yashsingh1/xdaforums huggingface dataset:
[Moto Z3 Play Questions & Answers] tomkleeeb:
Can you dump boot.img from the same devise, then fastboot boot boot.img?

If that works...

Could you then use magisk to add systemlessly root to the boot image

Then fastboot boot patched boot.img for tethered root?

This thread shows dumping partitions

https://xdaforums.com/showthread.php?t=2450045
[Moto Z3 Play Questions & Answers] twelfth:
Not without root.

Also from that thread:

You need root to get boot.img from a device to build TWRP.

or.

You need firmware images to be released by Motorola to build TWRP with the boot.img they release.

or.

You need source.

No way around it.
[Moto Z3 Play Questions & Answers] tomkleeeb:
I made a thread on their official forums. https://forums.lenovo.com/t5/Moto-Z...this-phone-D/m-p/4176309/highlight/false#M200

This may seed things along. :)
[Moto Z3 Play Questions & Answers] GuestK00219:
if you boot into bootloader and run fastboot getvar all you'll see that our firmware is based on LA.UM.6.2.r1-07200-sdm660.0

so this should be our (incomplete) kernel source

https://source.codeaurora.org/quic/la/kernel/msm-4.4/tag/?h=LA.UM.6.2.r1-07200-sdm660.0

search for LA.UM.6.2.r1 on https://wiki.codeaurora.org/xwiki/bin/QAEP/release and you'll see all the updates we're missing since march
[Moto Z3 Play Questions & Answers] tomkleeeb:
I posted on GitHub asking for source.

Anyone wanna bump it?

https://github.com/MotorolaMobilityLLC/kernel-msm/issues/165
[Moto Z3 Play Questions & Answers] GuestK00219:
i have patched boot.img for 1929-8 using magisk manager apk from magisk 16.7.

not tested, i have locked bootloader.

if you have unlocked bootloader you can try "fastboot boot patched_boot.img" first without flash to see if it even boots. if it does you can try to flash it, extract magisk 16.7 zip and install apk from common folder.

https://drive.google.com/open?id=1n7Wf8ekChsDIUFmya0yFIRFQ581EIQxZ

if you brick your device you're on your own.

also i have sent boot.img to TWRP Builder, hopefully guys there can make a port from it.
[Moto Z3 Play Questions & Answers] Willy33:
I have 1929-4 and unlocked the bootloader, tried it all, it's useless. (I used the boot of course from my version) Also I tried to port twrp but beyond the splash screen with the inscription twrp it did not work, and my knowledge in programming is almost equal to 0.
[Moto Z3 Play Questions & Answers] GuestK00219:
thought so. stock boot.img should boot with locked bootloader and it didn't.

ok i'll try to capture OTA url when it's available.
[Moto Z3 Play Questions & Answers] Willy33:
And yet I managed to get the root of the right through the magic and actually boot it. It was necessary in the magic to choose options for patch boot as far as I remember with encryption related, and it worked out))
[Moto Z3 Play Questions & Answers] tomkleeeb:
Moto asked what version I need.... What version do we need to build root? https://github.com/MotorolaMobilityLLC/kernel-msm/issues/165
[Moto Z3 Play Questions & Answers] GuestK00219:
this looks looks like a bad joke. we don't even need to ask them, there's GPL
[Moto Z3 Play Questions & Answers] tomkleeeb:
I don't know. I just want root. :)

I think they can get away with it because source is available upon request, but no one requests it. I am surprised their GitHub doesn't have 1000s of people clamoring for source code for root. This thing is on my short list of phones. Op6/6T would be my next choice but I like microsd more than I like root friendly warrenty.
[Moto Z3 Play Questions & Answers] Willy33:
Try to boot from my boot (fastboot boot root.boot.img) and if the system boots,you will see in the manager of magics that you already have the root rights, then you can safely flash this boot to yourself (fastboot flash boot root.boot.img) and it will be your root. But twrp recovery I can not yet port unfortunately.(And of course you need to have a bootloader unlocked)

https://drive.google.com/file/d/1wwD4J3DN4sYqfD1hOe0uApHC9tgqKIfu/view?usp=drivesdk
[Moto Z3 Play Questions & Answers] tomkleeeb:
Have to buy the phone first lol.

