Rooting Toon (or boxx)

[marcelr]

getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
INIT: Id "gett" respawning too fast: disabled for 5 minutes
eth0: Freescale FEC PHY driver [Generic PHY] (mii_bus:phy_addr=1:10, irq=-1)


What to do next to get to the login?

You should install busybox 1.27.2-r2 (available from the files section of this forum). This version has getty enabled.

But you should be able to get in through ssh when dropbear is installed, as TheHogNL already said.

[Asopus]

Okay, got everything working. Right now I want to sync Domoticz power/gas data with Toon. For now I havn't found any directions how to do that. If there's nothing availible I could write my own (and offcourse share it with you !) Is there any documentation about the API used by Toon?

[TheHogNL]

Okay, got everything working. Right now I want to sync Domoticz power/gas data with Toon. For now I havn't found any directions how to do that. If there's nothing availible I could write my own (and offcourse share it with you !) Is there any documentation about the API used by Toon?

No, for now there is no method to 'get the date into toon' without using the normale input (the toon meter module).
You could ofcourse choose to emulate the input to the toon meter module:
- emulate a P1 connection or
- emulate a blinked led which feeds the optics sensors of the toon meter module

However, I'm guessing you already use something (probably a P1 connection?) to feed into your domoticz. You could install a Y-cable to connect the toon module also to the P1 interface of your house meter. So, not really syncing to your domoticz but both using the same source information.

[RdP]

I've been busy for many hours to root my TOON, without luck.

I'm on the latest firmware, and despite I thought I did everything by the manual, I cannot not login as root using SSH

I tried to login as root user, but I don't know the default password. I have tried many passwords, but they all fail and I could not find how to set the password during the installation proces.

Any help is welcome. See my boot log below

Code: Select all

U-Boot 2010.09-R6 (Mar 14 2012 - 11:15:10)

CPU:   Freescale i.MX27 at 400.168 MHz

Prodrive B.V. ED2.0
DRAM:  128 MiB
NAND:  128 MiB
LCD: Initializing LCD frambuffer at a1400000
LCD: 800x480, pbb 4
LCD: Drawing the logo...
In:    serial
Out:   serial
Err:   serial
Display-bmp: 800 x 480  with 16777216 colors
Net:   FEC
Warning: FEC MAC addresses don't match:
Address in SROM is         00:00:20:03:00:00
Address in environment is  00:0f:11:01:a8:c9


Enter password - autoboot in 2 sec...

