Posts by gianni253

gianni253

Ciao Fabio, hi Fabio,

many thanks for your clear explanation about boot flow sequence.

Well, I really would never go back to android unless something with LibreElec flashing goes wrong and I need to unbrick the device.

I've learnt (and you confirmed this too) that cause this great variety of devices it's quite hard to develop a firmware that suits all situations and, for example, I have experienced that I can boot from MultiTool only in presence of both sdcard and usb stick (quite unusual, isn't it ?).

The only backup I have right now is partitions backup taken with single ADB commands such as "dd if=/dev/block/rknand_system of=/path_to_sdcard/system.img".

These backups came really handy to me when I needed to restore system partition after a bootloop or recovery partition after flashing a non working TWRP, but I miss parameter.txt so I want to follow your advice to take a FULL NAND backup to be restored using AndroidTool.

Even after a long search, I couldn't find on the net a copy of my android stock firmware so I need to dump it from my board, something that can be reflashed by AndroidTool. But how can I take this dump ?

jock2

Hi Jock2,

many thanks to you too ! I've learnt so much in these few posts !

So you suggested Multiboot as backup tool for android stock and i will surely take a dump with this method.

And thanks also for clarification that steP-nand procedure is just for Armbian so I will use MultiTool (with idbloadr skipping) to flash NAND.

gianni253

@jock2

your guess was right, now with both sdcard and usb stick, mutiboot could finally complete boot process.

Here's the log:

Code

U-Boot 2020.01-armbian (Apr 15 2020 - 12:30:37 +0000)

Model: Generic Rockchip rk322x TV Box board
DRAM:  1010 MiB
MMC:   dwmmc@30000000: 1, dwmmc@30020000: 0
Loading Environment from EXT4... Card did not respond to voltage select!
In:    serial@11030000
Out:   serial@11030000
Err:   serial@11030000
Model: Generic Rockchip rk322x TV Box board
rockchip_dnl_key_pressed: adc_channel_single_shot fail!
Net:   eth0: ethernet@30200000
starting USB...
Bus usb@30040000: scanning bus usb@30040000 for devices... 2 USB Device(s) found
       scanning usb for storage devices... 1 Storage Device(s) found
stopping USB..
starting USB...
Bus usb@30040000: scanning bus usb@30040000 for devices... 2 USB Device(s) found
       scanning usb for storage devices... 1 Storage Device(s) found
Hit any key to stop autoboot:  0

Device 0: Vendor:          Rev: 0.00 Prod:
            Type: Removable Hard Disk
            Capacity: 465.0 MB = 0.4 GB (952320 x 512)
... is now current device
Scanning usb 0:1...
Found /extlinux/extlinux.conf
Retrieving file: /extlinux/extlinux.conf
175 bytes read in 10 ms (16.6 KiB/s)
1:      Multitool
Retrieving file: /kernel.img
8719272 bytes read in 520 ms (16 MiB/s)
append: boot=PARTUUID=477ce653-01 root=PARTUUID=477ce653-02 rootwait console=ttyS2,115200 verbose=1 consoleblank=0
Retrieving file: /rk322x-box.dtb
46636 bytes read in 10 ms (4.4 MiB/s)
## Flattened Device Tree blob at 61f00000
   Booting using the fdt blob at 0x61f00000
   Loading Device Tree to 683f1000, end 683ff62b ... OK

Starting kernel ...

Display More

Your next advice was to flash a Libreelec image (V88II mars) to NAND but have some questions:

1) wouldn't it be wise to try to boot from sdcard first ?

2) what's my way back to restore stock android ?

