dmarkey Posted January 19, 2018 Share Posted January 19, 2018 Whats the easiest way to get a shell into this thing? Link to comment Share on other sites More sharing options...
nimrud Posted January 19, 2018 Share Posted January 19, 2018 Ok! the steps I described are to be executed inside the cs100 throught telnet, to do so, the easiest way is to remove the hdd from the closure, connect it to a linux pc, edit the file /etc/rc.d/rcS (search "telnet" and change the value). Once enabled, put the disc back, turn on the cs100, connect through telnet (user "root", password empty) and you can follow my post. Following the steps I described, I chrooted into a debian image, if you are unfamiliar with this, probably it's not the easiest way to learn, but... The chrooted Debian image, as I described, it's not installed in your device, I mean, if you reboot your device, you need to re-execute some parts of my mini-guide (not the donwload part, the chroot process), but the changes made inside the chrooted image are persistent...It's like a 'virtual OS', but careful, if you manipulate your hardware via the chrooted Debian (like the MTD,...) can be really dangerous. My advice is if you are unfamiliar with this, maybe you can try with a virtual machine first, this project is not matured enough. Of course, if you want to learn and you don't care very much about the cs100 (you can use the hdd even if you broke your cs100) go ahead at your own risk! We will be here to support each other as much as we can, off course without compromise... BR! Link to comment Share on other sites More sharing options...
acarus36 Posted January 20, 2018 Share Posted January 20, 2018 Great! I do not have much appreciation for the CS100 xDD. This thing works very badly. Ok, I understood. Change the value of the rcS file to be able to access it using telnet (I already have the hard drive removed). At this point where you are, what is working and what is not with debian? It is indeed a huge step. If I have time today or tomorrow, I'll try it. You're a machine! Thank you! Link to comment Share on other sites More sharing options...
nimrud Posted January 20, 2018 Share Posted January 20, 2018 I just installed a ssh daemon, and nfs (not exporting possible because of the lack of the kernel module...)... I'll try to make a big copy to see the performance of this. I want to see if I can find a kernel to boot via tft and boot into a debían.... Link to comment Share on other sites More sharing options...
azzy9 Posted January 20, 2018 Author Share Posted January 20, 2018 @nimrud Thanks for all your hard work. Followed the CLI commands. Just a couple of issues I had to get it working. (I'll post them below to make it easier for other people to get it working) tar xzvf debian.tar.gz -C /home/debian mount -o loop debian-squeeze.img /home/debian/ Needed to be the below commands for me: tar xzvf debian-squeeze.img.tgz -C /home/debian mount -o loop /debian/debian-squeeze.img /home/debian/ The only other issue I'm having is that the chrooted debian cannot seem to be able to resolve DNS requests so it cannot use the apt-get. maybe this is due to me telnetting via wi-fi instead of Ethernet. or maybe the internet connection needs to be set up in the debian as well? Edit: It can ping to the internet, but cannot resolve archive.debian.org. so it is connected to the internet. also the URL does exist as I tested it in the browser? Link to comment Share on other sites More sharing options...
azzy9 Posted January 20, 2018 Author Share Posted January 20, 2018 Fixed the issue: since my home network is on 192.168.1.x, the debian is configured to be on 192.168.0.x. to modify this in telnet: nano /etc/resolv.conf then change to the nameserver you want (I changed it to 8.8.8.8) then save using ctrl + x Edit: Commands to install ssh: apt-get install ssh passwd (type in password when asks) service ssh restart Link to comment Share on other sites More sharing options...
dmarkey Posted January 20, 2018 Share Posted January 20, 2018 Seems the TV interface uses some custom html based system that uses directFB, which is now abandoned. I would say the chances of getting X running on this are slim. Link to comment Share on other sites More sharing options...
nimrud Posted January 20, 2018 Share Posted January 20, 2018 @azzy9, perfect! Maybe we should ask Canon for the gpl code, without a custom kernel we are limited in some ways... This SoC looks a bit old, so I don't expect to run more than a little file server... Link to comment Share on other sites More sharing options...
dmarkey Posted January 20, 2018 Share Posted January 20, 2018 Oops i think i bricked it.. turning on then turning off 10 seconds later... Anyone any ideas how to debug? Link to comment Share on other sites More sharing options...
nimrud Posted January 20, 2018 Share Posted January 20, 2018 Take of the disc and check the logs... On the PCB there are 4 unsoldered pins, I would bet there is a JTAG interface... What were you doing before this problem happened? Link to comment Share on other sites More sharing options...
