Armbian for C1/C0 with 3.10.y and 4.18.y

Moderators: mdrjr, odroid

Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby igorpec » Fri May 12, 2017 1:31 am

[ minimal server with powerful config and installer ]

Image

[ with or without minimal XFCE based desktop ][ with Chromium ]

Image

Download

[ Configuration ]

Code: Select all
armbian-config

- wireless network connect,
- AP (hotspot) in bridged or NAT mode,
- freeze and unfreeze kernel and BSP upgrades,
- edit boot environment, network, FEX, welcome screen items,
- switching between avaliable kernels and nightly builds,
- enabling read only root filesystem (Ubuntu only),
- set display resolution (H3 boards with legacy kernel),

[ Installation ]

Code: Select all
softy

- TV headend (IPTV server)
- Syncthing (personal cloud)
- SoftEther VPN server (VPN server)
- Transmission (torrent server)
- ISPConfig (WEB & MAIL server)
- Openmediavault NAS (NAS server)
- PI hole (ad blocker)
- MiniDLNA (media sharing)

[ Built with ]

https://github.com/armbian/build (Odroid C1)

[ More info ]

https://www.armbian.com/odroid-c1

[ Support ]

https://forum.armbian.com/index.php?/forum/16-amlogic

[ Follow us on Twitter ]

https://twitter.com/armbian
Last edited by igorpec on Thu Sep 20, 2018 3:31 am, edited 8 times in total.
User avatar
igorpec
 
Posts: 239
Joined: Sat Dec 12, 2015 4:34 pm
languages_spoken: english,german,slovene
ODROIDs: XU4, HC1, C2, C1+

Re: [OS] Armbian Ubuntu Xenial for C1/C0 with 3.10.x

Unread postby igorpec » Wed Jun 14, 2017 8:02 pm

v5.30 / 14.06.2017

- mainline kernel updated to 4.11
- mainline u-boot updated to v2017.05
- Firefox was replaced with Chromium (desktop images)
- sunxi mainline configuration: added Device Tree overlays support (new images only)
- sunxi mainline configuration: added armbian-add-overlay helper for compiling and activating DT overlays (new images only)
- log2ram: fixed saving /var/log contents on shutdown
- new hardware support (stable/supported images): Xunlong Orange Pi Zero Plus 2 (H3), ASUS TinkerBoard, MiQi
- reworked package updates MOTD script to speed up the login process
- added config file /etc/default/armbian-motd for disabling MOTD components
- added armbian-config dialog-based configuration program (WIP)
- Banana Pi M2: fixed HDMI video output
- Clearfog: adjusted temperature readout
- i.MX6 mainline: enabled support for HDMI audio and PCIe bus
ARMBIAN - follow on Twitter
linux for ARM development boards with user friendly development tools
User avatar
igorpec
 
Posts: 239
Joined: Sat Dec 12, 2015 4:34 pm
languages_spoken: english,german,slovene
ODROIDs: XU4, HC1, C2, C1+

Re: [OS] Armbian Ubuntu Xenial for C1/C0 with 3.10.107

Unread postby igorpec » Fri Jul 07, 2017 9:04 pm

C1 kernel update to 3.10.107

a) Change to beta repository and issue update / upgrade

or

b) Download and install kernel those two packages:

https://beta.armbian.com/pool/main/l/li ... _armhf.deb
https://beta.armbian.com/pool/main/l/li ... _armhf.deb
ARMBIAN - follow on Twitter
linux for ARM development boards with user friendly development tools
User avatar
igorpec
 
Posts: 239
Joined: Sat Dec 12, 2015 4:34 pm
languages_spoken: english,german,slovene
ODROIDs: XU4, HC1, C2, C1+

Re: [OS] Armbian Ubuntu Xenial Docker for C1/C0 with 3.10.10

Unread postby bcclsn » Sat Nov 25, 2017 1:33 am

hi,

is there kodi 17 in the repo?
bcclsn
 
Posts: 100
Joined: Thu Mar 05, 2015 12:04 am
Location: Avellino, Italy
languages_spoken: italian
ODROIDs: Odroid C1

Re: [OS] Armbian Ubuntu Xenial Docker for C1/C0 with 3.10.10

Unread postby igorpec » Sat Nov 25, 2017 2:53 am

bcclsn wrote:hi,

is there kodi 17 in the repo?


No, we don't deal with KODI.
ARMBIAN - follow on Twitter
linux for ARM development boards with user friendly development tools
User avatar
igorpec
 
Posts: 239
Joined: Sat Dec 12, 2015 4:34 pm
languages_spoken: english,german,slovene
ODROIDs: XU4, HC1, C2, C1+

Re: [OS] Armbian Ubuntu Xenial Docker for C1/C0 with 3.10.10

Unread postby bcclsn » Sat Nov 25, 2017 5:50 am

igorpec wrote:
bcclsn wrote:hi,

is there kodi 17 in the repo?


