[ZTE Axon 7 Guides, News, & Discussion] Erahgon:
WORK IN PROGRESS: This all started in a quest to stay locked, but have root and Magisk running on my phone, and eventually unlocking to install a custom kernel which wouldn't trip SafetyNet.

I've had to compromise on staying locked as unlocking the boot loader was ultimately necessary. As of this update to the guide, I have root, Magisk, and system-less Xposed working with each other. SafetyNet, however, is partially broken.

This is my experience on my new ZTE Axon 7 unlocked U.S. variant (A2017U), running build B29.

I'm certain that most of my problems had to do with the write-protected /system partition, as well as the encryption of fstab (verity check encryption/SE Linux status). I finally got some things working by using the method that follows, and I've opened this thread for anyone wishing to learn from what I've done, and possibly sharing with us, better methods of achieving this:

-> Device needs to have its bootloader unlocked, or else you will get a boot-loop into EDL mode. Use your prefered method for this.

-> TWRP 3.0.2.0

-> Last working SuperSU v2.65, which should install in systemless mode (tenfar's patched boot.img doesn't work for me).

-> A way to disable fstab encryption. I got it done using both: a custom kernel called Kali Kernel (also check this post for a stripped down version of the kernel) and through DrakenFX's script available here.

-> Magisk Manager, and Magisk flashable zip versions available here (look under downloads, v2.5 and v9 respectively as of this writing): [url]http://xdaforums.com/apps/magisk/official-magisk-v7-universal-systemless-t3473445[/URL]

-> ADB shell (you can either use Terminal Emulator from the Play Store or ADB Shell on your computer.

After you have unlocked the bootloader, with any of the unlocking guides here on XDA (I used DrakenFX's zip, ultimately. God bless that dude!): Boot into TWRP, flash SuperSU v2.65 mentioned above.

Proceed to flash DrakenFX's boot loop patch.

Boot into the system.

Update SuperSU to the latest version through the Play Store (v2.79 as of this writing, should be automatic).

Open the SuperSU APK and update the SU binary at the prompt. Reboot the system.

Once booted back into the system: Open an ADB shell (either through terminal emulator, or through ADB shell on a computer) and type the following:

su
reboot disemmcwp

The phone will reboot.

Boot into TWRP and flash the Magisk v9 zip file.

Here, I would advise flashing the Kali kernel as well (if you're interested in passing SafetyNet validation, or even if you aren't as it worked for me this way). There is a stripped down version of the kernel available here (source post here).

Boot back into the system.

Once you're up, proceed to install the Magisk Manager.

If it is still showing up undetected then reinstall through the app, reboot into TWRP and flash the Magisk v9 .zip file as well, and reboot into the system.

Reboot system at the prompt.

A word of caution regarding Magisk's implementation of suHIDE: it can't be used with this method as it breaks root after a while, and apparently has no impact on a superuser system which is not a Magisk module. I am exploring Chainfire's suHIDE implementation in the coming days.

Hope it works for you all!

Edits: Updated guide to reflect my current research gains, and removed superfluous text. I will upload screenshots of my status as soon as I get back to my computer.

Updated screenshots to the current state.