ファームウェア Ver.1.68 のインストール

LS-SL

LS-WSXL にインストールしたファームウェア 1.68 は これまでのやり方では ssh でログインできなかった。
ログインできないと何もできないが、 シリアルコンソールも(まだ?)見つかっていないので、、、

LS-WSXL でインストールした HDD を シリアルコンソールがつながる LS-SL(V1) に接続して起動してみたが、 起動してこなかった。

しかたがないので、LS-SL に新規インストールしてみる。

tftp サーバの準備

yasunari@qube:~$ cd /srv/tftp/
yasunari@qube:/srv/tftp$ ls
HS-DHGL_1.20   LS-HGL_1.07b       LS-WSGL_1.06        ls400-111
LS-CHL_1.10    LS-LGL_2.01        LS-XHL_1.02         ls400-111en
LS-CHL_1.20    LS-QL_1.05+telnet  LS-XHL_1.02+telnet  ls_series-156
LS-CHL_1.21    LS-QL_1.07b        LS-XHL_1.04b        ls_series-157
LS-CL+HackKit  LS-QL_1.10b        LS-XHL_1.10         ls_series-160
LS-CL_1.07     LS-SL_1.11         SheevaPlug_1.2      ls_series-160_88f5182
LS-CL_1.11     LS-SL_1.24         TS-WXL_1.06         uImage.buffalo
LS-GL_1.15     LS-VL+X            initrd.buffalo
yasunari@qube:/srv/tftp$ rm initrd.buffalo uImage.buffalo
yasunari@qube:/srv/tftp$ ln ls_series-160_88f5182/initrd.buffalo .
yasunari@qube:/srv/tftp$ ln ls_series-160_88f5182/uImage.buffalo .
yasunari@qube:/srv/tftp$

パーティションのない HDD を接続して起動

Orion1   CPU =  Low

Checking DATA BUS
Checking ADDRESS BUS

> Checking hardware info ...
=== CPU-ID       : 0x00005182 ===
=== Strap status : 0x00802030 ===
=== H/W boardId  :       0x33 ===
=== boardId      :       0x1a ===
=== micon_support:        off ===
> OK.
=== BUFFALO LS-SL U-Boot. ===
 ** LOADER **
 ** BUFFALO BOARD: BUFFALO_BOARD_LS_SL LE (CFG_ENV_ADDR=fffff000)


U-Boot 1.1.1 (May 28 2009 - 11:06:21) Marvell version: 1.12.1 - TINY
U-Boot code: 00600000 -> 00639A58  BSS: -> 00641B24
Buffalo Version: 1.23-1.00

DRAM CS[0] base 0x00000000   size 128MB
DRAM Total size 128MB
[256kB@fffc0000] Flash: 256 kB
Addresses 8M - 0M are saved for the U-Boot usage.
Mem malloc Initialization (8M - 7M): Done

Soc: 88F5182 A2
CPU: ARM926 (Rev 0) running @ 400Mhz
Orion 1 streaming disabled
SysClock = 200Mhz , TClock = 166Mhz


USB 0: host mode
PCI 0: PCI Express Root Complex Interface
PCI 1: Conventional PCI, speed = 33000000
Net:   egiga0 [PRIME]
Using 88E1118 phy
buffalo_change_power_status > Read 0x3a
buffalo_IsStopAtUbootStatus > MagicKey=0x3a
buffalo_change_power_status > Read 0x3a
buffalo_change_power_status > Read 0x3a
buffalo_change_power_status > Writing 0x5c

Please Press HDD power button to continue ...

電源 ON
buffalo_change_power_status > Read 0x5c
buffalo_change_power_status > Writing 0x3a

Marvell Serial ATA Adapter
Integrated Sata device found
  Device 0: OK
Model: MARSHAL MAL2160SA-T72                    Firm: LH013C   Ser#:            Y9QGP0H3T
            Type: Hard Disk
            Supports 48-bit addressing
            Capacity: 152627.8 MB = 149.0 GB (312581808 x 512)

** Bad partition 1 **
serch_boot_drv (194)>No kernel_file 0
** Bad partition 1 **
serch_boot_drv (249)>No init_file 0
** Bad partition 1 **
serch_boot_drv (194)>No kernel_file 1
** Bad partition 1 **
serch_boot_drv (249)>No init_file 1
Lost all init_rd

E06

func ボタンを押す


func switch pushed, and exited loop
wait until func switch released.