No, we don't deal with KODI.
:(
bcclsn
 
Posts: 100
Joined: Thu Mar 05, 2015 12:04 am
Location: Avellino, Italy
languages_spoken: italian
ODROIDs: Odroid C1

Re: [OS] Armbian for C1/C0 with 3.10.y and 4.17.y

Unread postby igorpec » Fri Aug 03, 2018 8:38 pm

- added Stretch and Bionic for Odroid C1 with 4.17.12:

Boot log: http://ix.io/1j5d

Issues:
- serial console only
- no DVFS, fixed CPU frequency
- no USB hotplugging, power the board with USB device is needed
- eMMC not supported
- reboot doesn't bring up the board, you need to power cycle.
ARMBIAN - follow on Twitter
linux for ARM development boards with user friendly development tools
User avatar
igorpec
 
Posts: 239
Joined: Sat Dec 12, 2015 4:34 pm
languages_spoken: english,german,slovene
ODROIDs: XU4, HC1, C2, C1+

Re: [OS] Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby igorpec » Thu Aug 16, 2018 4:37 pm

Updated to 4.18.y
ARMBIAN - follow on Twitter
linux for ARM development boards with user friendly development tools
User avatar
igorpec
 
Posts: 239
Joined: Sat Dec 12, 2015 4:34 pm
languages_spoken: english,german,slovene
ODROIDs: XU4, HC1, C2, C1+

Re: [OS] Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby igorpec » Thu Sep 20, 2018 3:30 am

Update: https://docs.armbian.com/Release_Changelog/

apt update & apt upgrade
ARMBIAN - follow on Twitter
linux for ARM development boards with user friendly development tools
User avatar
igorpec
 
Posts: 239
Joined: Sat Dec 12, 2015 4:34 pm
languages_spoken: english,german,slovene
ODROIDs: XU4, HC1, C2, C1+

Re: Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby ujsrwidc » Sun Nov 04, 2018 7:06 pm

What is the reason for having a serial output only on Odroid C0/C1/C1+ 4.18 image but having a graphical output on Odroid C2 4.18 image? Both have the Mali 450 graphics chipset and there is the Lima Mali 400/450 driver available.
ujsrwidc
 
Posts: 37
Joined: Sat Nov 03, 2018 9:00 pm
languages_spoken: english

Re: Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby igorpec » Sun Nov 04, 2018 9:08 pm

ujsrwidc wrote:What is the reason for having a serial output only on Odroid C0/C1/C1+ 4.18 image but having a graphical output on Odroid C2 4.18 image? Both have the Mali 450 graphics chipset and there is the Lima Mali 400/450 driver available.


Because there is no support for HDMI output in modern kernel. Not developed.

MALI is 3D engine and not "GPU".
ARMBIAN - follow on Twitter
linux for ARM development boards with user friendly development tools
User avatar
igorpec
 
Posts: 239
Joined: Sat Dec 12, 2015 4:34 pm
languages_spoken: english,german,slovene
ODROIDs: XU4, HC1, C2, C1+

Re: Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby ujsrwidc » Sun Nov 04, 2018 10:30 pm

HDMI output support have to be added to the mainline support for the Amlogic S805 chipset?
With other words: The HDMI output support is been added to the S905 mainline kernel but until now not for the S805?

This is what is needed for the S805 but recently only available for the S905, S905X, S905D and S912? https://git.kernel.org/pub/scm/linux/ke ... 837da09ddd

Sadly the 3.10 kernel is outdated and dont get security updates backported since a year because support for the kernel 3.10 is stopped ( viewtopic.php?f=111&t=19292#p237188 ). There is now no kernel existing that can be run secure when connected to the internet to provide graphics output. I think most people know how security-broken devices get when they dont get security updates for a year.
ujsrwidc
 
Posts: 37
Joined: Sat Nov 03, 2018 9:00 pm
languages_spoken: english

Re: Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby OverSun » Sun Nov 04, 2018 10:58 pm

So what's the latest kernel issue you can exploit through the internet?
User avatar
OverSun
 
Posts: 1386
Joined: Mon Apr 29, 2013 5:12 pm
languages_spoken: english

Re: Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby ujsrwidc » Sun Nov 04, 2018 11:09 pm

There is not one. There are over 50 known issues listed here: https://www.cvedetails.com/vulnerabilit ... 0.102.html