dmarkey Posted January 20, 2018 Share Posted January 20, 2018 I was building a new debian chroot using debootstrap. I did however mount some of the flash memory partitions /dev/mtdblock* but i dont remeber writing any changes. Link to comment Share on other sites More sharing options...
dmarkey Posted January 20, 2018 Share Posted January 20, 2018 Tried poking around using a usb TTY, couldnt get a peep out of it.. no LEDS coming on either just the power fan for a few seconds.. Likely for the bin unfortunately. Link to comment Share on other sites More sharing options...
dmarkey Posted January 21, 2018 Share Posted January 21, 2018 11 @0x86200000 0x00000000/0x00000000/0x00000000 0W 12 @0x86220000 0x00000000/0x00000000/0x00000000 0W 11 @0x86220000 0x00000000/0x00000000/0x00000000 0W 12 @0x86240000 0x00000000/0x00000000/0x00000000 0W 11 @0x86240000 0x00000000/0x00000000/0x00000000 0W 12 @0x86260000 0x00000000/0x00000000/0x00000000 0W 11 @0x86260000 0x00000000/0x00000000/0x00000000 0W 12 @0x86280000 0x00000000/0x00000000/0x00000000 0W 11 @0x86280000 0x00000000/0x00000000/0x00000000 0W 12 @0x862a0000 0x00000000/0x00000000/0x00000000 0W 11 @0x862a0000 0x00000000/0x00000000/0x00000000 0W 12 @0x862c0000 0x00000000/0x00000000/0x00000000 0W 11 @0x862c0000 0x00000000/0x00000000/0x00000000 0W 12 @0x862e0000 0x00000000/0x00000000/0x00000000 0W 11 @0x862e0000 0x00000000/0x00000000/0x00000000 0W 12 @0x86300000 0x00000000/0x00000000/0x00000000 0W 11 @0x86300000 0x00000000/0x00000000/0x00000000 0W 12 @0x86320000 0x00000000/0x00000000/0x00000000 0W 11 @0x86320000 0x00000000/0x00000000/0x00000000 0W 12 @0x86340000 0x00000000/0x00000000/0x00000000 0W 11 @0x86340000 0x00000000/0x00000000/0x00000000 0W 12 @0x86360000 0x00000000/0x00000000/0x00000000 0W 11 @0x86360000 0x00000000/0x00000000/0x00000000 0W 12 @0x86380000 0x00000000/0x00000000/0x00000000 0W 11 @0x86380000 0x00000000/0x00000000/0x00000000 0W 12 @0x863a0000 0x00000000/0x00000000/0x00000000 0W 11 @0x863a0000 0x00000000/0x00000000/0x00000000 0W 12 @0x863c0000 0x00000000/0x00000000/0x00000000 0W 11 @0x863c0000 0x00000000/0x00000000/0x00000000 0W Managed to get the wiring right.. but all I get is this crap then it turns off.. Link to comment Share on other sites More sharing options...
Eyebot Posted January 21, 2018 Share Posted January 21, 2018 Nice work @azzy9 giving us a foothold in the system to play with. Hopefully have time tonight to shuck the drive to get started. Link to comment Share on other sites More sharing options...
azzy9 Posted January 22, 2018 Author Share Posted January 22, 2018 On 1/20/2018 at 5:42 PM, dmarkey said: Oops i think i bricked it.. turning on then turning off 10 seconds later... Anyone any ideas how to debug? I'll assume the .frm file (link provided on first post) is only for updating rather than recovery due to it's small file size. would like it if canon did provide a recovery method. I wouldn't mind providing a clone of my drive and uploading it, but I wouldn't know where to start to make sure the MTD blocks are copied perfectly. I can't see it being more than a couple of gigs when compressed ( hopefully it plays nice with compression since uploading a 1tb file would not be feasible, but I can not see why it wouldn't be ) So if any tools come to mind I wouldn't mind giving it a try. I would have liked to help you with the Jtagging but unfortunately I have no experience with it. 16 hours ago, Eyebot said: Nice work @azzy9 giving us a foothold in the system to play with. Hopefully have time tonight to shuck the drive to get started. Not a problem and nice to have you here. @nimrud should also receive a big thanks for all he has done as well. :) we are getting further so hopefully we can do more with it. Link to comment Share on other sites More sharing options...
nimrud Posted January 22, 2018 Share Posted January 22, 2018 @dmarkey I have a backup of the mtd partitions, I can upload the files if you want to... Plz, document any progress. I hope you didn't lose your DRM partition, as It should be unique for each cs100 Regarding some missing modules, I took a second look and there is a kernel config on /proc/config.gz, so It should be easy to add modules to the kernel, just need the sources and a build an enviroment to do it... Link to comment Share on other sites More sharing options...
