[Q] Signed ROM possible? - Nexus 5 Q&A, Help & Troubleshooting

Can I have locked boot loader and be able to flash a custom ROM? It would need to be signed by who, Google, LG?

MAXGEN said:
Can I have locked boot loader and be able to flash a custom ROM? It would need to be signed by who, Google, LG?
Click to expand...
Click to collapse
Sure just send it to Google and haven them rebuild and sign it as a factory image (just kidding off course). No, that`s off course not possible.
-Edit- Read the first 4-5 threads in this section before you do anything

MAXGEN said:
Can I have locked boot loader and be able to flash a custom ROM? It would need to be signed by who, Google, LG?
Click to expand...
Click to collapse
With a locked bootloader, you cannot flash anything using fastboot.
However, if you unlocked bootloader, installed custom recovery, then relocked bootloader (pointless), you can still install stuff from recovery.
But fastboot cannot be used to flash anything (even stock Google factory image).
You sound like you come from a HTC (or similar) device where you would need to relock bootloader to flash a stock RUU, a Nexus is totally different than a HTC device. :good:
Edit: Be warned that unlocking the bootloader using "fastboot oem unlock" wipes EVERYTHING except the OS on the phone.

Thanks for the quick response.
How do ROM updates (ex. 4.0 to 4.1 ) get pushed from either the manufacturer like LG or Samsung or Google for there devices then? You have to unlock you phone to update? Typically on Samsung I downloaded through TouchWiz and then it restarted on its own and installed on its own without user unlocking anything.
So how do updates then get pushed? They must be signed and get around the lock boot loader some how? I guess the signed ROM is able to unlock it to install is that purpose then?

MAXGEN said:
Thanks for the quick response.
How do ROM updates (ex. 4.0 to 4.1 ) get pushed from either the manufacturer like LG or Samsung or Google for there devices then? You have to unlock you phone to update? Typically on Samsung I downloaded through TouchWiz and then it restarted on its own and installed on its own without user unlocking anything.
So how do updates then get pushed? They must be signed and get around the lock boot loader some how? I guess the signed ROM is able to unlock it to install is that purpose then?
Click to expand...
Click to collapse
For Google updates there is no need to be unlocked, you talked about flashing a custom rom. Updates get downloaded and installed automaticaly in fastboot.

MAXGEN said:
So how do updates then get pushed? They must be signed and get around the lock boot loader some how? I guess the signed ROM is able to unlock it to install is that purpose then?
Click to expand...
Click to collapse
Flashing /system has nothing to do with the bootloader. OTA updates flash to /system via stock recovery.
A locked bootloader prevents you fastboot flashing. You could unlock the bootloader, fastboot flash a custom recovery then lock the bootloader again. You would still be able to flash /system with custom roms. Bootloader doesn't prevent flashing. It just prevents fastboot flashing
Sent from my Nexus 5 using Tapatalk

rootSU said:
Flashing /system has nothing to do with the bootloader. OTA updates flash to /system via stock recovery.
A locked bootloader prevents you fastboot flashing. You could unlock the bootloader, fastboot flash a custom recovery then lock the bootloader again. You would still be able to flash /system with custom roms. Bootloader doesn't prevent flashing. It just prevents fastboot flashing
Sent from my Nexus 5 using Tapatalk
Click to expand...
Click to collapse
What stops custom roms being flash through stock recovery?
What stops custom ROM be a OTA so it can be flash stock recovery?

MAXGEN said:
What stops custom roms being flash through stock recovery?
What stops custom ROM be a OTA so it can be flash stock recovery?
Click to expand...
Click to collapse
googles signature

simms22 said:
googles signature
Click to expand...
Click to collapse
BK in the house! Anyways.
Just to clear things up for me.
If I keep my stock recovery and keep boot loader lock, then I can't flash my ROM unless I have Google keys. Okay I got that but mentioned earlier that you can flash to the /system, OTA (Over the Air) package, does that have to be signed for that? What is the mechanism to flash OTA, stock recovery or something else?
Ultimately, something like CM is doing, if I make a ROM, I could make my own recovery and with my own keys and call it verified and safe and push OTA packages for updates??

