yashsingh1/xdaforums huggingface dataset:
[Moto E6 Plus Questions & Answers] extrnoob:
Root is possible. The way I achieved it is first to follow the official bootloader unlock method given by Motorola. Then install Magisk Manager V 7.5.1 (latest as of today). After that have magisk patch the boot image and recovery image, and flash them both through fastboot. It will say the boot partition is signed but when you Flash it to the recovery partition it will tell you the image is either not signed or corrupt. Don't worry about this, it does not affect loading back into system or back into the bootloader or recovery. Remember, after this you will have to boot through recovery every time you reboot or you will not have root until you do. Unfortunately I am still trying to work on TWRP, and it is going rather slow as this is my first attempt at compiling a custom recovery and I am no developer, and am learning as I go... Hope I helped!!!
[Moto E6 Plus Questions & Answers] raffinnga:
Hey guys, I Need some help, I'm trying to unlock bootloader, but my device doesn't recognize fastboot commands like "fastboot oem get_unlock_data" Or "fastboot oem flashing_unlock", why?

Ps: Motorola drivers ok, usb cable ok, oem unlock and usb debugging ok
[Moto E6 Plus Questions & Answers] penny66:
Root

Hi extrnoob! Could you explain this process step by step? Inexperienced people like me don't understand your language xD
[Moto E6 Plus Questions & Answers] risss:
I couldn't unlock bootloader. When i type the command fastboot devices i get a string, but when i type fastboot oem get_unlock_data, i get this message “FAILED (remote: unknown command)”.
[Moto E6 Plus Questions & Answers] raffinnga:
I have the same error ;_;
[Moto E6 Plus Questions & Answers] Vsx06:
U are using CMD as admin, not PowerShell?
[Moto E6 Plus Questions & Answers] raffinnga:
I tried both ; -;
[Moto E6 Plus Questions & Answers] hookgab:
You can't unlock the bootloader. Don't bother with it. If you want something proper, get any device that's NOT from China, and especially form Lenovo (which is Motorola now).

**** LENOVO **** CHINA FREE HONG KONG.
[Moto E6 Plus Questions & Answers] uanesgtgt2:
I don't know if there's a moto e6 plus with enabled oem fastboot commands, it seems like Motorola didn't add support for oem unlock in this phone but maybe if we could get a hold of the download agent for Sp flash tool (since the device is a Mediatek powered device) and the auth file, we could get root via magisk patched boot.img

I searched for a little and i found nothing. I hope that someone manages to get a hold of those files, since the firmware is already available online.
[Moto E6 Plus Questions & Answers] uanesgtgt2:
Well, i managed to flash patched boot.img, but dm-verity is enabled and fstab is not on ramdisk because of project treble... now what :confused:
[Moto E6 Plus Questions & Answers] McTRASH692:
I beg to differ, as in developer option on the moto e6 plus there is a toggle for OEM unlocking,

I believe you need to get a code from Motorola to complete the unlock though,

I have not yet tested as I want to preserve warranty,

However with my moto e4 I was able to unlock bootloader and root without any issues,

Hell at one point I had to rebuild the entire system from an empty chip, (OS took me 4 Days) including rewriting the original imei numbers (that took me 2 weeks)

So no, lenovo is not as locked down as you seem to think it is,

As a side not, most phone are made with components that are built/assembled in China so it is actually quite hard to get a device that isn't at least partially made in China,
[Moto E6 Plus Questions & Answers] McTRASH692:
I know the moto e4 required a no-verity flash to accept root,

Unsure if there is one that would work for the e6 yet,

Certainly something to look for,
[Moto E6 Plus Questions & Answers] McTRASH692:
It was added, it's hidden away in developer options,

May require an unlock code from Motorola though,
[Moto E6 Plus Questions & Answers] uanesgtgt2:
Indeed, there is an OEM unlock option inside developer options, but it makes no difference if it is enabled or disabled when you go to the bootloader and try either fastboot oem get_unlock_data or flashing unlock, it always returns "unknown command" , and even trying to get any oem command to work, it returns "unknown command". I'm sure that my device is installed correctly because any other command for fastboot works, like erasing data and cache partitions.
[Moto E6 Plus Questions & Answers] uanesgtgt2:
What to do now?

