility test

play.google.com

I wrote this entire tutorial already in this Thread, but I think it should be separated, so everyone can find it easier:
https://forum.xda-developers.com/showpost.php?p=83736713&postcount=89

This Tutorial descripes 3 Points:

• Unlock Bootloader - which is necessary for root
• Get root via Magisk
• Valid Safetynet

Enable Developer mode in settings

1. Open Settings App
2. Move to About The Phone
3. 7 Taps on the Build-Number

Enable OEM-Unlock in settings

1. Go back to Main Menu of Settings
2. move to system
3. Unfold Extended
4. Open Developer options
5. Enable OEM-Unlock

If you go further, you should either have a clean phone or backup your data. Because if you unlock the bootloader, the entire phone will be wiped.

Reboot Phone in Fastboot

1. Turn off Phone with long press on Power Button and click turn off
2. Press Power Button + Lower Volume together for some seconds and you are in fastboot mode

Use Fastboot to unlock Phone
If you don't have it download at first the needed adb and fastboot files for your system:
https://developer.android.com/studio/releases/platform-tools
Extract it to a path where you want it.

1. Connect your P5 with your PC with an USB cable
2. Open the path where you have extracted the adb tools.
3. On Windows press Shift + Right click and in the context menu click on open commandline Window
4. If you enter the following console command you should see an listed device about it's serial number:
   

   fastboot devices

   If you get an empty result, you have to check if P5 is correct connected via usb and p5 is in fastboot mode (you see it onscreen)
   It could be that you have to install the usb drivers at first for recognizing it via fastboot.

If a Serial was listed in the Previous step, go further.

Enter the following command to start to unlocking your phone

fastboot flashing unlock

On your Phone you see a message to "not unlock your phone", with volume up you switch it to "unlock your phone". With the Power Button you accept it.
It will reboot now and at this moment it wipes the entire phone, so you start again from scratch to configure the p5.

if you have a Pixel 5 without the KDDI Version, you can use the following boot image, which is already a prepatched boot image including magisk 21 (Build 21005).
Download it at first:
http://www.mediafire.com/file/8ll4mlzt3l9njph/magisk_patched+Build+21005.img/file
KDDI variant: http://www.mediafire.com/file/widag4w5s02itq5/magisk_patched+KDDI.img/file

Copy the img-file to the path where you had extracted the adb files.

After you have configured your phone so you can use it, turn off p5 again and go again into fastboot mode.
Ensure your phone is connected via usb to the PC.

In the opened command line Window enter the following command:

fastboot flash boot "magisk_patched Build 21005.img"

For windows powershell Users check this out, if the above command failed:



After it finished you can reboot your phone into android system and you will see the magisk manager logo.

Open it and you should see magisk 21005 is installed, then you know root access is granted.

For Safetynet you have to do the following steps

1. In Magisk Manager open settings gear.
2. under Magisk enable MagiskHide
3. Above MagiskHide is a menupoint called "Hide Magisk Manager", click on it, give the magisk manager a new name, click ok and wait until it's reopend.
4. Go to main menu of the magisk manager. On bottom is a "shield icon" open it.
5. Go to "MagiskHide"
6. On Top is the item "Google Play Services" unfold it and set every hook on it.
7. It's recommended to set the hook on every google Service you find.
8. Go Back to main menu of magisk manager
9. Download the latest universal safetynet fix for your P5:
   
   

   Release v2.4.0 · kdrag0n/safetynet-fix

   Highlights Play Integrity bypass without breaking device checks or causing other issues Disabled use of hardware attestation on Pixel 7 and newer (@anirudhgupta109) Other changes Updated instruc...

   github.com
   Then in magisk manager under modules click on the "Install from memory" button and then select the zip file you just downloaded and magisk manager will then install the module.
10. After finished installation reboot your P5. (1)

After reboot check safetynet state in Magisk Manger, it should be OK.

Now you have a rooted phone and a valid safetynet.

Thanks for your tutorial but magisk manager i don't like it at all i keep getting errors

 

[swayjd]

Try this https://forum.xda-developers.com/t/working-magisk-with-google-pay-as-of-gms-17-1-22-on-pie.3929950/

Appreciate the reply, didn't work for me though.