Marvell Serial ATA Adapter
Integrated Sata device found

** Bad partition 1 **
serch_boot_drv (194)>No kernel_file 0
** Bad partition 1 **
serch_boot_drv (249)>No init_file 0
** Bad partition 1 **
serch_boot_drv (194)>No kernel_file 1
** Bad partition 1 **
serch_boot_drv (249)>No init_file 1
hit any key to switch tftp boot.
Hit any key to stop autoboot:  0
Using egiga0 device
TFTP from server 192.168.11.1; our IP address is 192.168.11.150
Filename 'uImage.buffalo'.
Load address: 0x100000
Loading: #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ############################
done
Bytes transferred = 2135044 (209404 hex)
Using egiga0 device
TFTP from server 192.168.11.1; our IP address is 192.168.11.150
Filename 'initrd.buffalo'.
Load address: 0x800000
Loading: #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ###########################################################
done
Bytes transferred = 9617733 (92c145 hex)
## Booting image at 00100000 ...
   Image Name:   Linux-2.6.22.7-88f5182
   Created:      2012-06-08   2:00:42 UTC
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2134980 Bytes =  2 MB
   Load Address: 00008000
   Entry Point:  00008000
   Verifying Checksum ... OK
OK
## Loading Ramdisk Image at 00800000 ...
   Image Name:   initrd
   Created:      2012-06-18   9:58:18 UTC
   Image Type:   ARM Linux RAMDisk Image (gzip compressed)
   Data Size:    9617669 Bytes =  9.2 MB
   Load Address: 00000000
   Entry Point:  00000000
   Verifying Checksum ... OK

Starting kernel ...

arg:console=ttyS0,115200 root=/dev/sda2 rw initrd=0x00800040,15M panic=5 BOOTVER=1.23 tftpboot=yes
CONFIG_BUFFALO_PLATFORM ---
Uncompressing Linux...................................................................................................................................... done, booting the kernel.
Linux version 2.6.22.7-88f5182 (root@NAS) (gcc version 4.2.0 20070413 (prerelease)) #1 Fri Jun 8 11:00:39 JST 2012
CPU: ARM926EJ-S [41069260] revision 0 (ARMv5TEJ), cr=a0053177
Machine: Feroceon
Using UBoot passing parameters structure
Memory policy: ECC disabled, Data cache writeback
CPU0: D VIVT write-back cache
CPU0: I cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets
CPU0: D cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets
Built 1 zonelists.  Total pages: 32512
Kernel command line: console=ttyS0,115200 root=/dev/sda2 rw initrd=0x00800040,15M panic=5 BOOTVER=1.23 tftpboot=yes
PID hash table entries: 512 (order: 9, 2048 bytes)
Console: colour dummy device 80x30
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 128MB 0MB 0MB 0MB = 128MB total
Memory: 110108KB available (3860K code, 294K data, 120K init)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
env_format_version = 0x00000006
product_id = 0x00000013
Sys Clk = 200000000, Tclk = 166664740

CPU Interface
-------------
SDRAM_CS0 ....base 00000000, size 128MB
SDRAM_CS1 ....disable
SDRAM_CS2 ....disable
SDRAM_CS3 ....disable
PEX0_MEM ....base e0000000, size 128MB
PEX0_IO ....base f2000000, size   1MB
PCI0_MEM ....base e8000000, size 128MB
PCI0_IO ....base f2100000, size   1MB
INTER_REGS ....base f1000000, size   1MB
DEVICE_CS0 ....no such
DEVICE_CS1 ....base f4000000, size  32MB
DEVICE_CS2 ....no such
DEV_BOOCS ....base ff800000, size   8MB
CRYPT_ENG ....base f0000000, size  64KB

  Marvell Development Board (LSP Version 3.0.5_NAS_GDP_p8)-- BUFFALO_BOARD  Soc: 88F5182 A2

