Rooting Toon (or boxx)

Everything about rooting Toons 1 and 2.

Moderators: marcelr, TheHogNL, Toonz

djxfma
Starting Member
Starting Member
Posts: 11
Joined: Fri Feb 23, 2018 9:07 am

Re: Rooting Toon (or boxx)

Post by djxfma »

@marcelr Really apriciate the help!

I can't download the file from: http://files.domoticaforum.eu/uploads/T ... uImage-nfs[/b]
Because the server gives acces from only known extensions, could you put .txt after it or .zip.

Gonna give it a go after I can download the kernel :D!
marcelr
Global Moderator
Global Moderator
Posts: 1153
Joined: Thu May 10, 2012 10:58 pm
Location: Ehv

Re: Rooting Toon (or boxx)

Post by marcelr »

OK, done. Just chop .zip off the name and you're good to go.
djxfma
Starting Member
Starting Member
Posts: 11
Joined: Fri Feb 23, 2018 9:07 am

Re: Rooting Toon (or boxx)

Post by djxfma »

So I got the tftpboot to work, but I got this error message will search some stuff up see if can that fixed, maybe I need to assign the address for kernel or something?

Code: Select all

U-Boot> tftpboot 0xA1000000 toon/uImage-nfs
Using FEC device
TFTP from server 192.168.5.199; our IP address is 192.168.5.198
Filename 'toon/uImage-nfs'.
Load address: 0xa1000000
Loading: #################################################################
         #################################################################
         ##########################################
done
Bytes transferred = 2510541 (264ecd hex)
U-Boot> bootm
## Booting kernel from Legacy Image at a1000000 ...
   Image Name:   Linux-2.6.36-R07-h21
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2503348 Bytes = 2.4 MiB
   Load Address: a0008000
   Entry Point:  a0008000
   Verifying Checksum ... Bad Data CRC
ERROR: can't get kernel image!
U-Boot>
marcelr
Global Moderator
Global Moderator
Posts: 1153
Joined: Thu May 10, 2012 10:58 pm
Location: Ehv

Re: Rooting Toon (or boxx)

Post by marcelr »

The image I uploaded is 2503412 bytes in size. Maybe your download settings were wrong (ASCII mode?)

To boot, you need to do a lot more than just run bootm.
Will upload an example tonight.
djxfma
Starting Member
Starting Member
Posts: 11
Joined: Fri Feb 23, 2018 9:07 am

Re: Rooting Toon (or boxx)

Post by djxfma »

Update
Ok I did it xD, it was because of the NFS version was not given with the mounting options true the bootargs.
I changed the commands below to the right ones.

Commands I used to get boot to work, and trying to mount rootfs:

Code: Select all

dhcp
setenv serverip 192.168.5.199
setenv autoload no
setenv bootfile toon/uImage-nfs
setenv bootargs console=${console},${baudrate} rootwait root=/dev/nfs nfsroot=192.168.5.199:/srv/tftpboot/toon/rootfs,v3,tcp,nolock rw ip=dhcp

tftpboot 0xA1000000 toon/uImage-nfs
run bootargs; nand read ${loadaddr} kernel; bootm ${loadaddr}
Exports list of the NFS server:

Code: Select all

/srv/tftpboot/toon/rootfs    *(rw,sync,no_root_squash,no_subtree_check)
/srv/tftpboot/toon           *(rw,sync,no_root_squash,no_subtree_check)
marcelr
Global Moderator
Global Moderator
Posts: 1153
Joined: Thu May 10, 2012 10:58 pm
Location: Ehv

Re: Rooting Toon (or boxx)

Post by marcelr »

So it's working now?
djxfma
Starting Member
Starting Member
Posts: 11
Joined: Fri Feb 23, 2018 9:07 am

Re: Rooting Toon (or boxx)

Post by djxfma »

marcelr wrote:So it's working now?
Well the booting went fine, but now little bit stuck on the attaching of ubi.
So then I saw that I completely missed the code already provided by the tutorial..
But still can't seem to get the /dev/mtd4 to work, as well it does not exists at /dev location.'
But it does say it is attached to ubi0 device, already searching some google, but till now did
not find the right magic.