No root = no buy

I just like the idea of the ga!epad controller mod $79.99

Android has no good game controller
[Moto Z3 Play Questions & Answers] GuestK00219:
kernel source should be released by tuesday

https://github.com/MotorolaMobilityLLC/kernel-msm/issues/165#issuecomment-415027775
[Moto Z3 Play Questions & Answers] GuestK00219:
i have paid to download firmware for XT1929-8 and unlocked the bootloader.

the bad news, boot.img patched with Magisk won't boot, it just reboots.

the good news, stock boot.img worked so my phone works.

the best news, treble ResurrectionRemix system img for ARM64 a/b with gapps and su just booted up :)

https://xdaforums.com/project-trebl...pment/gsi-resurrection-remix-o-6-1-0-t3811299

i'm going to try pixel experience later

EDIT: sound works, dual sim works, wifi works, fingerprint works, navigation bar needs to be enabled in settings, battery moto mod seems to be not charging, unable to change display brightness

pixel experience won't boot (maybe it will, it's because i have downloaded a version instead of a/b). i'm back to stock ROM

EDIT2: got root working.

not sure if it's needed but i have used Magisk Manager from https://raw.githubusercontent.com/ianmacd/MagiskBuilds/master/updates/ianmacd.json

installed the apk

set up that URL as custom Update Channel in Magisk manager settings

patched boot.img with "Preserve force encryption" and "Preserve AVB2.0/dm-verity" checked

patched boot.img for xt1929-8 can be downloaded here https://drive.google.com/open?id=11CJ65ojDZmCQVZGSHXicfFSMaenFHiiv

now where is that $50? :D my donation button still works

EDIT3: got boot.img with working TWRP, but it won't boot Android just TWRP.

if you'd like to try fastboot flash boot_a recovery.img and choose recovery in bootloader menu.

be sure to have boot.img backup before flashing because it won't boot Android and TWRP is unusable as it is, it can't even mount data.

https://drive.google.com/open?id=1C3lcyK3y4RL1Ep56wqWpfw0VWIHuhiO0
[Moto Z3 Play Questions & Answers] Willy33:
Absolutely all the same thing I did with my 1929-4 three days ago ... with twrp the same situation unfortunately ...
[Moto Z3 Play Questions & Answers] GuestK00219:
i was able to flash magisk and boot.img so it works. still don't know why it won't boot android.

device/motorola/beckham - https://drive.google.com/open?id=1KQ8KFthPJzr1VXt41F9N7O7fY8IRzcb6
[Moto Z3 Play Questions & Answers] tomkleeeb:
I have cryptos not PayPal. Bitcoin address?

Just to confirm... I can fastboot flash patchedbootimage.img and have permanent root? (I would test with fastboot boot patched bootimage.img first, naturally.

Or what do I do exactly when unboxing phone after unlocking bootloader?

I have used adb, fastboot before. You enable us debugging after you square your bootloader away.

Could you do a

1- unlock bootloader

2- USB debugging

3- adb reboot bootloader

4 - persistent root do this, steps

4b - temproot do this, steps

Consider doing that in a thread in development for everyone! Thank you!

Also consider posting your root in development. You successfully developed root from what I understand.

