212

I have All Android SDK versions(from 1.5 to 2.3.3), and I tried many methods for getting root in Android emulator. I don't use any Android device and test everything on emulator(AVD).

I need to get root access in any one of the Android emulator to use the 'iptables' and 'busybox' functionality. And to use iptables I must have root access. Atleast 'su' command should execute in the terminal emulator.

I also installed z4root application,

But it takes very long time and doesn't finish rooting, and gets stuck. some say that if we downgrade the system to below RC30, this way we can get root access. if this is true, then how to do this? I use both Linux and Windows OS.

Please someone tell me any method to root my emulator.

8
  • I think you can use "Root.apk" stored on filecrop ( VISIONary in android system ) to root the emulator because, at each reboot, it root the system. Z4root can't work because it needs rebooting to make the root access working.Sorry for bad english, I'm french.
    – JeremLeOuf
    Commented Jun 29, 2012 at 7:56
  • Where can i get this ? Is there a manual for this ? Commented Feb 8, 2013 at 8:16
  • 12
    Please note that android emulators already are "rooted". You do not need to do anything to get a root adb shell, as it already runs as root by default. What is discussed here is installing a hacked "su" or similar shim to allow application code to launch helper programs that run as root. Commented Mar 7, 2014 at 15:28
  • 3
    Use Genymotion genymotion.com It's very fast and has root by default.
    – klimat
    Commented Dec 25, 2014 at 15:39
  • 1
    you installed the wrnong image. see here --> stackoverflow.com/questions/43923996/…
    – otto
    Commented Nov 18, 2018 at 18:03

15 Answers 15

176

If you have a virtual device with root access, this should do the job:

$ > adb shell
generic_x86:/ $
generic_x86:/ $ exit
$ > adb root
restarting adbd as root
$ > adb shell
generic_x86:/ #

If you don't, you might be interested in this answer to a different question, which explains how to create an virtual device with root access, with Google APIs (aka Google Play services), but without the Google Play app.

If you really need the Google Play app, you might be interested in other answers which instruct how to root an Android virtual device.

17
  • 93
    Running adb root results in "adbd cannot run as root in production builds". Are you using a particular emulator? Please provide more details.
    – orodbhen
    Commented Jul 22, 2017 at 1:48
  • 6
    You can not use this root for any app.
    – Enyby
    Commented Jul 27, 2017 at 23:09
  • 8
    If anyone is trying to get this to work on the new Google Play system images, adbd is set to secure in ramdisk.img. I was able to work around it by using ramdisk.img from the Google APIs image. I tested on both the 7.0 and 8.0 images.
    – tstaylor7
    Commented Aug 11, 2017 at 21:06
  • 84
    If adb root gives the error adbd cannot run as root in production builds, see stackoverflow.com/a/45668555/1682419 -- You need a "Google APIs System Image" rather than a "Google Play System Image".
    – Jerry101
    Commented Aug 14, 2017 at 6:33
  • 12
    @JRaymond I typed in adb root but nothing printed out after that
    – user7691120
    Commented Jun 8, 2018 at 6:11
101

How to root android emulator (tested on Android 7.1.1/ Nougat)

Requirements:

Instructions

  1. Install the SuperSu.apk
  • Install the SuperSu app firstly, just do drag and drop (if running latest emulator version or sideload through adb i.e adb -e install supersu.apk)

  • After installing it, when you run it shows a screen as shown below indicating “There is no SU binary installed..”. This error just confirms the device is not yet rooted.

enter image description here


  1. Make emulator’ system partition writable
  • As it suggests, we need to give the emulator permission to write system files.

  • Type the following code to accomplish this: emulator -avd {emulator_name} -writable-system

If you have more than one AVD, you can get a list of avds by using the command: emulator -list-avds

Note: Navigate to the emulator folder where Android SDK is installed and open command prompt there by pressing shift and right clicking.


  1. Pushing su binary in system directory
  • Extract the Recovery flashable.zip (containing the su binaries of different architectures)

Important! Only use the su binary that matches your avd architecture e.g x86, arm etc.., and note the path where you extracted these binaries.