This is the terminal in/output:

Code: Select all

U-Boot> 
BOOTP broadcast 1
DHCP client bound to address 192.168.5.198
U-Boot> setenv serverip 192.168.5.199
U-Boot> tftpboot 0xa1000000 toon/uImage-nfs
Using FEC device
TFTP from server 192.168.5.199; our IP address is 192.168.5.198
Filename 'toon/uImage-nfs'.
Load address: 0xa1000000
Loading: *#################################################################
	 #################################################################
	 ##########################################
done
Bytes transferred = 2510541 (264ecd hex)
U-Boot> setenv bootargs ubi.mtd=4
U-Boot> setenv bootargs ${bootargs} root=/dev/nfs rw nfsroot=192.168.5.199:/srv/tftpboot/toon/rootfs,v3,nolock,tcp console=ttymxc0,115200 loglevel=8
U-Boot> setenv bootargs ${bootargs} mtdparts=mxc_nand:512K@0x00100000(u-boot-env)ro,1536K(splash-image),3M(kernel),3M(kernel-backup),119M(rootfs)
U-Boot> setenv bootargs ${bootargs} ip=192.168.5.198:192.168.5.199:192.168.5.199:255.255.255.0:toon::off
U-Boot> nand read ${loadaddr} kernel

NAND read: device 0 offset 0x300000, size 0x300000
 3145728 bytes read: OK
U-Boot> bootm
## Booting kernel from Legacy Image at a1000000 ...
   Image Name:   Linux-2.6.36-R10-h27
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    1944336 Bytes = 1.9 MiB
   Load Address: a0008000
   Entry Point:  a0008000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
Linux version 2.6.36-R10-h27 (jbraam@dvl) (gcc version 4.5.3 20110223 (prerelease) (GCC) ) #1 PREEMPT Tue Oct 25 20:03:05 CEST 2016
CPU: ARM926EJ-S [xxxxxxx] revision 4 (ARMv5TEJ), cr=xxxxxxxxxx
CPU: VIVT data cache, VIVT instruction cache
Machine: Prodrive B.V ED2.0
Memory policy: ECC disabled, Data cache writeback
On node 0 totalpages: 32768
free_area_init_node: node 0, pgdat c03a119c, node_mem_map c03c5000
  Normal zone: 256 pages used for memmap
  Normal zone: 0 pages reserved
  Normal zone: 32512 pages, LIFO batch:7
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
Kernel command line: ubi.mtd=4 root=/dev/nfs rw nfsroot=192.168.5.199:/srv/tftpboot/toon/rootfs,v3,nolock,tcp console=ttymxc0,115200 loglevel=8 mtdparts=mxc_nand:512K@0x00100000(u-boot-env)ro,1536K(splash-image),3M(kernel),3M(kernel-backup),119M(rootfs) ip=192.168.5.198:192.168.5.199:192.168.5.199:255.255.255.0:toon::off
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 128MB = 128MB total
Memory: 126092k/126092k available, 4980k reserved, 0K highmem
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    DMA     : 0xffa00000 - 0xffe00000   (   4 MB)
    vmalloc : 0xc8800000 - 0xf4000000   ( 696 MB)
    lowmem  : 0xc0000000 - 0xc8000000   ( 128 MB)
    modules : 0xbf000000 - 0xc0000000   (  16 MB)
      .init : 0xc0008000 - 0xc0022000   ( 104 kB)
      .text : 0xc0022000 - 0xc0367000   (3348 kB)
      .data : 0xc037e000 - 0xc03a17a0   ( 142 kB)
Hierarchical RCU implementation.
	RCU-based detection of stalled CPUs is disabled.
	Verbose stalled-CPUs detection is disabled.
NR_IRQS:272
MXC IRQ initialized
MXC GPIO hardware
Console: colour dummy device 80x30
Calibrating delay loop (skipped) preset value.. 199.88 BogoMIPS (lpj=999424)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
Configured for LCD: TM070RDH11
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Switching to clocksource mxc_timer1
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
msgmni has been set to 246
io scheduler noop registered (default)
imx-fb imx-fb.0: PreserveUBootFramebuffer(1): xres=800, yres=480 [skip _update_lcdc]
imx-fb imx-fb.0: PreserveUBootFramebuffer(2): xres=800, yres=480 [skip _update_lcdc]
Console: switching to colour frame buffer device 100x30
imx-fb imx-fb.0: fb0: DISP0 BG fb device registered successfully.
imx-fb imx-fb.0: PreserveUBootFramebuffer(3): xres=800, yres=480 [skip _update_lcdc]
imx-fb imx-fb.0: fb1: DISP0 FG fb device registered successfully.
Serial: IMX driver
imx-uart.0: ttymxc0 at MMIO 0x1000a000 (irq = 20) is a IMX
console [ttymxc0] enabled
imx-uart.1: ttymxc1 at MMIO 0x1000b000 (irq = 19) is a IMX
imx-uart.2: ttymxc2 at MMIO 0x1000c000 (irq = 18) is a IMX
NAND device: K9F1G08U0E detected, disabling sub-page writes
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit)
Scanning device for bad blocks
RedBoot partition parsing not available
5 cmdlinepart partitions found on MTD device mxc_nand
