廃品回収リベンジ(5)
LS-WSGL カーネルで起動して LS-SL ファームウェア 1.24 のインストール

LS-SL

ある方から私のところに、LS-SL が廃棄されてきた。
しばらくほったらかしだったのだが、、、
別の方から、SEAGATE の 2.5" HDD が廃棄されてきた。
ということで、壊してしまった LS-SL 廃品回収リベンジ(謎

tftp サーバに、LinkStationシリーズファームウェア 1.56 や
LS-SL ファームウェア 1.24 の
initrd.buffalo と uImage.buffalo を置いて tftp boot したが、 起動して来なかった。

しかたがないので、LS-WSGL のカーネルで起動、 LS-SL ファームウェア 1.24 をインストールすることにした。

tftp boot

Orion1   CPU =  Low

Checking DATA BUS
Checking ADDRESS BUS

> Checking hardware info ...
=== CPU-ID       : 0x00005182 ===
=== Strap status : 0x00802030 ===
=== H/W boardId  :       0x33 ===
=== boardId      :       0x1a ===
=== micon_support:        off ===
> OK.
=== BUFFALO LS-SL U-Boot. ===
 ** LOADER **
 ** BUFFALO BOARD: BUFFALO_BOARD_LS_SL LE (CFG_ENV_ADDR=fffff000)


U-Boot 1.1.1 (May 28 2009 - 11:06:21) Marvell version: 1.12.1 - TINY
U-Boot code: 00600000 -> 00639A58  BSS: -> 00641B24
Buffalo Version: 1.23-1.00

DRAM CS[0] base 0x00000000   size 128MB
DRAM Total size 128MB
[256kB@fffc0000] Flash: 256 kB
Addresses 8M - 0M are saved for the U-Boot usage.
Mem malloc Initialization (8M - 7M): Done

Soc: 88F5182 A2
CPU: ARM926 (Rev 0) running @ 400Mhz
Orion 1 streaming disabled
SysClock = 200Mhz , TClock = 166Mhz


USB 0: host mode
PCI 0: PCI Express Root Complex Interface
PCI 1: Conventional PCI, speed = 33000000
Net:   egiga0 [PRIME]
Using 88E1118 phy
buffalo_change_power_status > Read 0x5c
buffalo_IsStopAtUbootStatus > MagicKey=0x5c
buffalo_change_power_status > Read 0x5c
buffalo_change_power_status > Read 0x5c
buffalo_change_power_status > Writing 0x5c

Please Press HDD power button to continue ...
電源SWをONにする
buffalo_change_power_status > Read 0x5c
buffalo_change_power_status > Writing 0x3a

Marvell Serial ATA Adapter
Integrated Sata device found
  Device 0: OK
Model: ST9100828AS                              Firm: 3.BHD    Ser#: 5LZ1LN1M   
            Type: Hard Disk
            Supports 48-bit addressing
            Capacity: 95396.2 MB = 93.1 GB (195371568 x 512)

** Bad partition 1 **
serch_boot_drv (194)>No kernel_file 0
** Bad partition 1 **
serch_boot_drv (249)>No init_file 0
** Bad partition 1 **
serch_boot_drv (194)>No kernel_file 1
** Bad partition 1 **
serch_boot_drv (249)>No init_file 1
Lost all init_rd

FUNCTION SW を押す
func switch pushed, and exited loop
wait until func switch released.

Marvell Serial ATA Adapter
Integrated Sata device found

** Bad partition 1 **
serch_boot_drv (194)>No kernel_file 0
** Bad partition 1 **
serch_boot_drv (249)>No init_file 0
** Bad partition 1 **
serch_boot_drv (194)>No kernel_file 1
** Bad partition 1 **
serch_boot_drv (249)>No init_file 1
hit any key to switch tftp boot.
Hit any key to stop autoboot:  0
Using egiga0 device
TFTP from server 192.168.11.1; our IP address is 192.168.11.150
Filename 'uImage.buffalo'.
Load address: 0x100000
Loading: #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ###################
done
Bytes transferred = 1757604 (1ad1a4 hex)
Using egiga0 device
TFTP from server 192.168.11.1; our IP address is 192.168.11.150
Filename 'initrd.buffalo'.
Load address: 0x800000
Loading: #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ########
done
Bytes transferred = 5697905 (56f171 hex)
## Booting image at 00100000 ...
   Image Name:   Linux-2.6.16.16-arm1
   Created:      2008-11-10   4:33:33 UTC
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    1757540 Bytes =  1.7 MB
   Load Address: 00008000
   Entry Point:  00008000
   Verifying Checksum ... OK
OK
## Loading Ramdisk Image at 00800000 ...
   Image Name:   initrd
   Created:      2008-11-10   4:34:40 UTC
   Image Type:   ARM Linux RAMDisk Image (gzip compressed)
   Data Size:    5697841 Bytes =  5.4 MB
   Load Address: 00000000
   Entry Point:  00000000
   Verifying Checksum ... OK