I kept digging on this. Seems like clearing storage for the Google Services Framework did the trick. Guides only mention Pay and Play I think.

It's working now.

 

[RBEmerson]

Magisk keeps nagging me to update it. Mostly to shut the thing up, can I do the update without breaking root and/or risk having to do a full-on reset?

Or... is there a way to do "go away and never come back"? Unless there's some voodoo spell that needs to be fixed, I'm at "if it ain't broke, don't fix it", Can't name when or if I've every so much as opened the app.

I guess somewhat related, it there a way to shut up the "oooohhhh - you're rooted!!!" message just before booting up from a cold start or restart? Not a high priority thing, just "yeah, yeah, yeah - I know that" annoyance.

FWIW my phone's been working like a charm. Happy happy joy joy!

 

[GTDarthYoda]

Did you try clearing the data for Google pay? I think I did that with mine and it worked.
Might have had to clear google services as well.

 

[digger16309]

Magisk keeps nagging me to update it. Mostly to shut the thing up, can I do the update without breaking root and/or risk having to do a full-on reset?

Or... is there a way to do "go away and never come back"?

That can be turned off in the app settings menu.

 

[nostromo12]

There is an ugly bootloader screen with annoying text that the bootloader is unlocked.
Has somebody a nice screen for the pixel 5 I could flash instead?
Which is the ADB command for flashing that screen?
Does it survive an security update?

 

[Raz0Rfail]

There is no way to change this behavior. Live with it or lock the bootloader.

 

[Raz0Rfail]

Info: I have updated the first post, if you have issues with safetynet.

 

[fludi]

Hi there,

I rooted my Pixel using Raz0Rfails instructions, now I have a strange issue. My GPS ist completely off, the dot is on the equator and the zero meridian. has anyone else experienced this behaviour?

edit: OK, ist depends on which settings you are using in xprivacylua, if you select the whole Google Play Services the positioning ist included, if you uncheck it gets the position again.

 

[Darren051]

There is no way to change this behavior. Live with it or lock the bootloader.

Is that device specific because someone made custom boot splash screens to cover up that bootloader message for the Moto G7 Power.

That is the first and only phone that I was able to root. Just curious on why or how someone was able to do that for a Moto but not a pixel.

 

[impactor]

The first post is very confusing. Am I supposed to do all the listed things in reverse order:

19/04/21​

then

04/09/21​

then

04/09/21 v2​

or am I supposed to do only

04/09/21 v2​

or only

19/04/21​

+

04/09/21 v2

?????​

 

[Raz0Rfail]

For just valid safetynet you need only
04/09/21 v2
(on this date Google had changed some behaviors on the server side, which was the reason why safetynet stopped working if you don't use the latest fixes. And the older dates are the fixes for safetynet in the past.)

If you want to have an rooted phone you have to start at :
"I wrote this entire tutorial already in this Thread, but I think it should be separated, so everyone can find it easier:"

Then when you want to have valid safetynet just use the information on the latest Date.

 

[V0latyle]

@Raz0Rfail if you can, please update the thread title and OP to reflect that this was written for Android 11, and that Android 12 requires a factory wipe and disabling boot verification to flash a patched boot image.

 

[Raz0Rfail]

@Raz0Rfail if you can, please update the thread title and OP to reflect that this was written for Android 11, and that Android 12 requires a factory wipe and disabling boot verification to flash a patched boot image.

hmm I'm using Proton ROM for Android 12 and I had to reflash vbmeta partition to use magisk patched boot.img. Without flashed vbmeta partition I always got bootloop.

fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img

Don't know if it helps on A12 Original Rom.

 

[V0latyle]

hmm I'm using Proton ROM for Android 12 and I had to reflash vbmeta partition to use magisk patched boot.img. Without flashed vbmeta partition I always got bootloop.

fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img

Don't know if it helps on A12 Original Rom.

Did you wipe data when you installed A12? That's the thing that seems to make the difference. Those that have taken the OTA or dirty flashed the system image get a corrupted data error if they try to reflash vbmeta. For some reason this worked fine on the 12 Beta. The only way that seems to work so far is to wipe data when installing 12, then reflash vbmeta with the disable flags, then flash a patched boot image.