blownbulb Posted January 22, 2018 Share Posted January 22, 2018 Picked up one of these myself, if anything just for the drive and a mess with the CS100 itself. I'm a complete novice with Linux and coding, but I am a hardware engineer by trade so I should be able to contribute somewhat to hacking this. Going to pull it apart later and have a good look around. Link to comment Share on other sites More sharing options...
dmarkey Posted January 22, 2018 Share Posted January 22, 2018 10 hours ago, nimrud said: @dmarkey I have a backup of the mtd partitions, I can upload the files if you want to... Plz, document any progress. I hope you didn't lose your DRM partition, as It should be unique for each cs100 Regarding some missing modules, I took a second look and there is a kernel config on /proc/config.gz, so It should be easy to add modules to the kernel, just need the sources and a build an enviroment to do it... Thanks but I havent figured out how to write them back :( as for DRM i dont think i'll be playing any movies on this Link to comment Share on other sites More sharing options...
Eyebot Posted January 23, 2018 Share Posted January 23, 2018 Stupidly fiddly mounting solution - Telnet live :) Link to comment Share on other sites More sharing options...
nimrud Posted January 23, 2018 Share Posted January 23, 2018 I found a sigma tangoX kernel tree at https://github.com/mansr/linux-tangox/ but not exactly our kernel version... The kernel was apparently build for our box with the toolchain https://sourcery.mentor.com/public/gnu_toolchain/mips-linux-gnu/mips-4.4-303-mips-linux-gnu.bin Link to comment Share on other sites More sharing options...
knol Posted January 23, 2018 Share Posted January 23, 2018 On 19/1/2018 at 1:25 PM, nimrud said: I have a chrooted debian squeeze running! I found that the SoC it's very similar to the WDTV, so I gave it a try... tanks to http://b-rad.cc/ This means you can install available programs trough apt, but module dependant programs will not run (but at first step I think it's a huge one!) More or less the steps I followed: cd /home wget http://files.wdlxtv.de/debian-squeeze.img.tgz mkdir /home/debian tar xzvf debian.tar.gz -C /home/debian mount -o loop debian-squeeze.img /home/debian/ mount -t proc proc /home/debian/proc mount -t sysfs sys /home/debian/sys mount -o bind /dev /home/debian/dev mount --bind /dev/pts /home/debian/dev/pts chroot /home/debian/ /bin/bash echo 'Acquire::Check-Valid-Until "false";' >/etc/apt/apt.conf.d/90ignore-release-date echo "deb http://archive.debian.org/debian squeeze main" > /etc/apt/sources.list echo "deb http://archive.debian.org/debian squeeze-lts main" >> /etc/apt/sources.list apt-get update ... use it under your own responsability! Thanks for this. Just to confirm. You ran these commands after logging in with telnet? I bought the CS100 for €35 as a cheap wireless CF card reader so I could edit CR2 files easily on my iPad. However the Canon app only makes a JPEG available. I like the idea of running a light distro on it that I can see as a NAS from my iPad and that also allows backups to my fileserver. Link to comment Share on other sites More sharing options...
knol Posted January 23, 2018 Share Posted January 23, 2018 Apologies, I don't see a way to edit the quote on my previous post. Link to comment Share on other sites More sharing options...
blownbulb Posted January 23, 2018 Share Posted January 23, 2018 10 hours ago, nimrud said: I found a sigma tangoX kernel tree at https://github.com/mansr/linux-tangox/ but not exactly our kernel version... The kernel was apparently build for our box with the toolchain https://sourcery.mentor.com/public/gnu_toolchain/mips-linux-gnu/mips-4.4-303-mips-linux-gnu.bin Been digging around online myself. It appears our exact Kernal was also used in the Eltex-NV102 media player. Looks to be a lot of similarities with the CS100s hardware wise and its been hacked. I found a Russian forum thread here with someone looking to install a version of Astra on the box and it looks like it was possible. Hard to understand the poorly translated Russian. Link to comment Share on other sites More sharing options...
The reluctant hammer Posted January 23, 2018 Share Posted January 23, 2018 Just wanted to add to the thread that I'm watching hoping this can be hacked. Thankfully for the work so far, been lurking as a guest about a week now :) Link to comment Share on other sites More sharing options...
blownbulb Posted January 24, 2018 Share Posted January 24, 2018 Is there a way to make an Image of the whole drive rather than the 5 individual partitions? Also, dont suppose has anyone tried replacing the drive with a cleanly wiped drive? Kind of curious to know if it'll rebuild itself or prompt for a firmware file or something on boot up Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.