Please post your questions/tips/remarks related to rooting Eneco's Toon here.
Rooting guide: https://www.domoticaforum.eu/viewtopic. ... 00&t=11235
Moderators: marcelr, Toonz, TheHogNL, TerrorSource
Verifying Checksum ... Bad Data CRC
ERROR: can't get kernel image!
---------------------------------------------------------
Welcome to the bootloader, adventurous adventurer.
We congratulate you on your perseverance and inventivity!
Would you like an easier way in?
Please visit quby.com/open-system for more information.
Game on! :)
---------------------------------------------------------
marcelr wrote:I recently got my hands on a newer toon, with boot loader version 2010.9-R10.
It was built a few weeks after Ierlandfan published the rooting method for toon, and most probably can be found on any toon with serial numbers starting with 16 (production year 2016).
The guys at Quby haven't been idle in making access to toon harder. This version has a properly hashed boot loader password (SHA256), and when you try to access it through the screwdriver method, it no longer drops you to a shell, instead you get this:
- Code: Select all
Verifying Checksum ... Bad Data CRC
ERROR: can't get kernel image!
---------------------------------------------------------
Welcome to the bootloader, adventurous adventurer.
We congratulate you on your perseverance and inventivity!
Would you like an easier way in?
Please visit quby.com/open-system for more information.
Game on! :)
---------------------------------------------------------
While I admire the sense of humour of the developers, accessing a toon with this boot loader version is a bit tougher (but not impossible).
grtz,
marcelr
#
# config file for Eneco toon thermostat.
#
# this device has a Freescale i.MX27 processor, 128MB NAND flash, and a
# non-standard JTAG interface
# load default processor cfg:
source [find target/imx27.cfg]
imx27.cpu arm7_9 fast_memory_access enable
#imx27.cpu arm7_9 dbgrq enable
reset_config separate
reset_config trst_open_drain
jtag_ntrst_assert_width 50
$_TARGETNAME configure -event reset-init { toon_init }
# set up NAND flash:
nand device toon.nand mxc imx27.cpu mx27 noecc biswap
proc toon_init { } {
#reset_config trst_and_srst srst_pulls_trst
# reset the board correctly
adapter_khz 500
reset run
reset halt
}
#! /bin/sh
# script for configuring toon u-boot
#
./mkconfig ed20 arm arm926ejs ed20 prodrive mx27
# set to wherever you unpacked the quby openembedded tree
OE_ROOT=/home/toon
# add toolchain for toon to the $PATH
PATH=$PATH:$OE_ROOT/oe/qb2/tmp/sysroots/x86_64-linux/usr/qb2/bin/
export PATH
CROSS_COMPILE=arm-hae-linux-gnueabi-
export CROSS_COMPILE
make
Users browsing this forum: No registered users and 1 guest