3) according to "Quick installation instructions on NAND" on Armbian forum, shouldn't i choose "Burn Armbian image via steP-nand" ?

gianni253

Code

U-Boot 2020.01-armbian (Apr 15 2020 - 12:30:37 +0000)

Model: Generic Rockchip rk322x TV Box board
DRAM:  1010 MiB
MMC:   dwmmc@30000000: 1, dwmmc@30020000: 0
Loading Environment from EXT4... Card did not respond to voltage select!
In:    serial@11030000
Out:   serial@11030000
Err:   serial@11030000
Model: Generic Rockchip rk322x TV Box board
rockchip_dnl_key_pressed: adc_channel_single_shot fail!
Net:   eth0: ethernet@30200000
starting USB...
Bus usb@30040000: scanning bus usb@30040000 for devices... 1 USB Device(s) found
       scanning usb for storage devices... 0 Storage Device(s) found
stopping USB..
starting USB...
Bus usb@30040000: scanning bus usb@30040000 for devices... 1 USB Device(s) found
       scanning usb for storage devices... 0 Storage Device(s) found
Hit any key to stop autoboot:  0

Device 0: unknown device
Card did not respond to voltage select!
ethernet@30200000 Waiting for PHY auto negotiation to complete................................................................................................................................................................................................................................. done
Speed: 100, full duplex
BOOTP broadcast 1
DHCP client bound to address 192.168.63.100 (726 ms)
*** ERROR: `serverip' not set
Cannot autoload with TFTPGET
missing environment variable: pxeuuid
missing environment variable: bootfile
Retrieving file: pxelinux.cfg/01-de-78-20-53-64-17
Speed: 100, full duplex
*** ERROR: `serverip' not set
missing environment variable: bootfile
Retrieving file: pxelinux.cfg/C0A83F64
Speed: 100, full duplex
*** ERROR: `serverip' not set
missing environment variable: bootfile
Retrieving file: pxelinux.cfg/C0A83F6
Speed: 100, full duplex
*** ERROR: `serverip' not set
missing environment variable: bootfile
Retrieving file: pxelinux.cfg/C0A83F
Speed: 100, full duplex
*** ERROR: `serverip' not set
missing environment variable: bootfile
Retrieving file: pxelinux.cfg/C0A83
Speed: 100, full duplex
*** ERROR: `serverip' not set
missing environment variable: bootfile
Retrieving file: pxelinux.cfg/C0A8
Speed: 100, full duplex
*** ERROR: `serverip' not set
missing environment variable: bootfile
Retrieving file: pxelinux.cfg/C0A
Speed: 100, full duplex
*** ERROR: `serverip' not set
missing environment variable: bootfile
Retrieving file: pxelinux.cfg/C0
Speed: 100, full duplex
*** ERROR: `serverip' not set
missing environment variable: bootfile
Retrieving file: pxelinux.cfg/C
Speed: 100, full duplex
*** ERROR: `serverip' not set
missing environment variable: bootfile
Retrieving file: pxelinux.cfg/default-arm-rk322x-rk322x-box
Speed: 100, full duplex
*** ERROR: `serverip' not set
missing environment variable: bootfile
Retrieving file: pxelinux.cfg/default-arm-rk322x
Speed: 100, full duplex
*** ERROR: `serverip' not set
missing environment variable: bootfile
Retrieving file: pxelinux.cfg/default-arm
Speed: 100, full duplex
*** ERROR: `serverip' not set
missing environment variable: bootfile
Retrieving file: pxelinux.cfg/default
Speed: 100, full duplex
*** ERROR: `serverip' not set
Config file not found
Speed: 100, full duplex
BOOTP broadcast 1
DHCP client bound to address 192.168.63.100 (762 ms)
*** ERROR: `serverip' not set
Cannot autoload with TFTPGET
Speed: 100, full duplex
BOOTP broadcast 1
DHCP client bound to address 192.168.63.100 (814 ms)
*** ERROR: `serverip' not set
Cannot autoload with TFTPGET
=>

Display More

I connected network on the fly, when I realized it was trying to boot from network.

gianni253

Ok, some serial debugging on my board.