Final question:

This is a patched MOTO boot image? I need mod support. Not a patched gsi/custom room bootimage? Say "Your Moto game controller will work assuming anything you gave root acsess doesn't interfere" or "no Moto mods don't work, this is a gsi/whatever boot image"
[Moto Z3 Play Questions & Answers] NotYetADev:
How were you able to get the boot.img from the device?
[Moto Z3 Play Questions & Answers] Willy33:
Well, if you read more carefully, you can see that the man downloaded the full firmware and from there he took boot.img

And actually in the corresponding topic on the firmware for our device, I even laid out the link with all the current firmware versions for our device.
[Moto Z3 Play Questions & Answers] :
thanks for donation

enable OEM unlocking and USB debugging in Settings

follow this to unlock your bootloader https://motorola-global-portal.custhelp.com/app/standalone/bootloader/unlock-your-device-a

to see if it works for you: fastboot boot patched_boot.img

if it does: fastboot flash boot_a patched_boot.img

this is stock boot.img from motorola, everything should work including moto mods.

it's permanent, until next OTA. i'll upload stock firmware i have bought for XT1929-8 and i'll try to capture OTA URI when next OTA comes out.

if it won't work for you i can help you to get stock firmware and patch your own boot.img.

EDIT: uploaded stock firmware for XT1929-8 to https://basketbuild.com/devs/frantisheq/beckham/XT1929-8
[Moto Z3 Play Questions & Answers] :
Willy33 sent me a message to upload that half assed twrp i made with working decryption, i'll upload it later today. i have downloaded complete omnirom sources not just minimum for twrp, hopefully it'll make some difference. maybe there is a problem with extracted ramdisk from stock boot.img and something else is needed for a/b devices with recovery integrated in boot.

EDIT: i changed something and i have no idea what so now we have partitions to mount and A/B selection but i have lost data decryption.

recovery.img (won't boot android, no decryption) - https://drive.google.com/open?id=1VUb7KzWweHDdgdVde-qUDL86EIG-ZKj-

device/motorola/beckham - https://drive.google.com/open?id=1ftNHXS84AHVEd7u3fQ0Mq0YQ62Qr32jv

based on TWRP Builder generated tree and sony xa2 twrp by LuK1337

dmesg gives

<14>[ 33.443826,4] init: starting service 'sbinqseecomd'...

<11>[ 33.444136,4] init: property_set("ro.boottime.sbinqseecomd", "33443975412") failed: property already set

<11>[ 33.444346,0] init: cannot execve('/sbin/qseecomd'): No such file or directory

<14>[ 33.444594,4] init: Sending signal 9 to service 'sbinqseecomd' (pid 604) process group...

<14>[ 33.444629,4] init: Successfully killed process cgroup uid 0 pid 604 in 0ms

but it's there

EDIT: i have tried to repack stock unmodified boot.img previously unpaked with this and it won't boot

this must be caused by dm-verity, otherwise i'm done.

i'll try to disable verity later with https://build.nethunter.com/android-tools/no-verity-opt-encrypt/ and see if i can boot repacked boot.img. if not we won't be able to boot customized kernel with stock rom and sources should be released today if that guy on github really worked on it. i'm not sure if it will disable OTA updates.
[Moto Z3 Play Questions & Answers] :
kernel source released

https://github.com/MotorolaMobilityLLC/kernel-msm/releases/tag/MMI-OPW28.70-25

https://github.com/MotorolaMobilityLLC/kernel-msm/tree/oreo-8.1.0-release-beckham

and i have successfully disabled dm-verity. boot.img with twrp is trying to boot. that means i can see boot animation, hear "hello moto", no android though. looks like data still encrypted.

ok this is getting dangerous, fastboot was showing no baseband :) i need to get twrp decryption working and backup everything

[MENTION=313316]Willy33[/MENTION] if you flash twrp recovery.img,

mount system and vendor in rw mode,

edit /vendor/etc/fstab.qcom to remove all "verify",

and rename /system/verity_key

you'll be able to boot repacked boot.img.

the problem is that i can't get rid of the data encryption and it won't fully load the system.

you'll need to rename back the verity key and add verify back to fstab to boot patched_boot.img you're using now.