  • Make sure you are running adb as root and also you need to remount. Just enter these codes

adb root

adb remount

Now its time to push the su binary:

This is the code I successfully used: adb -e push C:\Users\User1\Desktop\rootemu\x86\su.pie /system/bin/su

(nevermind about my specific location of su binary, any location is okay as long there is no white space)

note: To figure out bin or xbin do in console before: > adb shell, > ls /system/xbin/su

If this fails try this pushing to this directory instead /system/xbin/su. Also for emulators running android 5.1 and below use the su and not su.pie


  1. Change permissions of the su binary
  • Next let’s do a bit of modification of the permissions of su binary. We have to do this in emulator device through adb:
adb -e shell
su root
cd /system/bin
chmod 06755 su

Important!! Take note of su binary path (mine is /system/bin)


  1. Setting the install directive on su binary and set a daemon

Type the codes:

su --install

and for setting up daemon:

su --daemon&

Important!! Take note of spacing


  1. Setting SELinux to Permissive(i.e turning off SE Linux)
  • Finally turn off selinux through this code:

setenforce 0


Open SuperSU app and it may ask to update binaries, you can use Normal method.

Note: If you're experiencing bootloops, rather don't update the binaries, just use it as it is.


That’s pretty much it!!

Open any application requiring SU permissions just to double check and indeed SuperSU ask if you wish to grant it su permissions.

enter image description here

To have the root persist update su binary (using Normal method), then copy system.img from temp directory (Users\AppData\Local\Temp\Android Emulator the file is usually randomly named e.g 1359g.tmp with a large size) and replace default system.img.

Update:

I have noted is is easier to obtain a temporary system image in Linux, than Windows. You can try using snapshot image.

##Update 4 August 2018

With the emergence of emulator 27.3.x it now makes preserving root much easier through snapshot feature (if copying the system.img method isn't working):

Ideally it is more like hibernarig the virtual device with config intact, hence everything is preserved.

##Update 10 December 2023 (unofficial workaround)

With the implementation of Windows Subsystem For Android (WSA) alongside the patch from MustardChef;

It is possible to run Windows Subsystem For Android on Windows 10 and Windows 11 PC using prebuilt binaries with Google Play Store (MindTheGapps) and/or Magisk or KernelSU (root solutions) built in.

The installation steps are pretty much straight-forward as you need to download the prebuilt version(s) available here

enter image description here

Snapshots

You can now save multiple AVD snapshots for a given device configuration and choose which of the saved snapshots to load when you start the emulator. Starting a virtual device by loading a snapshot is much like waking a physical from a sleep state, as opposed to booting it from a powered-off state.

This implies the only requirement to start the emulator is adding the -writable-system parameter to the normal emulator -avd [avdname] command to start the emulator. (Running the emulator just with emulator -avd [avdname] doesn't launch the rooted version/copy or may lead to some error)

Tested on API level 22

Also for bootloop issues see the other post: Android Emulator: How to avoid boot loop after rooting? and updates thereof.

Remarks

Most content in reference was for older android versions and hence the reason for different commands and paths which I modified.

Acknowledgements;

24
  • 1
    note: To figure out bin or xbin do in console before: > adb shell, > ls /system/xbin/su
    – djdance
    Commented Aug 11, 2017 at 14:16
  • 2
    I'm using Pixel 2 XL: People seem to have the same problem with the Pixel XL: forum.xda-developers.com/pixel-xl/how-to/…
    – noraj
    Commented Dec 3, 2018 at 16:20
  • 5
    A step was missing here - after step 1, you need to close the emulator. Because the command in step 2 is actually starting the emulator... If you do not close it, you will get an error saying running multiple emulator is an experimental feature
    – Sira Lam
    Commented Dec 4, 2019 at 7:52
  • 2
    1st link is dead
    – pookie
    Commented Jan 31, 2020 at 14:19
  • 3
    adb root adbd cannot run as root in production builds
    – rulet
    Commented Mar 4, 2021 at 12:37
33