Stock android firmware on internal NAND:

Code

DDR Version V1.06 20171026
In
300MHz
DDR3
Bus Width=16 Col=11 Bank=8 Row=15 CS=1 Die Bus-Width=16 Size=1024MB
mach:2
OUT
Boot1 Release Time: 2017-06-12, version: 2.37
ChipType = 0xc, 295
No.1 FLASH ID:2c 88 4 4b a9 0
ECC:60
SdmmcInit=0 2
StorageInit ok = 847477
SecureMode : SBOOT_MODE_NS
Code check OK! theLoader 0x60000000, 875098
Code check OK! theLoader 0x68400000, 898036
Enter Trust OS
INF TEE-CORE:init_primary_helper:319: Initializing (1.0.1-72-gf230aa2 #2 Fri Sep 29 10:22:10 UTC 2017 arm)
INF TEE-CORE:init_primary_helper:320: Release version: 2.0
INF TEE-CORE:init_teecore:79: teecore inits done


U-Boot 2014.10-RK322X-06-02568-g69b3451-dirty (Aug 14 2018 - 15:04:54)

CPU: rk322x
cpu version = 3
CPU's clock information:
    arm pll = 600000000HZ
    periph pll = 600000000HZ
    ddr pll = 600000000HZ
    codec pll = 500000000HZ
Board:  Rockchip platform Board
Uboot as second level loader
DRAM:  Found dram banks: 1
Adding bank:0000000060000000(0000000040000000)
Reserve memory for trust os.
dram reserve bank: base = 0x68400000, size = 0x00100000
128 MiB
GIC CPU mask = 0x00000001
rk dma pl330 version: 1.4
remotectl v0.1
pwm freq=0x11e1a3
pwm_freq_nstime=0x355
SdmmcInit = 0 20
SdmmcInit = 2 20
storage init OK!
Using default environment

GetParam
Load FDT from resource image.
can't find dts node for fixed
No pmic detect.
DRAM: dram freq:786MHz
SecureBootEn = 0, SecureBootLock = 0

#Boot ver: 2018-08-14#2.37
empty serial no.
normal boot.
checkKey
vbus = 1
board_fbt_key_pressed: ir_keycode = 0x0, frt = 0
no fuel gauge found
no fuel gauge found
can't find power_ctr node for lcdc0
HDMI: no pull up gpio
can't find dts node for deviceinfo
rk_hdmi_register:fail to read deviceinfo
hdmi baseparamer 0x0@0-0
left = 0, right = 0, top = 0, bottom = 0, overscan = 0
panel->left = 100 , panel->right = 100 ,panel->top = 100, panel->bottom = 100, panel->overscan = 100
tve baseparamer 0x0@0-0
[EDID-EXTEND] It is a  CEA 861 Series Extension.
no baseparametr,find best edid mode,vic=16
hdmi_dev->video.vic is 16
hdmi_dev_config_video vic 16 color_output 3 color_output_depth 8
pixel clk is 148500000 tmds clk is 148500000
hsync_pol 1 vsync_pol 1
[HDMI] sucess output HDMI.
read logo on state from dts [1]
no fuel gauge found
checkKey
vbus = 1
board_fbt_key_pressed: ir_keycode = 0x0, frt = 0
Hit any key to stop autoboot:  0
load fdt from resouce.
vendor read error!
Set oem_unlocked=0Secure Boot state: 0
kernel   @ 0x62000000 (0x006e9b28)
ramdisk  @ 0x65bf0000 (0x00167f08)
bootrk: do_bootm_linux...
   Loading Device Tree to 65600000, end 65615a56 ... OK
Add bank:0000000060000000, 0000000008400000
Add bank:0000000068500000, 0000000037b00000
WARNING: could not set reg FDT_ERR_BADOFFSET.

Starting kernel ...

