likewise has quit [Quit: ChatZilla 0.9.93 [Firefox 50.0.2/20161201160049]]
ErwinH has joined #linux-sunxi
uwe_ has joined #linux-sunxi
ErwinH has quit [Ping timeout: 240 seconds]
firnsy has joined #linux-sunxi
firnsy has joined #linux-sunxi
firnsy has quit [Changing host]
jernej has quit [Ping timeout: 245 seconds]
ganbold has joined #linux-sunxi
ErwinH has joined #linux-sunxi
tkaiser has joined #linux-sunxi
ErwinH has quit [Ping timeout: 252 seconds]
jernej has joined #linux-sunxi
perr has joined #linux-sunxi
perr has joined #linux-sunxi
perr has quit [Changing host]
tkaiser has quit [Ping timeout: 240 seconds]
jernej has quit [Ping timeout: 264 seconds]
ErwinH has joined #linux-sunxi
ErwinH has quit [Ping timeout: 240 seconds]
ErwinH has joined #linux-sunxi
ErwinH has quit [Ping timeout: 252 seconds]
HeavyMetal has quit [Quit: BNC Services Provided by the ASoTnet IRC Network.]
HeavyMetal has joined #linux-sunxi
HeavyMetal has joined #linux-sunxi
HeavyMetal has quit [Changing host]
agin_ has quit [Quit: Page closed]
cnxsoft has joined #linux-sunxi
tkaiser has joined #linux-sunxi
tkaiser has quit [Ping timeout: 252 seconds]
<apritzel>
Alright, it's late here and all, but: it seems like that the security fuse _can_ be burned on the Pine64
<apritzel>
BUT: DON'T DO THIS AT HOME, it seems like a one-way thing!
HeavyMetal has quit [Quit: BNC Services Provided by the ASoTnet IRC Network.]
<apritzel>
my board is now almost bricked: it behaves as the Remix Mini PC: FEL mode starts in _nonsecure_ SVC, so no 64-bit switch anymore
HeavyMetal has joined #linux-sunxi
HeavyMetal has joined #linux-sunxi
HeavyMetal has quit [Changing host]
<willmore>
apritzel, thanks for taking one for the team.
<apritzel>
willmore: ;-)
<apritzel>
willmore: I indeed choose a Pine64 with 1GB, which is the least precious of my collection
ninolein_ has quit [Ping timeout: 240 seconds]
ninolein has joined #linux-sunxi
<willmore>
I'm rereading an old thread on cnx about the S905 clock speed scandal. tkaiser says that they had a tool to load up the mail on an H3 box--to generate heat. Was that memtester or something else? I'm curious to use to heat up chips for testing.
dave0x6d has quit [Quit: Connection closed for inactivity]
terra854 has joined #linux-sunxi
<apritzel>
so guys: don't do this: the board doesn't start from SD anymore, only FEL works, but in non-secure SVC
<terra854>
apritzel: What did you do?
<apritzel>
I guess one can run some 32-bit Linux on it, but with some limitations (no SID access, for instance)
<apritzel>
terra854: I burned the secure efuse
egbert has quit [Disconnected by services]
egbert has joined #linux-sunxi
<terra854>
apritzel: Pine?
<apritzel>
terra854: bog standard Pine64 board, yes
<terra854>
apritzel: How dod you even manage to do that/
<terra854>
y?
<apritzel>
setting bit 11 in the EFUSE_LCJS register
<apritzel>
using the SID register write sequence
<apritzel>
I think the idea is that you burn some key or certificate into the SID before you burn that bit
<apritzel>
so the BROM can validate your boot0/SPL against that key
<willmore>
apritzel, yes.
dh1tw has quit [Ping timeout: 240 seconds]
<apritzel>
let's book this under "learning" ;-)
<terra854>
apritzel: So in other words, your Pine is as good as dead?
<apritzel>
terra854: as I said, I think one can boot some 32-bit Linux using FEL
<apritzel>
in UP, because no PSCI :-(
<terra854>
apritzel: So only 1 core is accessible?
<apritzel>
so there goes the tale of the unbrickable Allwinner boards ...
<apritzel>
terra854: yes, at least with normal (upstream) Linux, one can somehow hack in another SMP bringup method
<wens>
MoeIcenowy: needs the dot clock check relax patch
ErwinH has joined #linux-sunxi
<apritzel>
I wonder if there is a signed image which matches the default key ...
ErwinH has quit [Ping timeout: 252 seconds]
dh1tw has joined #linux-sunxi
<wens>
jelle: the wierd part translates as " frankly speaking " :p
<wens>
or " to be clear "
apritzel has quit [Ping timeout: 240 seconds]
GrimKriegor has quit [Quit: oh bai bai bai]
GrimKriegor has joined #linux-sunxi
ErwinH has joined #linux-sunxi
tkaiser has joined #linux-sunxi
ErwinH has quit [Ping timeout: 240 seconds]
tkaiser has quit [Ping timeout: 245 seconds]
nemunaire has quit [Ping timeout: 240 seconds]
GrimKriegor has quit [Quit: oh bai bai bai]
GrimKriegor has joined #linux-sunxi
HeavyMetal has quit [Quit: BNC Services Provided by the ASoTnet IRC Network.]
