qemu: lumia550.dts, pbl_stub WIP, build-emmc.sh, launch-wsl.sh dry-run
This commit is contained in:
SashegDev
Executable
+26
@@ -0,0 +1,26 @@
|
||||
#!/bin/bash
|
||||
# Сборка emmc.img = Boot1 + Boot2 + RPMB + User. WIP без orig FFU.
|
||||
set -e
|
||||
BOOT_MB=${BOOT_MB:-4}
|
||||
RPMB_MB=${RPMB_MB:-4}
|
||||
USER_MB=${USER_MB:-7456}
|
||||
OUT=${1:-images/emmc.img}
|
||||
FW_DIR=fw
|
||||
|
||||
usage() { echo "usage: $0 [--help] [out.img]"; echo " Нужны fw/orig.ffu или fw/dump.bin. Без них — нулевой WIP-образ для проверки геометрии."; }
|
||||
|
||||
if [ "$1" == "--help" ] || [ "$1" == "-h" ]; then usage; exit 0; fi
|
||||
mkdir -p "$(dirname "$OUT")"
|
||||
|
||||
# WIP: пока нет orig FFU (2GB не влезет в 4.1G на сервере) — строим нулевой образ верной геометрии
|
||||
# Boot1/Boot2 кратно 128K, одинаковые. User кратно 512B.
|
||||
echo "[build-emmc] WIP: orig FFU не найден в $FW_DIR — строю нулевой образ геометрии"
|
||||
echo "[build-emmc] Положи в fw/orig.ffu и перезапусти для реальной GPT40"
|
||||
echo "[build-emmc] Boot=${BOOT_MB}M RPMB=${RPMB_MB}M User=${USER_MB}M -> $OUT"
|
||||
|
||||
BOOT_KB=$((BOOT_MB*1024)); RPMB_KB=$((RPMB_MB*1024)); USER_KB=$((USER_MB*1024))
|
||||
TOTAL_KB=$((BOOT_KB*2+RPMB_KB+USER_KB))
|
||||
dd if=/dev/zero of="$OUT" bs=1K count=1024 status=none
|
||||
truncate -s "${TOTAL_KB}K" "$OUT"
|
||||
echo "[build-emmc] OK: $OUT ($(du -h "$OUT" | cut -f1)) — НУЛЕВОЙ, не шить в прод!"
|
||||
echo "[build-emmc] TODO: mkemmc.sh + ffureader GPT + CID Samsung + EXT_CSD REV5"
|
||||
Executable
+23
@@ -0,0 +1,23 @@
|
||||
#!/bin/bash
|
||||
# Запуск эмулятора под linux/amd64 (WSL). WIP: проверяет окружение, показывает команду.
|
||||
set -e
|
||||
if [ "$1" == "--help" ] || [ "$1" == "-h" ] || [ $# -eq 0 ]; then
|
||||
cat <<'EOF'
|
||||
usage: ./qemu/launch-wsl.sh [--check|--dry-run]
|
||||
--check проверить qemu-system-arm, WSLg, образ
|
||||
--dry-run показать команду запуска (по умолчанию)
|
||||
Мобильное окно: portrait 720x1280, mouse=touch absolute, GTK.
|
||||
thor2/WDRT только из Windows-хоста через usbip (см. compat/).
|
||||
EOF
|
||||
exit 0
|
||||
fi
|
||||
IMG=images/emmc.img
|
||||
echo "[launch] WIP dry-run:"
|
||||
echo "qemu-system-arm -M none -cpu cortex-a7 -m 1024 \\"
|
||||
echo " -kernel qemu/pbl_stub.py \\"
|
||||
echo " -drive file=$IMG,if=none,format=raw,id=emmc \\"
|
||||
echo " -device sdhci-pci -device sd-card,drive=emmc \\"
|
||||
echo " -serial stdio -display gtk,window-close=off"
|
||||
echo "[launch] ВНИМАНИЕ: -M none/saimaa еще нет, sdhci-pci временный (нужен platform 0x07824000)."
|
||||
echo "[launch] Видео WIP: ramfb 0x83000000, без virtio-gpu (палится)."