NAND read: device 0 offset 0x300000, size 0x300000
 3145728 bytes read: OK
## Booting kernel from Legacy Image at a1000000 ...
   Image Name:   Linux-2.6.36-R10-h27
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    1944336 Bytes = 1.9 MiB
   Load Address: a0008000
   Entry Point:  a0008000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
Linux version 2.6.36-R10-h27 (jbraam@dvl) (gcc version 4.5.3 20110223 (prerelease) (GCC) ) #1 PREEMPT Tue Oct 25 20:03:05 CEST 2016
CPU: ARM926EJ-S [41069264] revision 4 (ARMv5TEJ), cr=00053177
CPU: VIVT data cache, VIVT instruction cache
Machine: Prodrive B.V ED2.0
Memory policy: ECC disabled, Data cache writeback
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
Kernel command line: ubi.mtd=4 root=ubi0:rootfs rw rootfstype=ubifs mtdparts=mxc_nand:512K@0x00100000(u-boot-env)ro,1536K(splash-image),3M(kernel),3M(kernel-backup),119M(rootfs) console=ttymxc0,115200 mem=128M
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 128MB = 128MB total
Memory: 126092k/126092k available, 4980k reserved, 0K highmem
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    DMA     : 0xffa00000 - 0xffe00000   (   4 MB)
    vmalloc : 0xc8800000 - 0xf4000000   ( 696 MB)
    lowmem  : 0xc0000000 - 0xc8000000   ( 128 MB)
    modules : 0xbf000000 - 0xc0000000   (  16 MB)
      .init : 0xc0008000 - 0xc0022000   ( 104 kB)
      .text : 0xc0022000 - 0xc0367000   (3348 kB)
      .data : 0xc037e000 - 0xc03a17a0   ( 142 kB)
Hierarchical RCU implementation.
        RCU-based detection of stalled CPUs is disabled.
        Verbose stalled-CPUs detection is disabled.
NR_IRQS:272
MXC IRQ initialized
MXC GPIO hardware
Console: colour dummy device 80x30
Calibrating delay loop (skipped) preset value.. 199.88 BogoMIPS (lpj=999424)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
Configured for LCD: TM070RDH11
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Switching to clocksource mxc_timer1
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
msgmni has been set to 246
io scheduler noop registered (default)
imx-fb imx-fb.0: PreserveUBootFramebuffer(1): xres=800, yres=480 [skip _update_lcdc]
imx-fb imx-fb.0: PreserveUBootFramebuffer(2): xres=800, yres=480 [skip _update_lcdc]
Console: switching to colour frame buffer device 100x30
imx-fb imx-fb.0: fb0: DISP0 BG fb device registered successfully.
imx-fb imx-fb.0: PreserveUBootFramebuffer(3): xres=800, yres=480 [skip _update_lcdc]
imx-fb imx-fb.0: fb1: DISP0 FG fb device registered successfully.
Serial: IMX driver
imx-uart.0: ttymxc0 at MMIO 0x1000a000 (irq = 20) is a IMX
console [ttymxc0] enabled
imx-uart.1: ttymxc1 at MMIO 0x1000b000 (irq = 19) is a IMX
imx-uart.2: ttymxc2 at MMIO 0x1000c000 (irq = 18) is a IMX
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit)
Scanning device for bad blocks
Bad eraseblock 98 at 0x000000c40000
Bad eraseblock 442 at 0x000003740000
Bad eraseblock 443 at 0x000003760000
RedBoot partition parsing not available
5 cmdlinepart partitions found on MTD device mxc_nand
Creating 5 MTD partitions on "mxc_nand":
0x000000100000-0x000000180000 : "u-boot-env"
0x000000180000-0x000000300000 : "splash-image"
0x000000300000-0x000000600000 : "kernel"
0x000000600000-0x000000900000 : "kernel-backup"
0x000000900000-0x000008000000 : "rootfs"
UBI: attaching mtd4 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    129024 bytes
UBI: smallest flash I/O unit:    2048
UBI: sub-page size:              512
UBI: VID header offset:          512 (aligned 512)
UBI: data offset:                2048
UBI: max. sequence number:       404044
UBI: attached mtd4 to ubi0
UBI: MTD device name:            "rootfs"
UBI: MTD device size:            119 MiB
UBI: number of good PEBs:        949
UBI: number of bad PEBs:         3
UBI: max. allowed volumes:       128
UBI: wear-leveling threshold:    4096
UBI: number of internal volumes: 1
UBI: number of user volumes:     1
UBI: available PEBs:             0
UBI: total number of reserved PEBs: 949
UBI: number of PEBs reserved for bad PEB handling: 9
UBI: max/mean erase counter: 993/425
UBI: image sequence number:  1949998636
UBI: background thread "ubi_bgt0d" started, PID 309
at25 spi0.0: 32 KByte at25640B eeprom, pagesize 64
spi_imx spi_imx.0: probed
FEC Ethernet Driver
fec_enet_mii_bus: probed
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
mxc-ehci mxc-ehci.0: initializing i.MX USB Controller
mxc-ehci mxc-ehci.0: portsc setup 1: 0x80000000
mxc-ehci mxc-ehci.0: Work around for USB enabled
ULPI transceiver vendor/product ID 0x04cc/0x1505
mxc-ehci mxc-ehci.0: Freescale On-Chip EHCI Host Controller
mxc-ehci mxc-ehci.0: new USB bus registered, assigned bus number 1
mxc-ehci mxc-ehci.0: irq 56, io mem 0x10024000
mxc-ehci mxc-ehci.0: USB 2.0 started, EHCI 1.00
usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb1: Product: Freescale On-Chip EHCI Host Controller
usb usb1: Manufacturer: Linux 2.6.36-R10-h27 ehci_hcd
usb usb1: SerialNumber: mxc-ehci.0
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
mxc-ehci mxc-ehci.2: initializing i.MX USB Controller
mxc-ehci mxc-ehci.2: portsc setup 1: 0x80000000
mxc-ehci mxc-ehci.2: Work around for USB enabled
mxc-ehci mxc-ehci.2: Freescale On-Chip EHCI Host Controller
mxc-ehci mxc-ehci.2: new USB bus registered, assigned bus number 2
mxc-ehci mxc-ehci.2: irq 55, io mem 0x10024400
mxc-ehci mxc-ehci.2: USB 2.0 started, EHCI 1.00
usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb2: Product: Freescale On-Chip EHCI Host Controller
usb usb2: Manufacturer: Linux 2.6.36-R10-h27 ehci_hcd
usb usb2: SerialNumber: mxc-ehci.2
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver usbserial
usbserial: USB Serial Driver core
input: TSC2007 Touchscreen as /devices/virtual/input/input0
rtc-isl1208 1-006f: chip found, driver version 0.3
rtc-isl1208 1-006f: rtc core: registered rtc-isl1208 as rtc0
i2c /dev entries driver
imx2-wdt imx2-wdt.0: IMX2+ Watchdog Timer enabled. timeout=60s (nowayout=0)
adt7410 0-0048: adt7410 temperature sensor registered.
adt7410 0-0049: adt7410 temperature sensor registered.
nf_conntrack version 0.5.0 (1970 buckets, 7880 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 17
Bridge firewalling registered
rtc-isl1208 1-006f: setting system clock to 2018-02-07 23:19:26 UTC (1518045566)
UBIFS: recovery needed
UBIFS: recovery completed
UBIFS: mounted UBI device 0, volume 0, name "rootfs"
UBIFS: file system size:   119347200 bytes (116550 KiB, 113 MiB, 925 LEBs)
UBIFS: journal size:       9033728 bytes (8822 KiB, 8 MiB, 71 LEBs)
UBIFS: media format:       w4/r0 (latest is w4/r0)
UBIFS: default compressor: lzo
UBIFS: reserved for root:  0 bytes (0 KiB)
VFS: Mounted root (ubifs filesystem) on device 0:13.
Freeing init memory: 104K
usb 2-1: new high speed USB device using mxc-ehci and address 2
INIT: version 2.86 bootingusb 2-1: New USB device found, idVendor=13d3, idProduct=3309
usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3

