Rooting Toon (or boxx)

[glsf91]

Hi all,

This weekend I'd like to work on it, I haven't opened it yet, so I don't know the currect software version and so on.

You don't have to open it to get the software version. You can find it in the settings under software.

[iMars]

@iMars:

You point at a document that comprehensively describes the steps to take to get into a Toon. So yes, this is the way to go.

Ok, thanks! I'll go from there

Last question before i'll begin, my Toon has now software version 3.6.3 and it's asking me to upgrade him to 4.10.6. Shall I do that? Or not?

[marcelr]

I'd root it first, and then upgrade. Saves some hassle in rooting.

[iMars]

Ok, done everything till the moment you have to reboot...

Instead of that, I've read that you can also use the reset button...
I get this:

Code: Select all

usb 2-1: SerialNumber: 00e04c000001
 (print_boot_msg)
Please wait: booting... (print_boot_msg)
* Kernel            2.6.36-R10-h27 (print_boot_msg)
* Firmware          qb2/ene/4.10.6-1196-0 (print_boot_msg)
* Hostname          eneco-001-016676 (print_boot_msg)
==DriverVersion: v2.6.6.0.20120405==
MAC Address from efuse= 6c-71-d9-3c-42-48
usbcore: registered new interface driver r871x_usb_drv
usbcore: registered new interface driver rt2870
Loading iptables settings: iptables.
 (print_boot_msg)
Configuring network interfaces...  (print_boot_msg)
Configuring network interfaces... 
Running 'ifup -a' in the foreground (ifup-fg)
ifup: interface lo already configured
eth0: Freescale FEC PHY driver [Generic PHY] (mii_bus:phy_addr=1:10, irq=-1)
udhcpc: started, v1.27.2
udhcpc: sending discover
udhcpc: sending discover
udhcpc: sending discover
Lease failing, starting in bg: udhcpc -b -R -i eth0 -A 5 -p /var/run/udhcpc.eth0.pid -H eneco-001-016676
udhcpc: option -h NAME is deprecated, use -x hostname:NAME
udhcpc: started, v1.27.2
udhcpc: no lease, failing
udhcpc: sending discover
Successfully initialized wpa_supplicant
rfkill: Cannot get wiphy information
ioctl[SIOCSIWAP]: Operation not permitted
udhcpc: sending discover
udhcpc: started, v1.27.2
udhcpc: sending discover
udhcpc: sending discover
udhcpc: sending discover
Lease failing, already running in bg: udhcpc -b -R -i eth0 -A 5 -p /var/run/udhcpc.eth0.pid -H eneco-001-016676
udhcpc: no lease, forking to background
Lease failing, starting in bg: udhcpc -b -R -i wlan0 -A 5 -p /var/run/udhcpc.wlan0.pid -H eneco-001-016676
udhcpc: no lease, failing
udhcpc: option -h NAME is deprecated, use -x hostname:NAME
udhcpc: started, v1.27.2
* Wired (eth0)      00:0f:11:01:f6:0f  [No IP from DHCP Server] (print_boot_msg)
udhcpc: sending discover
* Wireless (wlan0)  6c:71:d9:3c:42:48  [No IP from DHCP Server] (print_boot_msg)
Setting up IP spoofing protection: rp_filter.
udhcpc: sending select for 10.0.0.110
udhcpc: lease of 10.0.0.110 obtained, lease time 600
/etc/udhcpc.d/50default: Adding DNS 10.0.0.1
/etc/udhcpc.d/50default: Adding DNS 84.116.46.21
INIT: Entering runlevel: 5dding 
/etc/udhcpc.d/70prepend-google-pub-dns: Prepending DNS 8.8.8.8 (skip with /mnt/persist/udhcpc-skip-prepend-google-pub-dns)
Starting syslogd/klogd: done
HCBv2 apps started via runlevels, performing 'addstartables && reload && init 5 or 5'.
HCBv2 adding: comm eventmgr kpi pwrusage scsync smartplug thermstat usermsg weather bxtproxy config log rrd watchdog hue p1 zwave lighttpd.
HCBv2 startables unchanged, not writing /etc/inittab.
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
imx-fb imx-fb.0: PreserveUBootFramebuffer(4): xres=800, yres=480 [do _update_lcdc]
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
INIT: Id "gett" respawning too fast: disabled for 5 minutes
r8711_wx_set_scan: IW_SCAN_THIS_ESSID, ssid=iRouter, len=7
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
INIT: Id "gett" respawning too fast: disabled for 5 minutes

I've got bootloader: U-Boot 2010.09-R8, so that works fine...