Here is the list of commands you have to run while the emulator is running, I test this solution for an avd on Android 2.2 :

adb shell mount -o rw,remount -t yaffs2 /dev/block/mtdblock03 /system  
adb push su /system/xbin/su  
adb shell chmod 06755 /system  
adb shell chmod 06755 /system/xbin/su

It assumes that the su binary is located in the working directory. You can find su and superuser here : http://forum.xda-developers.com/showthread.php?t=682828. You need to run these commands each time you launch the emulator. You can write a script that launch the emulator and root it.

13
  • 17
    Please include the relevant parts of your blog post here. SO is a place for answers, not links.
    – cHao
    Commented Jun 1, 2011 at 23:13
  • 4
    No such file or directory 'SU'
    – Mahendran
    Commented Feb 14, 2012 at 13:27
  • 4
    This doesn't work on emulator 2.2, 2.3 or 2.3.3 I get only errors for adb push: out of memory, dir is not empty, etc. Commented Feb 28, 2012 at 9:57
  • 2
    @mice: As the error says you can't push the binary because there is not enough space on the virtual device. When launching the emulator you can add the -partition-size option to specify the partition size. Try launching your emulator with tools/emulator -avd MyAndroidVirtualDeviceName -partition-size 256
    – a.b.d
    Commented Dec 3, 2012 at 5:40
  • 2
    On newer emulators the remount command may not work, you may replace: adb shell mount -o rw,remount -t yaffs2 /dev/block/mtdblock03 /system with: adb root adb remount Commented Apr 18, 2016 at 13:15
20

For AVD with 5.1.1 and 6.0 I used next script in windows:

set adb=adb -s emulator-5558
set arch=x64
set pie=
adb start-server
%adb% root
%adb% remount
rem %adb% shell mount -o remount,rw /system
%adb% shell setenforce 0
%adb% install common/Superuser.apk
%adb% push %arch%/su%pie% /system/bin/su
%adb% shell chmod 0755 /system/bin/su
%adb% push %arch%/su%pie% /system/xbin/su
%adb% shell chmod 0755 /system/xbin/su
%adb% shell su --install
%adb% shell "su --daemon&"
rem %adb% shell mount -o remount,ro /system

exit /b

Need UPDATE.zip from SuperSU. Unpacked them to any folder. Create bat file with content above. Do not forget specify necessary architecture and device: set adb=adb -s emulator-5558 and set arch=x64. If you run Android above or equal 5.0, change set pie= to set pie=.pie. Run it. You get temporary root for current run.

If you got error on remount system partition then you need start AVD from command line. See below first step for Android 7.

If you want make it persistent - update binary in SuperSU and store system.img from temp folder as replace of default system.img.

How to convert the resulting temporary root on a permanent

First - it goes to SuperSu. It offers a binary upgrade. Update in the normal way. Reboot reject.

Second - only relevant for emulators. The same AVD. The bottom line is that changes in the system image will not be saved. You need to keep them for themselves.

There are already instructions vary for different emulators.

For AVD you can try to find a temporary file system.img, save it somewhere and use when you start the emulator.

In Windows it is located in the %LOCALAPPDATA%\Temp\AndroidEmulator and has a name something like TMP4980.tmp.

You copy it to a folder avd device (%HOMEPATH%\.android\avd\%AVD_NAME%.avd\), and renamed to the system.img.

Now it will be used at the start, instead of the usual. True if the image in the SDK is updated, it will have the old one.

In this case, you will need to remove this system.img, and repeat the operation on its creation.