Creating 5 MTD partitions on "mxc_nand":
0x000000100000-0x000000180000 : "u-boot-env"
0x000000180000-0x000000300000 : "splash-image"
0x000000300000-0x000000600000 : "kernel"
0x000000600000-0x000000900000 : "kernel-backup"
0x000000900000-0x000008000000 : "rootfs"
UBI: attaching mtd4 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    126976 bytes
UBI: smallest flash I/O unit:    2048
UBI: VID header offset:          2048 (aligned 2048)
UBI: data offset:                4096
UBI: max. sequence number:       243713
UBI: attached mtd4 to ubi0
UBI: MTD device name:            "rootfs"
UBI: MTD device size:            119 MiB
UBI: number of good PEBs:        952
UBI: number of bad PEBs:         0
UBI: max. allowed volumes:       128
UBI: wear-leveling threshold:    4096
UBI: number of internal volumes: 1
UBI: number of user volumes:     1
UBI: available PEBs:             0
UBI: total number of reserved PEBs: 952
UBI: number of PEBs reserved for bad PEB handling: 9
UBI: max/mean erase counter: 687/255
UBI: image sequence number:  64857957
UBI: background thread "ubi_bgt0d" started, PID 309
at25 spi0.0: 32 KByte at25640B eeprom, pagesize 64
spi_imx spi_imx.0: probed
FEC Ethernet Driver
fec_enet_mii_bus: probed
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
mxc-ehci mxc-ehci.0: initializing i.MX USB Controller
mxc-ehci mxc-ehci.0: portsc setup 1: 0x80000000
mxc-ehci mxc-ehci.0: Work around for USB enabled
ULPI transceiver vendor/product ID 0x0424/0x000d
mxc-ehci mxc-ehci.0: Freescale On-Chip EHCI Host Controller
mxc-ehci mxc-ehci.0: new USB bus registered, assigned bus number 1
mxc-ehci mxc-ehci.0: irq 56, io mem 0x10024000
mxc-ehci mxc-ehci.0: USB 2.0 started, EHCI 1.00
usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb1: Product: Freescale On-Chip EHCI Host Controller
usb usb1: Manufacturer: Linux 2.6.36-R10-h27 ehci_hcd
usb usb1: SerialNumber: mxc-ehci.0
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
mxc-ehci mxc-ehci.2: initializing i.MX USB Controller
mxc-ehci mxc-ehci.2: portsc setup 1: 0x80000000
mxc-ehci mxc-ehci.2: Work around for USB enabled
mxc-ehci mxc-ehci.2: Freescale On-Chip EHCI Host Controller
mxc-ehci mxc-ehci.2: new USB bus registered, assigned bus number 2
mxc-ehci mxc-ehci.2: irq 55, io mem 0x10024400
mxc-ehci mxc-ehci.2: USB 2.0 started, EHCI 1.00
usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb2: Product: Freescale On-Chip EHCI Host Controller
usb usb2: Manufacturer: Linux 2.6.36-R10-h27 ehci_hcd
usb usb2: SerialNumber: mxc-ehci.2
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver usbserial
usbserial: USB Serial Driver core
input: TSC2007 Touchscreen as /devices/virtual/input/input0
rtc-isl1208 1-006f: chip found, driver version 0.3
rtc-isl1208: dev (254:0)
rtc-isl1208 1-006f: rtc core: registered rtc-isl1208 as rtc0
i2c /dev entries driver
tmp431 0-004c: Could not read configuration register (-5)
imx2-wdt imx2-wdt.0: IMX2+ Watchdog Timer enabled. timeout=60s (nowayout=0)
Registered led device: led0
Registered led device: led1
adt7410 0-0048: adt7410 temperature sensor registered.
adt7410 0-0049: adt7410 temperature sensor registered.
nf_conntrack version 0.5.0 (1970 buckets, 7880 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 17
Bridge firewalling registered
rtc-isl1208 1-006f: setting system clock to 2018-02-26 20:18:00 UTC (1519676280)
usb 2-1: new high speed USB device using mxc-ehci and address 2
usb 2-1: New USB device found, idVendor=148f, idProduct=5370
usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 2-1: Product: 802.11 n WLAN
usb 2-1: Manufacturer: Ralink
usb 2-1: SerialNumber: 1.0
eth0: Freescale FEC PHY driver [Generic PHY] (mii_bus:phy_addr=1:10, irq=-1)
IP-Config: Complete:
     device=eth0, addr=192.168.5.198, mask=255.255.255.0, gw=192.168.5.199,
     host=toon, domain=, nis-domain=(none),
     bootserver=192.168.5.199, rootserver=192.168.5.199, rootpath=
Looking up port of RPC 100003/3 on 192.168.5.199
PHY: 1:10 - Link is Up - 100/Full
Looking up port of RPC 100005/3 on 192.168.5.199
VFS: Mounted root (nfs filesystem) on device 0:13.
Freeing init memory: 104K
/bin/sh: can't access tty; job control turned off
/ #
/ # ubiattach -p /dev/mtd4 -O 2048
ubiattach: error!: UBI is not present in the system
/ #
marcelr
Global Moderator
Global Moderator
Posts: 1153
Joined: Thu May 10, 2012 10:58 pm
Location: Ehv