usb 2-1: Product: RTL8191S WLAN Adapter 
usb 2-1: Manufacturer: Manufacturer Realtek 
usb 2-1: SerialNumber: 00e04c000001
 (print_boot_msg)
Please wait: booting... (print_boot_msg)
* Kernel            2.6.36-R10-h27 (print_boot_msg)
* Firmware          qb2/uni/4.11.6-1205-0 (print_boot_msg)
* Hostname          eneco-001-007831 (print_boot_msg)
==DriverVersion: v2.6.6.0.20120405==
MAC Address from efuse= 1c-4b-d6-8d-6e-81
usbcore: registered new interface driver r871x_usb_drv
usbcore: registered new interface driver rt2870
Loading iptables settings: iptables.
 (print_boot_msg)
Configuring network interfaces...  (print_boot_msg)
Configuring network interfaces... 
Running 'ifup -a' in the foreground (ifup-fg)
ifup: interface lo already configured
eth0: Freescale FEC PHY driver [Generic PHY] (mii_bus:phy_addr=1:10, irq=-1)
udhcpc: started, v1.27.2
udhcpc: sending discover
PHY: 1:10 - Link is Up - 100/Full
udhcpc: sending discover
udhcpc: sending select for 192.168.0.45
udhcpc: lease of 192.168.0.45 obtained, lease time 86400
/etc/udhcpc.d/50default: Adding DNS 89.101.251.228
/etc/udhcpc.d/50default: Adding DNS 89.101.251.229
/etc/udhcpc.d/70prepend-google-pub-dns: Prepending DNS 8.8.8.8 (skip with /mnt/persist/udhcpc-skip-prepend-google-pub-dns)
Successfully initialized wpa_supplicant
rfkill: Cannot get wiphy information
ioctl[SIOCSIWAP]: Operation not permitted
udhcpc: started, v1.27.2
udhcpc: sending discover
udhcpc: sending discover
udhcpc: sending select for 192.168.0.11
udhcpc: lease of 192.168.0.11 obtained, lease time 86400
ip: RTNETLINK answers: File exists
/etc/udhcpc.d/50default: Adding DNS 89.101.251.228
/etc/udhcpc.d/50default: Adding DNS 89.101.251.229
/etc/udhcpc.d/70prepend-google-pub-dns: Prepending DNS 8.8.8.8 (skip with /mnt/persist/udhcpc-skip-prepend-google-pub-dns)
* Wired (eth0)      00:0f:11:01:a8:c9  192.168.0.45 (print_boot_msg)
* Wireless (wlan0)  1c:4b:d6:8d:6e:81  192.168.0.11 (print_boot_msg)
Setting up IP spoofing protection: rp_filter.
INIT: Entering runlevel: 5
Starting Dropbear SSH server: dropbear.
Starting syslogd/klogd: done
HCBv2 apps started via runlevels, performing 'addstartables && reload && init 5 or 5'.
HCBv2 adding: comm eventmgr kpi pwrusage scsync smartplug thermstat usermsg weather bxtproxy config log rrd watchdog hue p1 zwave lighttpd.
HCBv2 startables unchanged, not writing /etc/inittab.
imx-fb imx-fb.0: PreserveUBootFramebuffer(4): xres=800, yres=480 [do _update_lcdc]