More detailed manual in Russian: http://4pda.ru/forum/index.php?showtopic=318487&view=findpost&p=45421931


For android 7 you need run additional steps: 1. Need run emulator manually. Go to sdk folder sdk\tools\lib64\qt\lib. Run from this folder emulator with options -writable-system -selinux disabled Like this:

F:\android\sdk\tools\lib64\qt\lib>F:\android\sdk\tools\emulator.exe -avd 7.0_x86 -verbose -writable-system -selinux disabled
  1. You need restart adbd from root:

    adb -s emulator-5554 root

And remount system:

adb -s emulator-5554 remount

It can be doned only once per run emulator. And any another remount can break write mode. Because of this you not need run of any other commands with remount, like mount -o remount,rw /system.

Another steps stay same - upload binary, run binary as daemon and so on.

Picture from AVD Android 7 x86 with root: AVD Android 7 x86 with root


If you see error about PIE on execute su binary - then you upload to emulator wrong binary. You must upload binary named su.pie inside archive, but on emulator it must be named as su, not su.pie.

13
  • Can you tell me the steps to make the root persistent?
    – Satya
    Commented Dec 23, 2015 at 4:21
  • update binary in SuperSU and store system.img from temp folder as replace of default system.img.
    – Enyby
    Commented Dec 23, 2015 at 14:40
  • I used these steps to get the system.img from temp 1) cp /tmp/android/emulator-X8F7Hr ~/Desktop/system.img 2) copied this system.img from temp in the system-images of Android SDK But when I restart the emulator then the emulator is not in rooted state... Please guide me the correct path
    – Satya
    Commented Dec 24, 2015 at 8:21
  • better copy to avd directory. but first you must update binary in SuperSu in normal mode.
    – Enyby
    Commented Dec 24, 2015 at 14:11
  • I have updated binary in normal mode and copied in AVD directory then also root is not persisting
    – Satya
    Commented Dec 28, 2015 at 5:42
13

I believe that the easiest way is to create an alias for the command sh, e.g.

adb shell
mount -o rw,remount -t yaffs2 /dev/block/mtdblock3 /system
cd /system/bin
cat sh > su && chmod 4775 su

Tested on Android Emulator 3.0 and higher.

3
  • This worked for me too (on x86_64 android 5.02 emulator) whereas the suggestion above to install in xbin did not.
    – Yannick
    Commented Oct 24, 2015 at 16:40
  • 19
    I got mount: '/system' not in /proc/mounts Commented Jun 1, 2019 at 21:51
  • 1
    system failed with 72
    – Duna
    Commented Jan 1, 2020 at 18:38
13
  1. A virtual device without "Play Store" should be used. Note: You can either create one new or edit the settings of the existing one if you have some databases already inside the emulated device.

  2. Once avd is created and is running Open terminal anywhere > in android studio or from start menu

  3. Run adb root

Now you can use adb shell to open device shell window.

If your physical device with developer options is connected you will get message like "adb.exe: more than one device/emulator" in this case you can use command 'adb -e shell'

Other useful note for beginners in adb shell:

Run 'ls' to see all the files. cd to change directory. some letters of the directory name+ TAB to auto complete the name. '..' to go back.

1
  • I appreciate the short, complete answer.
    – Matt
    Commented Aug 18, 2023 at 4:19
6

I know this question is pretty old. But we can able to get root in Emulator with the help of Magisk by following https://github.com/shakalaca/MagiskOnEmulator

Basically, it patch initrd.img(if present) and ramdisk.img for working with Magisk.

4
  • It is working for Android 11 emulator and it is easy, actually best answer in 2021
    – Louis
    Commented Apr 6, 2021 at 18:04
  • Best answer actually
    – HostMAX
    Commented May 12, 2021 at 20:40
  • Highly recommend this. Comes with the added advantage of having magisk ready for modules :)
    – A. Abramov
    Commented Aug 25, 2022 at 22:45
  • Not work in Andorid S
    – wyx
    Commented Dec 6, 2022 at 8:45
6

https://github.com/newbit1/rootAVD save my life .