Starting kernel ...

arg:console=ttyS0,115200 root=/dev/sda2 rw initrd=0x00800040,15M panic=5 BOOTVER=1.23 tftpboot=yes
CONFIG_BUFFALO_PLATFORM CONFIG_BUFFALO_LINKSTATION_LSWSGL_R1 ---
Uncompressing Linux................................................................................................................... done, booting the kernel.
Linux version 2.6.16.16-arm1 (root@build.dd-hot24.nas.buffalo.local) (gcc version 3.4.4 (release) (CodeSourcery ARM 2005q3-2)) #383 Mon Nov 10 13:33:20 JST 2008
CPU: ARM926EJ-Sid(wb) [41069260] revision 0 (ARMv5TEJ)
Machine: MV-88fxx81
Using UBoot passing parameters structure
Sys Clk = 200000000, Tclk = 166664740


- Warning - This LSP release was tested only with U-Boot release 1.7.3

Memory policy: ECC disabled, Data cache writeback
CPU0: D VIVT write-back cache
CPU0: I cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets
CPU0: D cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets
Built 1 zonelists
Kernel command line: console=ttyS0,115200 root=/dev/sda2 rw initrd=0x00800040,15M panic=5 BOOTVER=1.23 tftpboot=yes
PID hash table entries: 1024 (order: 10, 16384 bytes)
Console: colour dummy device 80x30
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Memory: 128MB 0MB 0MB 0MB = 128MB total
Memory: 110620KB available (2992K code, 553K data, 112K init)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
checking if image is initramfs...it isn't (no cpio magic); looks like an initrd
Freeing initrd memory: 15360K
NET: Registered protocol family 16
FLASH boardId = 19
Flash bankwidth 1, base ff800000, size 40000
BUFFALO LS_WSGL_R1 FLASH size 256[KB]

