3.1 to download and compile Android-2.0
When the serial output the following message, press the space bar, blob into the interactive mode:
blob> dwrite kernel.bin
In addition, it is best removed cache and user data (hack of course, need backed up well before the important data).
Now we have two USB connectors to connect to a computer on the other end to connect to the broncho a1 on the (first remove the battery).
Need to install Linux on a computer system, the virtual machine should be able to (preferably native), I installed a few computers that Fedora7/9/12, also recommended you use the Fedora distribution.
[android-eclair] # chmod 644 / var / lib / tftpboot / system.bin
TFTPing kernel.bin ####################* OK.
First installation of Linux serial terminal software under the common minicom, in Fedora, you can install this way:
In the hack process, must be able to destroy the original A1 system.
If you do not want to play, but the A1 system has been destroyed, how can we do?
Does not matter, here to tell you how to A1 to restore to normal mobile phone.
[linux-2.6.28] # cp arch / arm / boot / zImage / var / lib / tftpboot / kernel.bin
Copy initrd over (that is, out / target / product / generic / rootimport products directory, in front of generated when compiling eclair), followed by compiling the kernel will, according to it to generate initrd.
When the serial output of the following message, press the space bar, blob into the interactive mode:
To generate the file system image copied to the tftp service system.bin the root directory:
Remove the battery A1, with the development of data the number of computers and mobile phones to connect with minicom to open serial port, installed the battery, A1 auto-boot.
First configure the kernel, if you also need to set export system, other features, can make ARCH = arm menuconfig to customize.
exit check_usb_connection: 1
service tftp (socket_type = dgram protocol = udp wait = yes user = root server = / usr / sbin / in.tftpd server_args =-s / var / lib / tftpboot disable = no per_source = 11 cps = 100 2 flags = IPv4) import
products to disable change no, saved, restart xinetd.
*** XFer Control To OS …
The PL2303 is the top USB-to-serial devices.
…
Then start the download, serial ports will output:
Bus 001 Device 006: ID 054c: 033e Sony Corp.
Module Size Used by
This process is long, may be better than a few minutes, you can first take a break or do something else.
[lixianjing @ localhost temp] $ wget http://www.broncho.cn/download/hacktools/broncho-a 1-pxa300-1.6.tar.gz
…
import duties attached: This is my Fedora 12 for the usb0 to write the configuration file:
Set 7d3
download kernel.bin to nandflash partition kernel, address 0 × 9a0000 size 0 × 400000 … … OK
Save withdrawal to restart the NFS services:
Autoboot (1 seconds) in progress, pss key SPACE to stop. Type \”help\” to get a list of commands
import duty Note: If you download interrupted, usually because dhclient to reconfigure the USBNET\’s IP address, so to ban dhclient for USBNET dynamic configuration IP.
Colleagues last time taught me a simple way is to write a usb0 network configuration script.
NAME = \”System usb0\”
PID hash table entries: 512 (order: 9, 2048 bytes)
CPU: VIVT data cache, VIVT instruction cache
bnep 14848 2
2.export ready PC environment
blob> dwrite kernel.bin
[linux-2.6.28] # chmod 644 / var / lib / tftpboot / kernel.bin
Also need to close the firewall, the easiest way is this:
Broncho A1 fitted to the battery, you will see the following output:
make-j2
ip6table_filter 6400 0
[lixianjing @ localhost ~] $ lsmod
import products in the interactive mode, enter: dwrite kernel.bin
crw-rw – 1 root uucp 188, 0 12-25 07:41 / dev/ttyUSB0
[android-eclair] # mkyaffs2image out / target / product / generic / system system.bin
Turbo Mode clock: 624.00MHz (* 2, active)
3.2 import duty to compile the kernel
__________________________________________________ ________________
Set 7d3
After the installation is complete, but also modify the configuration files:
ONBOOT = no
Serial port will output:
import business for the average hacker, this is the root line of no use.
