![]() |
#16 |
Pastafari
![]() Posts: 24
Karma: 10
Join Date: Feb 2013
Device: Kindle DX Graphite
|
Yeah, you can modify arbitrary memory content with uboot but I'll have to check how to transfer files with it. A bit later in the boot process, there's a "recovery menu" which can apply .bin files put onto the flash. So I should be able to transfer the stuff via USB and then move it to the correct location by serial.
|
![]() |
![]() |
![]() |
#17 |
BLAM!
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 13,501
Karma: 26047188
Join Date: Jun 2010
Location: Paris, France
Device: Kindle 2i, 3g, 4, 5w, PW, PW2, PW5; Kobo H2O, Forma, Elipsa, Sage, C2E
|
Nope, the recovery update mechanism doesn't know about our custom public key (it's stored in the kernel's initramfs). (There are custom kernels patched to workaround that, that's how the whole 3.x-on-DXg schtick works, for instance, but that's a bit overkill, there might be an easier way in).
|
![]() |
![]() |
Advert | |
|
![]() |
#18 |
Going Viral
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
|
@NiLuJe:
Didn't the "dual boot" system start with the 3.x firmware? Doesn't the 2.x firmware just have two copies of the (same) firmware image (a primary and a secondary (backup) ) copy? A design decision left over from the days when flash storage wasn't trusted. Perhaps some advantage could be made out of that. |
![]() |
![]() |
![]() |
#19 |
BLAM!
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 13,501
Karma: 26047188
Join Date: Jun 2010
Location: Paris, France
Device: Kindle 2i, 3g, 4, 5w, PW, PW2, PW5; Kobo H2O, Forma, Elipsa, Sage, C2E
|
@knc1: That vaguely rings a bell, yeah. What I do remember is there being two Kernels. Not sure about the system rootfs though... There might indeed only be the recovery shell from the kernel initramfs...
|
![]() |
![]() |
![]() |
#20 |
Going Viral
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
|
I do have K2, DX and DXG (for the KUAL project testing) -
But even accidentally messing these things up is such a one-way street, I would rather not dig into them. ![]() |
![]() |
![]() |
Advert | |
|
![]() |
#21 |
Pastafari
![]() Posts: 24
Karma: 10
Join Date: Feb 2013
Device: Kindle DX Graphite
|
So there's actually no simple way to just copy a few files to /usr/lib?
|
![]() |
![]() |
![]() |
#22 |
BLAM!
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 13,501
Karma: 26047188
Join Date: Jun 2010
Location: Paris, France
Device: Kindle 2i, 3g, 4, 5w, PW, PW2, PW5; Kobo H2O, Forma, Elipsa, Sage, C2E
|
@iliis: Check your serial console, you might be able to drop to a shell right after the kernel boots (or at worst trick upstart into booting with an init=/bin/sh or something like that).
|
![]() |
![]() |
![]() |
#23 | |
Going Viral
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
|
Quote:
rdinit=/bin/sh as a kernel command line parameter to get a shell in the initramfs image (if it has a shell available, it may not). Last edited by knc1; 07-07-2014 at 08:18 PM. |
|
![]() |
![]() |
![]() |
#24 |
Pastafari
![]() Posts: 24
Karma: 10
Join Date: Feb 2013
Device: Kindle DX Graphite
|
Well, I can enter uboot which should allow me to pass arbitrary kernel parameters. I'll try that this evening.
