From owner-freebsd-embedded@FreeBSD.ORG Tue Aug 20 23:56:36 2013 Return-Path: Delivered-To: freebsd-embedded@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id C297E208 for ; Tue, 20 Aug 2013 23:56:36 +0000 (UTC) (envelope-from hiren.panchasara@gmail.com) Received: from mail-ee0-x233.google.com (mail-ee0-x233.google.com [IPv6:2a00:1450:4013:c00::233]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 40AE524F0 for ; Tue, 20 Aug 2013 23:56:36 +0000 (UTC) Received: by mail-ee0-f51.google.com with SMTP id c1so493070eek.38 for ; Tue, 20 Aug 2013 16:56:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=4jTgaWwoOIFrbMzWPutspdpkwuCLP5vUo60r21h3EOA=; b=i3Srgw785QRmqLI1+nEiKRHBy82afyZbCXZH8kgdHnlyjBKreQPll8pnH9rlqJ94D0 c4q1MDXH69c3t7ARMvY120H9p877sQtEJvEQ8uqGCIMEMyQhNTMeCDdwI6iDWBft70Aj F6j3nmBt/FdU+B78FQd4bXU/Yo/8vtQlzo8HucwO/dfmHFMWjL5YAZ+F77u/yD6lN0JD xcwBJ5esgm/aaej2jNkBXUscWF6LkfjvlLgdYLiH4zea7yvGmiFq0RUuv8Hf4grRD239 ZDkfDspOrUCckRxq7r9hQW6uONZ+MDDeoemROxcGOhIMbpg6X4isUD7y5U+ntl7mLwOc M+Ug== MIME-Version: 1.0 X-Received: by 10.14.108.9 with SMTP id p9mr5481641eeg.8.1377042994080; Tue, 20 Aug 2013 16:56:34 -0700 (PDT) Received: by 10.14.105.137 with HTTP; Tue, 20 Aug 2013 16:56:33 -0700 (PDT) In-Reply-To: References: <20130729151943.70ce473e14d88588337e57ba@ddteam.net> <51F7983C.5090309@dat.pl> Date: Tue, 20 Aug 2013 16:56:33 -0700 Message-ID: Subject: Re: Making Picostation m2HP work From: hiren panchasara To: Luiz Otavio O Souza Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 Cc: freebsd-embedded X-BeenThere: freebsd-embedded@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Dedicated and Embedded Systems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Aug 2013 23:56:36 -0000 On Mon, Aug 19, 2013 at 10:09 AM, hiren panchasara < hiren.panchasara@gmail.com> wrote: > > > > On Mon, Aug 19, 2013 at 5:59 AM, Luiz Otavio O Souza wrote: > >> Hi Hiren, >> >> I've looked at ubnt firmwares and there are a few identifiers that i can >> gather: >> >> All the 'M' series (rockets, airgrids and many others) uses the same >> firmware identifier: 'XM'. >> >> The b/g 2Ghz radios uses the 'XS2' identifier and the 5Ghz models uses >> the 'XS5'. >> >> The original PicoStation2 HP firmware has the following identifier: >> >> $ hexdump -C PicoStation2HP-v4.0.3.build5058.bin >> 00000000 55 42 4e 54 58 53 32 2e 61 72 32 33 31 36 2e 76 >> |UBNTXS2.ar2316.v| >> 00000010 34 2e 30 2e 33 2e 35 30 35 38 2e 31 33 30 33 32 >> |4.0.3.5058.13032| >> 00000020 38 2e 31 30 35 34 00 00 00 00 00 00 00 00 00 00 >> |8.1054..........| >> 00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >> |................| >> [...] >> >> Can you try to build an image using 'XS2' as the board type and >> 'XS2.ar2316.FreeBSD' as the version string ? >> >> If you create a correct image the update process will succeed even if the >> compression is wrong (the loader will fail to boot, but that is ok, we can >> hopefully fix the image later). >> >> The kernel load address and entry point set by mkfwimage for the XS2 >> board is different from what we expect: >> >> .name = "XS2", >> .kern_start = 0xbfc30000, >> .kern_memstart = 0x80041000, >> > .kern_entry = 0x80041000, >> .firmware_max_length= 0x00390000, >> > > kern_memstart is not there in the mkfwimage I am using but I thing that > should be fine. > > fwiw, I am using Adrian's > > http://freebsd-wifi-build.googlecode.com/svn/trunk/ > > > Trying rest of the things with XS2 and still getting the same result: > > ar7240> urescue > Setting default IP 192.168.1.20 > Starting TFTP server... > Using eth0 (192.168.1.20), address: 0x81000000 > Waiting for connection: / > Receiving file from 192.168.1.254:42436 > Received 6408760 bytes > Firmware check failed! (-2) > Alright so I think we've got a little further in the journey and got past this error. I think the "Firmware check failed!" error was coming because we were setting UBNT_VERSION = "XS2.ar2316.FreeBSD" while it was expecting something along the lines of "XS2.ar7240.FreeBSD" ar7240 is the key thing here afaik. In retrospect it seems obvious(?) because when I drop into uboot after powering on the device, the prompt for uboot is: ar7240> That probably was the indication to not use ar2316 in version string. But who knew :-) Now after accepting the image it fails at a different point: Receiving file from 192.168.1.254:56679 Received 6300568 bytes Firmware Version: XS2.ar7240.FreeBSD Setting U-Boot environment variables Un-Protected 1 sectors Erasing Flash.... done Erased 1 sectors Writing to Flash... done Protected 1 sectors Copying partition 'kernel' to flash memory: erasing range 0x9F050000..0x9F19FFFF: ..................... done Erased 21 sectors writing to address 0x9f050000, length 0x00150000 ... Copying partition 'rootfs' to flash memory: erasing range 0x9F1A0000..0x9F65FFFF: ............................................................................ done Erased 76 sectors writing to address 0x9f1a0000, length 0x004c0000 ... Firmware update complete. Resetting... U-Boot 1.1.4.2-s594 (Dec 5 2012 - 15:23:07) Board: Ubiquiti Networks XM board (rev 1.0 e302) DRAM: 32 MB Flash: 8 MB PCIe WLAN Module found (#1). Net: eth0, eth1 Hit any key to stop autoboot: 0 ## Booting image at 9f050000 ... Bad Magic Number Boot failed: resetting... U-Boot 1.1.4.2-s594 (Dec 5 2012 - 15:23:07) Board: Ubiquiti Networks XM board (rev 1.0 e302) DRAM: 32 MB Flash: 8 MB PCIe WLAN Module found (#1). Net: eth0, eth1 Hit any key to stop autoboot: 0 ## Booting image at 9f050000 ... Bad Magic Number Boot failed: resetting... So, its stuck in this loop now. I also tried ar7240> bootm 0x80041000 ## Booting image at 80041000 ... Bad Magic Number ar7240> bootm 0xa8030000 ## Booting image at a8030000 ... Bad Magic Number Just for catching something obvious, ar7240> printenv bootdelay=1 baudrate=115200 ethaddr=00:15:6d:0d:00:00 mtdids=nor0=ar7240-nor0 filesize=10000 fileaddr=81000000 serverip=192.168.1.254 ethact=eth0 mtdparts=mtdparts=ar7240-nor0:256k(u-boot),64k(u-boot-env),1344k(kernel),5440k(rootfs),256k(cfg),64k(EEPROM) bootcmd=bootm 0x9f050000 bootargs=console=tty0 root=31:03 rootfstype=squashfs init=/init ipaddr=192.168.1.20 stdin=serial stdout=serial stderr=serial cheers, Hiren