HeavyMetal has joined #linux-sunxi
HeavyMetal has joined #linux-sunxi
HeavyMetal has quit [Changing host]
ErwinH has joined #linux-sunxi
victhor has quit [Ping timeout: 240 seconds]
ErwinH has quit [Ping timeout: 240 seconds]
ErwinH has joined #linux-sunxi
ErwinH has quit [Ping timeout: 252 seconds]
tkaiser has joined #linux-sunxi
tkaiser has quit [Ping timeout: 276 seconds]
ErwinH has joined #linux-sunxi
ErwinH has quit [Ping timeout: 240 seconds]
pg12 has quit [Ping timeout: 252 seconds]
chomwitt has quit [Ping timeout: 240 seconds]
pg12 has joined #linux-sunxi
ErwinH has joined #linux-sunxi
ErwinH_ has joined #linux-sunxi
ErwinH has quit [Ping timeout: 252 seconds]
ErwinH_ has quit [Ping timeout: 240 seconds]
IgorPec has joined #linux-sunxi
tkaiser has joined #linux-sunxi
<MoeIcenowy>
apritzel: when your OS image is denied, is there anything on the serial console?
<MoeIcenowy>
and I admire your bravery ;-)
[7] has quit [Ping timeout: 245 seconds]
TheSeven has joined #linux-sunxi
tkaiser has quit [Ping timeout: 245 seconds]
<MoeIcenowy>
and I don't think there's any "default" key
ErwinH has joined #linux-sunxi
ErwinH has quit [Ping timeout: 252 seconds]
ErwinH has joined #linux-sunxi
ErwinH has quit [Ping timeout: 252 seconds]
JohnDoe_71Rus has joined #linux-sunxi
ErwinH has joined #linux-sunxi
engideavr has joined #linux-sunxi
ErwinH has quit [Ping timeout: 252 seconds]
BenG83_ has quit [Ping timeout: 240 seconds]
tkaiser has joined #linux-sunxi
jernej has joined #linux-sunxi
tkaiser has quit [Ping timeout: 248 seconds]
IgorPec4 has joined #linux-sunxi
cnxsoft has quit [Remote host closed the connection]
wzyy2 has joined #linux-sunxi
jernej has quit [Ping timeout: 256 seconds]
cnxsoft has joined #linux-sunxi
ErwinH has joined #linux-sunxi
ErwinH has quit [Ping timeout: 252 seconds]
IgorPec4 has quit [Ping timeout: 260 seconds]
tkaiser has joined #linux-sunxi
OtakuNekoP has quit [Remote host closed the connection]
tkaiser has quit [Ping timeout: 256 seconds]
foxx_ has joined #linux-sunxi
tkaiser has joined #linux-sunxi
<tkaiser>
MoeIcenowy: BPi M2+ with 'usual' workloads can run with 816 MHz (that's also the cpufreq we chose in Armbian to prevent hassles if people run with mainline kernel without THS patches). But with cpuburn-a7 or even lima-memtester it's too high
<tkaiser>
MoeIcenowy: The legacy kernel's budget cooling code is somewhat broken (as expected). When we tried to test DRAM reliability with lima-memtester (and Mali400 shamelessly overclocked to 600 MHz) the legacy kernel throttled cpufreq down to 240 MHz after 10-15 min (instead of Mali clockspeed)
<tkaiser>
MoeIcenowy: The good news: Anyone needing BPi M2+'s feature set should have a look into FriendlyARM's h3_lichee repo. There you find NanoPi M1 Plus (same size, same features, one USB host port more)
fkluknav has joined #linux-sunxi
ErwinH has joined #linux-sunxi
<KotCzarny>
apritzel: wow, you the brave ;)
<tkaiser>
IgorPec: Did you already some thermal tests with NanoPi M1 Plus? I just looked through throttling settings I took from M1 and first operating points' temperatures/cpufreq look too low. But I can give it a try once the board arrives here, too...