|
![]() |
![]() |
![]() |
#25 |
Pastafari
![]() Posts: 24
Karma: 10
Join Date: Feb 2013
Device: Kindle DX Graphite
|
Success, I can access the root filesystem trough USB by using the developer menu (choosing option 3: "load MMC0 over USB" or something and password "fiona9576"). All I need now is a rootfs image, or at least a copy of all the (free) system files)
![]() |
![]() |
![]() |
![]() |
#26 |
Pastafari
![]() Posts: 24
Karma: 10
Join Date: Feb 2013
Device: Kindle DX Graphite
|
here are md5s for the Kindle's library files:
/lib Spoiler:
/usr/lib Spoiler:
/var/lib is empty, /usr/local/lib doesn't exist. Unfortunately, this seems to be read-only access ![]() Attached is the output of Code:
find $KINDLE_ROOT -newer /tmp/somefile However, I'm somewhat confused, as there seems to be a /usr/bin/wget from 2010 linking to /bin/busybox which I certainly didn't put there. I think I needed a full-featured wget back then instead of the busybox one. (The whole affair is made even more confusing as I always accentaly type e.g "ls /usr/bin" instead of "ls usr/bin" resulting on my PC's /usr/bin getting listed instead of /run/media/me/the-kindle/usr/bin ![]() Last edited by iliis; 07-11-2014 at 02:31 AM. Reason: attaching that attachment didn't work, trying again |
![]() |
![]() |
![]() |
#27 |
Pastafari
![]() Posts: 24
Karma: 10
Join Date: Feb 2013
Device: Kindle DX Graphite
|
Heureka, I actually have write access to the Kindle's filesystem! Stupid me was just to tired to use sudo
![]() Therefore, all I need now are some good system files. Would anyone be kind enough to provide some? |
![]() |
![]() |
![]() |
#28 |
BLAM!
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 13,501
Karma: 26047188
Join Date: Jun 2010
Location: Paris, France
Device: Kindle 2i, 3g, 4, 5w, PW, PW2, PW5; Kobo H2O, Forma, Elipsa, Sage, C2E
|
There's a manifest of all the files with their stock checksum in /opt/factory/rootfs_md5_list, check what's broken and I'll see what I can do.
|
![]() |
![]() |
![]() |
#29 |
Pastafari
![]() Posts: 24
Karma: 10
Join Date: Feb 2013
Device: Kindle DX Graphite
|
There ya go:
md5sum -c test/diags/factory/rootfs_md5_list | grep --invert OK Code:
./opt/config/not_shipped: FAILED open or read ./opt/amazon/ebook/lib/json_simple-1.1.jar: FAILED ./etc/ppp/chap-secrets: FAILED open or read ./etc/ppp/pap-secrets: FAILED open or read ./etc/shadow: FAILED ./lib/libSegFault.so: FAILED ./lib/libpcprofile.so: FAILED ./lib/libmemusage.so: FAILED ./lib/libthread_db-1.0.so: FAILED ./usr/sbin/dmdld: FAILED open or read ./usr/sbin/ufbvncd: FAILED open or read ./usr/libexec/pt_chown: FAILED open or read Last edited by iliis; 07-09-2014 at 04:07 AM. |
![]() |
![]() |
![]() |
#30 |
BLAM!
![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() Posts: 13,501
Karma: 26047188
Join Date: Jun 2010
Location: Paris, France
Device: Kindle 2i, 3g, 4, 5w, PW, PW2, PW5; Kobo H2O, Forma, Elipsa, Sage, C2E
|
@iliis: Huh, none of that has much to do with wget, that's weird...
|
![]() |
![]() |
![]() |
Tags |
bricked, dxg, graphite, kindle dxg |
Thread Tools | Search this Thread |
|
![]() |
||||
Thread | Thread Starter | Forum | Replies | Last Post |
Trying to unbrick the Kindle Touch | lugius | Kindle Developer's Corner | 7 | 02-03-2014 09:23 AM |
Help me : Unbrick Kindle paperwhite | fantomk | Kindle Developer's Corner | 1 | 03-30-2013 09:34 AM |
Unbrick your Kindle 3 - Video | seaniko7 | Kindle Developer's Corner | 22 | 09-07-2012 04:46 PM |
Kindle 4 Unbrick problem | Pumpa | Kindle Developer's Corner | 12 | 07-27-2012 09:40 AM |
Kindle 2i - Demo Version Unbrick | jdconnel | Amazon Kindle | 3 | 03-13-2012 04:04 PM |