Everything official is signed. Nothing unofficial can be signed. Nothing unsigned can be flashed without either a custom recovery or unlocked bootloader.
Hope this clears everything up for you.
Sent from my Nexus 5 using Tapatalk

Could you replace the
/system/etc/security/otacerts.zip
or
/META-INF/com/android/otacert file
with your own??

Lets cut to the chase. What is your ultimate aim here?
Sent from my Nexus 5 using Tapatalk

rootSU said:
Lets cut to the chase. What is your ultimate aim here?
Sent from my Nexus 5 using Tapatalk
Click to expand...
Click to collapse
LOL
Just trying to get an direction so I continue to do further research. Mostly my aim is more in depth understanding.
I want to build my own ROM and I'm starting that journey. Definitely a newbie but not a newbie to technology and programing and by no means an expert. Just a senior college student that with enough information to be "dangerous".
I would like to have ROM that doesn't need to have unlock boot loader or have custom recovery? Is that possible? i feel a lot ppl I meet don't like to use Custom ROMs b/c of these hurdles. I guess I would have to have root access to change out the CERTS either way.

You can't even flash a full official rom without unlocking the bootloader. It isn't possible on this device
Sent from my Nexus 5 using Tapatalk

MAXGEN said:
LOL
Just trying to get an direction so I continue to do further research. Mostly my aim is more in depth understanding.
I want to build my own ROM and I'm starting that journey. Definitely a newbie but not a newbie to technology and programing and by no means an expert. Just a senior college student that with enough information to be "dangerous".
I would like to have ROM that doesn't need to have unlock boot loader or have custom recovery? Is that possible? i feel a lot ppl I meet don't like to use Custom ROMs b/c of these hurdles. I guess I would have to have root access to change out the CERTS either way.
Click to expand...
Click to collapse
I think if it was possible, it would have been done already. But its not that big of a hurdle to unlock and root. Its actually a lot more easier than it seems. It usually takes about 5 minutes to do after getting all the necessary files. All you need is a general understanding and the ability to follow directions well.

You can't even flash a full official rom without unlocking the bootloader. It isn't possible on this device
Sent from my Nexus 5 using Tapatalk
Click to expand...
Click to collapse
No i went right to a custom, unlock, root, custom Recovery, Custom Rom
jsgraphicart said:
I think if it was possible, it would have been done already. But its not that big of a hurdle to unlock and root. Its actually a lot more easier than it seems. It usually takes about 5 minutes to do after getting all the necessary files. All you need is a general understanding and the ability to follow directions well.
Click to expand...
Click to collapse
On Samsung pushed OTA and reboot and install...DONE.
So it is possible!
It isn't as easy as you think because more people would have it. I walk into any CS class less then 10% are rooted or Custom. Most of them probably are on iphones but that's different. My point is that you would think some what intelligent geeks would take the time to do so but they don't. IMO there are still hurdles and CM are trying to breach these inconveniences except Google doesn't like it.

MAXGEN said:
No i went right to a custom, unlock, root, custom Recovery, Custom Rom
On Samsung pushed OTA and reboot and install...DONE.
So it is possible!
It isn't as easy as you think because more people would have it. I walk into any CS class less then 10% are rooted or Custom. Most of them probably are on iphones but that's different. My point is that you would think some what intelligent geeks would take the time to do so but they don't. IMO there are still hurdles and CM are trying to breach these inconveniences except Google doesn't like it.
Click to expand...
Click to collapse
on samsung, samsung signs the roms, not google. so of course its possible for them.

simms22 said:
on samsung, samsung signs the roms, not google. so of course its possible for them.
Click to expand...
Click to collapse
So essentially you just need to replace the certs to push your own OTAs through your device. Which at some point you would need access to those CERTs so you would need root access.