Re: Rooting Toon (or boxx)

Post by marcelr »

I don't think you're booting the right kernel:

Code: Select all

...
## Booting kernel from Legacy Image at a1000000 ...
   Image Name:   Linux-2.6.36-R10-h27
...
That's the native kernel on toon, not the nfs-supporting version that I uploaded.

You don't need the step

Code: Select all

nand read ${loadaddr} kernel
bootm will do.

After booting of the kernel, you fall back to /bin/sh, so there's no operating system present, it's just the kernel that's up and running.
From the bootlog it appears that a rootfs is mounted, but init isn't started properly.

If you do

Code: Select all

printenv
While in u-boot, do you still have the init=/bin/sh somewhere in the u-boot environment?
djxfma
Starting Member
Starting Member
Posts: 11
Joined: Fri Feb 23, 2018 9:07 am

Re: Rooting Toon (or boxx)

Post by djxfma »

Oh daymn.. that makes sense tho. When if I leave out that command line it will not boot at all.
Before you said something about the kernel was downloaded ASCII mode I copied true samba,
but also tried from my RPi straight with: wget, and after I taught off loading the uboot tftpboot
uploaded kernel by forcing it to see it. But proberly not the way to go.

Stuck at kernel bad CRC when not using the nand commandline.

Code: Select all

tftpboot 0xa1000000 toon/uImage-nfs
Using FEC device
TFTP from server 192.168.5.199; our IP address is 192.168.5.198
Filename 'toon/uImage-nfs'.
Load address: 0xa1000000
Loading: #################################################################
         #################################################################
         ##########################################
done
Bytes transferred = 2510541 (264ecd hex)
U-Boot> bootm
## Booting kernel from Legacy Image at a1000000 ...
   Image Name:   Linux-2.6.36-R07-h21
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2503348 Bytes = 2.4 MiB
   Load Address: a0008000
   Entry Point:  a0008000
   Verifying Checksum ... Bad Data CRC
ERROR: can't get kernel image!
U-Boot>
marcelr
Global Moderator
Global Moderator
Posts: 1153
Joined: Thu May 10, 2012 10:58 pm
Location: Ehv

Re: Rooting Toon (or boxx)

Post by marcelr »

OK. I uploaded the kernel image again. Properly zipped this time.
Download, unzip and try again, if you want.
djxfma
Starting Member
Starting Member
Posts: 11
Joined: Fri Feb 23, 2018 9:07 am

Re: Rooting Toon (or boxx)

Post by djxfma »

Thanks for that! The kernel now loads properly.
But the command when booted up still not worked.
After that I saw the following thing.

