记录一下三星 S23-Ultra OneUI 8.0 解锁 bl 并刷入 GKI 内核 (KernelSU Next)

0. 固件下载

OneUI 8.0
https://www.sammobile.com/samsung/galaxy-s23-ultra/firmware/SM-S9180/TGY/download/S9180ZHU6EYI5/1964468/
或者
https://samfw.com/firmware/SM-S9180/BRI/S9180ZHU6EYI5

OneUI 7.0 最后一个版本
https://www.sammobile.com/samsung/galaxy-s23-ultra/firmware/SM-S9180/TGY/download/S9180ZHS6DYI3/1960560/

1. 修改固件

GKI 内核: https://github.com/zzh20188/GKI_KernelSU_SUSFS/releases

# 下载这个工具
https://github.com/libxzr/vbmeta-disable-verification/releases/download/v1.0/vbmeta-disable-verification.zip
unzip vbmeta-disable-verification.zip -d vbmeta-disable-verification

# 解压固件
unzip S9180ZHS6DYI3_S9180OZS6DYI3_TGY.zip -d S9180ZHS6DYI3_S9180OZS6DYI3_TGY
unzip SAMFW.COM_SM-S9180_BRI_S9180ZHU6EYI5_fac.zip -d SAMFW.COM_SM-S9180_BRI_S9180ZHU6EYI5_fac

# 获取 OneUI 7 的 BL
cd S9180ZHS6DYI3_S9180OZS6DYI3_TGY/
mkdir -p BL_S9180ZHS6DYI3_S9180ZHS6DYI3_MQB100967487_REV00_user_low_ship_MULTI_CERT
tar xvf BL_S9180ZHS6DYI3_S9180ZHS6DYI3_MQB100967487_REV00_user_low_ship_MULTI_CERT.tar.md5 -C BL_S9180ZHS6DYI3_S9180ZHS6DYI3_MQB100967487_REV00_user_low_ship_MULTI_CERT

# 解压 AP
cd SAMFW.COM_SM-S9180_BRI_S9180ZHU6EYI5_fac
mkdir -p AP_S9180ZHU6EYI5_S9180ZHU6EYI5_MQB101072764_REV00_user_low_ship_MULTI_CERT_meta_OS16
tar xvf AP_S9180ZHU6EYI5_S9180ZHU6EYI5_MQB101072764_REV00_user_low_ship_MULTI_CERT_meta_OS16.tar.md5 -C AP_S9180ZHU6EYI5_S9180ZHU6EYI5_MQB101072764_REV00_user_low_ship_MULTI_CERT_meta_OS16

# 修改 AP 的 vbmeta_system
cd AP_S9180ZHU6EYI5_S9180ZHU6EYI5_MQB101072764_REV00_user_low_ship_MULTI_CERT_meta_OS16/
lz4 -d vbmeta_system.img.lz4 vbmeta_system.img
../../vbmeta-disable-verification/x86_64/vbmeta-disable-verification vbmeta_system.img
rm vbmeta_system.img.lz4
lz4 -B6 --content-size vbmeta_system.img vbmeta_system.img.lz4
rm vbmeta_system.img

# 修改 AP 的 boot
wget https://github.com/WildKernels/GKI_KernelSU_SUSFS/releases/download/v1.5.9-r36/WKSU-13861-android13-5.15.178-2025-03-boot.img -O boot.img
rm boot.img.lz4
lz4 -B6 --content-size boot.img boot.img.lz4
rm boot.img

# 打包 AP
tar -cvf ../AP_mod.tar *
cd ..

# 解压 BL
mkdir -p BL_S9180ZHU6EYI5_S9180ZHU6EYI5_MQB101072764_REV00_user_low_ship_MULTI_CERT
tar xvf BL_S9180ZHU6EYI5_S9180ZHU6EYI5_MQB101072764_REV00_user_low_ship_MULTI_CERT.tar.md5 -C BL_S9180ZHU6EYI5_S9180ZHU6EYI5_MQB101072764_REV00_user_low_ship_MULTI_CERT
cd BL_S9180ZHU6EYI5_S9180ZHU6EYI5_MQB101072764_REV00_user_low_ship_MULTI_CERT

# 修改 BL 的 abl
cp ../../S9180ZHS6DYI3_S9180OZS6DYI3_TGY/BL_S9180ZHS6DYI3_S9180ZHS6DYI3_MQB100967487_REV00_user_low_ship_MULTI_CERT/abl.elf.lz4 .


# 修改 BL 的 vbmeta
lz4 -d vbmeta.img.lz4 vbmeta.img
../../vbmeta-disable-verification/x86_64/vbmeta-disable-verification vbmeta.img
rm vbmeta.img.lz4
lz4 -B6 --content-size vbmeta.img vbmeta.img.lz4
rm vbmeta.img

# 打包 BL
tar -cvf ../BL_mod.tar *
cd ..

2. 刷入固件

# 下载 odin4
yay -Sy odin4-cli

# 跨版本升级记得先退出 Samsung 和 Google 账号
# 手机进入 Download mode, 刷入，保留数据就刷 HOME_CSC
odin4 -a AP_mod.tar -b BL_mod.tar -c CP_S9180ZCU6EYI5_CP31542714_MQB101069429_REV00_user_low_ship_MULTI_CERT.tar.md5 -s CSC_OZS_S9180OZS6EYI5_MQB101072764_REV00_user_low_ship_MULTI_CERT.tar.md5

3. 懒狗版

我个人还是推荐自己动手的，但是做出来了还是分享一下

https://dl.qiedd.com/android/Samsung