As long as they pay attention to maintaining positive and negative electrodes in a disconnected state, otherwise it is they can not plane.
2.2 Install tftp server
4.1 Web site to download from the broncho compiled kernel and file system
Bus 001 Device 001: ID 1d6b: 0002 Linux Foundation root hub
Note: In this article published by the occasion, broncho yet to be announced kernel code, developers are working from a linux 2.6.28 ported to linux 2.6.29, will be released after the completion of the basic functions.
From a commercial point of view, the published kernel code only provides the basic drive import business moving process, as power management features also need to perfect the hacker who own and optimization.
If you are more interested in friends can be considered want to set up an open source project, we play together.
*** Loading Image
Then in the PC side configuration USBNET:
pl2303 18436 0
Uncompssing Linux … … … … … … … … … … … … … … … … … … … … … … … … … … … … … … … … … … … … … … … … …
export to compile
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
At this point mobile terminal to start the download, serial ports will output:
Download 4.2 Kernel
CPU: XScale-V3 based processor [69056881] revision 1 (ARMv5TE), cr = 0000397f
cp2101 15364 0
Console: colour dummy device 80 × 30
export remove the battery A1, with the development of data the number of computers and mobile phones to connect with minicom to open serial port, installed the battery, A1 auto-boot.
[root @ localhost lixianjing] # minicom-s
Machine: Marvell Form Factor Development Platform (aka Littleton)
Vendor ID: 0 × 8086
Below to compile linux-2.6.28 for example.
Product ID: 0 × 7d3
l2cap 22144 16 bnep, rfcomm
blob> erase userdata.bin
[root @ localhost ~] # ifconfig usb0 1.1.1.1
[root @ localhost ~] # ifconfig usb0 1.1.1.1
export for the production of switches connected automatically when the download manually disconnected when the time for the development of downloading (upper photo was disconnected).
In arch / arm / configs / directory, there are a lot of build configuration files, which arch/arm/configs/android_an0001_pxa300_defconfig the development of the kernel used, which supports usbnet.
IPADDR = 1.1.1.1
UUbfa1-c10b-19a2-eb3a89251128
If you have just downloaded the previous kernel, do not need to re-configure the PC side usbnet, otherwise the PC side in the implementation of:
GATEWAY = 192.168.1.1
[root @ localhost lixianjing] # vim / etc / exports
Bus 002 Device 002: ID 1b1a: 0000
blob>
[linux-2.6.28] # cp / work / / android-eclair/out/target/product/ge neric / root.-rf
export Note: If you download interrupted, usually because dhclient to reconfigure the USBNET\’s IP address, so to ban dhclient for USBNET dynamic configuration IP.
Colleagues last time taught me a simple way is to write a usb0 network configuration script.
Under normal circumstances should be able to compile in the past.
[root @ localhost lixianjing] # yum install tftp-server.i386
TYPE = Ethernet
3.3 export to download the kernel
blob> erase cache.bin
IPV6INIT = no
Run Mode clock: 312.00MHz (* 24)
[root @ localhost lixianjing] # service iptables stop
Compilation is complete, the resulting file system out / target / product / generic / system.img can not be directly used to use bronchoexport provide mkyaffs2image (available at the official website: http://www.broncho.cn/download/hacktools /
mkyaffs2image) to re-generate the image, this version is different from the original version, it yaffs2 file system OOB wrote some years for hardware ECC data.
Can generate the following ways:
iptable_filter 6528 0
1. To prepare the hardware
[lixianjing @ localhost ~] $ ll / dev/ttyUSB0
Bus 002 Device 004: ID 067b: 2303 Prolific Technology, Inc. PL2303 Serial Port
*** Fuse Config from boot ROM:
sunrpc 152084 3
[root @ localhost lixianjing] # service nfs restart
Autoboot (1 seconds) in progress, pss key SPACE to stop. Type \”help\” to get a list of commands
***** Plug-in USB cable & config usbdnet now ******
(export development and a data cable)
RO Mode clock: 60.00MHz (inactive)
[root @ localhost lixianjing] # service xinetd restart
NFS service configuration file editing / etc / exports can set the NFS directory.