[iMars]

Frustrating I can't edit my post, as it isn't posted yet...
This is what I get whilst reboot:

Code: Select all

/ # reboot
WARNING: could not determine runlevel - doing soft reboot
  (it's better to use shutdown instead of reboot from the command line)
shutdown: timeout opening/writing control channel /dev/initctl
init: timeout opening/writing control channel /dev/initctl
/ # shutdown
Usage:    shutdown [-akrhHPfnc] [-t secs] time [warning message]
                  -a:      use /etc/shutdown.allow
                  -k:      don't really shutdown, only warn.
                  -r:      reboot after shutdown.
                  -h:      halt after shutdown.
                  -P:      halt action is to turn off power.
                  -H:      halt action is to just halt.
                  -f:      do a 'fast' reboot (skip fsck).
                  -F:      Force fsck on reboot.
                  -n:      do not go through "init" but go down real fast.
                  -c:      cancel a running shutdown.
                  -t secs: delay between warning and kill signal.
                  ** the "time" argument is mandatory! (try "now") **
/ # shutdown -r now
shutdown: timeout opening/writing control channel /dev/initctl
init: timeout opening/writing control channel /dev/initctl
/ # shutdown -rf now
shutdown: timeout opening/writing control channel /dev/initctl
init: timeout opening/writing control channel /dev/initctl
/ # 

Code: Select all

/ # cat /etc/inittab 
# /etc/inittab: init(8) configuration.
# $Id: inittab,v 1.91 2002/01/25 13:35:21 miquels Exp $

# The default runlevel.
id:5:initdefault:

# Boot-time system configuration/initialization script.
# This is run first except when booting in emergency (-b) mode.
si::sysinit:/etc/init.d/rcS

# What to do in single-user mode.

# /etc/init.d executes the S and K scripts upon change
# of runlevel.
#
# Runlevel 0 is halt.
# Runlevel 1 is single-user.
# Runlevels 2-5 are multi-user.
# Runlevel 6 is reboot.

l0:0:wait:/etc/init.d/rc 0
l1:1:wait:/etc/init.d/rc 1
l2:2:wait:/etc/init.d/rc 2
l3:3:wait:/etc/init.d/rc 3
l4:4:wait:/etc/init.d/rc 4
l5:5:wait:/etc/init.d/rc 5
l6:6:wait:/etc/init.d/rc 6
# Normally not reached, but fallthrough in case of emergency.
z6:6:respawn:/sbin/sulogin

# HCBv2 static stuff
#ovpn:235:respawn:/usr/sbin/openvpn --config /etc/openvpn/vpn.conf --verb 0 >/dev/null 2>&1
qtqt:245:respawn:/usr/bin/startqt >/dev/null 2>&1
gett:235:respawn:/sbin/getty -L 115200 ttymxc0 vt102

# WARNING: auto-managed by '/etc/init.d/HCBv2 inittabwrap' with '/HCBv2/etc/start.d/*'
#          lines containing 'inittabwrap' will be removed automagically.
netc:235:respawn:/etc/init.d/HCBv2 inittabwrap hcb_netcon
comm:345:respawn:/etc/init.d/HCBv2 inittabwrap hcb_comm
even:345:respawn:/etc/init.d/HCBv2 inittabwrap happ_eventmgr
kpik:345:respawn:/etc/init.d/HCBv2 inittabwrap happ_kpi
pwru:345:respawn:/etc/init.d/HCBv2 inittabwrap happ_pwrusage
scsy:345:respawn:/etc/init.d/HCBv2 inittabwrap happ_scsync
smar:345:respawn:/etc/init.d/HCBv2 inittabwrap happ_smartplug
ther:345:respawn:/etc/init.d/HCBv2 inittabwrap happ_thermstat
user:345:respawn:/etc/init.d/HCBv2 inittabwrap happ_usermsg
weat:345:respawn:/etc/init.d/HCBv2 inittabwrap happ_weather
bxtp:345:respawn:/etc/init.d/HCBv2 inittabwrap hcb_bxtproxy
conf:345:respawn:/etc/init.d/HCBv2 inittabwrap hcb_config
logl:345:respawn:/etc/init.d/HCBv2 inittabwrap hcb_log
rrdr:345:respawn:/etc/init.d/HCBv2 inittabwrap hcb_rrd
watc:345:respawn:/etc/init.d/HCBv2 inittabwrap hcb_watchdog
hueh:345:respawn:/etc/init.d/HCBv2 inittabwrap hdrv_hue
p1p1:345:respawn:/etc/init.d/HCBv2 inittabwrap hdrv_p1
zwav:345:respawn:/etc/init.d/HCBv2 inittabwrap hdrv_zwave
ligh:345:respawn:/etc/init.d/HCBv2 inittabwrap lighttpd
# end of 'inittabwrap' section.