  Marvell Development Board (LSP Version 1.7.8_NAS)-- BUFFALO_BOARD_LS_WSGL_R1

 Detected Tclk 166664740 and SysClk 200000000
Marvell USB EHCI Host controller #0: c16f5e00
Marvell USB EHCI Host controller #1: c16f5c00
pexBarOverlapDetect: winNum 2 overlap current 0
mvPexInit:Warning :Bar 2 size is illigal
it will be disabled
please check Pex and CPU windows configuration
PCI: bus0: Fast back to back transfers enabled
PCI: bus1: Fast back to back transfers enabled
SCSI subsystem initialized
use IDMA acceleration in copy to/from user buffers. used channels 2 and 3
Done.
cesadev_init(c0011c44)
Fast Floating Point Emulator V0.9 (c) Peter Teichmann.
SGI XFS with large block numbers, no debug enabled
Initializing Cryptographic API
io scheduler noop registered (default)
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 3) is a 16550A
serial8250: ttyS1 at MMIO 0x0 (irq = 4) is a 16550A
RAMDISK driver initialized: 3 RAM disks of 16384K size 1024 blocksize
loop: loaded (max 8 devices)
Marvell Gigabit Ethernet Driver 'egiga':
  o Ethernet descriptors in DRAM
  o DRAM SW cache-coherency
  o Checksum offload enabled
  o Loading network interface ** egiga_init_module (0)
'eth0'
Intergrated Sata device found
scsi0 : Marvell SCSI to SATA adapter
scsi1 : Marvell SCSI to SATA adapter
** BUFFALO Disable Command Queuing Function [0 0] **
  Vendor: Seagate   Model: ST9100828AS       Rev: 3.BH
  Type:   Direct-Access                      ANSI SCSI revision: 03
Linux IAL (ERROR) : retry command host=0, bus=0 SCpnt = c1433ba0
SCSI device sda: 195371568 512-byte hdwr sectors (100030 MB)
sda: Write Protect is off
SCSI device sda: drive cache: write back
SCSI device sda: 195371568 512-byte hdwr sectors (100030 MB)
sda: Write Protect is off
SCSI device sda: drive cache: write back
 sda:
sd 0:0:0:0: Attached scsi disk sda
sd 0:0:0:0: Attached scsi generic sg0 type 0
physmap flash device: 40000 at ff800000
>jedec_probe
Found: SST 39LF020
phys_mapped_flash: Found 1 x8 devices at 0x0 in 8-bit bank
number of JEDEC chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
cmdlinepart partition parsing not available
RedBoot partition parsing not available
mice: PS/2 mouse device common for all mice
md: raid0 personality registered for level 0
md: raid1 personality registered for level 1
md: md driver 0.90.3 MAX_MD_DEVS=256, MD_SB_DISKS=27
md: bitmap version 4.39
Kernel event proc (C) BUFFALO INC. V.1.00 installed.
MICON ctrl (C) BUFFALO INC. V.1.00 installed.
mvGppValueSet: Err. An attempt to set output value to GPP 15 in input mode.
Buffalo CPU Inerupts Driver (C) BUFFALO INC. Ver.0.01 alpha1 installed.
mvGppValueSet: Err. An attempt to set output value to GPP 2 in input mode.
Buffalo Gpio Control Driver (C) BUFFALO INC. Ver.0.02 installed.
NET: Registered protocol family 2
IP route cache hash table entries: 2048 (order: 1, 8192 bytes)
TCP established hash table entries: 8192 (order: 3, 32768 bytes)
TCP bind hash table entries: 8192 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 8192 bind 8192)
TCP reno registered
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
md: Autodetecting RAID arrays.
md: autorun ...
md: ... autorun DONE.
RAMDISK: Compressed image found at block 0
VFS: Mounted root (ext2 filesystem).
---- in linuxrc ---
Thu Nov  1 00:05:51 JST 2007
CheckDevices
linuxrc:choose operation (timeout 4[s])
 1:RamRoot other:HddRoot  ? -HddRoot-
-- rebuild mdadm.conf for BOOT, ROOTFS --
mdadm: cannot open /dev/disk1_1: No such device or address
mdadm: cannot open /dev/disk1_2: No such device or address
mdadm: cannot open /dev/disk1_5: No such device or address
mdadm: No arrays found in config file
-- setup max error counts --
/sys/block/md0/md/maxerr_cnt is setted to -1
Starting :fsck_disks(boot) ...         [Failed. ]
Starting :fsck_disks(rootfs) ...       [Success.]
Starting :mount(boot) ...              [Failed. ]
-- rebuild mdadm.conf for BOOT, ROOTFS --
mdadm: cannot open /dev/disk1_1: No such device or address
mdadm: cannot open /dev/disk1_2: No such device or address
mdadm: cannot open /dev/disk1_5: No such device or address
mdadm: No arrays found in config file
-- setup max error counts --
/sys/block/md0/md/maxerr_cnt is setted to -1
/sys/block/md1/md/maxerr_cnt is setted to -1
/sys/block/md10/md/maxerr_cnt is setted to -1
/etc/init.d/startSysMd.sh: /etc/init.d/startSysMd.sh: 23: cannot create /sys/block/md10/md/maxerr_cnt: Directory nonexistent
/dev/md1: Invalid argument
mount: you must specify the filesystem type
/dev/md1: Invalid argument
mount: you must specify the filesystem type
md: md0 stopped.
mdadm: stopped /md: md1 stopped.
dev/md0
mdadm: stopped /md: md10 stopped.
dev/md1
mdadm: stopped /dev/md10
Freeing init memory: 112K
init started:  BusyBox v1.1.1 (2008.11.04-08:25+0000) multi-call binary
Starting pid 462, console /dev/ttyS0: '/etc/init.d/rcS'