 Detected Tclk 166664740 and SysClk 200000000
Marvell USB EHCI Host controller #0: c055b600
Marvell USB EHCI Host controller #1: c055b400
IO Request resource failed - Pci If 0
PCI: bus0: Fast back to back transfers enabled
PCI: bus1: Fast back to back transfers enabled
SCSI subsystem initialized
Time: orion_clocksource clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
checking if image is initramfs...it isn't (no cpio magic); looks like an initrd
Freeing initrd memory: 15360K
RTC registered
mvCesaInit: sessions=640, queue=64, pSram=f0000000
Use the XOR engines (acceleration) for enhancing the following functions:
  o RAID 5 Xor calculation
  o kernel memcpy
  o kenrel memzero
  o copy user to/from kernel buffers
Number of XOR engines to use: 2
Use IDMA channels 2 and 3 for enhancing the following function:
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
fuse init (API version 7.8)
SGI XFS with ACLs, large block numbers, no debug enabled
SGI XFS Quota Management subsystem
io scheduler noop registered (default)
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS1 at MMIO 0x0 (irq = 4) is a 16550A
serial8250.0: ttyS0 at MMIO 0xf1012000 (irq = 3) is a 16550A
serial8250.0: ttyS2 at MMIO 0xf1012100 (irq = 4) is a 16550A
RAMDISK driver initialized: 3 RAM disks of 32768K size 1024 blocksize
loop: module loaded
Marvell Ethernet Driver 'mv_ethernet':
  o Uncached descriptors in DRAM
  o DRAM SW cache-coherency
  o TCP segmentation offload enabled
  o Checksum offload enabled
  o Rx desc: 128
  o Tx desc: 256
  o Loading network interface ** eth_init_module (0)
'eth0'
Intergrated Sata device found
scsi0 : Marvell SCSI to SATA adapter
scsi1 : Marvell SCSI to SATA adapter
scsi 0:0:0:0: Direct-Access     MARSHAL  MAL2160SA-T72    LH01 PQ: 0 ANSI: 5
sd 0:0:0:0: [sda] 312581808 512-byte hardware sectors (160042 MB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, supports DPO and FUA
sd 0:0:0:0: [sda] 312581808 512-byte hardware sectors (160042 MB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, supports DPO and FUA
 sda: unknown partition table
sd 0:0:0:0: [sda] Attached SCSI disk
sd 0:0:0:0: Attached scsi generic sg0 type 0
physmap platform flash device: 01000000 at f0000000
physmap-flash physmap-flash.0: map_probe failed
Found: SST 39LF020
cfi_flash_0: Found 1 x8 devices at 0x0 in 8-bit bank
number of JEDEC chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
cmdlinepart partition parsing not available
mice: PS/2 mouse device common for all mice
md: raid0 personality registered for level 0
md: raid1 personality registered for level 1
raid6: int32x1     20 MB/s
raid6: int32x2     28 MB/s
raid6: int32x4     35 MB/s
raid6: int32x8     31 MB/s
raid6: using algorithm int32x4 (35 MB/s)
md: raid6 personality registered for level 6
md: raid5 personality registered for level 5
md: raid4 personality registered for level 4
raid5: measuring checksumming speed
   arm4regs  :   303.200 MB/sec
   8regs     :   249.200 MB/sec
   32regs    :   270.400 MB/sec
raid5: using function: arm4regs (303.200 MB/sec)
Kernel event proc (C) BUFFALO INC. V.1.00 installed.
MICON ctrl (C) BUFFALO INC. V.1.00 installed.
Buffalo CPU Inerupts Driver (C) BUFFALO INC. Ver.0.01 alpha1 installed.
Buffalo Gpio Control Driver (C) BUFFALO INC. Ver.0.02 installed.
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
md: Autodetecting RAID arrays.
md: autorun ...
md: ... autorun DONE.
RAMDISK: Compressed image found at block 0
VFS: Mounted root (ext2 filesystem).
---- in linuxrc ---
Version 1.00 2008/ 7/ 1
grep: /var/tmp/devlink: No such file or directory
Thu Nov  1 00:00:00 JST 2007
Thu Nov  1 00:00:00 JST 2007
linuxrc:choose operation (timeout 4[s])
 1:RamRoot other:HddRoot  ? -HddRoot-
-- rebuild mdadm.conf for BOOT, ROOTFS --
mdadm: cannot open /dev/disk?_1: No such file or directory