EDIT: after changing filencryption=ice to encryptable=ice in /vendor/etc/fstab.qcom,

rebooting to bootloader,

flashing stock boot.img,

running fastboot -w,

and rebooting, phone is decrypted.
[Moto Z3 Play Questions & Answers] hijax2001:
I will give $50 also
[Moto Z3 Play Questions & Answers] :
[MENTION=313316]Willy33[/MENTION] i was able to unpack, repack and boot boot.img with https://xdaforums.com/showthread.php?t=2073775
[Moto Z3 Play Questions & Answers] Willy33:
boot.img with twrp?

which you laid over?
[Moto Z3 Play Questions & Answers] :
stock boot.img, it didn't boot after repacking with other tools
[Moto Z3 Play Questions & Answers] invokerwub:
So is magisk working properly by ur method? Will have systemless root?
[Moto Z3 Play Questions & Answers] ddelong22:
How did you get trebel to flash? Did you just fastboot flash the image as the boot? Ive been wanting to put pixel experience on here for a while. Love the phone a ton
[Moto Z3 Play Questions & Answers] tomkleeeb:
Well, I unlocked my bootloader, then fastboot boot patched_boot.img and stayed at the moto screen for a mintute or two, then rebooted with the official bootloader.

I know this because https://i.imgur.com/SvdFbPc.png

What am I doing wrong?

I am XT-1929-4

POW28.70-31
[Moto Z3 Play Questions & Answers] Willy33:
Dear, what kind of boot are you trying to download? If the one I was posting then it's not even by the name))) and if not mine and whose someone else then of course you will not get anything, because there were only two boot's laid out from 1929-4 and NOT MY 1929-8. But now you will guess what you are doing wrong ...
[Moto Z3 Play Questions & Answers] tomkleeeb:
[MENTION=4575700]frantisheq[/MENTION]

I will try yours.
[Moto Z3 Play Questions & Answers] :
sorry for late response. yesterday i messed up, i built lineage and i had to flash stock system and vendor from the stock zip for 1929-8 i uploaded earlier and guess what, it looks like that zip is for american Sprint or something, it offered me same OTA version that's available for them and i couldn't install it (thanks god) after it was downloaded.

today i have downloaded newer zip for 1929-8, flashed everything through fastboot and it looks like everything is ok without offering me that OTA update.

i'll zip it with stock and rooted boot.img and upload it later today.

uploading here https://gitlab.com/frantisheq/moto_z3_play-stock_firmware

EDIT: ok, i'm done. i have bricked my phone while working on LineageOS and unless somebody gives me singleimage.bin for it i can't fix it
[Moto Z3 Play Questions & Answers] tomkleeeb:
How can I help. I have root, can dump whatever.
[Moto Z3 Play Questions & Answers] :
thanks a lot. i don't know what to dump yet, still searching and reading. i'm pretty sure this will help many others in the future like it did for other moto devices
[Moto Z3 Play Questions & Answers] tomkleeeb:
How do I dump it all? I'm -04 not -08
[Moto Z3 Play Questions & Answers] steven_computer_guy:
I use Sprint as my carrier, I have the us unlocked version Xt1929-4. Sprint wifi calling doesn't work for me, but it would probably work if I installed the Sprint software you mentioned. Where did you get the Sprint version?
[Moto Z3 Play Questions & Answers] :
i'm not sure it's sprint, it looks like some mix of european and sprint and i wouldn't flash it.

regarding that dump, got one but it's giving me error.
[Moto Z3 Play Questions & Answers] :
can somebody with root please run:

su

dd if=/dev/block/mmcblk0 of=/sdcard/loader.img bs=1024 count=168960

on the phone and upload loader.img somewhere? maybe you'll need to install busybox magisk module first.

thank you
[Moto Z3 Play Questions & Answers] Willy33:
https://drive.google.com/file/d/1wzhCgf3mjEkMW0cTn5FhdCQofhhtZ60j/view?usp=drivesdk
[Moto Z3 Play Questions & Answers] :
thanks, i just want to try if it boots from sd card like some older moto phones

