文章目录
工具准备
下载所需工具（含ADB、Fastboot驱动）
https://wwbrr.lanzouw.com/b019vp0atc
密码:8xo7
开启ADB
开启机顶盒ADB，遥控直接按90123或者*#*#打开系统隐藏的ADB开关软件开启ADB，同时查看机器IP，便于连接adb,看IP进机器设置里面，密码是6321
进入Fastboot刷机模式
使用adb连接机顶盒
adb connect 192.168.1.111然后输入下面命令进入fastboot模式
adb shell
reboot fastboot连接fastboot
使用双公USB线（平时线刷用的那个）连接机顶盒fastboot
# 确认设备是否连接
fastboot devices
# (如果输出一串字符加 fastboot，说明连接成功)解锁BL
开始解锁bootloader，依次输入下面命令
fastboot oem unlock
fastboot flashing unlock
fastboot flashing unlock_critical
fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img
fastboot reboot以上命令均在下载后的文件解压出来的目录下执行，解锁Bootloader操作会清除机顶盒数据
挂载载系统分区
echo 1 > /sys/class/remount/need_remount
mount -o rw,remount /system修改系统分区内容
想改啥就改啥吧，不过做到这里我发现其实没什么卵用，系统精简了很多东西，IPv6开不起，硬件不支持wifi，我装了个桌面开启自启动，替换了丑得批爆的开机动画。不过最后在开启root权限的时候，因为很多年没玩安卓了，也不知道现在不用supersu，更新了su文件重启后盒子就挂了，然后也没找到TTL接口是哪个，也不知道怎么短接进刷机模式，暂时就放着吧。
开启USB调试
adb shell settings put global device_provisioned 1
adb shell settings put secure user_setup_complete 1
adb shell settings put secure tv_user_setup_complete 1
adb shell am start -a com.android.settings.APPLICATION_DEVELOPMENT_SETTINGS打开原生网络设置
adb shell am start -a android.settings.WIFI_SETTINGS一点优化
system/build.prop
# begin build properties
# autogenerated by buildinfo.sh
ro.build.id=00100699010000100000
ro.build.display.id=p291_iptv-userdebug 9 PPR1.180610.011 1.1.2 test-keys
ro.build.version.incremental=1.1.2
ro.build.version.sdk=28
ro.build.version.preview_sdk=0
ro.build.version.codename=REL
ro.build.version.all_codenames=REL
ro.build.version.release=9
ro.build.version.security_patch=2018-08-05
ro.build.version.base_os=
ro.build.version.min_supported_target_sdk=17
ro.build.date=Thu Mar 23 17:32:06 CST 2023
ro.build.date.utc=1679563926
ro.build.datetime=20230323.173206
ro.build.type=userdebug
ro.build.user=umMTestOne
ro.build.host=ubuntu
ro.build.tags=test-keys
ro.build.flavor=p291_iptv-userdebug
ro.build.system_root_image=false
ro.product.model=UNP-SJA5
ro.product.brand=Droidlogic
ro.product.name=p291_iptv
ro.product.device=p291_iptv
# ro.product.cpu.abi and ro.product.cpu.abi2 are obsolete,
# use ro.product.cpu.abilist instead.
ro.product.cpu.abi=armeabi-v7a
ro.product.cpu.abi2=armeabi
ro.product.cpu.abilist=armeabi-v7a,armeabi
ro.product.cpu.abilist32=armeabi-v7a,armeabi
ro.product.cpu.abilist64=
ro.product.manufacturer=UNIONMAN
ro.product.manufactureroui=990100
ro.product.productclass=UNP-SJA5
ro.product.locale=zh-CN
ro.product.locale.language=zh
ro.product.locale.region=CN
ro.wifi.channels=
# ro.build.product is obsolete; use ro.product.device
ro.build.product=p291_iptv
# Do not try to parse description, fingerprint, or thumbprint
ro.build.description=p291_iptv-userdebug 9 PPR1.180610.011 1.1.2 test-keys
ro.build.fingerprint=UNP-SJA5/UNP-SJA5/UNP-SJA5:9/PPR1.180610.011/1.1.2:userdebug/test-keys
