首先 BL 是解锁了的

$ sudo fastboot oem device-info
(bootloader) Device tampered: false
(bootloader) Device unlocked: true
(bootloader) Charger screen enabled: true
(bootloader) Display panel: OKAY [ 0.006s] finished. total time: 0.006s

重启到 bootloader

$ adb reboot bootloader

检查 fastboot 模式下连接是否正常

$ sudo fastboot devices
570b0d9f fastboot

刷入 recovery

$ sudo fastboot flash recovery twrp-3.0.2-2-kenzo.img
target reported max download size of 536870912 bytes
sending 'recovery' (34360 KB)...
OKAY [ 1.079s]
writing 'recovery'...
OKAY [ 0.248s]
finished. total time: 1.327s

但是但我重启到 recovery 后，原来的 recovery 并没有被替换掉

$print face
黑人问号.jpg