MAXGEN said:
No i went right to a custom, unlock, root, custom Recovery, Custom Rom
Click to expand...
Click to collapse
I wasn't asking a question. I was telling you it is not even possible to flash official nexus 5 full rom from Google without unlocking the bootloader.
MAXGEN said:
On Samsung pushed OTA and reboot and install...DONE.
So it is possible!
Click to expand...
Click to collapse
As mentioned, because they signed the update and it matched what their rom and their recovery expected.
You cannot simply "guess" a signature. You cannot reverse engineer a signature. All you can do is remove whatever is validating the signature and this cannot be done without unlocking the bootloader
Sent from my Nexus 5 using Tapatalk

MAXGEN said:
On Samsung pushed OTA and reboot and install...DONE.
So it is possible!
It isn't as easy as you think because more people would have it. I walk into any CS class less then 10% are rooted or Custom. Most of them probably are on iphones but that's different. My point is that you would think some what intelligent geeks would take the time to do so but they don't. IMO there are still hurdles and CM are trying to breach these inconveniences except Google doesn't like it.
Click to expand...
Click to collapse
Are you talking about an OTA from Samsung or a custom ROM OTA without unlocking the phone. If its from Samsung then yeah, they have all the stuff to put into the OTA to bypass the locked bootloader. But anything like that probably has to come from the manufacturer because they are the only ones who have the "keys". I have never owned a Samsung device (other than the Galaxy Nexus but that was more Google). So if I'm just not understanding that, then I apologize. I think around XDA, everyone here just finds it easier to unlock, root and be on their way. But if you find a workaround, I'm sure people would be interested.

Related

Can you restore a nexus s to "factory" settings to receive OTA updates?

Hi Guys, as subject really! Is it possible to get the phone in a "Google" state to pull down updates, obviously meaning the impending ICS one!
B
I'm implying that you're on a custom ROM at the moment. You'll have to flash one of the stock ROM images, then you can get OTA's again.
It doesn't matter if you're rooted or have an unlocked bootloader.
Greetz
frutelaken said:
I'm implying that you're on a custom ROM at the moment. You'll have to flash one of the stock ROM images, then you can get OTA's again.
It doesn't matter if you're rooted or have an unlocked bootloader.
Greetz
Click to expand...
Click to collapse
Hey mate, thankyou for helping. I've not actually received it yet, bought one off ebay and I am just pre-empting - If you flash stock does the root and unlocked bootloader become standard again??
(I'm upgrading from an old Galaxy 3, so am reasonably familiar with flashing, but want a simple life now and am going stock Google )
B
Nope, flashing a stock image will not affect your bootloader being unlocked. You'll have to run the "fastboot oem lock" command to lock the bootloader again. Check one of the turorials here
Greetz
//edit: Actually, I'm suddenly not sure of this. Sunday evenings' got me confused. Please wait for someone else to verify.
Thankyou I'll have a look round
I have been flashing several ROMs using ROM Manager and the bootloader wasn't affected by this. The stock OTAs kept unrooting the phone though.
n00bfuscator said:
I have been flashing several ROMs using ROM Manager and the bootloader wasn't affected by this. The stock OTAs kept unrooting the phone though.
Click to expand...
Click to collapse
That's normal, the OTA's reset the permissions on key folders, effectively SU looses it's execute permissions, removing root. What i do now is download the OTA to the SD card, apply it, re-apply the SU.zip to keep root, modify the restore-recovery script so i can keep CWM, then reboot.
I'm not sure how it's going to go with ICS, but we shall see.

Can't seem to boot into recovery...