Would it help if I uploaded the Oficial ROM files? if someone could help us and take a look, it would be apreciated :D it's an MTK phone (Again, Just to remind everyone, this bootloader doesn't allow in any way to unlock via fastboot commands, and enabling OEM unlock and ADB under developer options doesn't make a difference either)
[Moto E6 Plus Questions & Answers] nach0x:
Yes! please upload the oficial ROM if you can. It will be always be very helpful have that files here in the forum.

I've been trying to make a full backup of this device, but I couldn't figure out how to do it properly. I've found a possible root solution here https://xdaforums.com/android/development/amazing-temp-root-mediatek-armv8-t3922213/amp/ but I don't want to take any risks without backups.
[Moto E6 Plus Questions & Answers] uanesgtgt2:
This is for XT-2025-1: https://mega.nz/file/WYghESTL#sQiQzUmsVsTy3s9EPliH0SuoJhKUgF9J06BAcgh42JM

All the files can be downloaded officially and flashed with Lenovo MOTO Smart Assistant, there are some other models in there
[Moto E6 Plus Questions & Answers] nach0x:
Thanks!! hopefully we can at least root our device in the near future. I've been reading a lot the XDA forum of the Moto E4 (mtk variant) which I think it has a similar chipset.
[Moto E6 Plus Questions & Answers] nach0x:
How did you flash the boot.img? via sp flash tool or fastboot?
[Moto E6 Plus Questions & Answers] uanesgtgt2:
I had to flash it in a very specific way, because with sp flash tool you need to have the auth file and the specific Download agent to write to this phone and I looked everywhere how to flash this thing and I couldn't make it flash any file in any way.

But then I discovered that the official Lenovo tool uses SPFlashTool to flash mediatek devices, so I messed around with it for a while and found out how to flash files to this phone

What I did was download the Lenovo MOTO Smart Assistant for Windows, went into the flash tab, selected rescue; then selected MOTO device, i chose my specific device model (which is Moto E6 Plus XT2025-1 4G/64G) and clicked in the download button to download the latest firmware.

After it finishes downloading, you can go into the software's downloaded tab, and in the bottom there's an option to open the default download directory. In there are all the files for rescuing the smartphone (Full ROM, Lenovo's provided spflashtool (which i guess is the one Lenovo MOTO Smart Assistant uses to flash this phone), Some Download Agents for SPFlashtool, and among other things).

So, what i did at this point is I closed the tool, got into the Firmware's folder, grabbed the Boot.img and modified it with Magisk's android app (there is no root needed if you don't intend to flash the file to the actual device) and afterwards, replaced the old boot.img in the tool's download folder with the new one generated by Magisk (of course, after renaming it to boot.img) and opened the tool again and went into the same tab, selected again my device, clicked in the rescue button instead of the download one, and followed instructions on screen. It seemed like everything went fine, but when I started the phone, bootloader stated that the system integrity was changed (because I wrote to flash that new boot.img) that's when i realised that the dm-verity is not disabled in boot.img on Oreo -> + devices, but at least i knew that we could flash files to the device.

At that point I tried everything to disable DM verity and other verification: Using kitchens (In windows and in Linux) , using python scripts, Manually searching where to disable it, but i couldn't get any software to correctly disable it and /or to unpack any of the img files of the Firmware (system.img and some others unpacked but i didn't find anything there) so if anyone can help with this it would be very appreciated.
[Moto E6 Plus Questions & Answers] nach0x:
After doing some research, I found that this device has AVB 1.1.0 (Android Verified Boot) enabled. What this means is that the boot.img is linked to another partition called vbmeta.img, which verifies the signature of the boot.img at boot time. The kernel searchs this verifications keys in vbmeta.img, if the key is OK the phone will boot.