ErwinH has quit [Ping timeout: 240 seconds]
FrostyBytes has quit [Quit: Page closed]
msevwork has joined #linux-sunxi
ErwinH has joined #linux-sunxi
<walkiry>
apritzel : which address of the bootROM (A64) have you found the code about checking the SID? I will help you disassembling (understanding).
lamer14858488322 has joined #linux-sunxi
nemunaire has joined #linux-sunxi
tkaiser has quit [Ping timeout: 255 seconds]
lamer14858488322 has quit [Client Quit]
tkaiser has joined #linux-sunxi
mhlavink has joined #linux-sunxi
arete74 has quit [Quit: leaving]
arete74 has joined #linux-sunxi
lkcl has joined #linux-sunxi
lkcl has quit [Client Quit]
BenG83_1 has joined #linux-sunxi
lkcl has joined #linux-sunxi
paulk-collins has joined #linux-sunxi
apritzel has joined #linux-sunxi
florianH has joined #linux-sunxi
INdek has joined #linux-sunxi
Andy-D has joined #linux-sunxi
apritzel has quit [Quit: Leaving.]
wzyy2 has quit [Remote host closed the connection]
<ssvb>
it was useful for checking whether dithering is working correctly and gradients look smooth
<ssvb>
apritzel: it might be a good idea to ask Allwinner (via pine64?) about how to generate a correct key and sign the SPL
<ssvb>
then we could create a small signed stub, which could chain load the actual SPL
<ssvb>
then the most interesting question is whether that would be any different from what we already have now without setting this eFUSE bit
<ssvb>
if I understand it correctly, you were trying the experiment with eFUSE to check if it helps to make the secure settings working properly (such as blocking access to SRAM A2, etc.), right?
cnxsoft has joined #linux-sunxi
<apritzel>
ssvb: yes, I was thinking the same (signed stub)
<apritzel>
ssvb: and yes, I will ask TLLim
cnxsoft has quit [Remote host closed the connection]
<apritzel>
so the good news is: security now works ;-)
<apritzel>
ssvb: my hope was that this using some "default key" now, so all 0's or all 1's
<agin_>
sorry here's another question: where can I find the fex files for the H3 which refer to the video output? in uboot?
<KotCzarny>
apritzel, one word of caution
<KotCzarny>
maybe vendors didnt sell locked down android yet because they didnt knew how to do so
<ssvb>
apritzel: in the case if there is some magic ritual performed by the BROM to enable this security in a pure software way, then we should be able to do it without a signed stub
<apritzel>
ssvb: actually I was after that
<apritzel>
ssvb: and I was thinking that either this "fuse" was non-permanent or I wouldn't be able to actually blow it
<KotCzarny>
and once you've successfully added security, no more multi-purpose boards?
<ssvb>
agin_: fex files are used by the 3.4 BSP kernels from Allwinner
<apritzel>
KotCzarny: vendors know how to do this: my "bricked" Pine64 looks now the same the Remix Mini PC
<agin_>
okay... I just want to change the uboot resolution
<ssvb>
agin_: for LCD?
<agin_>
for the TVout...
<apritzel>
KotCzarny: but for the development board market this "security feature" wouldn't be a fit
<agin_>
just to ensure that it is 720x576
<walkiry>
i don't know if it can be related but in the lichee bsp under brandy/u-boot-2014.07/sunxi_spl/sbrom we can see the memory mapping of the spl and at the head you can see a hash
<agin_>
because I see a #ifdef LCD_TEST_PATTERN in uboot
<KotCzarny>
apritzel, remixos vendor might knew
<agin_>
but I wonder how to enable it
<ssvb>
agin_: I guess that you are entirely on your own here, I doubt that many people use or need TVout
muvlon_ has joined #linux-sunxi
<walkiry>
you can see in the linker script they are using the hash. But the hash is 64 byte long meaning it could be a SHA256
<swiftgeek>
any chance of getting esp8089 working on mainline?
<swiftgeek>
it works though it throws a lot of errors and i cannot unload->load module
<swiftgeek>
and still appears to be ∞ more stable than realtek chips
cnxsoft has joined #linux-sunxi
INdek has quit [Ping timeout: 240 seconds]
cnxsoft has quit [Remote host closed the connection]
BenG83_1 has joined #linux-sunxi
<swiftgeek>
600 packets with no loss ^^
<jelle>
=)
<swiftgeek>
jelle: i wonder if i should just swap makefile
florianH has quit [Quit: Connection closed for inactivity]
<swiftgeek>
but it works so decently now ;P
<jelle>
swiftgeek: 'swap makefile'?
<MoeIcenowy>
apritzel: I think security feature may be a point for some board
<MoeIcenowy>
for example, somthing like the USB Armory
<apritzel>
MoeIcenowy: yes, also for "server" type applications
<swiftgeek>
jelle: cleanup branch has no makefile that would work for outside-of-the-tree
<apritzel>
MoeIcenowy: that's why I wanted to explore this
<jelle>
swiftgeek: oh I see
<MoeIcenowy>
for sever I want at least an higher frequency A53 ;-)
<MoeIcenowy>
not such a 40nm A53 ;-)
<swiftgeek>
and last thing i want on tiny ARM device is to pull whole kernel sources
<swiftgeek>
still i have issues with touchscreen ;/
<swiftgeek>
silead modules isn't kicking in
<swiftgeek>
*module
agin_ has quit [Ping timeout: 260 seconds]
The_Loko has joined #linux-sunxi
<swiftgeek>
PH3/2
cnxsoft has joined #linux-sunxi
bbrezill1 has quit [Quit: WeeChat 1.5]
bbrezillon has joined #linux-sunxi
fkluknav has joined #linux-sunxi
<MoeIcenowy>
apritzel: I think you can do the following try: read out boot0 from Remix Mini PC and write it to a SD card, then insert the SD card to your "secured" Pine64
<swiftgeek>
MoeIcenowy: how does touchscreen work on your Aoson M751s?