ro.build.characteristics=mbx,nosdcard
persist.sys.timezone=Asia/Shanghai
#persist.sys.launcher=ca.dstudio.atvlauncher.pro
persist.sys.launcher=com.oversea.aslauncher
service.adb.root=1
# end build properties
#
# from device/amlogic/p291_iptv/system_chinatelecom.prop
#
#ro.product.firmware=00442001
#ro.product.otaupdateurl=http://10.28.11.53:8080/otaupdate/update
#ro.adb.secure=1
#ro.vlan.enable=false
#rild.libpath=/system/lib/libreference-ril.so
#rild.libargs=-d /dev/ttyS0
#ro.sf.lcd_density=240
#keyguard.no_require_sim=1
persist.sys.autosuspend.hdmi=true
persist.sys.autosuspend.timeout=0
persist.sys.autosuspend.cec.enable=true
persist.sys.mbx.timeout.enable=false
persist.sys.autosuspend.cec.time=1000
#sys.screensaver.enable=false
#ro.statusbar.widget=false
#ro.statusbar.button=false
#ro.statusbar.yearmonthdayweek=false
#wifi.interface=ra0
# Time between scans in seconds. Keep it high to minimize battery drain.
# This only affects the case in which there are remembered access points,
# but none are in range.
#wifi.supplicant_scan_interval = 60
#alsa.mixer.playback.master=DAC2 Analog
#alsa.mixer.capture.master=Analog
#hwui.render_dirty_regions=false
#force GPU rendering
#persist.sys.ui.hw=true
#timeout control
http.getc.timeout_us = 10000000
# Configure features
#hw.nopm=true
#hw.nobattery=true
#hw.nophone=true
#hw.novibrate=true
#hw.nogps=true
#hw.cameras=0
#hw.hasethernet=true
#hw.hasusbcamera=true
#hw.has.accelerometer=true
#used in packages/apps/Settings/.../Utils.java
#hw.has.bluetooth=false
#ro.ethernet.default_on=true
#ro.config.low_ram=false
#dalvik.vm.jit.codecachesize=0
#ro.screen.has.timeout=false
#ro.screen.has.brightness=false
#ro.screen.has.tvout=true
#ro.platform.has.security=false
#ro.platform.has.tts=false
#ro.platform.has.touch=false
#ro.platform.has.mbxuimode=true
#ro.platform.has.1080scale=2
#ro.fontScale=1.3
#ro.platform.has.digitaudio=true
#ro.platform.has.defaulttvfreq=false
#ro.hw.ethernet.onboard=true
#ro.platform.has.cvbsmode=false
#ro.platform.hdmionly=true
#ro.platform.has.cecmode=false
#ro.platform.filter.modes=480i60hz,576i50hz,smpte24hz
#ro.platform.filter.modes=2160p50hz42010bit,2160p60hz42010bit,2160p50hz42212bit,2160p60hz42212bit
#sys.output.10bit=true
#default to output mode auto
persist.sys.outputmode=AUTO
#ro.platform.has.systemlog=false
# Use OSD2 mouse patch
#ro.ui.cursor=osd2
#ro.ui.cursor.autohide=true
#ro.ui.cursor.timeout=10000
#ro.ui.cursor=surface
#set to 0 temporarily so touch works without other changes
#ro.sf.hwrotation=0
#ro.hardware=amlogic
#camera 1080p
#ro.camera.preview.MaxSize=1920x1088
#ro.camera.preview.LimitedRate=1920x1088x30,1280x720x30,640x480x30,320x240x28
#ro.camera.preview.UseMJPEG=1
#ro.camera.preview.UseHwMJPEG=1
#enable mjpeg multi-dec
media.omx.multi_mode=11
#hw.encoder.freerun=1
#hw.encoder.temp.enable=1
#hw.encoder.reencode.enable=0
# Enable 32-bit OSD
#sys.fb.bits=32
# Disable GPS
#gps.enable=false
#keep landscape in launcher
#sys.keeplauncher.landcape=true
#Enable player buildin
media.amsuperplayer.enable=true
media.amplayer.enable-acodecs=ac3,eac3,rm,dts,thd
media.amplayer.enable=true
media.amplayer.support-exname=divx,h264,avi,ts,m2ts,mkv,mp4,mpg,mpeg,rm,rmvb,wmv,ts,dat,vob,vc1
media.amplayer.support-exname1=mp2,mp3,ac3
media.amsuperplayer.m4aplayer=STAGEFRIGHT_PLAYER
media.amsuperplayer.defplayer=PV_PLAYER
media.amplayer.thumbnail=true
media.amplayer.thumbnail4http=true
media.amplayer.startmode=true
media.playstatus.enable=1
#FOR ffmpeg cache module
libplayer.cache.debug=1
libplayer.cache.enable=1
libplayer.cache.seekenable=1
libplayer.cache.keepframe_en=0
libplayer.cache.enterkeepms=5000
libplayer.cache.backseek=300
libplayer.cache.bigpktnum=4
media.player.seekX=0
media.libplayer.nobufferstart=0
media.amplayer.seek_async=0
media.amplayer.chmobilekpi=0
libplayer.tcp.get_dns_type=0
sys.imgplayer.freq_down=1
sys.boot.kpi=false
#FOR IPTV
libplayer.ffmpeg.lpbufsizemax=10485760
libplayer.switch.format = 1
media.amplayer.lpbufferlevel=0.002
media.amplayer.onbuffering.S=0.3
media.amplayer.buffertime=6
media.amplayer.lowlevel=0.001
media.amplayer.midlevel=0.07
media.amplayer.middlelevel.4k=0.1
media.amplayer.highlevel=0.95
media.amplayer.divtime=1
media.amplayer.force_buf_enable=1
media.amplayer.force_buf_thres=400
media.amadec.prefilltime=50
media.amplayer.force_buf_exit=0.008
media.amplayer.refmode=0
media.amplayer.dropmaxtime=10000
media.amplayer.pre_droppcm=0
#FOR IPTV,delay send buffering.