Code: Select all

U-Boot> tftpboot 0xa1000000 toon/uImage-nfs
Using FEC device
TFTP from server 192.168.5.199; our IP address is 192.168.5.198
Filename 'toon/uImage-nfs'.
Load address: 0xa1000000
Loading: *#################################################################
	 #################################################################
	 #########################################
done
Bytes transferred = 2503412 (2632f4 hex)
U-Boot> setenv bootargs ubi.mtd=4
U-Boot> setenv bootargs ${bootargs} root=/dev/nfs rw nfsroot=192.168.5.199:/srv/tftpboot/toon/rootfs,v3,nolock,tcp console=ttymxc0,115200 loglevel=8
U-Boot> setenv bootargs ${bootargs} mtdparts=mxc_nand:512K@0x00100000(u-boot-env)ro,1536K(splash-image),3M(kernel),3M(kernel-backup),119M(rootfs)
U-Boot> setenv bootargs ${bootargs} ip=192.168.5.198:192.168.5.199:192.168.5.199:255.255.255.0:toon::off
U-Boot> bootm
## Booting kernel from Legacy Image at a1000000 ...
   Image Name:   Linux-2.6.36-R07-h21
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2503348 Bytes = 2.4 MiB
   Load Address: a0008000
   Entry Point:  a0008000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
Linux version 2.6.36-R07-h21 (marcelr@laptop46.wfw.wtb.tue.nl) (gcc version 4.5.3 20110223 (prerelease) (GCC) ) #1 PREEMPT Wed Feb 24 19:02:12 CET 2016
CPU: ARM926EJ-S [41069264] revision 4 (ARMv5TEJ), cr=00053177
CPU: VIVT data cache, VIVT instruction cache
Machine: Prodrive B.V ED2.0
Memory policy: ECC disabled, Data cache writeback
On node 0 totalpages: 32768
free_area_init_node: node 0, pgdat c04b2a14, node_mem_map c04da000
  Normal zone: 256 pages used for memmap
  Normal zone: 0 pages reserved
  Normal zone: 32512 pages, LIFO batch:7
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
Kernel command line: ubi.mtd=4 root=/dev/nfs rw nfsroot=192.168.5.199:/srv/tftpboot/toon/rootfs,v3,nolock,tcp console=ttymxc0,115200 loglevel=8 mtdparts=mxc_nand:512K@0x00100000(u-boot-env)ro,1536K(splash-image),3M(kernel),3M(kernel-backup),119M(rootfs) ip=192.168.5.198:192.168.5.199:192.168.5.199:255.255.255.0:toon::off
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 128MB = 128MB total
Memory: 124984k/124984k available, 6088k reserved, 0K highmem
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    DMA     : 0xffa00000 - 0xffe00000   (   4 MB)
    vmalloc : 0xc8800000 - 0xf4000000   ( 696 MB)
    lowmem  : 0xc0000000 - 0xc8000000   ( 128 MB)
    modules : 0xbf000000 - 0xc0000000   (  16 MB)
      .init : 0xc0008000 - 0xc0025000   ( 116 kB)
      .text : 0xc0025000 - 0xc044d000   (4256 kB)
      .data : 0xc046a000 - 0xc04b3020   ( 293 kB)
Hierarchical RCU implementation.
	RCU-based detection of stalled CPUs is disabled.
	Verbose stalled-CPUs detection is disabled.
NR_IRQS:272
MXC IRQ initialized
MXC GPIO hardware
Console: colour dummy device 80x30
Calibrating delay loop... 199.88 BogoMIPS (lpj=999424)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
cfg80211: Calling CRDA to update world regulatory domain
Switching to clocksource mxc_timer1
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
msgmni has been set to 244
io scheduler noop registered (default)
imx-fb imx-fb.0: PreserveUBootFramebuffer(1): xres=800, yres=480 [skip _update_lcdc]
imx-fb imx-fb.0: PreserveUBootFramebuffer(2): xres=800, yres=480 [skip _update_lcdc]
Console: switching to colour frame buffer device 100x30
imx-fb imx-fb.0: fb0: DISP0 BG fb device registered successfully.
imx-fb imx-fb.0: PreserveUBootFramebuffer(3): xres=800, yres=480 [skip _update_lcdc]
imx-fb imx-fb.0: fb1: DISP0 FG fb device registered successfully.
Serial: IMX driver
imx-uart.0: ttymxc0 at MMIO 0x1000a000 (irq = 20) is a IMX
console [ttymxc0] enabled
imx-uart.1: ttymxc1 at MMIO 0x1000b000 (irq = 19) is a IMX
imx-uart.2: ttymxc2 at MMIO 0x1000c000 (irq = 18) is a IMX
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit)
Scanning device for bad blocks
RedBoot partition parsing not available
5 cmdlinepart partitions found on MTD device mxc_nand
Creating 5 MTD partitions on "mxc_nand":
0x000000100000-0x000000180000 : "u-boot-env"
0x000000180000-0x000000300000 : "splash-image"
0x000000300000-0x000000600000 : "kernel"
0x000000600000-0x000000900000 : "kernel-backup"
0x000000900000-0x000008000000 : "rootfs"
UBI: attaching mtd4 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    129024 bytes
UBI: smallest flash I/O unit:    2048
UBI: sub-page size:              512
UBI: VID header offset:          512 (aligned 512)
UBI: data offset:                2048
UBI error: validate_ec_hdr: bad VID header offset 2048, expected 512
UBI error: validate_ec_hdr: bad EC header
UBI error: ubi_io_read_ec_hdr: validation failed for PEB 0
UBI error: ubi_init: cannot attach mtd4
marcelr
Global Moderator
Global Moderator
Posts: 1153
Joined: Thu May 10, 2012 10:58 pm
Location: Ehv