<MoeIcenowy>
swiftgeek: of course it works ;-)
<swiftgeek>
via module?
fkluknav has quit [Remote host closed the connection]
<MoeIcenowy>
but I did a lot of configuration for it
fkluknav has joined #linux-sunxi
<swiftgeek>
userspace one requires from me to toggle PH1 somehow
fkluknav has quit [Remote host closed the connection]
<MoeIcenowy>
via dt
<swiftgeek>
MoeIcenowy: does silead module produce any logs?
<MoeIcenowy>
only chip id
<swiftgeek>
MoeIcenowy: does it produce that output if firmware is not in fs?
<MoeIcenowy>
yes
<MoeIcenowy>
generic firmware load error
fkluknav has joined #linux-sunxi
<MoeIcenowy>
apritzel: I think that Secure mode boot0 is different from generic one
<swiftgeek>
MoeIcenowy: are you using sun8i-a33-q8-tablet.dtb or sth different ?
<MoeIcenowy>
and the "sbrom" in lichee u-boot is really a secure boot0
<MoeIcenowy>
swiftgeek: the sun8i-a33 dtb
<MoeIcenowy>
but with dt alternations
<swiftgeek>
do you have them posted somewhere?
<KotCzarny>
swiftgeek: actually once you compile kernel on sunxi device, future compilations are fast (assuming you dont change essential config)
<swiftgeek>
KotCzarny: i was more concerned about space
<swiftgeek>
but it is defined in sun8i-reference-design-tablet.dtsi as gsl1680
<swiftgeek>
so wtf
<KotCzarny>
but you might check if sysrq was actually enabled
<montjoie>
yes I just find in screen man to do ctrl a ctrl b
<montjoie>
happy to have "a second chance" over serial
<MoeIcenowy>
apritzel: can you provide a dump of your Jide Remix Mini's first several MIB of eMMC ?
MACscr has joined #linux-sunxi
MACscr has left #linux-sunxi [#linux-sunxi]
<swiftgeek>
A13 has only NOR over NAND pads right?
premoboss has joined #linux-sunxi
perr has quit [Quit: Leaving]
INdek has joined #linux-sunxi
JohnDoe_71Rus has quit [Quit: Miranda IM! Smaller, Faster, Easier. http://miranda-im.org]
PITYHERO233 has joined #linux-sunxi
PITYHERO233 has quit [Client Quit]
yann-kaelig has joined #linux-sunxi
swiftgeek has quit [Ping timeout: 252 seconds]
walkiry_ has joined #linux-sunxi
<apritzel>
MoeIcenowy: yes, I wanted to do experiments with the Remix tonight, among them the things you mentioned (booting Remix boot0 on Pine64, dumping Remix eMMC)
swiftgeek has joined #linux-sunxi
dave0x6d has joined #linux-sunxi
f0xx has quit [Ping timeout: 240 seconds]
premoboss has quit [Ping timeout: 255 seconds]
cnxsoft has quit [Quit: cnxsoft]
fkluknav has quit [Ping timeout: 255 seconds]
f0xx has joined #linux-sunxi
premoboss has joined #linux-sunxi
fkluknav has joined #linux-sunxi
f0xx has quit [Ping timeout: 240 seconds]
walkiry__ has joined #linux-sunxi
walkiry__ has left #linux-sunxi [#linux-sunxi]
walkiry_ has quit [Ping timeout: 260 seconds]
fkluknav has quit [Ping timeout: 258 seconds]
fkluknav has joined #linux-sunxi
premoboss has quit [Ping timeout: 240 seconds]
fkluknav has quit [Remote host closed the connection]
fkluknav has joined #linux-sunxi
fkluknav has quit [Read error: Connection reset by peer]
fkluknav has joined #linux-sunxi
JohnDoe_71Rus has joined #linux-sunxi
IgorPec has joined #linux-sunxi
florianH has joined #linux-sunxi
INdek has quit [Read error: Connection reset by peer]
f0xx has joined #linux-sunxi
INdek has joined #linux-sunxi
msevwork has quit [Quit: Leaving]
<swiftgeek>
MoeIcenowy: i tried your way of modifying dt and it has no effect xD