[TheHogNL]

I tried to login as root user, but I don't know the default password. I have tried many passwords, but they all fail and I could not find how to set the password during the installation proces.

The password is empty if you followed this step correctly:

root:DISABLED:0:0:root:/root:/bin/sh

to read:

root::0:0:root:/root:/bin/sh

If you change it to "root:4fSaNO9Lh4WPU:0:0:root:/root:/bin/sh" the password will be "password". But normally you won't need to set the the password, because the normals steps will set the password to empty (no password).

[RdP]

I did that, but the password is not empty

[marcelr]

In the initial shell, started by the bootloader, using init=/bin/sh at the far end of the bootloader options list, you should edit the passwd file (besides a bunch of other things) to have an empty password for root. Then you can get in afterwards using ssh etc.
What FW version do you have?

[RdP]

In the initial shell, started by the bootloader, using init=/bin/sh at the far end of the bootloader options list, you should edit the passwd file (besides a bunch of other things) to have an empty password for root. Then you can get in afterwards using ssh etc.
What FW version do you have?

My FW is 4.11.6

I'm pretty sure I edited the password file, but have to chack later. The Toon is back on the wall because it was getting cold in the house

[Lightning87]

Hi,

First of all i need to introduce myself
My name is Barry and i tried for the first time to root my toon.

