前提，android宿主有运行telnet：busybox telnetd -l /system/bin/sh&
file:/usr/bin/runviatelnet

#!/usr/bin/bash
name=$(basename $(readlink -f $0))
exec 3<>/dev/tcp/localhost/23
echo -e "$name $*\r\nexit\r\n" >&3
cat <&3 >>/dev/null


ln /usr/bin/runviatelnet /usr/bin/reboot

重启时，只需在chroot里的系统执行reboot