What's up everybody. I've searched through the questions forum and can't seem to find a thread to help me, so...
I wanted to flash dhacker's 4.4 ROM. So first I want to make a backup of my phone pending something goes horribly wrong. I'm having issues booting into recovery. When I click on "recovery", the phone seems to restart like it's going into recovery, then I get a sleeping android bot with his belly open and a red triangle with an exclamation point in it on my screen, forcing me to reboot the phone. Any ideas?
- Is it that I don't have an updated version of CWM or TWRP? Anyone have links to working versions?
- Is it that I have the "lite" versions of said apps above and need to donate to open the recovery features?
- Is it something else and I'm just not smart enough to think of what it could be?
Thanks for the help!
LifeAsADroid said:
What's up everybody. I've searched through the questions forum and can't seem to find a thread to help me, so...
I wanted to flash dhacker's 4.4 ROM. So first I want to make a backup of my phone pending something goes horribly wrong. I'm having issues booting into recovery. When I click on "recovery", the phone seems to restart like it's going into recovery, then I get a sleeping android bot with his belly open and a red triangle with an exclamation point in it on my screen, forcing me to reboot the phone. Any ideas?
- Is it that I don't have an updated version of CWM or TWRP? Anyone have links to working versions?
- Is it that I have the "lite" versions of said apps above and need to donate to open the recovery features?
- Is it something else and I'm just not smart enough to think of what it could be?
Thanks for the help!
Click to expand...
Click to collapse
The dead robot is your stock recovery screen. You need to hold vol+ and tap pwr at the same time to get into your stock recovery.
When you flash a recovery.img, you need to immediately boot back into the recovery to get the updater script to finish. If you don't boot straight into recovery after flashing, the stock recovery will override the aftermarket recovery. Also, do you have an unlocked bootloader?
RikRong said:
The dead robot is your stock recovery screen. You need to hold vol+ and tap pwr at the same time to get into your stock recovery.
When you flash a recovery.img, you need to immediately boot back into the recovery to get the updater script to finish. If you don't boot straight into recovery after flashing, the stock recovery will override the aftermarket recovery. Also, do you have an unlocked bootloader?
Click to expand...
Click to collapse
Thanks, I'll give it a try.
I did at one point have an unlocked bootloader, but I wasn't sure whether the latest OTA updates only blocked the ability to unlock (if someone hadn't already unlocked) or if it locked back up the already unlocked ones.
LifeAsADroid said:
Thanks, I'll give it a try.
I did at one point have an unlocked bootloader, but I wasn't sure whether the latest OTA updates only blocked the ability to unlock (if someone hadn't already unlocked) or if it locked back up the already unlocked ones.
Click to expand...
Click to collapse
once the bootloader is unlocked, it cant be locked back.
Bonus. That's what I thought, something about creating a small nuclear explosion in the phone that destroys the bootloader locking resistor or something. Glad I took care of that prior to the update that shut the door on that exploit.
Something else I thought of... I'm reading that 4.4 makes it much harder to root phones. I guess we won't know until the OTA release comes out, but I'm hoping Voodoo Rootkeeper maintains root during the update like it has in the past for me in previous updates.
LifeAsADroid said:
Bonus. That's what I thought, something about creating a small nuclear explosion in the phone that destroys the bootloader locking resistor or something. Glad I took care of that prior to the update that shut the door on that exploit.
Something else I thought of... I'm reading that 4.4 makes it much harder to root phones. I guess we won't know until the OTA release comes out, but I'm hoping Voodoo Rootkeeper maintains root during the update like it has in the past for me in previous updates.
Click to expand...
Click to collapse
If your bootloader is unlocked, you don't need to maintain root. You just need to flash a SU zip in recovery.
so if i unlock my bootloader, i will still be able to receive the eventual ota 4.4 update correct?
RikRong said:
If your bootloader is unlocked, you don't need to maintain root. You just need to flash a SU zip in recovery.
Click to expand...
Click to collapse
peladoro said:
so if i unlock my bootloader, i will still be able to receive the eventual ota 4.4 update correct?
Click to expand...
Click to collapse
Yes, but you won't be able to unlock if you're system version is newer than May.
hey rikrong...as i had mentioned in another thread, found out that i am indeed able to root unlock etc...(xt925). so it's safe to say that unlocking the bootloader for obvious reasons is needed to flash roms but is not negatively affecting the phone from functioning in anyway right? sorry if these r stupid questions but just trying to understand...the only issue is warranty
RikRong said:
Yes, but you won't be able to unlock if you're system version is newer than May.
Click to expand...
Click to collapse
peladoro said:
hey rikrong...as i had mentioned in another thread, found out that i am indeed able to root unlock etc...(xt925). so it's safe to say that unlocking the bootloader for obvious reasons is needed to flash roms but is not negatively affecting the phone from functioning in anyway right? sorry if these r stupid questions but just trying to understand...the only issue is warranty
Click to expand...
Click to collapse
Yeah, sorry, I lose track of the posts. Just simply unlocking the BL should have no adverse affect on the phone, just the warranty, like you said.
hehe...ok thanks again!!!
RikRong said:
Yeah, sorry, I lose track of the posts. Just simply unlocking the BL should have no adverse affect on the phone, just the warranty, like you said.
Click to expand...
Click to collapse
RikRong said:
The dead robot is your stock recovery screen. You need to hold vol+ and tap pwr at the same time to get into your stock recovery.
When you flash a recovery.img, you need to immediately boot back into the recovery to get the updater script to finish. If you don't boot straight into recovery after flashing, the stock recovery will override the aftermarket recovery. Also, do you have an unlocked bootloader?
Click to expand...
Click to collapse
Hello
Please can you explain step by step how to install a cwm ? (i just unlock the bootloader)
Do i have to root the phone to do that ?
Thank you