|
||||
if [ "$1" == "--check" ]; then ../lumia-emu/tools/check-env.sh 2>/dev/null || ./tools/check-env.sh; fi
|
||||
@@ -0,0 +1,100 @@
|
||||
/dts-v1/;
|
||||
|
||||
/ {
|
||||
model = "Microsoft Lumia 550 Saimaa RM-1127";
|
||||
compatible = "microsoft,saimaa", "qcom,msm8909";
|
||||
qcom,msm-id = <245 0>;
|
||||
qcom,board-id = <0 0>;
|
||||
|
||||
#address-cells = <1>;
|
||||
#size-cells = <1>;
|
||||
|
||||
chosen {
|
||||
stdout-path = "serial0:115200n8";
|
||||
bootargs = "earlycon console=ttyMSM0,115200n8";
|
||||
};
|
||||
|
||||
memory@80000000 {
|
||||
device_type = "memory";
|
||||
reg = <0x80000000 0x40000000>; /* 1GB, верх обрезан HLOS */
|
||||
};
|
||||
|
||||
reserved-memory {
|
||||
#address-cells = <1>;
|
||||
#size-cells = <1>;
|
||||
ranges;
|
||||
|
||||
qseecom@87a00000 { reg = <0x87a00000 0x200000>; no-map; };
|
||||
modem_adsp@88000000 { reg = <0x88000000 0x5500000>; no-map; }; /* WIP: stub */
|
||||
peripheral@8d500000 { reg = <0x8d500000 0x500000>; no-map; };
|
||||
splash@83000000 { reg = <0x83000000 0xc00000>; no-map; };
|
||||
};
|
||||
|
||||
cpus {
|
||||
#address-cells = <1>;
|
||||
#size-cells = <0>;
|
||||
cpu@0 { compatible = "arm,cortex-a7"; reg = <0>; };
|
||||
cpu@1 { compatible = "arm,cortex-a7"; reg = <1>; };
|
||||
cpu@2 { compatible = "arm,cortex-a7"; reg = <2>; };
|
||||
cpu@3 { compatible = "arm,cortex-a7"; reg = <3>; };
|
||||
};
|
||||
|
||||
soc {
|
||||
#address-cells = <1>;
|
||||
#size-cells = <1>;
|
||||
compatible = "simple-bus";
|
||||
ranges = <0 0 0 0xffffffff>;
|
||||
|
||||
tlmm: pinctrl@1000000 {
|
||||
compatible = "qcom,msm8909-tlmm";
|
||||
reg = <0x1000000 0x300000>;
|
||||
};
|
||||
|
||||
imem@8600000 {
|
||||
compatible = "qcom,msm-imem";
|
||||
reg = <0x08600000 0x1000>;
|
||||
};
|
||||
|
||||
sdhc_1: sdhci@7824000 {
|
||||
compatible = "qcom,sdhci-msm";
|
||||
reg = <0x07824900 0x11c>, <0x07824000 0x800>;
|
||||
qcom,bus-width = <8>;
|
||||
non-removable;
|
||||
status = "okay"; /* eMMC User, Boot1/2 нули WIP */
|
||||
};
|
||||
|
||||
sdhc_2: sdhci@7864000 {
|
||||
compatible = "qcom,sdhci-msm";
|
||||
reg = <0x07864900 0x11c>, <0x07864000 0x800>;
|
||||
qcom,bus-width = <4>;
|
||||
status = "okay"; /* microSD */
|
||||
};
|
||||
|
||||
serial0: serial@78af000 {
|
||||
compatible = "qcom,msm-uartdm-v1.4";
|
||||
reg = <0x78af000 0x200>;
|
||||
status = "okay";
|
||||
};
|
||||
|
||||
usb@78d9000 {
|
||||
compatible = "qcom,hsusb-otg";
|
||||
reg = <0x78d9000 0x400>;
|
||||
qcom,hsusb-otg-mode = <1>;
|
||||
status = "okay"; /* 05C6:9008 / 045E:9006 см. compat/ */
|
||||
};
|
||||
|
||||
spmi@200f000 {
|
||||
compatible = "qcom,spmi-pmic-arb";
|
||||
reg = <0x200f000 0x1000>;
|
||||
status = "okay"; /* PM8909 WIP-stub */
|
||||
};
|
||||
};
|
||||
|
||||
gpio-keys {
|
||||
compatible = "gpio-keys";
|
||||
vol-up { label = "Volume Up"; gpios = <&tlmm 90 1>; linux,code = <115>; };
|
||||
cam-focus { label = "Camera Focus"; gpios = <&tlmm 91 1>; linux,code = <528>; };
|
||||
cam-snap { label = "Camera Snapshot"; gpios = <&tlmm 92 1>; linux,code = <766>; };
|
||||
/* PWR/VolDown через pm8909_pon: 116/114 */
|
||||
};
|
||||
};
|
||||
@@ -0,0 +1,23 @@
|
||||
#!/usr/bin/env python3
|
||||
"""PBL-stub WIP: имитирует PBL MSM8909 для эмуляции.
|
||||
Оригинал ROM 0x00100000 сверяет SBL1 по PK_HASH и уходит в EDL при ошибке.
|
||||
Стуб: читает SBL1 из emmc User LBA 32768, кладет в IMEM-макет, прыгает.
|
||||
EDL cookie 0x193D100 bit0 -> Sahara-Hello заглушка.
|
||||
WIP: SecureBoot скипнут! Для 1:1 нужен QFPROM/PK_HASH из живого дампа.
|
||||
"""
|
||||
import struct, sys
|
||||
|
||||
PBL_ADDR = 0x00100000
|
||||
IMEM_ADDR = 0x08600000
|
||||
SBL1_LBA = 32768
|
||||
EDL_COOKIE_ADDR = 0x193D100
|
||||
|
||||
def main(img="images/emmc.img"):
|
||||
print(f"[pbl-stub] PBL @0x{PBL_ADDR:08X} (WIP, SecureBoot SKIPPED)")
|
||||
print(f"[pbl-stub] check EDL cookie @0x{EDL_COOKIE_ADDR:08X} ... 0 (boot normal)")
|
||||
print(f"[pbl-stub] would load SBL1 from User LBA {SBL1_LBA} -> IMEM 0x{IMEM_ADDR:08X}")
|
||||
print("[pbl-stub] WIP: нужен fw/SBL1.bin из ffureader. Пока только лог.")
|
||||
print("[pbl-stub] Sahara-Hello stub: 05C6:9008 ready (см. compat/)")
|
||||
|
||||
if __name__ == "__main__":
|
||||
main(sys.argv[1] if len(sys.argv) > 1 else "images/emmc.img")
|
||||
Reference in New Issue
Block a user