<hit enter to activate fiq debugger>
[    0.000000] Booting Linux on physical CPU 0xf00
[    0.000000] Initializing cgroup subsys cpuset
[    0.000000] Initializing cgroup subsys cpu
[    0.000000] Initializing cgroup subsys cpuacct
[    0.000000] Linux version 3.10.104 (user@) (gcc version 4.6.x-google 20120106 (prerelease) (GCC) ) #176 SMP PREEMPT Mon Sep 3 12:03:19 CST 2018
[    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] Machine: Rockchip RK3229, model: rockchip,rk3229
[    0.000000] rockchip_uboot_logo_setup: mem: 0x02000000@0x9dc00000, offset:0x01000000
[    0.000000] hdmi init vic is 16
[    0.000000] cvbs init tve.format is -1
[    0.000000] cvbs init tve.format is -1
[    0.000000] cvbs init tve.format is -1
[    0.000000] rockchip_uboot_mem_reserve: reserve 0x02000000@0x9dc00000 for uboot logo
[    0.000000] rockchip_ion_reserve
[    0.000000] ion heap(cma): base(0) size(0) align(0)
[    0.000000] ion heap(drm): base(0) size(0) align(0)
[    0.000000] ion heap(vmalloc): base(0) size(0) align(0)
[    0.000000] cma: CMA: reserved 16 MiB at 7f000000
[    0.000000] Memory policy: ECC disabled, Data cache writealloc
[    0.000000] psci: probing function IDs from device-tree
[    0.000000] PERCPU: Embedded 9 pages/cpu @c1718000 s13440 r8192 d15232 u36864
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 260864
[    0.000000] Kernel command line: vmalloc=496M psci=enable rockchip_jtag console=ttyFIQ0 androidboot.selinux=permissive androidboot.hardware=rk30board androidboot.console=ttyFIQ0 init=/init mtdparts=rk29xxnand:0x00002000@0x00002000(uboot),0x00004000@0x00004000(trust),0x00002000@0x00008000(misc),0x00000800@0x0000A000(baseparamer),0x00007800@0x0000A800(resource),0x00008000@0x00012000(kernel),0x00010000@0x0001A000(boot),0x00010000@0x0002A000(recovery),0x00020000@0x0003A000(backup),0x00040000@0x0005A000(cache),0x00008000@0x0009A000(metadata),0x00002000@0x000A2000(kpanic),0x00400000@0x000A4000(system),-@0x004A4000(userdata) storagemedia=nand uboot_logo=0x02000000@0x9dc00000:0x01000000 loader.timestamp=2018-08-14_15:04:54 hdmi.vic=16 tve.format=-1 SecureBootCheckOk=0
[    0.000000] rockchip jtag enabled
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] allocated 2097152 bytes of page_cgroup
[    0.000000] please try 'cgroup_disable=memory' option if you don't want memory cgroups
[    0.000000] Memory: 132MB 891MB = 1023MB total
[    0.000000] Memory: 970596k/970596k available, 76956k reserved, 491516K highmem
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
[    0.000000]     vmalloc : 0xe0800000 - 0xff000000   ( 488 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xe0000000   ( 512 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0008000 - 0xc0c3e35c   (12505 kB)
[    0.000000]       .init : 0xc0c3f000 - 0xc0c9f480   ( 386 kB)
[    0.000000]       .data : 0xc0ca0000 - 0xc0db3860   (1103 kB)
[    0.000000]        .bss : 0xc0db3860 - 0xc0edb2dc   (1183 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Preemptible hierarchical RCU implementation.
[    0.000000]  RCU dyntick-idle grace-period acceleration is enabled.
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] rk_clk_tree_init start!
[    0.000000] rk_get_uboot_display_flag: uboot_logo_on = 1
[    0.000000] rkclk_init_clks: cnt_parent = 13
[    0.000000] rkclk_init_clks: cnt_rate = 20
[    0.000000] rkclk: warning: clk_rate < 1*MHZ or > 2000*MHZ
[    0.000000] Architected cp15 timer(s) running at 24.00MHz (phys).
[    0.000000] Switching to timer-based delay loop
[    0.000000] sched_clock: ARM arch timer >56 bits at 24000kHz, resolution 41ns
[    0.000000] process version: 0
[    0.000000] channel:0, lkg:4
[    0.000000] target-temp:95
[    0.000000] channel:2, lkg:4
[    0.000000] target-temp:0
[    0.000000] channel:2, lkg:4
[    0.000000] sched_clock: 32 bits at 100 Hz, resolution 10000000ns, wraps every 4294967286ms
[    3.333944] Calibrating delay loop (skipped), value calculated using timer frequency.. 48.00 BogoMIPS (lpj=240000)
[    3.333966] pid_max: default: 32768 minimum: 301
[    3.334155] Security Framework initialized
[    3.334183] SELinux:  Initializing.
[    3.334325] Mount-cache hash table entries: 512
[    3.335394] Initializing cgroup subsys debug
[    3.335420] Initializing cgroup subsys memory
[    3.335468] Initializing cgroup subsys freezer
[    3.335527] CPU: Testing write buffer coherency: ok
[    3.335960] /cpus/cpu@0 missing clock-frequency property
[    3.335985] /cpus/cpu@1 missing clock-frequency property
[    3.336005] /cpus/cpu@2 missing clock-frequency property
[    3.336024] /cpus/cpu@3 missing clock-frequency property
[    3.336110] CPU0: thread -1, cpu 0, socket 15, mpidr 80000f00
[    3.336157] Setting up static identity map for 0xc0886fc8 - 0xc0887020
[    3.337907] last_log: 0x7e900000 map to 0xe0804000 and copy to 0xe0886000, size 0x80000 early 0x1828 (version 3.1)
[    3.411910] CPU1: Booted secondary processor
[    3.411963] CPU1: thread -1, cpu 1, socket 15, mpidr 80000f01
[    3.431628] CPU2: Booted secondary processor
[    3.431669] CPU2: thread -1, cpu 2, socket 15, mpidr 80000f02
[    3.451342] CPU3: Booted secondary processor
[    3.451384] CPU3: thread -1, cpu 3, socket 15, mpidr 80000f03
[    3.451550] Brought up 4 CPUs
............