EDIT: it doesn't
[Moto Z3 Play Questions & Answers] KC69:
So ... The phone IS ROOTABLE? That the end story I'm getting here, Right?. Y'all have unlocked the bootloader and rooted this phone, correct?. I'm still unclear whether TWRP was or wasn't successful or not. Yes I've read entire thread. Could one of y'all clarify this? My purchase of this phone will be decided on y'all's answer. Thanks in advance.
[Moto Z3 Play Questions & Answers] Willy33:
It's possible to get root rights on this phone if the boot loader is unlocked, as for twrp there are no working variants yet.
[Moto Z3 Play Questions & Answers] darkdaemon32:
I can't seem to flash the patched boot image to my phone keep getting error:

C:\ADB>fastboot flash boot patched_boot.img
Sending 'boot__a' (23857 KB) OKAY [ 0.507s]
Writing 'boot__a' (bootloader) Invalid partition name boot__a
FAILED (remote: '')
Finished. Total time: 0.512s

This is the proper firmware for my device as i've checked multiple times. And im manually extracting the boot image from the firmware download and patching in magisk manager 17.1 with both verity and encryption options checked as per the thread.
[Moto Z3 Play Questions & Answers] KC69:
So how many people on this thread have been successful unlocking BL and getting root? Using this method? Or any other. I know once this is a little further along that TWRP will follow. I have one of these phones in my cart bookmarked and I'm ready to pull the trigger on this. But I'm writing this on a Clark. And we all know how that turned out.
[Moto Z3 Play Questions & Answers] darkdaemon32:
thank you [MENTION=4575700]frantisheq[/MENTION]

working now
[Moto Z3 Play Questions & Answers] KC69:
How much is that in dollars? Did you brick yer z3? What happened?
[Moto Z3 Play Questions & Answers] :
468$ i have made first build of lineage and instead of flashing system with fastboot i installed it with twrp i made. twrp worked but with z3 play being a a/b device it switched to _b which simply won't boot and it's stuck in QS_USB 9008 mode. it's possible to unbrick it with blankflash but those must be leaked by motorola which won't happen and i could try one version of it but it looks like it is for different bootloader version so it's unusable. same thing happened sony xa2 which won't even connect to PC now. on old lenovo vibe z2 pro i can just unplug battery to reboot to fastboot or use qfil to flash stock firmware and relock bootloader. this moto is dead.

EDIT: uploaded blankflash_beckham. run blank-flash.bat on windows or blank-flash.sh on linux as root if you get stuck in 9008 mode. it should boot to bootloader mode in which you can flash stock rom again. didn't work for me, maybe it will for you.
[Moto Z3 Play Questions & Answers] KC69:
Same thing happened back with Droid Maxx. Only some feller got it to work. He used ADB and a stock room with a couple of lines of code. I remember that was the most huntin and peckin I had ever done at that time.
[Moto Z3 Play Questions & Answers] lajyoumofo_:
Who does this kind of thing to an innocent person trying?

I had it

Good God go into settings, security, encryption and credentials. Display CA certificates. Turn off over 50 trusted credentials for a long time then figure out the DOS coding in the BOOTLOADER.

---------- Post added at 08:44 AM ---------- Previous post was at 08:43 AM ----------

Twrp it first but watch out! Oh **** the binary code

Lol, I got 8.1 to work.
[Moto Z3 Play Questions & Answers] lajyoumofo_:
I didnt

---------- Post added at 04:42 AM ---------- Previous post was at 04:41 AM ----------

Nice robot
[Moto Z3 Play Questions & Answers] Salty!:
man screw this phone. I wasted $400..
[Moto Z3 Play Questions & Answers] xT29c:
Why do you say that? I just bought my phone today, and was able to root it.

Are you having issues?
[Moto Z3 Play Questions & Answers] Lord_Worm:
Did you use the Moto site to unlock your 1929-4?
[Moto Z3 Play Questions & Answers] Willy33:
dear, and you just read this post !? Or further viewed too ... if not, I recommend it ... and if so, why this question then ??? I have long since successfully recovered from brick ... and you suddenly decided to remember about unlocking.