*** OBM start …
Copy tftp service kernel.bin and system.bin to the root directory.
vboxnetadp 71472 0
received 0 × 1459 blocks (0 × 28ae10 bytes)
vboxnetflt 76888 0
cd / work / / android-eclair
PREFIX = 24
vboxdrv 107208 1 vboxnetflt
TFTPing system.bin ######################################## ######
############################################# #
pl2303export is a very common USB-to-serial drive, unless you are a Linux version too old, otherwise the above steps will not have any problems.
Starting kernel at 0 × 80800000 …
As for how to download, later there will be presentations.
/ etc/sysconfig/network-scripts/ifcfg-usb0
Memory policy: ECC disabled, Data cache writeback
After the download is complete, reboot, serial debug information will print the kernel:
3. Transplant
*** 29
exit check_usb_connection: 1
export the installation is successful, the first time you use the first configuration look.
NETMASK = 255.255.255.0
TFTPing kernel.bin ####################* OK.
export exit set serial interface, you can select Save setup as dfl it to remain the default settings, select Exit out of the final set the interface, then will enter minicom serial terminal mode.
At this point press the space bar, BootLoader will enter interactive mode, Broncho A1 of the BootLoader using blob (can go online to see if blob relevant information).
In general, download the kernel and file system is not dangerous, big deal to re-download time, but the mobile phone to download bootloader failure may never get up, and repair can be tricky, use a dedicated JTAG moves taken so do not
try to compile it yourself into the blob download.
There is also a power cord, export without the battery, you can use an external power supply.
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
Autoboot (1 seconds) in progress, pss key SPACE to stop. Type \”help\” to get a list of commands
***** Plug-in USB cable & config usbdnet now ******
[lixianjing @ localhost temp] $ tar xf broncho-A1-pxa300-1.6.tar.gz
rfcomm 34832 4
export of this process is long, may be better than a few minutes, you can first take a break or do something else.
3.2 Production yaffs2 file system
ip6_tables 14480 1 ip6table_filter
Article Source: http://www.limodev.cn/blog
Kernel command line: init = / linuxrc root = / dev/ram0 console = ttyS2, 115200 mem = 128M uart_dma
Back?
System Kai does not come?
Running problem?
That export on the way, is a common platform, of course, can not be directly used to take over, you want to achieve for different hardware adaptation layer, a large workload, or MOTO, HTC, and BORQS (ie OPhone achieve persons) do not have to
raise several hundred developers.
Even if you are a genius, a person can not complete this task.
If you are really interested, you can choose to try a certain aspect, such as WIFI, BT, and GSM modules.
Later we will introduce some debugging methods, help accelerate the speed hack.
Serial port will output:
broncho-A1-pxa300-1.6.tar.gz kernel.bin md5.sum system.bin
3.4 export to download the file system
In the interactive mode, enter: dwrite kernel.bin
In the interactive mode, enter: dwrite system.bin
vim / etc / xinetd.d / tftp
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Download the source code please refer to the official web site on the export guidelines: http://source.android.com/download.
2.3 install and configure NFS service
blob> dwrite system.bin
Vendor ID: 0 × 8086
Author Contact: Li Xianjing
A pop-up menu, select Serial port setup one into the serial port settings.
According to the following settings can be.
4. Save the A1
NM_CONTROLLED = no
Ensure that the tftp service starts, firewallexport off.
On the PC side configuration please refer to \”broncho a1 hack guide – prepared environment.\”
Here you can see the USB serial device file already exists.
If you have just downloaded the previous kernel, do not need to re-configure the PC side usbnet, otherwise the PC side in the implementation of:
tftp server is mainly used to download the kernel and file system (using the serial port is too slow, it usually usbnet), in Fedora, you can install the tftp service so:
Here you can see the pl2303 kernel module is already loaded.