mdadm: cannot open /dev/disk?_2: No such file or directory
mdadm: cannot open /dev/disk?_5: No such file or directory
mdadm: No devices listed in conf file were found.
-- setup max error counts --
/sys/block/md0/md/maxerr_cnt is setted to -1
Starting :fsck_disks(boot) ...         [Failed. ]
Starting :mount(boot) ...              EXT3-fs: unable to read superblock
EXT2-fs: unable to read superblock
EXT3-fs: unable to read superblock
EXT2-fs: unable to read superblock
[Failed. ]
-- rebuild mdadm.conf for BOOT, ROOTFS --
mdadm: cannot open /dev/disk?_1: No such file or directory
mdadm: cannot open /dev/disk?_2: No such file or directory
mdadm: cannot open /dev/disk?_5: No such file or directory
mdadm: No devices listed in conf file were found.
-- setup max error counts --
/sys/block/md0/md/maxerr_cnt is setted to -1
/sys/block/md1/md/maxerr_cnt is setted to -1
/usr/local/lib/libmd.sh: line 574: /sys/block/md1/md/maxerr_cnt: No such file or directory
/syEXT3-fs: unable to read superblock
s/block/md10/md/EXT2-fs: unable to read superblock
maxerr_cnt is setted to -1
/usr/local/lib/libmd.sh: line 574: /sys/block/md10/md/maxerr_cnt: No such file or directory
mount: mounting /dev/md1 on /mnt failed: Input/output error
EXT3-fs: unable to read superblock
EXT2-fs: unable to read superblock
mount: mounting /dev/md1 on /mnt failed: Input/output error
md: md0 stopped.
mdadm: stopped /md: md1 stopped.
dev/md0
mdadm: stopped /dev/md1
md: md10 stopped.
mdadm: stopped /dev/md10
umount: cannot open /proc/mounts
Freeing init memory: 120K
init started: BusyBox v1.7.0 (2009-04-29 19:12:57 JST)
starting pid 460, tty '': '/etc/init.d/rcS'
--- rcStart (initrd) ---
 * Starting :udev.sh ...
[Success.]
 * Starting :checkroot.sh ... Unable to find swap-space signature
[Success.]
 * Starting :create_devlink.sh ... [Success.]
 * Starting :startSysMd.sh ... [Success.]
 * Starting :errormon.sh ... [Success.]
 * Starting :fwupdate.sh ... EXT3-fs: unable to read superblock
EXT2-fs: unable to read superblock
[Success.]
 * Starting :check_nandboot.sh ... [Success.]
grep: /tmp/check_nandboot: No such file or directory
 * Starting :closeSysMd.sh ... md: md0 stopped.
md: md1 stopped.
md: md10 stopped.
[Success.]
 * Starting :sethostname.sh ... [Success.]
 * Starting :restore_config.sh ... EXT3-fs: unable to read superblock
EXT2-fs: unable to read superblock
md: md0 stopped.
md: md1 stopped.
md: md10 stopped.
[Success.]
 * Starting :EnablingAutoip.sh ... [Success.]
 * Starting :networking.sh ... eth reg(9) val=0x0300
eth0: link down
eth0: link up, full duplex, speed 1 Gbps
** eth0 : networking.sh dhcp fin.
[Success.]
 * Starting :syslog.sh ... [Success.]
 * Starting :kernelmon.sh ... [Success.]
 * Starting :usb.sh ... usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
ehci_marvell ehci_marvell.4523: Marvell Orion EHCI
ehci_marvell ehci_marvell.4523: new USB bus registered, assigned bus number 1
ehci_marvell ehci_marvell.4523: irq 17, io base 0xf1050100
ehci_marvell ehci_marvell.4523: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ehci_marvell ehci_marvell.167817: Marvell Orion EHCI
ehci_marvell ehci_marvell.167817: new USB bus registered, assigned bus number 2
ehci_marvell ehci_marvell.167817: irq 12, io base 0xf10a0100
ehci_marvell ehci_marvell.167817: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
USB Universal Host Controller Interface driver v3.0
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver usblp
drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver
[Success.]
 * Starting :clientUtil_servd.sh ... KERNELMOn (lanact 0 half)
[Success.]
 * Starting :daemonwatch.sh ... [Success.]
 * Starting :bootcomplete.sh ... KERNELMOn (lanact 1000 full)
[Success.]
 * Starting :late_inspection_phase.sh ... [Success.]
starting pid 1731, tty '': '/sbin/getty'
**** request DHCP eth0