I think we need to find a way to disable AVB in boot.img, or patch vbmeta.img so the kernel thinks that it has the right signature hence the phone will boot.

I found some information in some forums of xiaomi, and oneplus devices and what they do is patch the vbmeta.img so they can boot a customized boot image (https://miui.blog/redmi-note-7/patched-vbmeta-redmi-note-7-lavender/).

For the root on this device, I've tried this exploit found in this thread https://xdaforums.com/android/development/amazing-temp-root-mediatek-armv8-t3922213 with no positive results. After running the exploit it shows me the message "This platform cannot be supported". Tomorrow I'll try downgrading to a older build to see if the exploit works there. (don't know if it can be achieved though I have the link of a older one https://drive.google.com/file/d/1v7yfNuxsMYHgJKlPVqsDAJtF9AycVxfS/view).
[Moto E6 Plus Questions & Answers] uanesgtgt2:
Would it work if we just flashed an empty vbmeta.img file? And thanks for the info
[Moto E6 Plus Questions & Answers] nach0x:
tried going back to an older build (december 2019) and the script to gain superuser access didn't work either. I don't know if this device has been patched since release, maybe if we rollback to the oldest build we can find, the script could work.

If gaining SU access through that script doesn't work in ANY way, our only chance to modify this device would be to mess with the boot verification (vbmeta). Sadly, I don't have the knowledge and the time to attempt this full time. I'll be updating this post with mi findings, so hopefully we can achieve something!
[Moto E6 Plus Questions & Answers] eluallen:
I've unlocked bootloader, flashed blank vbmeta.img and modified lk.img. Ported A TWRP recovery that's fully functional as well. Tried everything possible I know of and still can't achieve root access or install custom GSI. Magisk flashes successfully but root is undone when system reboots. Same with patched boot.img.

I wouldn't bother with unlocking your bootloader as it will void warranty and nothing can be done with it. Also on newest update it will state "Illegal Unlock"in upper left corner and "Safe Mode"in lower left. I downgraded back to original OS from device launch and don't know if it can be unlocked on newer updates. Once unlocked always unlocked, unless you relock it.

To unlock simply boot into fastboot and enter command:

fastboot flashing unlock_critical

Then hit volume up button to confirm. Volume down will cancel command and keep it locked.

Any questions about what I've done post here and I'll respond.

Update: Unpacked boot image and there's no ramdisk in it for this phone. Have to tick recovery mode in magisk manager and patch recovery image. Then flash via fastboot. Select reboot to recovery from bootloader mode. Device will boot into system rather than recovery but you will have to access.
[Moto E6 Plus Questions & Answers] franco619:
Could you make a guide about this? Does it work with the April security patch?
[Moto E6 Plus Questions & Answers] nach0x:
Do you have the img files? so we can try at our side.

Where have you found the Original Firmware?

Bootloader unlock is very important, with that we can achieve a lot of things.
[Moto E6 Plus Questions & Answers] eluallen:
Guide keeps getting flagged so I'm posting link for people to get guide from Google Documents

https://docs.google.com/document/d/1RbNPANoPnvq1kN992DOt3uTAS-FqWGnJ3pK-onPVG_E/edit?usp=drivesdk

If not accessible let me know and I'll copy text file to my Google Drive link containing my modified files. Should've started with that but new to posting. Sorry
[Moto E6 Plus Questions & Answers] nach0x:
Thanks! I'll try
[Moto E6 Plus Questions & Answers] franco619:
Thanks I will try, is there any chance of gsi?
[Moto E6 Plus Questions & Answers] raffinnga:
I tried this but the command "fastboot flashing unlock_critical" also doesn't work, I was only able to downgrade to the August patch ;-;
[Moto E6 Plus Questions & Answers] eluallen:
As I said in previous post when on newest update for phone it tells me illegal unlock and safe mode. Unlocking probably not possible as was probably an error that allowed unlocking of bootloader. Downgrade to original software as instructed in my guide and try again.