media.amplayer.delaybuffering.s=2
media.amplayer.delayprobebuffering.s=0
media.amplayer.delaybuffering=3
media.amplayer.smooth_region=7200000000
media.amplayer.bufing_timeout=90
#update state interval
#media.amplayer.update_interval=500
# deep diagnose
media.amplayer.hls_notify_en=1
media.hls.range_type=1
libplayer.tcp.timeout=1000
libplayer.tcp.dnscache=1
libplayer.hls.start_from_top=1
#update duration with url info
media.amplayer.dur_update=1
media.amplayer.lpbufferlevel=0.05
#media.p2pplay.enable=true
media.amplayer.widevineenable=false
media.amplayer.dsource4local=1
media.arm.audio.decoder=ape,flac,dts,ac3,eac3,wma,wmapro,mp3,aac,vorbis,raac,cook,amr,pcm,adpcm,aac_latm,rm
media.wfd.use-pcm-audio=true
media.wfd.videoreolutiontype=0
media.wfd.videoreolutiongroup=5
media.wfd.videoframerate=20
media.html5videowin.enable=1
media.decoder.vfm.defmap=decoder ppmgr deinterlace amvideo
media.amplayer.seekkeyframe=1
media.amplayer.dropwaitxms=2000
media.amplayer.seekmode=1
media.omx.LowLatency_mode=1
mbx.3D_Bright.enable=false
# Nand write need force sync when gadget
#gadget.nand.force_sync=true
#enable bluetooth when suspend
#bt.keep_on.enable=true
#bt.auto.enable=true
# Camera exif
#ro.camera.exif.make=M8b
#ro.camera.exif.model=m200
#hide status bar
#persist.sys.hideStatusBar=true
#support media poll uevent,can use sd cardread on usb port
#has.media.poll=true
#used forward seek for libplayer
media.libplayer.seek.fwdsearch=1
media.libplayer.net.frameseek=1
# Disable preload-class
#ro.amlogic.no.preloadclass=1
#virtualsd.enable=true
#service.adb.tcp.port=5555
#const.window.w=1280
#const.window.h=720
#sys.defaultStream.ismusic=true
#ro.app.optimization=true
#ro.platform.has.realoutputmode=true
#add livhls,libcurl as default hls
media.libplayer.curlenable=false
media.libplayer.modules=vhls_mod,dash_mod,curl_mod,prhls_mod,vm_mod,bluray_mod
#sofrware demux
libplayer.netts.recalcpts=1
libplayer.livets.softdemux=1
libplayer.ts.softdemux=1
libplayer.hls.stpos=0
#Time Zone
persist.sys.timezone=Asia/Shanghai
#ro.osd2.size=64x64
#new feature 81282
#ro.alarm.align=true
#for AmUMediaPlayer hls
#media.ammediaplayer.enable=1
hls.aml.enable=1
hls.curl.enable=0
#for AmUMediaPlayer Circle Buffer
iptv.enablebuf=1
#add for video boot, 1 means use video boot, others not .