--- rcStart (initrd) ---
chmod: /home: No such file or directory
Unable to find swap-space signature
swapon: /dev/md10: Invalid argument
create dir : /home
create dir : /var/www
-- rebuild mdadm.conf for BOOT, ROOTFS --
mdadm: cannot open /dev/disk1_1: No such device or address
mdadm: cannot open /dev/disk1_2: No such device or address
mdadm: cannot open /dev/disk1_5: No such device or address
mdadm: No arrays found in config file
-- setup max error counts --
/sys/block/md0/md/maxerr_cnt is setted to -1
/sys/block/md1/md/maxerr_cnt is setted to -1
/sys/block/md10/md/maxerr_cnt is setted to -1
umount: /boot: not mounted
mkdir: Cannot create directory `/boot': File exists
/dev/md0: Invalid argument
mount: you must specify the filesystem type
md: md0 stopped.
mdadm: stopped /md: md1 stopped.
dev/md0
md: md10 stopped.
mdadm: stopped /dev/md1
mdadm: stopped /dev/md10
configure files from Buffalo parameters.
-- rebuild mdadm.conf for BOOT, ROOTFS --
mdadm: cannot open /dev/disk1_1: No such device or address
mdadm: cannot open /dev/disk1_2: No such device or address
mdadm: cannot open /dev/disk1_5: No such device or address
mdadm: No arrays found in config file
-- setup max error counts --
/sys/block/md0/md/maxerr_cnt is setted to -1
/dev/md0: Invalid argument
mount: you must specify the filesystem type
Restore previous configuration files
/bin/tar: /boot/conf_save.tgz: Cannot open: No such file or directory
/bin/tar: Error is not recoverable: exiting now
/bin/tar: Child returned status 2
/bin/tar: Error exit delayed from previous errors
/bin/tar: /boot/conf_save.tgz: Cannot open: No such file or directory
/bin/tar: Error is not recoverable: exiting now
/bin/tar: Child returned status 2
/bin/tar: Error exit delayed from previous errors
unzip  fail.
umount: /boot: not mounted
rootfs on / type rootfs (rw)
/dev/root.old on / type ext2 (rw,nogrpid)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts (rw)
/dev/ram1 on /mnt/ram type tmpfs (rw)
  PID  Uid     VmSize Stat Command
    1 root        576 S   init
    2 root            SWN [ksoftirqd/0]
    3 root            SW< [events/0]
    4 root            SW< [khelper]
    5 root            SW< [kthread]
   11 root            SW< [kblockd/0]
   38 root            SW  [pdflush]
   39 root            SW  [pdflush]
   41 root            SW< [aio/0]
   40 root            SW  [kswapd0]
   42 root            SW< [xfslogd/0]
   43 root      md: md0 stopped.
      SW< [xfsdamd: md1 stopped.
tad/0]
   44 romd: md10 stopped.
ot            SW  [crypto]
   45 root            SW  [crypto_ret]
  168 root            SW< [scsi_eh_0]
  169 root            SW< [scsi_eh_1]
  178 root            SW  [mtdblockd]
  461 root        236 S   init
  462 root        672 S   /bin/sh /etc/init.d/rcS
  861 root        760 R   /bin/sh /etc/init.d/restore_config.sh start
  900 root        800 R   ps
mdadm: stopped /dev/md0
mdadm: stopped /dev/md1
mdadm: stopped /dev/md10
create network files..
IP=[dhcp], netmask=[], dgw=[], dns1=[], dns2=[]
killall: dhcpcd: no process killed
route: SIOC[ADD|DEL]RT: No such process
Configuration network interface: lo eth0
requesting DHCP  tout=30[s]
networking.sh: dhcp requesting...
DontDownIface
alwaysFork
eth0: link down
eth0: link up<5>, full duplex<5>, speed 1 Gbps<5>
sendto:  count 6   sync 1
sendto:  count 5   sync 0
sendto:  count 6   sync 0
dhcpcd.exe: interface eth0 has been configured with new IP=192.168.2.209 GATEWAY=192.168.2.96
** networking.sh dhcp fin.
configure files from Buffalo parameters.
Starting kernelmon:Starting clientUtil_server:starting on eth0
Starting daemonwatch:daemonwatch Ver.1.01
watch list file : /etc/daemonwatch.list
KERNELMOn (lanact 0 half)
usbcore: registered new driver usbfs
usbcore: registered new driver hub
ehci_platform ehci_platform.4523: EHCI Platform Host Controller
ehci_platform ehci_platform.4523: new USB bus registered, assigned bus number 1
ehci_platform ehci_platform.4523: irq 17, io mem 0x00000000
ehci_platform ehci_platform.4523: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ehci_platform ehci_platform.16781: EHCI Platform Host Controller
ehci_platform ehci_platform.16781: new USB bus registered, assigned bus number 2
ehci_platform ehci_platform.16781: irq 12, io mem 0x00000000
ehci_platform ehci_platform.16781: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
Initializing USB Mass Storage driver...
usbcore: registered new driver usb-storage
USB Mass Storage support registered.
usbcore: registered new driver usblp
drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver
KERNELMOn (lanact 1000 full)
No need to run drivecheck.sh
/etc/init.d/bootcomplete.sh: /etc/init.d/bootcomplete.sh: 51: /usr/local/bin/sendmail.sh: not found
**** request DHCP
Starting pid 1239, console /dev/ttyS0: '/sbin/getty'