HSIO bus clock: 208.00MHz
We have told you before export to be careful when playing with fire, and if you are not really a hacker, and now regret it, and how it?
In the following article, we will tell you how to A1 restored to its original look.
[lixianjing @ localhost temp] $ ls
Ensure that the tftp service starts, firewall off.
On the PC side configuration please refer to \”broncho A1 hack guide – prepared environment.\”
So far, the hardware is ready.
[root @ localhost ~] # ifconfig usb0 1.1.1.1
[android-eclair] # cd linux-2.6.28
export download is complete, remove the data cable and battery, re-installed the battery and boot, A1 back into a normal cell phone (the first to open the opportunity to slow down a bit).
Well, the next impulse, when it starts to hack A1 bar.
Linux version 2.6.28 (lixianjing@localhost.localdomain) (gcc version 4.1.1) # 4 Wed Oct 7 16:42:59 CST 2009
3.4 download file export system
[android-eclair] # cp system.bin / var / lib / tftpboot /
Is very easy to hack broncho A1, just a developer and a data line and a cell phone can be Broncho A1.
Now we check whether it is normal serial devices and drivers:
At this point mobile terminal to start the download, serial ports will output:
TFTPing system.bin ######################################## ######
############################################# #
export and then start the download, serial ports will output:
BROADCAST = 1.1.1.255
bluetooth 49120 5 bnep, rfcomm, l2cap
So far, PC side of the basic configuration is complete.
*** CopyImageFlashToLocal …
[root @ localhost ~] # ifconfig usb0 1.1.1.1
Product ID: 0 × 7d3
Please specify source when reproduced, and contact the author side export type
Bus 002 Device 001: ID 1d6b: 0001 Linux Foundation 1.1 root hub
*** Verifying Checksums …
[linux-2.6.28] # make ARCH = arm CROSS_COMPILE = / work / / android-eclair/pbuil t/linux-x86/toolchain/arm-eabi-4.4.0/bin/arm-eabi-
*** InitDefaultPort, Current CPU is PXA300, use UDC
export in interactive mode, enter: dwrite system.bin
blob> dwrite system.bin
[linux-2.6.28] # make ARCH = arm android_an0001_pxa300_defconfig
Warning: transplantation of the heavy workload, without a lot of free time and in-depth study of the determination, please do not lightly to try (Oh, I can not have time to help you solve all problems).
2.1 Serial Port software installation and configuration
download kernel.bin to nandflash partition kernel, address 0 × 9a0000 size 0 × 400000 … … OK
export and then configure the PC terminal USBNET:
Developed using data lines formed by the two lines, one is a USB cable, the other is a USB-serial cable.
There is also a switch:
USERCTL = no
received 0 × 1459 blocks (0 × 28ae10 bytes)
*** Configure Flash …
Compilation is completed, will generate arch / arm / boot / zImage, copy it to the tftp root directory of services:
This step is optional, export development of the use of NFS would be more convenient, Linux systems are generally installed by default NFS, if not installed on his own what to install.
Here we assume that eclair source code has been downloaded to / work / / android-eclair directory of the.
ip_tables 13584 1 iptable_filter
[lixianjing @ localhost ~] $ lsusb
[root @ localhost lixianjing] # yum install minicom.i386
BOOTPROTO = none
x_tables 14980 2 ip_tables, ip6_tables
DEVICE = usb0
export many of my friends to buy Broncho A1 is directed at it come open, A1 is not only the basic core open source code, to provide development and a data line, and open the previously developed Broncho Linux Platform mobile platforms.
Just for fun both for the player, or want to learn the development of embedded Linux programmers, Broncho A1 is the best one of the options.
We will write a series of articles to provide a hack guide for the novice.
Also hope that friends who are interested to join the document preparation and revision of the work to.
*** EnableCharger: 0
(broncho a1)
IOLSO