BUFFALO INC. LinkStation series
LS-SL-EM9AF login:

ファームウェアアップデータの実行

LS-SL-EM9AF が見つかるので「ファームウェア更新」。
パーティションが確認できないのでフォーマットしますかと聞いてくるので 「はい」
フォーマットされ、ファームウェアが転送され、 ファームウェアが書き換えられ、再起動され、
あれ?tftp Boot した。。。
I25

しばらくして再度再起動
今度は HDD Boot

またしばらくして、
「LinkStationのアップデートは完了しました」と

Restarting system.
Reseting !!
Orion1   CPU =  Low

Checking DATA BUS
Checking ADDRESS BUS

> Checking hardware info ...
=== CPU-ID       : 0x00005182 ===
=== Strap status : 0x00802030 ===
=== H/W boardId  :       0x33 ===
=== boardId      :       0x1a ===
=== micon_support:        off ===
> OK.
=== BUFFALO LS-SL U-Boot. ===
 ** LOADER **
 ** BUFFALO BOARD: BUFFALO_BOARD_LS_SL LE (CFG_ENV_ADDR=fffff000)


U-Boot 1.1.1 (May 28 2009 - 11:06:21) Marvell version: 1.12.1 - TINY
U-Boot code: 00600000 -> 00639A58  BSS: -> 00641B24
Buffalo Version: 1.23-1.00

DRAM CS[0] base 0x00000000   size 128MB
DRAM Total size 128MB
[256kB@fffc0000] Flash: 256 kB
Addresses 8M - 0M are saved for the U-Boot usage.
Mem malloc Initialization (8M - 7M): Done

Soc: 88F5182 A2
CPU: ARM926 (Rev 0) running @ 400Mhz
Orion 1 streaming disabled
SysClock = 200Mhz , TClock = 166Mhz


USB 0: host mode
PCI 0: PCI Express Root Complex Interface
PCI 1: Conventional PCI, speed = 33000000
Net:   egiga0 [PRIME]
Using 88E1118 phy
buffalo_change_power_status > Read 0x18
buffalo_IsStopAtUbootStatus > MagicKey=0x18
buffalo_change_power_status > Read 0x18
buffalo_change_power_status > Read 0x18
buffalo_change_power_status > Writing 0x5c

Please Press HDD power button to continue ...
buffalo_change_power_status > Read 0x5c
buffalo_change_power_status > Writing 0x3a

Marvell Serial ATA Adapter
Integrated Sata device found
  Device 0: OK
Model: MARSHAL MAL2160SA-T72                    Firm: LH013C   Ser#:            Y9QGP0H3T
            Type: Hard Disk
            Supports 48-bit addressing
            Capacity: 152627.8 MB = 149.0 GB (312581808 x 512)


2135276 bytes read
   Image Name:   Linux-2.6.22.7-88f5182
   Created:      2013-11-14  12:23:31 UTC
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2135212 Bytes =  2 MB
   Load Address: 00008000
   Entry Point:  00008000


9647186 bytes read
   Image Name:   initrd
   Created:      2013-11-14  12:26:20 UTC
   Image Type:   ARM Linux RAMDisk Image (gzip compressed)
   Data Size:    9647122 Bytes =  9.2 MB
   Load Address: 00000000
   Entry Point:  00000000
** Bad partition 1 **
serch_boot_drv (194)>No kernel_file 1
** Bad partition 1 **
serch_boot_drv (249)>No init_file 1
Booting from Device 0
hit any key to switch tftp boot.
Hit any key to stop autoboot:  0
Hit any key to stop autoboot:  0

2135276 bytes read
** Bad partition 1 **
## Booting image at 00100000 ...
   Image Name:   Linux-2.6.22.7-88f5182
   Created:      2013-11-14  12:23:31 UTC
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2135212 Bytes =  2 MB
   Load Address: 00008000
   Entry Point:  00008000
   Verifying Checksum ... OK
OK
## Loading Ramdisk Image at 00800000 ...
   Image Name:   initrd
   Created:      2013-11-14  12:26:20 UTC
   Image Type:   ARM Linux RAMDisk Image (gzip compressed)
   Data Size:    9647122 Bytes =  9.2 MB
   Load Address: 00000000
   Entry Point:  00000000
   Verifying Checksum ... OK

Starting kernel ...

arg:console=ttyS0,115200 root=/dev/sda2 rw initrd=0x00800040,15M panic=5 func=0
CONFIG_BUFFALO_PLATFORM ---
Uncompressing Linux.............................................................the kernel.
Linux version 2.6.22.7-88f5182 (root@build2.dd-hot24.nas.buffalo.local) (gcc ver
CPU: ARM926EJ-S [41069260] revision 0 (ARMv5TEJ), cr=a0053177
Machine: Feroceon
Using UBoot passing parameters structure
Memory policy: ECC disabled, Data cache writeback
CPU0: D VIVT write-back cache
CPU0: I cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets
CPU0: D cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets
Built 1 zonelists.  Total pages: 32512
Kernel command line: console=ttyS0,115200 root=/dev/sda2 rw initrd=0x00800040,15
PID hash table entries: 512 (order: 9, 2048 bytes)
Console: colour dummy device 80x30
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 128MB 0MB 0MB 0MB = 128MB total
Memory: 110108KB available (3860K code, 294K data, 120K init)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
env_format_version = 0x00000006
product_id = 0x00000013
Sys Clk = 200000000, Tclk = 166664740