Also renamed recovery file for easier identification but forgot to change batch file. Uploaded new batch file to Google Drive. New file name is TWRP install batch. It will flash vbmeta, lk, and TWRP recovery files.

Download link:

https://drive.google.com/folderview?id=1WqvUtuuU-wTglTjtEkZdRZMP7heZjcK6
[Moto E6 Plus Questions & Answers] raffinnga:
But I downgraded to the Patch of August 2019 and even then the command does not work ;_;

Is there another way to do that? Maybe a bootloader_unlock.bat?
[Moto E6 Plus Questions & Answers] eluallen:
I believe this is the exact firmware that I unlocked the bootloader with:

P160AN_PVT_9.0_LA_32B_LOG_76.01-01_FLASH_sign_SVC.zip

Downloaded from here:

https://mirrors.lolinet.com/firmware/moto/pokerp/official/RETLA/

After unlocking you can switch firmware but newer firmwares may boot to safe mode as I've stated.
[Moto E6 Plus Questions & Answers] nach0x:
It works!

I've downloaded the launch build (64B one, since my phone is 64gb) and i've been able to unlock it using your command
[Moto E6 Plus Questions & Answers] eluallen:
Went ahead and made new images in 64bit for this running the 64b variant. Added to Google Drive at same link.

https://drive.google.com/folderview?id=1WqvUtuuU-wTglTjtEkZdRZMP7heZjcK6

To use batch file with TWRP 64b simply renamed from twrp64 to twrp.
[Moto E6 Plus Questions & Answers] nach0x:
64 bit recovery boots, however it freezes at TWRP splash screen. Tried also with the 32B one with the same results

thanks for all your help! You should open a thread about this, so we can further troubleshoot and improve this device!

---------- Post added at 19:24 ---------- Previous post was at 18:46 ----------

Rooted succesfully!

I've been able to root the device by patching the stock boot.img with another device with magisk manager, after patching the image, I booted into fastboot mode and did "fastboot flash boot boot.img" (boot.img being the patched one). The device booted succesfully.

I'm leaving the link here for the patched boot.img, keep in mind that i'm using the 64gb / 4gb ram variant.

https://drive.google.com/open?id=1iTLDTBfrLeUR4rd1LPeLIm1RXmGjSPLb
[Moto E6 Plus Questions & Answers] raffinnga:
"Everything" worked normally on my device

However root by magisk does not work, it appears that I have root but simply (although I have granted permission to the application) the application simply does not work ;-;
[Moto E6 Plus Questions & Answers] eluallen:
The reason TWRP freezes at first screen is because it was installed after phone had been booted into OS. The forced encryption is what is causing TWRP to freeze. To solve issue flash stuck recovery and factory reset from there. The select reboot to bootloader. Flash TWRP image then boot straight to recovery. format data under wipe section in TWRP. Then flash the disable dm verity and force encryption zip. After that reboot to back to recovery from recovery. Then reboot system.
[Moto E6 Plus Questions & Answers] Diego Dias 07:
bro can someone help me install twrp? You already managed to install an old ROM and unlocking the boot loader is now just a help on how to install twrp someone please do a tutorial and upa on google drive to help me and help more people with the same problem. thank you
[Moto E6 Plus Questions & Answers] franco619:
could you open a thread about this? works with variant 2/32gb?
[Moto E6 Plus Questions & Answers] eluallen:
I have the 32gb variant. So yes it works if you do as I explained in my posts.
[Moto E6 Plus Questions & Answers] franco619:
great, this guy was able to install android 10 with your twrp method so I guess that works too