#service.bootvideo=0
#service.bootadv=1
#service.bootvideo.checkexit=false
#ro.product.bootvideo.type=zip
#new feature 81297
#ro.permissions.settings=true
#don't need brightness
#prop.sp.brightness=off
#ro.quickboot.enable=false
#config.disable_telephony=true
#config.disable_bluetooth=true
#config.enable_quickboot=true
#config.disable_vibrator=true
#config.disable_location=true
#has spdif output
#ro.hdmi.spdif=true
#for China mobile
net.ppp.retrycount=2
sys.deepdiagnose.support=1
sys.wifi.ipv6.enable=true
sys.broadcast.permit=true
persist.net.monitor=true
#for all cec key on or off
persist.sys.cec.enable.key=true
#for cec volume key on or off
persist.sys.cec.enable.volume.key=false
ro.iptv.mbox=true
ro.autocreate.download=true
ro.product.name=MiniRed
net.pppoe.running=1
net.ethwifi.coexist=true
ro.mac=
epg.login=
epg.userid=
epg.token=
epg.mobile.userid=
epg.mobile.token=
epg.mobile.deviceid=
ro.media.timeshift=0
sys.settings.support=1
sys.settings.support.net.flags=7
epg.eccode=
epg.copyrightid=
epg.indexurl=
epg.cmcchomeurl=
epg.authcode=
epg.eccoporationcode=
epg.speechchannel.bussy=
epg.usergroup=
epg.accountidentity=
#ro.product.type=0
#ro.devicetype=stb
net.dhcpc.ipver=
net.dhcpc.username=
net.dhcpc.pswd=
net.dhcpc.option=
sys.cmcc.hls.adaptrate=
sys.cmcc.hls.firstrate=
sys.cmcc.video.contentmode=
service.media.playstatus=stopped
#sys.settings.support.languages=zh-CN,zh-HK,en-US
persist.sys.language=ZH EN
persist.sys.country=CN,HK,US
sys.app.oom_adj=1
#sys.deflauncher.cls=ca.dstudio.atvlauncher.screens.launcher.LauncherActivity
#sys.deflaunchersetting.pkg=com.android.smart.terminal.setting
sys.deflaunchersetting.pkg=com.android.tv.settings.
sys.settings.support.bluetooth=1
#ro.flash.size=NAND 4G
#ro.memory.size=
#for webkit retry
webkit.loadurl.retry_cnt=3
webkit.loadurl.timeout=10
sys.settings.support.ap.flags=0
sys.settings.support.spdif=0
ro.media.dolby=0
ro.media.maxresolution=0
sys.settings.support.net.flags=7
sys.deepdiagnose.support=1
#K8 popo issue
persist.service.ki.builtin=0
#for webkit retry
webkit.loadurl.retry_cnt=3
webkit.loadurl.timeout=10
#ethernet & wifi coexist
net.ethwifi.prior=ethernet
sys.proj.type=telecom
sys.proj.tender.type=jicai
#instaboot bootanimation config
#onetime: bootanimation run onetime
#loop: bootanimation run in loop
#none: no bootanimation when instaboot restored
#ro.instaboot.bootanimation=onetime
#ro.instaboot.animation_time=5
#net.pppoe.padt_timeout=600
#for tr069
#ro.tr069.enable=true
#sys.supend.delaytime=5000
#sys.start.boot=true
#sys.broadcast.policy=sticky
#media.player.cmcc_report.enable=true
#sys.support.smpte=true
#for kernel to logcat
#ro.logd.kernel=1
#ro.logd.size=2m
#for amlchat app
amlchat.status.enable=disable
#for default volume
persist.audio.volume=8
persist.sys.boot.volume=8
sys.shcmcc.test.hideview=true
#enable ffmpeg ipv6 tcp
media.libplayer.ipv4only=1
#enable liveplayer mediahal videotunnel
vendor.media.liveplayer.enable-mediahal-videodec=1
vendor.media.liveplayer.enable-video-tunnel=1
#suppoort mpeg2 audio in liveplayer
vendor.media.liveplayer.mpeg2-use-ffmpeg-audio-decoder=1
#set probe size on AmIptvMedia
iptv.probesize=8388608
#support report blur softprobe event
media.player.cmcc_report.enable=1
media.amplayer.disable-vcodecs=real,divx,divx3,divx4
media.amplayer.skipvideotype=rv40,wmv1,wmv2,wmv3,rv30
media.amplayer.videolimiter=1
persist.sys.mscanner=false
## add for close sys leds when standby. todo update it when hardware is ready
sys.red.led.path=/sys/class/leds/sys_red/brightness
sys.green.led.path=/sys/class/leds/sys_green/brightness
#ctcc amt midware
#ro.devicesummary=Amlogic S905L3 IPTV