I think i already made some good steps in the right direction but i get stuck

it looks like i installed dropbear right.

udhcpc: lease of 192.168.178.205 obtained, lease time 86400
/etc/udhcpc.d/50default: Adding DNS 192.168.178.143
/etc/udhcpc.d/70prepend-google-pub-dns: Prepending DNS 8.8.8.8 (skip with /mnt/persist/udhcpc-skip-prepend-google-pub-dns)
* Wired (eth0) 00:0f:11:06:02:32 [No IP from DHCP Server] (print_boot_msg)
* Wireless (wlan0) 28:c2:dd:e4:af:2f 192.168.178.205 (print_boot_msg)
udhcpc: sending discover
Rcv Wcid(1) AddBAReq
Start Seq = 00000003
Rcv Wcid(1) AddBAReq
Start Seq = 00000002
Lease failing, already running in bg: udhcpc -b -R -i eth0 -A 5 -p /var/run/udhcpc.eth0.pid -H eneco-001-211757
udhcpc: no lease, forking to background
Setting up IP spoofing protection: rp_filter.
INIT: Entering runlevel: 5
Starting Dropbear SSH server: dropbear.
Starting syslogd/klogd: done
HCBv2 apps started via runlevels, performing 'addstartables && reload && init 5 or 5'.
HCBv2 adding: comm eventmgr kpi pwrusage scsync smartplug thermstat usermsg weather bxtproxy config log rrd watchdog hue p1 zwave lighttpd.
HCBv2 startables unchanged, not writing /etc/inittab.
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
imx-fb imx-fb.0: PreserveUBootFramebuffer(4): xres=800, yres=480 [do _update_lcdc]
getty: applet not found
getty: applet not found
getty: applet not found
getty: applet not found
INIT: Id "gett" respawning too fast: disabled for 5 minutes


I dont know how to get access with SSH.

I hope someone can help me

[marcelr]

Did you edit the file /etc/passwd and set a new password?
If so, with dropbear running, you should be able to get into your toon using ssh. If not, well ... you'll have to set the password.

The /sbin/getty stuff emerges from a busybox version not having getty on board. That's fixed in a busybox version available from this forum's ftp site. Check out the "Files" tab above and go to the Toon subdir for the files.

[Lightning87]

Did you edit the file /etc/passwd and set a new password?
If so, with dropbear running, you should be able to get into your toon using ssh. If not, well ... you'll have to set the password.

The /sbin/getty stuff emerges from a busybox version not having getty on board. That's fixed in a busybox version available from this forum's ftp site. Check out the "Files" tab above and go to the Toon subdir for the files.

i forgot to open the port haha!
i can connect to shh now but leaving the pass empty doesnt work

login as: root
root@192.168.178.205's password:
Access denied

I did changed the passwd file:

root::0:0:root:/root:/bin/sh
daemon:*:1:1:daemon:/usr/sbin:/bin/sh
bin:*:2:2:bin:/bin:/bin/sh
sys:*:3:3:sys:/dev:/bin/sh
sync:*:4:65534:sync:/bin:/bin/sync
games:*:5:60:games:/usr/games:/bin/sh
man:*:6:12/var/cache/man:/bin/sh
lp:*:7:7:lp:/var/spool/lpd:/bin/sh
mail:*:8:8:mail:/var/mail:/bin/sh
News:*:9:9:News:/var/spool/News:/bin/sh
uucp:*:10:10:uucp:/var/spool/uucp:/bin/sh
proxy:*:13:13:proxy:/bin:/bin/sh
www-data:*:33:33:www-data:/var/www:/bin/sh
backup:*:34:34:backup:/var/backups:/bin/sh
list:*:38:38:Mailing List Manager:/var/list:/bin/sh
irc:*:39:39:ircd:/var/run/ircd:/bin/sh
gnats:*:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
nobody:*:65534:65534:nobody:/nonexistent:/bin/sh

[marcelr]

Correct, you will need to set a password, ssh won't accept an empty one.

[Lightning87]

like:

root:password:0:0:root:/root:/bin/sh

?

[marcelr]

like:

root:password:0:0:root:/root:/bin/sh

?

No

The passwd file harbours hashed (encrypted) passwords.
Just execute passwd, and set the password.

[TheHogNL]

Or set the password to be 'password' with the following in /etc/passwd:

Code: Select all

root:4fSaNO9Lh4WPU:0:0:root:/root:/bin/sh