Re: Rooting Toon (or boxx)

Post by marcelr »

Try and skip this one:

Code: Select all

setenv bootargs ubi.mtd=4
Some toons have a flash layout that's not standard, which results in this error:

Code: Select all

UBI error: validate_ec_hdr: bad VID header offset 2048, expected 512
UBI error: validate_ec_hdr: bad EC header
UBI error: ubi_io_read_ec_hdr: validation failed for PEB 0
UBI error: ubi_init: cannot attach mtd4
You can attach the ubi later on, manually, using ubiattach. See my post, from a few days ago.
djxfma
Starting Member
Starting Member
Posts: 11
Joined: Fri Feb 23, 2018 9:07 am

Re: Rooting Toon (or boxx)

Post by djxfma »

Bin a few day's I could not get it to work, the ubbiattach all the time there was no ubi device or something allong that line.
But I looked back at the log file and googled for some time understanding the way how ubi works and reading from nand.
And errors it gave, in screen before posted it already is showing the error, that the VID Header was 512 some how when it tried to mounting the mtd4 with the attaching of ubi. There is an simple fix for it and its using ubi.mtd=4,2048 so it will take that VID header and apply it at mounting and reading it from NAND.

After the command provided with /dev/ubi0:rootfs did not worked, and was telling that the argument was not right, so found out that it should be ubi0:rootfs instead of /dev/ubi0:rootfs. So with the code below I got in, and got the rootfs mounted, then I went in first because chroot did not work, because the busybox did not had any execution permissions xD lel.. so fixed that with a simple chmod +x /mnt/rootfs/bin/busybox.

U-Boot:

Code: Select all

dhcp
setenv serverip 192.168.5.199
tftpboot 0xa1000000 toon/uImage-nfs
setenv bootargs ubi.mtd=4,2048
setenv bootargs ${bootargs} root=/dev/nfs rw nfsroot=192.168.5.199:/srv/tftpboot/toon/rootfs,v3,nolock,tcp console=ttymxc0,115200 loglevel=8
setenv bootargs ${bootargs} mtdparts=mxc_nand:512K@0x00100000(u-boot-env)ro,1536K(splash-image),3M(kernel),3M(kernel-backup),119M(rootfs)
setenv bootargs ${bootargs} ip=192.168.5.198:192.168.5.199:192.168.5.199:255.255.255.0:toon::off
bootm
Bash:

Code: Select all

mount -a
cat /proc/devices | grep ubi0
mknod /dev/ubi0 c 252 0
mkdir /mnt/rootfs
mount -t ubifs ubi0:rootfs /mnt/rootfs
chmod +x /mnt/rootfs/bin/busybox
chroot /mnt/rootfs
Now gonna do the install of the opkg's xD
Thanks for all the help!! Learned a lot from this lel.
TheHogNL
Forum Moderator
Forum Moderator
Posts: 2125
Joined: Sun Aug 20, 2017 8:53 pm

Re: Rooting Toon (or boxx)

Post by TheHogNL »

Great job! This should be in the manual section as a new topic 'how to boot a possible bricked toon from tftp/nfs'
Member of the Toon Software Collective
marcelr
Global Moderator
Global Moderator
Posts: 1153
Joined: Thu May 10, 2012 10:58 pm
Location: Ehv

Re: Rooting Toon (or boxx)

Post by marcelr »

It's all here:
viewtopic.php?f=87&t=8743&hilit=dead+as ... 270#p79224
Will add the mount/chroot bits and copy it to the manuals section. Job for the weekend.
Post Reply

Return to “Toon Rooting”