#ro.product.devicesummary=Amlogic S905L3 IPTV
#ro.build.hardware.id=P291
#ro.product.description=Amlogic S905L3 IPTV
#ro.product.chiptype=Amlogic S905L3
ro.product.cpuarchitec=armv71
ro.product.cpu.info=armv71 Processor rev 4 (armv71)
ro.product.flash.info=EMMC 8G
persist.sys.replay=1
#ctcc default home launcher
#sys.deflauncher.pkg=ca.dstudio.atvlauncher.pro
sys.deflauncher.pkg=com.oversea.aslauncher
#sys.deflauncher.cls=ca.dstudio.atvlauncher.screens.launcher.LauncherActivity
sys.deflauncher.cls=com.oversea.aslauncher.ui.main.MainActivity
#ctcc amt setting for spdif ui
persist.sys.spdif.enable=1
#save wifi enable state when suspend
sys.save.suspend.wifi.enable.state=1
#U disk write permission
venor.amlogic.filebrowser.permission=true
#default audio setting
persist.sys.audiooutputmode=HDMI Only PCM
#low battery prompt for bluetooth remote
ro.batterylow.bluetooth.keycode=168
#hdr
persist.sys.hdr.mode=auto
#telecom:suspend, mobile:shutdown
persist.sys.standby.mode=shutdown
#for amlogic 3 ntp service
persist.sys.custom.ntpserver.enable=true
persist.sys.custom.ntpserver1=ntp.aliyun.com
persist.sys.custom.ntpserver2=ntp.tuna.tsinghua.edu.cn
persist.sys.custom.ntpserver3=cn.ntp.org.cn
persist.sys.custom.ntpserver.delay=3000
#reboot softap when wake up
vendor.softap.restart.on_wakeup=true
#telecom:enable cec volume control
persist.sys.cec.enable.volume.key=true
persist.sys.cec.enable.key=true
#ipv6 mode
persist.sys.amlogic.ipv6.policy=auto
net.dhcp6.release.retry_max.pre=1
#discovery interv
net.dhcp.interv.s.arrays=8 31 8 33 8
#disable install third party app
sys.limit.install.app=false
#dns punish
persist.sys.dns.thresh_suc=0
#hide the FileBrowser apk file
sys.filebrowser.hide.apk=false
# 3rd launcher package name, it should not start when system boot up.
# if more than 1 package, used "," to separate, like com.dangbei.tvlauncher,com.test.launcher
#persist.3rd.launcher.packagename=com.dangbei.tvlauncher,com.shafa.launcher
# add for remote enable adb
sys.remote.enable.adb=1
#suspend allow kill app
#sys.suspend.allow.kill.app=true
#suspend kill app name
#sys.suspend.kill.app.name = ctc.android.smart.terminal.iptv
#force vd1 for 3/4 player instances
vendor.hwc.forceOneLayer=1
#force suspend time
#persist.sys.str.forcesuspend=7000
# This is enable switch, middleware app will set "sys.zy.standby.network.state" prop to speed up release eth when standby.
# "sys.zy.standby.network.state": 0 is default, 1 is tr069 start use network to upload, 2 is finish upload.
sys.speed.up.standby.release.eth=1
#eth release delay time, this should less than above force suspend time minus 2000
sys.suspend.release_eth.delay_time=2200
#set wifi hotspot does not allow access Internet default
persist.sys.ipforward.enabled=true
#set for use ipv4 default
ro.ethernet.def_ipv4_on=true
ro.ethernet.def_ipv6_on=true
#set for pm install
sys.disable.pminstall=false
#zhuoying middleware Iptv telecom default epg launcher
#epg.launcher.packagename=com.android.smart.terminal.iptv
#zhuoyin settings hide wifi model
persist.sys.wifi.enable=0
persist.sys.province=guizhou
persist.sys.pminstall.allow=true
#
# ADDITIONAL_BUILD_PROPERTIES
#
ro.bionic.ld.warning=1
ro.art.hiddenapi.warning=1
ro.treble.enabled=true
persist.sys.dalvik.vm.lib.2=libart.so
dalvik.vm.isa.arm.variant=cortex-a9
dalvik.vm.isa.arm.features=default
dalvik.vm.lockprof.threshold=500
net.bt.name=Android
dalvik.vm.stack-trace-dir=/data/anr
ro.build.expect.bootloader=01.01.180822.145544
ro.expect.recovery_id=0x7b8ab6e156b4530776c67275d29d113a0283476c000000000000000000000000重要提示，本教程仅适用于UNP-SJA5型号机顶盒，解锁BL有风险，刷机也有风险，变砖与本人无关，请自行承担相关风险。
Ethan
本文作者
暂无评论