Wrote up a complete BE2012 → Ubuntu Touch 24.04 install path that runs entirely from macOS — no MSMDownloadTool, no borrowed Windows box, no VM.

Repo: https://github.com/dcherrera/n100-be2012-crossflash

What it covers:

EDL cross-flash from macOS via bkerler/edl driven by an XML-based partition plan generator. Sidesteps the patched-MSM project-ID guard by never implementing it. Uses OnePlus's own signed Firehose loader, vendored via the bkerler/Loaders submodule.

Bootloader unlock via the OnePlus carrier-shim app removal trick (the five packages holding sys.oem_unlock_allowed=0). No SWID hex-edit required for the unlock itself; the param exploit is documented in the repo as Plan B if the carrier-shim approach ever stops working.

UBports recovery patching on-device via magiskboot from the Magisk APK, because the rubencarneiro recovery's gpg 1.4.13 can't verify the SHA512 sigs on modern system-image files. No firmware rebuild needed.

A SIM-init binary patch on /usr/sbin/ofonod that fixes a silent blocker leaving Modem.Features stuck at ['sim'] on first boot. Disassembly + offset table in the README.

Reproducible from a fresh clone — 7 shell scripts, ~230 KB of source. Tested on a single unit. Brick risk is the usual EDL-low.

Carrier caveats (T-Mobile bands only, Verizon SIMs read but won't sustain attach) in the README's cellular section.

Standing on the shoulders of the BE2015 install-success thread for the unlock approach, and rubencarneiro/billie2 for the bootstrap images.

Your BE2015 install path was useful prior art for cracking the BE2012 (T-Mobile US, not Metro) variant — same chipset, slightly different blockers. Sharing in the spirit of reciprocity.

Full BE2012 installer up at https://github.com/dcherrera/n100-be2012-crossflash. macOS-native EDL flash (no MSMDownloadTool needed), plus a small binary patch to /usr/sbin/ofonod that fixes a SIM-init blocker which leaves Modem.Features stuck at ['sim'] on first boot — same modem firmware family, may be relevant to BE2015 users on certain SIMs too. README has the offset table if anyone wants to verify against their build.

Also confirms your "T-Mobile SIM works, Verizon SIM doesn't" observation on the BE82CB modem firmware — same outcome on our end, since the modem firmware is T-Mobile-band tuned.

I successfully flashed ubuntu touch on it. I bought this model not knowing it wouldn't work. So I spent a few day putting together a work around because honestly it just sounded like a fun challenge. You can look through my findings here. https://github.com/dcherrera/n100-be2012-crossflash. Just a heads up, you should be able to clone this and claude code should be able to orient itself and help you get it done. i tried very hard to make sure the documentation was complete.