For example CVE-2018-14619 . When you have a service running on your device(this is something you want to do when you connect it to the internet), CVE-2018-14619 can be used to crash the system over the internet or gain root access to the system.
ujsrwidc
 
Posts: 37
Joined: Sat Nov 03, 2018 9:00 pm
languages_spoken: english

Re: Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby OverSun » Sun Nov 04, 2018 11:58 pm

The issue you linked is "leading to a local user being able to crash the system or possibly escalate privileges".
There are very few, if not none possibilities to access and exploit system kernel remotely if the system is properly configured and maintained.
User avatar
OverSun
 
Posts: 1386
Joined: Mon Apr 29, 2013 5:12 pm
languages_spoken: english

Re: Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby ujsrwidc » Mon Nov 05, 2018 12:08 am

The service connecting with the internet is running localy with normal user rights (if thats not being configured wrong and running as root). You use that part for the attack. You have checked all other CVEs? Could you provide me this list where you go in detail and explain every single issue and why this does not affect the system security?
And what about the issues that are now in this moment in the disclosure program and get fixed silent upstream before the security issue is released to the public (example: https://www.eff.org/security )? Are you doing from now on for every single outdated system a professional analysis if this non-released issue affects their usecase or not?
ujsrwidc
 
Posts: 37
Joined: Sat Nov 03, 2018 9:00 pm
languages_spoken: english

Re: Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby igorpec » Mon Nov 05, 2018 12:38 am

ujsrwidc wrote:This is what is needed for the S805 but recently only available for the S905, S905X, S905D and S912?


Yes, similar.
ARMBIAN - follow on Twitter
linux for ARM development boards with user friendly development tools
User avatar
igorpec
 
Posts: 239
Joined: Sat Dec 12, 2015 4:34 pm
languages_spoken: english,german,slovene
ODROIDs: XU4, HC1, C2, C1+

Re: Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby OverSun » Mon Nov 05, 2018 12:48 am

can you provide me security analysis that prove latest kernel has no flaws? that’s the same level of demands. no product is flawless, and it is always a trade off between what can be provided and how much effort is needed to make it better.
you know, once i worked in a company where were five managers per three engineers. most of the time work there was looking like endless schedule of meetings where different set of managers was trying to find who is going to do task they have. what you are trying to perform look very much same for me. going different topics with „i have a task, could you give me an answer how it can be done?“ kind of posts. with the same effort you can already find out everything you need.
no, s805 devices are not going to have latest kernel support, there is no reason to put so much effort in it. but yes, for the task of running a video stream being publically accessible current state they are can be considered fine if configured and maintained properly.
User avatar
OverSun
 
Posts: 1386
Joined: Mon Apr 29, 2013 5:12 pm
languages_spoken: english

Re: Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby ujsrwidc » Mon Nov 05, 2018 12:58 am

The Endless Mini board support ( https://endlessos.com/computers/ ) is been added recently to the mainline kernel. Its also Amlogic S805 based. Does it mean that this device have also no HDMI output at the moment when using mainline kernel?

Linus Torvalds writes " On the 32-bit side, we gain support for an actual end-user product, the Endless Computers Endless Mini based on Meson8b (S805), see https://endlessos.com/computers/ " here: https://git.kernel.org/pub/scm/linux/ke ... c0fd2bc1b0

Support for the endless mini is been added here: https://git.kernel.org/pub/scm/linux/ke ... 2f04fc10d0

EDIT:
Here is the answer from Martin Blumenstingl from 04.11.2018 about if HDMI can work on recent kernel in near future with the S805 chipset:

>unfortunately HDMI is not supported on the 32-bit SoCs
>it's not clear which HDMI controller IP Amlogic used on these SoCs
>(the 64-bit ones use a customized Synopsys DesignWare HDMI
>transmitter, but the register definitions for the old SoCs are a lot
>different)
>
>the whole display subsystem is very complex and adding support for the
>older SoCs is a lot of work (even for CVBS output, HDMI is a lot more
>work on top of that)
ujsrwidc
 
Posts: 37
Joined: Sat Nov 03, 2018 9:00 pm
languages_spoken: english

Re: Armbian for C1/C0 with 3.10.y and 4.18.y

Unread postby OverSun » Mon Nov 05, 2018 4:33 am

ujsrwidc wrote:The service connecting with the internet is running localy with normal user rights (if thats not being configured wrong and running as root). You use that part for the attack.


you understanding of "local user being able to crash" is wrong.
User avatar
OverSun
 
Posts: 1386
Joined: Mon Apr 29, 2013 5:12 pm
languages_spoken: english


Return to Other OS

Who is online

Users browsing this forum: No registered users and 2 guests