Unable to relock the bootloader

Device: Fairphone 5
Installed OS version: 4.9-20240130

Hey, I just bought a fairphone 5 and decided to install iodé OS on it.

I followed this official guide:

The automatic installer weirdly never worked for me, since it loses connection to the device when rebooting into fastboot.

The manual way works just fine for me.

What I encountered after trying to relock the bootloader is similar to the following post:

Behaviour after Installation:

Without locking the bootloader:
It shows the warning, that the bootloader is still unlocked.
Then it continues to boot into iodé OS just fine.
When checking for OEM unlock, OEM unlock is active.

It seems I can use it just fine.

With locking the bootloader:
It shows a message where it says “<!>
Your device is corrupt. It can’t be trusted and will not boot”

When I re-unlock the bootloader and go through the whole process and after installation DONT relock the bootloader, the behaviour is the same as mentioned above.

I did not use the command “flashing unlock critical” and am not planning to do it.

My Questions are the following:

  1. I don’t know if this bricks my device in the future, so is there a way to create a backup, so I can load it back when everything goes downhill?

  2. You can order the Fairphone 5 with iodé OS preinstalled. I assume, that those devices don’t have this issue. If I’m correct: How are the iodé employees achieve it?

Thanks in Advance

Dutti

1 Like

Same issue here. A FairPhone 4 thread at FP4 - Unable to relock bootloader - #6 by vince31fr suggests installing an avb_key to verify the OS, but I don’t know if a similar approach would fix the issue for FairPhone5, or if such a file exists.

Instructions on gitlab had not been updated for a while, that’s fixed. More recent versions exist for FP5 and FP4: the latest one is iodéOS 5.4, that you can find there :

The fastboot files contain the avb key needed to relock the bootloader. Relocking is proposed at the end of the flash process.

So you are saying, upgrading to 5.4 and then trying to lock the bootloader won’t brick my phone as it did before?
Has this been tested/confirmed as a valid solution?

Also, do we need to overwrite the existing install to perform this, or can the key be installed with a different method?