Root Without BL unlock

Hello guys
im looking to root my OPO, but i dont want to unlock the Bootloader or install a custom recovery, just want a method to root so i can install Xposed on the stock CM11S rom, is this actually possible?
Why not just unlock the bootloader? Your warranty isn't affected by it. You lose nothing by unlocking it, and you gain nothing by leaving it locked.
Transmitted via Bacon
Jaocagomez said:
Hello guys
im looking to root my OPO, but i dont want to unlock the Bootloader or install a custom recovery, just want a method to root so i can install Xposed on the stock CM11S rom, is this actually possible?
Click to expand...
Click to collapse
timmaaa said:
Why not just unlock the bootloader? Your warranty isn't affected by it. You lose nothing by unlocking it, and you gain nothing by leaving it locked.
Transmitted via Bacon
Click to expand...
Click to collapse
Like @timmaaa mentioned, you lose nothing when you unlock bootloader. Not only that, it is the recommended and futureproof approach to do so. Unlocking the bootloader wipes your phone completly clean. Suppose somewhere down the road you want to try different ROMs, you'd realize you cannot do so without losing your data. So you'r much better off unlocaking your bootlaoder right now.
But to answer your question, no. It is not possible at a simpler level. Unlocking the bootlaoder give you access to all the partitions on the phone. What you need access to specifically is the recovery partition so you could flash a custom recovery and install the SU binaries onto your system. through that recovery.
What others have said, unlock the bootloader there's no problem with leaving it unlocked.
You're given the key to unlock the bootloader using a command. Use it and make your life simple. It's like saying you have the key to your house but you want to get inside the house without unlocking the door. Just use the key and make it simple.
Sent from my One A0001 using Tapatalk
Jaocagomez said:
Hello guys
im looking to root my OPO, but i dont want to unlock the Bootloader or install a custom recovery, just want a method to root so i can install Xposed on the stock CM11S rom, is this actually possible?
Click to expand...
Click to collapse
Perhaps you felt like I did, worried that you are ruining your phone or your ota ability.
Unlocking the Bootloader is painless aside from having to reinstall all your programs. Everyone says it wipes the os, but what they don't tell you is that you don't have to dig around looking for the proper version to reinstall. You just type a code, and the phone reboots fresh like a factory reset, ready to go. And installing the custom recovery is easy, and it works perfectly with ota updates.
Sent via quantum entanglement, focused through my OnePlus One.

Someone please explain - Why are there no Custom ROMs for the 950U1/955U1 b/on SmPWN?