BUFFALO INC. LinkStation series
LS-WSGL-EM9AF login: BuffaloSwPollingCheck> SW_POWER_ON
KERNELMOn (PSW_on)
                  PING 192.168.2.39 (192.168.2.39): 56 data bytes
                                                                 84 bytes from 192.168.2.39: icmp_seq=0 ttl=64 time=9.6 ms
                                          84 bytes from 192.168.2.39: icmp_seq=1 ttl=64 time=0.3 ms
                   84 bytes from 192.168.2.39: icmp_seq=2 ttl=64 time=0.2 ms
                                                                            84 bytes from 192.168.2.39: icmp_seq=3 ttl=64 time=0.2 ms
                                                     84 bytes from 192.168.2.39: icmp_seq=4 ttl=64 time=0.3 ms

                              --- 192.168.2.39 ping statistics ---
                                                                  5 packets transmitted, 5 packets received, 0% packet loss
                                           round-trip min/avg/max = 0.2/2.1/9.6 ms
  **** update DHCP IP

BUFFALO INC. LinkStation series
LS-WSGL-EM9AF login:

LS-SL ファームウェア 1.24 のLSUpdater.ini の書き換え

ProductID を 0x00003002 に書き換える

LS-SL ファームウェア 1.24 の実行

LS-WSGL-EM9AF が見つかった。

「ファームウェア更新」を実行

「HDD のパーティション情報が確認できませんでした。

そうか、、、

パーティションを切る

LS-VL に USB で接続して、パーティションを切る
root@vl:~# parted -s /dev/sdb print
Model: ViPowER VP-89118(SD1) (scsi)
Disk /dev/sdb: 100GB
Sector size (logical/physical): 512B/512B
Partition Table: msdos

Number  Start  End  Size  Type  File system  Flags

root@vl:~#

パーティションテーブルを作成

root@vl:~# parted -s /dev/sdb mklabel gpt
root@vl:~#

/boot。1GB

root@vl:~# parted -s /dev/sdb mkpart primary ext3 0 1024M
Warning: The resulting partition is not properly aligned for best performance.
root@vl:~#

/。5GB

root@vl:~# parted -s /dev/sdb mkpart primary xfs 1024MB 6144MB
root@vl:~#

swap。1GB

root@vl:~# parted -s /dev/sdb mkpart primary linux-swap 6144MB  7168MB
root@vl:~#

データ。残り全部

root@vl:~# parted -s /dev/sdb mkpart primary xfs 7168MB 100GB
root@vl:~# parted -s /dev/sdb print
Model: ViPowER VP-89118(SD1) (scsi)
Disk /dev/sdb: 100GB
Sector size (logical/physical): 512B/512B
Partition Table: gpt

Number  Start   End     Size    File system  Name     Flags
 1      17.4kB  1024MB  1024MB               primary
 2      1024MB  6144MB  5119MB               primary
 3      6144MB  7168MB  1024MB               primary
 4      7168MB  100GB   92.9GB               primary

root@vl:~#

tftp boot

HDD を LS-SL に戻して WSGL のカーネルで tftp boot

LSUpdater.ini を書き換えた LS-SL ファームウェア 1.24 の実行

LS-WSGL-EM9AF が見つかった。

「ファームウェア更新」を実行

「HDD のパーティション情報が確認できませんでした。

なんで?
よーわからんけど、、楽し!



LS-SL
楽天市場




廃品回収リベンジ(4)LS-QVL の HDD で起動
ハックの記録
LinkStation/玄箱 をハックしよう

廃品回収リベンジ(6)LS-SL ファームウェア 1.11 のインストール

ツイート Tweet to @yasunari_y @yasunari_yをフォロー

Copyright (C) 2003-2012 Yasunari Yamashita. All Rights Reserved.
yasunari @ yamasita.jp 山下康成@京都府向日市