[youtube]MbkuT1oOnbE[/youtube]
[Moto E6 Plus Questions & Answers] eluallen:
If he gives the steps necessary please post them for those who speak other languages. So we can all experiment with the GSI's.
[Moto E6 Plus Questions & Answers] franco619:
I don't know I speak Spanish, the guy in the video speaks Portuguese and you speak English so I'm using the google translator
[Moto E6 Plus Questions & Answers] nach0x:
This device has treble, It's A only, meaning we can easily flash any GSI we want via fastboot
[Moto E6 Plus Questions & Answers] eluallen:
Flashing A only GSI's had ended in a boot loop e everytime. Whether it be Android 9 or 10 makes no difference. Whomever is customized by seems to make no difference either. So if someone know how to flash working GSI please post so the rest can flash it as well. Thank you in advance for any help that anyone can provide in this matter.
[Moto E6 Plus Questions & Answers] raffinnga:
in fact it is A / B, I say this because the GSI that I installed is A / B ;-;
[Moto E6 Plus Questions & Answers] raffinnga:
I use Phhusson's GSI's, I have already tested AOSP Pure Android 10 and HavocOs 3.5, both working perfectly, I believe that the system architecture is different between the 32/2gb version and the 64/4 version, Mine is version 64/4, which is A/B Arm64, I believe that 32/2 is A/B A64
[Moto E6 Plus Questions & Answers] eluallen:
What do you wipe prior to flashing? Do you flash Magisk with it? Even a simple guide to breaking down the process you used would help others so could you please post one for us?
[Moto E6 Plus Questions & Answers] raffinnga:
first, I didn't root the device at first, that is, just TWRP, no magisk

Download the Phhusson GSI Android 10 AOSP and reboot on TWRP, wipe the data, and install GSI as system

After reboot, download the latest version of magisk.apk and the zip, and reboot in TWRP, flash magisk.zip and restart, Then install the magisk fix module, reboot
[Moto E6 Plus Questions & Answers] nach0x:
My bad, i've used an unrealliable app that said that this device is A only
[Moto E6 Plus Questions & Answers] nach0x:
However, after doing "fastboot getvar all" I couldn't find any A/B scheme
[Moto E6 Plus Questions & Answers] eluallen:
On the 2g/32g variant I've managed to get GSI's that are arm32-binder64-ab to function properly but no others.
[Moto E6 Plus Questions & Answers] franco619:
did you install it with twrp?
[Moto E6 Plus Questions & Answers] eluallen:
Yes I use TWRP to install. Go to wipe the forward data. Type yes and hit check mark. Next install and image you want to install.
[Moto E6 Plus Questions & Answers] franco619:
Did you lose the IMEI in the bootloader unlocking process or have you fixed that problem already?
[Moto E6 Plus Questions & Answers] eluallen:
I only lost IMEI while booted into Magisk via recovery mode. Restart phone regularly and should get IMEI back. If not rooted and no IMEI you may try rescue via LMSA in order to recover from lost IMEI.

Then if you want root flash one of phhusson's arm32-binder64-ab or a64 GSI's. Android 9 root works fine but Android 10i had to download phh superuser apk to from apk mirror. After updating app root works fine with Android 10 as well.
[Moto E6 Plus Questions & Answers] franco619:
How can I know what is the best gsi for this device?
[Moto E6 Plus Questions & Answers] eluallen:
I personally have only gotten Phhusson's and Lineage OS to boot up and function fully on my phone.
[Moto E6 Plus Questions & Answers] franco619:
i was using Phhusson and I had a strange error after a day of use a black screen appeared with white lines and I had to restart, but everything else works perfectly
[Moto E6 Plus Questions & Answers] eluallen:
I've tried testing several Developer Luke's/Express Luke's GSI's. Some either didn't boot or nav buttons didn't work properly. If you don't mind not having root I think Resurrection Remix is the most customizable and therefore is the GSI I'll be using for now.
[Moto E6 Plus Questions & Answers] franco619:
sorry for asking so many questions I am new at this

but what boot.img can i use to install magisk in gsi roms?Thank you
[Moto E6 Plus Questions & Answers] p.m.6:
Can anyone check?sp flash tool does not run for me