Display More

Boot from well tested Samsung 32GB SD card, multitool image written by Balena Etcher

Code

DDR Version V1.06 20171026
In
300MHz
DDR3
Bus Width=16 Col=11 Bank=8 Row=15 CS=1 Die Bus-Width=16 Size=1024MB
mach:2
OUT
Boot1 Release Time: 2017-06-12, version: 2.37
ChipType = 0xc, 294
No.1 FLASH ID:2c 88 4 4b a9 0
ECC:60
SdmmcInit=0 0
BootCapSize=0
UserCapSize=30528MB
FwPartOffset=2000 , 0
StorageInit ok = 860707
SecureMode : SBOOT_MODE_NS
Code check OK! theLoader 0x61000000, 906434
Code check OK! theLoader 0x68400000, 973849
Enter Trust OS
INF [0x0] TEE-CORE:init_primary_helper:377: Initializing (1.1.0-333-gc9d95d1 #2       2018? 08? 17? ??? 03:32:22 UTC arm)

INF [0x0] TEE-CORE:init_primary_helper:378: Release version: 2.0

INF [0x0] TEE-CORE:init_primary_helper:379: Next entry point address: 0x61000000

INF [0x0] TEE-CORE:init_teecore:83: teecore inits done

Display More

Red LED in on (solid light).

Blue LED is off.

Multitool image downloaded from Armbian thread CSC Armbian for RK322X TV Boxes - Rockchip CPU Boxes - Armbian forum

gianni253

@jock2 I tried multiboot (latest version) many times and with repeated power cyclings but no success.

When I have time I will solder the 3 pins for jtag and make the serial debugging.

BTW, should I set 5V or 3,3V as TTL level ?

gianni253

Hi Jock2, many thanks for your answer.

Yes, I know it's a big mess with these boards.

Imagine that my board was supposed to be an Amlogic S905W with 16 GB EMMC !

So I didn't dare to flash the internal NAND and just played around with SD cards.

By the way, I couldn't boot form multiboot either so I can't use Step-nand and for the time being I will stay with the legacy image on SD card.

For those who have a similar board and are interested in original stock android firmware, I've made a full dump of android rknand partitions from an ABD root shell.