I have not had any questions about this device for a long time, I have already done everything I need with him and more than once.)))
[Moto Z3 Play Questions & Answers] Lord_Worm:
My apologies. I must've missed the part where you said it was the 1929-8 variant. Also, if you're up for it, perhaps you could PM me? I have a few questions but I don't necessarily want to clog the forums with them.
[Moto Z3 Play Questions & Answers] Willy33:
No problems.
[Moto Z3 Play Questions & Answers] CastawayK:
I am so confused. Can this phone be rooted? If so, can someone help me out here because I've tried the one click stuff like Kingo and they don't work, so I followed some guides, all written by someone with very poor English skills, and I can't seem to make anything work...

I downloaded minimal ADB and flashboot and tried to flash the re image for the Moto Z3 play from the TWRP website but it failed. Everything fails. I want this bad enough that I'm willing to risk ruining my phone to make it happen (but I'm a broke ***** so I'd really rather not ruin it). I'm so sick of not being able to remove stupid apps like NFL or the stocks for crying out loud. If I knew anything about stocks then maybe I could afford to have someone else root my phone.

It's worth noting that I'm pretty computer savvy, but my understanding of phones and flashing boot images and whatever other knowledge is relevant here leaves much to be desired.
[Moto Z3 Play Questions & Answers] xT29c:
Yes, it can be rooted. No, you can't flash TWRP at this time.

Unlock your bootloader

Place Magisk zip on your phone storage

Start your phone in fastboot mode

download TWRP, rename file to recovery.img

Use the following ADB command; fastboot boot recovery.img

You'll now be in TWRP

Select INSTALL

and choose to flash the Magisk zip file

reboot into system

TWRP was not, and can NOT be flashed onto the phone at this time.

We are lucky enough to fastboot into and flash zip files.

Once rooted, do NOT install xposed framework. You will get stuck in a Bootloop, and you'll need to wipe your phone with TWRP.

This is exactly how i rooted my phone. Any other guides out there are complete BS, and do NOT work.

Good luck!
[Moto Z3 Play Questions & Answers] rgandrews:
Quick Question, I realized that you could not flash TWRP due to the partitions being renamed. As I was researching Lineage, could we safely flash TWRP using the command "fastboot flash recovery_ramdisk RECOVERY.img"?

I would have tested this - but the phone is my daily driver - and I can't afford the risk. Also - wish there was kind of an official guide with your information - as your response has been the most helpful I've found thus far.
[Moto Z3 Play Questions & Answers] xT29c:
I wouldn't know. I have not done that. I'm not a tester of anything that hasn't been documented before on a device. Like you, this phone is my daily driver.
[Moto Z3 Play Questions & Answers] hadibhamed:
Has anyone managed to install TWRP on Moto Z3 Play? So far I've only been able to do Root and use TWRP via fastboot boot twrp.img, but even then the internal memory data is encrypted.

Does anyone know at least how I decrypt the files from the internal memory?
[Moto Z3 Play Questions & Answers] burnsky05:
I'm almost sure this is the exact way that I rooted my XT1929-4 and if I remember correctly I even unrooted to update to OPWS28.70-31-8 Security update Jan 1 2019 and then rooted again. Not taking Pie Update for a little while, going to let it brew some. I could download the update to pie zip file using the lenovo software/repair.
[Moto Z3 Play Questions & Answers] elvensbane:
Does this work post android 9?
[Moto Z3 Play Questions & Answers] mingkee:
Can you just download full ROM and patch boot.img with Magisk and flash?

https://mirrors.lolinet.com/firmware/moto/beckham/official/
[Moto Z3 Play Questions & Answers] mingkee:
I have successfully rooted Z3 play RETUS.

You can download RETAIL instead of RETUS.

Flash it manually in fastboot; however, be aware xxx_other.img must be flashed to "b" partition

Read flashfile first. You can patch boot.img and flash and gain root.

The first boot after flashing patched boot takes rather long. Please be patient

Instruction

https://xdaforums.com/z3-play/how-to/manually-update-z3-play-to-pie-t3922684