It root by Magisk

The script simple enough for user enter image description here

0
4

Here my pack with all you need. Or you can use this script:

echo on
set device=emulator-5554
set avd_name=
set adb=d:\Poprygun\DevTools\Android\Android-sdk\platform-tools\adb -s %device%
set emulator=d:\Poprygun\DevTools\Android\Android-sdk\emulator\emulator
set arch=x86
set pie=

echo Close all ANDROID emulators and press any key
pause
start %emulator% -avd Nexus_One_API_25 -verbose -writable-system
echo Wait until ANDROID emulator loading and press any key
pause

%adb% start-server
%adb% root
%adb% remount
%adb% shell setenforce 0
%adb% install D:\SuperSU\SuperSU.apk
%adb% push D:\SuperSU\su\%arch%\su.pie /system/bin/su
%adb% shell chmod 0755 /system/bin/su
%adb% push D:\SuperSU\su\%arch%\su.pie /system/xbin/su
%adb% shell chmod 0755 /system/xbin/su
%adb% shell su --install
%adb% shell "su --daemon&"
pause
exit /b
3

I just replaced and assigned attributes for su to ~/Android/Sdk/system-images/android-22/google_apis/x86/system.img and now on android 5 I always have root even for new systems, it’s enough to install SuperSu.apk

Android 6 is necessary only
adb root
adb shell
>/system/xbin/su --daemon &
>setenfoce 0

after that, SuperSu.apk sees root. But I do not update the binary file

2

Use android image without PlayServices then you'll be able to run add root and access whatever you want.

1

I used part of the method from the solutions above; however, they did not work completely. On the latest version of Andy, this worked for me:

On Andy (Root Shell) [To get, right click the HandyAndy icon and select Term Shell]

Inside the shell, run these commands:

mount -o rw,remount -t yaffs2 /dev/block/mtdblock3 /system
cd /system/bin
cat sh > su && chmod 4775 su

Then, install SuperSU and install SU binary. This will replace the SU binary we just created. (Optional) Remove SuperSU and install Superuser by CWM. Install the su binary again. Now, root works!

1

I tried many of the above suggestions, including SuperSU and couldn't get any to work but found something much simpler that worked for my purposes. In my case, I only wanted to be able to run sqlite at the command prompt. I simply spun up an emulator with an older version of Android (Lollipop) and got root access immediately.

0

I found that default API 23 x86_64 emulator is rooted by default.

1
  • 3
    From what I know, just because you have a # when you type "adb root", doesn't mean that apps can take advantages of root privileges. Any trial to write anywhere in /system resulted in a RO error, even trying to remount it as RW.
    – Fusseldieb
    Commented Jul 10, 2020 at 18:34
-1

Now i will let know the simplest way to root your emulator in few steps using 1 command.

  1. Create or configure emulator.
  2. Check by running your application that your emulator is working or not.
  3. Open cmd and give the path of your sdk platform-tools like as below

C:\Users\XYZ>cd C:\Users\XYZ\AppData\Local\Android\Sdk\platform-tools

if you are not sure that where is your platform tools then goto android studio and open SDK Manager(Click the icon of sdk manager) there you will get the path of your sdk like this ==>C:\Users\XYZ\AppData\Local\Android\Sdk and add platform tools at the end like as below

C:\Users\XYZ\AppData\Local\Android\Sdk\platform-tools

Now follow step 3 i.e Open cmd and give the path of your sdk platform-tools like as below

C:\Users\XYZ>cd C:\Users\XYZ\AppData\Local\Android\Sdk\platform-tools

Step 4: C:\Users\XYZ\AppData\Local\Android\Sdk\platform-tools>adb root

Step 5: C:\Users\XYZ\AppData\Local\Android\Sdk\platform-tools>adb shell

Now you will get the success message as below:

C:\Users\XYZ\AppData\Local\Android\Sdk\platform-tools>adb root adbd is already running as root

Step 6 : XYZ generic # cd data/data//databases/ sqlite3 .tables .schema

Hope it will help. Its worked for me.

1
  • 2
    Pixel 2 API 32 on Mac M1 gives me: adbd cannot run as root in production builds
    – raarts
    Commented Jan 16, 2022 at 12:29

Not the answer you're looking for? Browse other questions tagged or ask your own question.