Rom link:

https://mirrors.lolinet.com/firmware...erp/flashtool/
[Moto E6 Plus Questions & Answers] franco619:
use the lmsa tool to install the stock firmware
[Moto E6 Plus Questions & Answers] p.m.6:
Not work for me.this model number is not in the lsma tool phone list.
[Moto E6 Plus Questions & Answers] franco619:
I have the 2 / 32gb version and it works already use it, it is also available for the 4/64 gb version
[Moto E6 Plus Questions & Answers] blxk23:
I managed to unlock the bootloader on my moto e6 plus 4gb 64rom and it freezes on the twrp screen, any solutions?
[Moto E6 Plus Questions & Answers] franco619:
install the old firmware again with lmsa when finished And don't let it start normally

Start fastboot mode and put the command to unlock bootloader again after that start fastboot mode again and run bat file to install twrp

So I fixed it I have version 2 / 32gb
[Moto E6 Plus Questions & Answers] blxk23:
when installing the old firmware, it restarts only. I remove the battery so that it does not? could it be twrp not working?
[Moto E6 Plus Questions & Answers] franco619:
when the lmsa process ends remove the battery and start in fastboot
[Moto E6 Plus Questions & Answers] blxk23:
which files did you use? to install twrp correctly
[Moto E6 Plus Questions & Answers] franco619:
I do not know that I would have to answer that it has version 4/64 I have version 2/32
[Moto E6 Plus Questions & Answers] uanesgtgt2:
Should we use LMSA to install the firmware in a specific way or the way i described it on a later response is ok?

thanks!
[Moto E6 Plus Questions & Answers] Diego Dias 07:
I made a tutorial for those who are locking twrp and Encino by root [youtube]XMjltioWpVE[/youtube]
[Moto E6 Plus Questions & Answers] franco619:
is there any way to install the latest firmware without the "illegal unlock" message appearing?
[Moto E6 Plus Questions & Answers] biox2003:
please english guide :)
[Moto E6 Plus Questions & Answers] DemolidorAK:
Sorry, I know this is a thread for moto e6 plus, but do you guys know what is the command to unlock Moto e6 play XT2029-3 bootloader, I tried fastboot flashing unlock_critical but it returns that its a unknown command, my phone got bricked after this last OTA update and its giving me red state warning and its stuck in bootloop, its a second hand phone so no warranty, if you guys could help me I would really appreciate it...
[Moto E6 Plus Questions & Answers] Facundo160:
Hi guys, I wanted to comment that the ramdisk of the 32-bit boot is in a different format than the 64-bit, so when you flash magisk through TWRP having the 32-boot, it cannot partition the ramdisk, and therefore, not you can have normal root access. I wanted to comment it in case some dev does xd, if they don't understand me I'm sorry, I'm using google transalate xD
[Moto E6 Plus Questions & Answers] Pokemetti2:
Can Magisk Manager actually create a patched boot image without root? Didn't know that. Btw, thanks for doing all this work!
[Moto E6 Plus Questions & Answers] eluallen:
Have you tried LMSA Repair Assistant to rescue you device.
[Moto E6 Plus Questions & Answers] franco619:
it is possible to relock the bootloader?
[Moto E6 Plus Questions & Answers] Facundo160:
Yes, it is with the command:

fastboot oem lock

or

fastboot flashing lock
[Moto E6 Plus Questions & Answers] franco619:
Al parecer también hablas español, el problema es que al reinstalar la rom oficial desde lmsa me dice que esta en desbloqueo ilegal, solamente pongo ese comando y se arregla ese problema? O debo hacer algo mas?