LX05

[scaprile]

Hi,
I do embedded systems for a living and do use Linux, but I'm not familiar with Embedded Linux stuff.

• Encrypted or not ? I don't get a clue where to run binwalk. There is no binwalk in my LX05. How can I tell ? Relevant logs (serial) follow:

[186]sboot commit : 38c3a04b2a905c8689df26944e3d69666e680ae4               
[245]DRAM BOOT DRIVE INFO: V0.18                                           
[248]DRAM CLK = 528 MHz                                                    
[251]DRAM Type = 2 (2:DDR2,3:DDR3)                                         
[254]DRAMC ZQ value: 0x3bf9                                                
[256]DRAM ODT value: 0x40.                                                 
[260]DRAM SIZE =64 M                                                       
[266]spinand UBOOT_START_BLK_NUM 8 UBOOT_LAST_BLK_NUM 40                   
[694]Check is correct.                                                     
[696]OLD version: 0.0                                                      
[698]NEW version: 0.0                                                      
[770]load rotpk hash                                                       
[832]load optee-key hash                                                   
[897]load kernel1-key hash                                                 
[961]load kernel2-key hash                                                 
[1026]load rootfs1-key hash                                                
[1091]load rootfs2-key hash                                                
[1157]load u-boot-key hash                                                 
[1165]monitor entry=0x0                                                    
[1168]uboot entry=0x43000000                                               
[1170]optee entry=0x41a00000                                               
[1173]run out of boot0                                                     
U-Boot 2018.05 (Jun 06 2019 - 06:03:47 +0000) Allwinner Technology, Build:2
CPU:   Allwinner Family                                                    
Model: sun8iw18                                                            
DRAM:  64 MiB                                                              
Relocation Offset is: 00f48000                                             
secure enable bit: 1                                                       
CPU=1008 MHz,PLL6=600 Mhz,AHB=200 Mhz, APB1=100Mhz  MBus=264Mhz            
workmode = 0,storage type = 0                                              
NAND_UbootInit                                                             
[01.364]SpiNandHwInit: Start Nand Hardware initializing .....              
[01.369]uboot: nand version: 3 6058 20190419 18212019                      
sclk0_reg_adr: 0x8300030e, src clock: 0xb8003100                           
sclk0_reg_adr: 0x8300020e, src clock: 0xb8003100                           
sclk0_reg_adr: 0x8300000b, src clock: 0xb8003100                           
[01.419]not burn nand partition table!                                     
[01.423]NB1: nftl num: 1                                                   
[01.425]init nftl: 0                                                       
[01.596][ND] not find panic data, no need to recovery!                     
[01.601]NB1: NAND_LogicInit ok, result = 0x0                               
[01.605]NAND_UbootInit end: 0x0                                            
sunxi flash init ok                                                        
Loading Environment from SUNXI_FLASH... OK                                 
keybox_list not set in env, leave empty                                    
the secure storage map is empty                                            
gic: sec monitor mode                                                      
(weak)update dtb dram start                                                
update dtb dram  end                                                       
[01.655]update dts                                                         
[01.657]update part info                                                   
[01.659]flag_try_sys1_failed=0                                             
[01.662]flag_try_sys2_failed=0                                             
[01.665]flag_ota_reboot     =0                                             
[01.667]flag_last_success   =1                                             
[01.670]os index:1                                                         
[01.673]to be run cmd=run setargs_second boot_second                       
Net:   Net Initialization Skipped                                          
No ethernet found.                                                         
[01.684]probe MP tools from boot                                           
delay time 0                                                               
weak:otg_phy_config                                                        
[01.693]usb init ok                                                        
[02.195]usb overtime                                                       
try to burn key                                                            
out of usb burn from boot: not need burn key                               
Hit any key to stop autoboot:  0                                           
=>                                                                         
=> boot                                                                    
partinfo: name kernel2, start 0x15600, size 0x3000                         
pubkey rootfs2 valid                                                       
partition rootfs2 verify pass                                              
total_len=3121152                                                          
pubkey kernel2 valid                                                       
## Booting Android Image at 0x40007800 ...                                 
Android's image name: cowbell-lx05                                         
Kernel load addr 0x40008000 size 3044 KiB                                  
RAM disk load addr 0x41000000 size 1 KiB                                   
   XIP Kernel Image ... OK                                                 
   Loading Ramdisk to 42b11000, end 42b1100c ... OK                        
   reserving fdt memory region: addr=41a00000 size=100000                  
   Using Device Tree in place at 42b172e8, end 42b2ae67                    
[452.757]Starting kernel ...                                               
nand release dma:43fb581c                                                  
nand release dma:0                                                         
[    0.088682] Initramfs unpacking failed: junk in compressed archive      
/dev/by-name/UDISK: UUID="b9ad5932-afa9-44ef-bdff-d9bcbd85f6f1" NAME="EXT_"
/dev/by-name/UDISK already format by ext4                                  
Please press Enter to activate this console.                               
crond[1335]: crond (busybox 1.27.2) started, log level 5                   
BusyBox v1.27.2 () built-in shell (ash)                                    
      ROM Type:release / Ver:1.46.2                                        
root@mico:/# df -h                                                         
Filesystem                Size      Used Available Use% Mounted on         
/dev/root                20.8M     20.8M         0 100% /                  
devtmpfs                512.0K         0    512.0K   0% /dev               
tmpfs                    28.6M    120.0K     28.4M   0% /tmp               
tmpfs                   512.0K         0    512.0K   0% /dev               
/dev/by-name/UDISK       24.4M      2.6M     21.3M  11% /data              
root@mico:/# ls -l /dev/...
lrwxrwxrwx    1 root     root            12 Jun  6 14:25 /dev/root -> /dev/nand0p5
lrwxrwxrwx    1 root     root            12 Jun  6 14:25 /dev/by-name/rootfs1 -> /dev/nand0p3
lrwxrwxrwx    1 root     root            12 Jun  6 14:25 /dev/by-name/rootfs2 -> /dev/nand0p5
lrwxrwxrwx    1 root     root            12 Jun  6 14:25 /dev/by-name/UDISK -> /dev/nand0p9

• How to follow from here ?
• ?

PS: I don't mind bricking this, I have two of them sitting unused, one fully disassembled with serial port connected. If I can't make it work as is, I'll scrap the CPU board and make use of the speaker cabinet (great sound !) with some microcontroller board and send low-level audio to it. BUT, I'd rather have these working as Alexa/Google Home devices, or even a plain pipewire sink...

[duhow]

pubkey rootfs2 valid                                                       
partition rootfs2 verify pass                                              

Signed.
If you flash another firmware this partition won't be able to boot,
so make sure that you configure uboot to have always access to it.

What I did, is to tweak the uboot "cmdline", so it "loads" the official partition, but then boots the second.
Kinda annoying to perform updates to.

[scaprile]

Gracias, David
Will be adding more questions, as they come up..