/ # 

Code: Select all

/ # cat /etc/passwd 
root::0:0:root:/root:/bin/sh
daemon:*:1:1:daemon:/usr/sbin:/bin/sh
bin:*:2:2:bin:/bin:/bin/sh
sys:*:3:3:sys:/dev:/bin/sh
sync:*:4:65534:sync:/bin:/bin/sync
games:*:5:60:games:/usr/games:/bin/sh
man:*:6:12:man:/var/cache/man:/bin/sh
lp:*:7:7:lp:/var/spool/lpd:/bin/sh
mail:*:8:8:mail:/var/mail:/bin/sh
News:*:9:9:News:/var/spool/News:/bin/sh
uucp:*:10:10:uucp:/var/spool/uucp:/bin/sh
proxy:*:13:13:proxy:/bin:/bin/sh
www-data:*:33:33:www-data:/var/www:/bin/sh
backup:*:34:34:backup:/var/backups:/bin/sh
list:*:38:38:Mailing List Manager:/var/list:/bin/sh
irc:*:39:39:ircd:/var/run/ircd:/bin/sh
gnats:*:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
nobody:*:65534:65534:nobody:/nonexistent:/bin/sh
/ # 

[marcelr]

If you can get in through dropbear (ssh) upload the busybox packages from this forum to toon and install.
You can find them here:
viewtopic.php?f=87&t=11230&start=315#p84518

Then your gettys work again

and your password manager too

[iMars]

If you can get in through dropbear (ssh) upload the busybox packages from this forum to toon and install.
You can find them here:
viewtopic.php?f=87&t=11230&start=315#p84518

Then your gettys work again

and your password manager too

How do I download it to Toon? In the first shell there isn't a network connection... or is it possible to get it via USB drive?

[marcelr]

Do you have dropbear working on your toon?
If so, you also have scp, which can transfer files from one computer to another and back.
You will need to connect your toon to a network (wired or wireless).

[iMars]

Do you have dropbear working on your toon?
If so, you also have scp, which can transfer files from one computer to another and back.
You will need to connect your toon to a network (wired or wireless).

I have no network after “run boot_nand”...
I’ll try tomorrow wired on my switch

[iMars]

Made some great steps today. I used my linux skills and found out that there was no connection because the link was down.
So I brought up the interface, added an ip address and a route:

Code: Select all

/ # ip
BusyBox v1.27.2 (2017-10-03 14:20:01 CEST) multi-call binary.

Usage: ip [OPTIONS] address|route|link|tunnel|neigh [COMMAND]

OPTIONS := -f[amily] inet|inet6|link | -o[neline]
COMMAND :=
ip addr add|del IFADDR dev IFACE | show|flush [dev IFACE] [to PREFIX]
ip route list|flush|add|del|change|append|replace|test ROUTE
ip link set IFACE [up|down] [arp on|off] | show [IFACE]
ip tunnel add|change|del|show [NAME]
        [mode ipip|gre|sit]
        [remote ADDR] [local ADDR] [ttl TTL]
ip neigh show|flush [to PREFIX] [dev DEV] [nud STATE]
/ # ip addr add 10.0.0.110 dev eth0
/ # ip link set eth0 up
eth0: Freescale FEC PHY driver [Generic PHY] (mii_bus:phy_addr=1:10, irq=-1)
/ # PHY: 1:10 - Link is Up - 100/Full
/ # ip route add 10.0.0.0/24 dev eth0
/ # cd /root/
	~ # wget http://10.0.0.10/html/busybox_1.27.2-r2_qb2.ipk
--2018-01-06 15:52:04--  http://10.0.0.10/html/busybox_1.27.2-r2_qb2.ipk
Connecting to 10.0.0.10:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 463368 (453K)
Saving to: `busybox_1.27.2-r2_qb2.ipk'

100%[======================================>] 463,368     --.-K/s   in 0.07s   

2018-01-06 15:52:04 (6.47 MB/s) - `busybox_1.27.2-r2_qb2.ipk' saved [463368/463368]

~ # wget http://10.0.0.10/html/busybox-mountall_1.27.2-r2_qb2.ipk
--2018-01-06 15:52:20--  http://10.0.0.10/html/busybox-mountall_1.27.2-r2_qb2.ipk
Connecting to 10.0.0.10:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1334 (1.3K)
Saving to: `busybox-mountall_1.27.2-r2_qb2.ipk'

100%[======================================>] 1,334       --.-K/s   in 0s      

2018-01-06 15:52:20 (7.42 MB/s) - `busybox-mountall_1.27.2-r2_qb2.ipk' saved [1334/1334]

