{"id":382,"date":"2012-09-28T11:04:53","date_gmt":"2012-09-28T09:04:53","guid":{"rendered":"http:\/\/valentijn.sessink.nl\/?p=382"},"modified":"2014-05-16T17:51:27","modified_gmt":"2014-05-16T15:51:27","slug":"rooting-the-cube-u30gt-rk3066-android-tablet","status":"publish","type":"post","link":"https:\/\/valentijn.sessink.nl\/?p=382","title":{"rendered":"Rooting the Cube U30GT rk3066 android tablet"},"content":{"rendered":"

I just bought a Cube U30GT Android tablet, based on the Rockchip RK3066 ARM chipset. Here are the instructions to root<\/em> it under Linux.<\/p>\n

The U30GT is a nice tablet. It only cost me about 180 euros (\u20ac150 tablet + shipping, \u20ac30 VAT or “BTW” as it’s called in the Netherlands). Value for money!
\nNow the reason I bought this very tablet is that it’s specs are nearing older Intel “Atom” chips, which could mean that this \u20ac180 tablet is actually a \u20ac350 laptop – minus keyboard. So the first thing to do here was to root the thing.
\nHere is the step-by-step instructions for rooting this tablet under Linux. Usual disclaimers apply: do not try this at home; if you break your tablet, it’s broken; no guarantees. It worked for me, quite easily, but it may not work for you.<\/p>\n

2012-04-12 I received some reports of non-bootable machines, please read the update<\/a>.
\n2014-06-16 Updated update: unbrick<\/a> your Neo X7<\/strong> and most likely unbrick and\/or flash other RK3XYZ machines. The warning no longer applies. Also, see below.<\/p>\n

    \n
  1. get the rkflashtool<\/em> source code from sourceforge.net\/projects\/rkflashtool<\/a>.<\/li>\n
  2. Add USB identification for the RK3066 chip, 0x2207, 0x300a<\/em>. Your code will now look like:
    \nif (!(h = libusb_open_device_with_vid_pid(c, 0x2207, 0x290a)))
    \n if (!(h = libusb_open_device_with_vid_pid(c, 0x2207, 0x281a)))
    \n if (!(h = libusb_open_device_with_vid_pid(c, 0x2207, 0x300a)))
    \n\u00a0\u00a0 fatal(\"cannot open device\\n\");<\/code>\n<\/li>\n
  3. Install libusb-1.0-0-dev and compile:
    \nsudo apt-get install libusb-1.0-0-dev
    \ngcc -o rkflashtool rkflashtool.c -lusb-1.0 -O2 -W -Wall -s<\/code>\n<\/li>\n
  4. Turn off your U30GT. Insert the USB cable. Hold the “volume +” button, then push the “power” button for about 5 seconds. Afterwards, “lsusb” should show the U30GT identification, something like Bus 001 Device 007: ID 2207:300a<\/em><\/li>\n
  5. Read the partition information for your U30GT:
    \nsudo .\/rkflashtool r 0x0000 0x2000 > \/tmp\/parm<\/code>\n<\/li>\n
  6. in \/tmp\/parm you will find something like:
    \nCMDLINE: console=ttyFIQ0 androidboot.console=ttyFIQ0 init=\/init initrd=0x62000000
    \n,0x00800000 mtdparts=rk29xxnand:0x00002000@0x00002000(misc),0x00004000@0x00004000
    \n(kernel),0x00008000@0x00008000(boot),0x00008000@0x00010000(recovery),0x00100000@0
    \nx00018000(backup),0x0003a000@0x00118000(cache),0x00200000@0x00152000(userdata),0x
    \n00002000@0x00352000(kpanic),0x00100000@0x00354000(system),-@0x00454000(user)<\/code>
    \nIt’s the “(system)” partition that we’re after. In this case: 0x00100000@0x00354000<\/li>\n
  7. Use rkflashtool again, with our newly found parameters:
    \nsudo .\/rkflashtool r 0x00354000 0x00100000 > \/tmp\/system.loop<\/code>\n<\/li>\n
  8. Save this file in a safe place, it is your original!<\/strong><\/li>\n
  9. From hereon, it’s rather trivial. Mount the image, change whatever you like and write it back. Something like:
    \nsudo mount -o loop \/tmp\/system.loop \/mnt
    \ncd \/mnt\/app
    \ncp ~\/Download\/Superuser.apk \/mnt\/app
    \ncp ~\/Download\/su.arm \/mnt\/bin\/su<\/code>
    \nThere are lots of other things that you may want to do, like removing buyu.apk CCCCACDE.apk com.chaozh.iReaderFree_145459.apk cube.0.3.0_v2963.apk es.apk Galaxy4.apk hd.apk HoloSpiralWallpaper.apk MagicSmokeWallpapers.apk qq_hd_1.7.0.apk uc.apk<\/em>, change the bootanimation.zip and mess around freely. You did copy your image in step 8, didn’t you?<\/li>\n
  10. Write back and reboot:\n

    sudo umount \/mnt<\/code>
    \nsudo .\/rkflashtool w 0x00354000 0x00100000 < \/tmp\/system.loop<\/strike>
    \nI guess you need to write back with sudo .\/upgrade_tool di -s \/tmp\/system.loop<\/code>, see     here<\/a> for more information about upgrade_tool; but I’ll try to find a spare moment to write a separate blog post about it. Then reboot.
    \nsudo .\/rkflashtool b<\/code><\/li>\n<\/ol>\n

    That’s all, folks!<\/p>\n","protected":false},"excerpt":{"rendered":"

    I just bought a Cube U30GT Android tablet, based on the Rockchip RK3066 ARM chipset. Here are the instructions to root it under Linux.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[83,9,32,76,77,78],"class_list":["post-382","post","type-post","status-publish","format-standard","hentry","category-happy-hacking","tag-flashing","tag-linux","tag-open-source","tag-rk3066","tag-rooting","tag-tablet"],"_links":{"self":[{"href":"https:\/\/valentijn.sessink.nl\/index.php?rest_route=\/wp\/v2\/posts\/382","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/valentijn.sessink.nl\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/valentijn.sessink.nl\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/valentijn.sessink.nl\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/valentijn.sessink.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=382"}],"version-history":[{"count":23,"href":"https:\/\/valentijn.sessink.nl\/index.php?rest_route=\/wp\/v2\/posts\/382\/revisions"}],"predecessor-version":[{"id":550,"href":"https:\/\/valentijn.sessink.nl\/index.php?rest_route=\/wp\/v2\/posts\/382\/revisions\/550"}],"wp:attachment":[{"href":"https:\/\/valentijn.sessink.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=382"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/valentijn.sessink.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=382"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/valentijn.sessink.nl\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=382"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}