Here is partitions layout:

Code

-:/ # ls -al /dev/block/*
brw------- 1 root root   7,   0 1970-01-01 01:00 /dev/block/loop0
brw------- 1 root root   7,   1 1970-01-01 01:00 /dev/block/loop1
brw------- 1 root root   7,   2 1970-01-01 01:00 /dev/block/loop2
brw------- 1 root root   7,   3 1970-01-01 01:00 /dev/block/loop3
brw------- 1 root root   7,   4 1970-01-01 01:00 /dev/block/loop4
brw------- 1 root root   7,   5 1970-01-01 01:00 /dev/block/loop5
brw------- 1 root root   7,   6 1970-01-01 01:00 /dev/block/loop6
brw------- 1 root root   7,   7 1970-01-01 01:00 /dev/block/loop7
brw------- 1 root root  31,   8 1970-01-01 01:00 /dev/block/rknand_backup
brw------- 1 root root  31,   3 1970-01-01 01:00 /dev/block/rknand_baseparamer
brw------- 1 root root  31,   6 1970-01-01 01:00 /dev/block/rknand_boot
brw------- 1 root root  31,   9 1970-01-01 01:00 /dev/block/rknand_cache
brw------- 1 root root  31,   5 1970-01-01 01:00 /dev/block/rknand_kernel
brw------- 1 root root  31,  11 1970-01-01 01:00 /dev/block/rknand_kpanic
brw------- 1 root root  31,  10 1970-01-01 01:00 /dev/block/rknand_metadata
brw------- 1 root root  31,   2 1970-01-01 01:00 /dev/block/rknand_misc
brw------- 1 root root  31,   7 1970-01-01 01:00 /dev/block/rknand_recovery
brw------- 1 root root  31,   4 1970-01-01 01:00 /dev/block/rknand_resource
brw------- 1 root root  31,  12 1970-01-01 01:00 /dev/block/rknand_system
brw------- 1 root root  31,   1 1970-01-01 01:00 /dev/block/rknand_trust
brw------- 1 root root  31,   0 1970-01-01 01:00 /dev/block/rknand_uboot
brw------- 1 root root  31,  13 1970-01-01 01:00 /dev/block/rknand_userdata
brw------- 1 root root 254,   0 1970-01-01 01:00 /dev/block/zram0


-:/ # cat /proc/mtd
dev:    size   erasesize  name
rknand0: 00400000 00004000 "uboot"
rknand1: 00800000 00004000 "trust"
rknand2: 00400000 00004000 "misc"
rknand3: 00100000 00004000 "baseparamer"
rknand4: 00f00000 00004000 "resource"
rknand5: 01000000 00004000 "kernel"
rknand6: 02000000 00004000 "boot"
rknand7: 02000000 00004000 "recovery"
rknand8: 04000000 00004000 "backup"
rknand9: 08000000 00004000 "cache"
rknand10: 01000000 00004000 "metadata"
rknand11: 00400000 00004000 "kpanic"
rknand12: 80000000 00004000 "system"
rknand13: 14ac00000 00004000 "userdata"

Display More

gianni253

Hi,

that's the board that I successfully booted from SD card using Legacy LibreELEC-RK322x.arm-9.2-devel-20200427220345-b7186bc-rk3229-hk1mini.img.gz image (first image I tried).

Then I tried with Mainline LibreELEC-RK322x.arm-9.80-devel-20200228171244-cd590c7-rk3229-box.img.gz but it didn't boot (blank screen on HDMI).

Board is definitely RK3229, has 8GB NAND flash and 2GB DDR3.

Any clue where to start investigations ?

many thanks

Posts by gianni253

[unoffical] LE-9.2/9.80-Images for RK3229/RK3228

[unoffical] LE-9.2/9.80-Images for RK3229/RK3228

[unoffical] LE-9.2/9.80-Images for RK3229/RK3228

[unoffical] LE-9.2/9.80-Images for RK3229/RK3228

[unoffical] LE-9.2/9.80-Images for RK3229/RK3228

[unoffical] LE-9.2/9.80-Images for RK3229/RK3228

[unoffical] LE-9.2/9.80-Images for RK3229/RK3228