~ # busybox-syslog_1.27.2-r2_qb2.ipk
/bin/sh: busybox-syslog_1.27.2-r2_qb2.ipk: not found
~ # wget http://10.0.0.10/html/busybox-syslog_1.27.2-r2_qb2.ipk
--2018-01-06 15:52:33--  http://10.0.0.10/html/busybox-syslog_1.27.2-r2_qb2.ipk
Connecting to 10.0.0.10:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2504 (2.4K)
Saving to: `busybox-syslog_1.27.2-r2_qb2.ipk'

100%[======================================>] 2,504       --.-K/s   in 0s      

2018-01-06 15:52:33 (13.0 MB/s) - `busybox-syslog_1.27.2-r2_qb2.ipk' saved [2504/2504]

~ # 

After reboot (by pressing the reset button) I was able to logon as root.
The link http://quby.nl/opensource/openembedded- ... r1.tar.bz2 is not working. (given in the handout. also quby.com isn't working). So I have to find that file somewhere else, is there somewhere else a link to download?

Edit: found it here: http://files.domoticaforum.eu/index.php?cam=/Toon

This is my i-tables.conf:

Code: Select all

##############################################################################
*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
COMMIT
##############################################################################
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:HCB-INPUT - [0:0]
-A INPUT -j HCB-INPUT
-A FORWARD -j HCB-INPUT
-A HCB-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# These are all closed for Quby/Toon:
-A HCB-INPUT -p tcp -m tcp --dport 22 --tcp-flags SYN,RST,ACK SYN -j ACCEPT
-A HCB-INPUT -p tcp -m tcp --dport 10080 --tcp-flags SYN,RST,ACK SYN -j ACCEPT
-A HCB-INPUT -p tcp -m tcp --dport 80 --tcp-flags SYN,RST,ACK SYN -j ACCEPT
#-A HCB-INPUT -p udp -m udp --sport 67:68 --dport 67:68 -j ACCEPT
#-A HCB-INPUT -p udp -m udp --dport 137:138 -j ACCEPT
-A HCB-INPUT -i lo -j ACCEPT  
-A HCB-INPUT -i tap+ -j ACCEPT
-A HCB-INPUT -i tun+ -j ACCEPT                                
-A HCB-INPUT -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN -j DROP
-A HCB-INPUT -p udp -m udp -j DROP
COMMIT                                                                        
#############################################################################

After reboot, I could ssh to Toon, so far so good

[marcelr]

The link http://quby.nl/opensource/openembedded- ... r1.tar.bz2 is not working. (given in the handout. also quby.com isn't working). So I have to find that file somewhere else, is there somewhere else a link to download?

You can find it at quby's website. Just scroll all the way down and click Open source.

[globegrabber]

Hy Members,
I a have buyed a rooted Toon as i don't wont to mes up this one because he is in function to control the environment here, for the hobby i have buy a elderly Toon, to learn about it and try to understand the programming, so far with no luck so far.
because i am trying to root an early Toon fw 2.9.26,
only thing as i try to root by following the Manuals/tutorials i can't get no verder then, /etc/inittab, as you can see a part out of the log,
what am i doeing wrong?

Wifi=disabled.

Serial communication with putty=ok
password for uboot version r6
=ok
U-Boot> run boot_nand setenv addmisc setenv bootargs \$\{bootargs\} mem=\$\{mem\} lpj=999424 init=/bin/sh
=ok
U-Boot> run boot_nand
=ok
(bla bla bla until)

/bin/sh: can't access tty; job control turned off
/ # /etc/inittab
/bin/sh: /etc/inittab: Permission denied

here stops my luck? what am i doing wrong?

[marcelr]

/bin/sh: can't access tty; job control turned off
/ # /etc/inittab
/bin/sh: /etc/inittab: Permission denied

here stops my luck? what am i doing wrong?

The /bin/sh thing is a warning from the OS, nothing to worry about.

You are trying to execute a textfile. (/etc/inittab). That's a no-go.
If you want to edit /etc/inittab, you will need an editor. The one editor aboard Toon is vi, and it's a quirky one at that.
So, if you want to edit /etc/inittab you would say:

Code: Select all

vi /etc/inittab

Before you start, I would read the manual pages of vi thoroughly if I were you, because it's not a very user-friendly editor, according to current standards.

[iMars]

Ok, Toon root'ed... and now further. How can I control the temperature setpoint? What are the next steps? (I'm feeling like a n00b )

[globegrabber]

Hallo marcelr,

Thanks for your reply, will take this with me in the next try, asap and first shell take notice of vi,

Grz, Globegrabber