Title pretty much says it it.
Is it because the SamPWND crew won't give permission to use their work to build a custom ROM? - I don't understand this, I've been coming to XDA for many years now and this lack of development confuses me.
There was a nice ROM by Turbo, but his account got banned from what I can only is him not asking SamPWND group for permission to use their work.
Shemploo said:
Title pretty much says it it.
Is it because the SamPWND crew won't give permission to use their work to build a custom ROM? - I don't understand this, I've been coming to XDA for many years now and this lack of development confuses me.
There was a nice ROM by Turbo, but his account got banned from what I can only is him not asking SamPWND group for permission to use their work.
Click to expand...
Click to collapse
Without unlocking bootloader, you won’t be able to flash TWRP. You can not access boot partition and recovery partition without unlocking bootloader. By default only signed images from OEMs can be flashed via recovery. It checks for OEM signature before flashing anything. So we need to change recovery that can flash unsigned images like custom roms and kernels. But as I said before, in order to flash new recovery, we need access to recovery partition. But if the bootloader is locked then we can not get access to it. So in order to get that access, we need to unlock the bootloader. After that we can access recovery partition and can flash various custom recoveries like TWRP and CWM.
MINTED7 said:
Without unlocking bootloader, you won’t be able to flash TWRP. You can not access boot partition and recovery partition without unlocking bootloader. By default only signed images from OEMs can be flashed via recovery. It checks for OEM signature before flashing anything. So we need to change recovery that can flash unsigned images like custom roms and kernels. But as I said before, in order to flash new recovery, we need access to recovery partition. But if the bootloader is locked then we can not get access to it. So in order to get that access, we need to unlock the bootloader. After that we can access recovery partition and can flash various custom recoveries like TWRP and CWM.
Click to expand...
Click to collapse
I understand all that, I guess I should of elaborated more.
This guy, now banned (@Turbo2012) was using the SamPWND method to build his ROM - https://forum.xda-developers.com/tm.../samsung-tmo-galaxy-s8-sampwnd-turbo-t3662719
But he got banned for not getting their permission, or at least that's my understanding.
He was able to do some custom modding such as, removing samsung apps, installing Viper4Android, various optimizations, and I believe he was looking into implementing Xposed (not sure if that was possible or not, apparently Substratum OMS would not be)
Is it because what he's doing is considered to be barley a ROM? as anyone able to do SamPWND should probably be able to do what he did, without building a ROM?
I am unaware of anyone getting banned for not having our permission while building a rom? I will look into this...... As for custom roms jrkruse has one that he has been working on, elliwigy has one unreleased, still in development, and I have one that i plan on releasing in a week or so. Life has been hectic and i am now going to try to throw this on top lol missed the forums! Be expecting as custom a rom as possible without unlocked BL within the week!!
TimelessPWN said:
I am unaware of anyone getting banned for not having our permission while building a rom? I will look into this...... As for custom roms jrkruse has one that he has been working on, elliwigy has one unreleased, still in development, and I have one that i plan on releasing in a week or so. Life has been hectic and i am now going to try to throw this on top lol missed the forums! Be expecting as custom a rom as possible without unlocked BL within the week!!
Click to expand...
Click to collapse
Very cool, thank you for the good info.

Return to Android 11 stock

I currently have android 11 which about 2 years ago I unlocked, installed TWRP and rooted. I later allowed the phone to update but didn't realize I should have re-flashed TWRP and root before I rebooted the phone so I lost the use of TWRP and root. Now I want to reflash android 11 but wont unlock and root the phone again but want TWRP. How do I go about doing this (I am not strong with what I need to do and have usually caused a problem before by using the wrong enchilada file, the last one that worked was twrp-3.3.1-18-enchilada-Q-mauronofrio I think) and which files should I use?
you can't flash anything on a locked phone so at the very least you can have it unlocked + twrp and no root if you wish
otherwise no twrp
croperas said:
you can't flash anything on a locked phone so at the very least you can have it unlocked + twrp and no root if you wish
otherwise no twrp
Click to expand...
Click to collapse
That's what I want to do, sorry for any misunderstanding, I want to lock the phone so I can use financial apps and also have TWRP. What process and enchilada shall I use? I already downloaded OnePlus6TOxygen_34.J.62.
Westindieman said:
That's what I want to do, sorry for any misunderstanding, I want to lock the phone so I can use financial apps and also have TWRP. What process and enchilada shall I use? I already downloaded OnePlus6TOxygen_34.J.62.
Click to expand...
Click to collapse
That's what i was saying, this is not possible, locking or unlocking requires full wipe which nullifies any custom things you do.
You can have a phone that's not rooted which should be good enough for most checks but if it checks the bootloader there's nothing you can do about it besides not use it or use stock
croperas said:
That's what i was saying, this is not possible, locking or unlocking requires full wipe which nullifies any custom things you do.
You can have a phone that's not rooted which should be good enough for most checks but if it checks the bootloader there's nothing you can do about it besides not use it or use stock
Click to expand...
Click to collapse
I understand now thanks for your patience. What process should I follow then to return from here to stock and locked considering I don't have TWRP?
Westindieman said:
I understand now thanks for your patience. What process should I follow then to return from here to stock and locked considering I don't have TWRP?
Click to expand...
Click to collapse
Backup what you need
Relock the bootloader
Flash stock rom using fastboot
I have relocked and am now trying to work out how to flash the new rom
All sorted now, didn't need to flash a new ROM
Awesome, Enjoy the phone

Categories

Resources