CPU Interface
-------------
SDRAM_CS0 ....base 00000000, size 128MB
SDRAM_CS1 ....disable
SDRAM_CS2 ....disable
SDRAM_CS3 ....disable
PEX0_MEM ....base e0000000, size 128MB
PEX0_IO ....base f2000000, size   1MB
PCI0_MEM ....base e8000000, size 128MB
PCI0_IO ....base f2100000, size   1MB
INTER_REGS ....base f1000000, size   1MB
DEVICE_CS0 ....no such
DEVICE_CS1 ....base f4000000, size  32MB
DEVICE_CS2 ....no such
DEV_BOOCS ....base ff800000, size   8MB
CRYPT_ENG ....base f0000000, size  64KB

  Marvell Development Board (LSP Version 3.0.5_NAS_GDP_p8)-- BUFFALO_BOARD  Soc:

 Detected Tclk 166664740 and SysClk 200000000
Marvell USB EHCI Host controller #0: c055b600
Marvell USB EHCI Host controller #1: c055b400
IO Request resource failed - Pci If 0
PCI: bus0: Fast back to back transfers enabled
PCI: bus1: Fast back to back transfers enabled
SCSI subsystem initialized
Time: orion_clocksource clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
checking if image is initramfs...it isn't (no cpio magic); looks like an initrd
Freeing initrd memory: 15360K
RTC registered
mvCesaInit: sessions=640, queue=64, pSram=f0000000
Use the XOR engines (acceleration) for enhancing the following functions:
  o RAID 5 Xor calculation
  o kernel memcpy
  o kenrel memzero
  o copy user to/from kernel buffers
Number of XOR engines to use: 2
Use IDMA channels 2 and 3 for enhancing the following function:
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
fuse init (API version 7.8)
SGI XFS with ACLs, large block numbers, no debug enabled
SGI XFS Quota Management subsystem
io scheduler noop registered (default)
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS1 at MMIO 0x0 (irq = 4) is a 16550A
serial8250.0: ttyS0 at MMIO 0xf1012000 (irq = 3) is a 16550A
serial8250.0: ttyS2 at MMIO 0xf1012100 (irq = 4) is a 16550A
RAMDISK driver initialized: 3 RAM disks of 32768K size 1024 blocksize
loop: module loaded
Marvell Ethernet Driver 'mv_ethernet':
  o Uncached descriptors in DRAM
  o DRAM SW cache-coherency
  o TCP segmentation offload enabled
  o Checksum offload enabled
  o Rx desc: 128
  o Tx desc: 256
  o Loading network interface ** eth_init_module (0)
'eth0'
Intergrated Sata device found
scsi0 : Marvell SCSI to SATA adapter
scsi1 : Marvell SCSI to SATA adapter
scsi 0:0:0:0: Direct-Access     MARSHAL  MAL2160SA-T72    LH01 PQ: 0 ANSI: 5
sd 0:0:0:0: [sda] 312581808 512-byte hardware sectors (160042 MB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, supports DPO and FU
sd 0:0:0:0: [sda] 312581808 512-byte hardware sectors (160042 MB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, supports DPO and FU
 sda: sda1 sda2 sda3 sda4 sda5 sda6
sd 0:0:0:0: [sda] Attached SCSI disk
sd 0:0:0:0: Attached scsi generic sg0 type 0
physmap platform flash device: 01000000 at f0000000
physmap-flash physmap-flash.0: map_probe failed
Found: SST 39LF020
cfi_flash_0: Found 1 x8 devices at 0x0 in 8-bit bank
number of JEDEC chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
cmdlinepart partition parsing not available
mice: PS/2 mouse device common for all mice
md: raid0 personality registered for level 0
md: raid1 personality registered for level 1
raid6: int32x1     20 MB/s
raid6: int32x2     28 MB/s
raid6: int32x4     35 MB/s
raid6: int32x8     31 MB/s
raid6: using algorithm int32x4 (35 MB/s)
md: raid6 personality registered for level 6
md: raid5 personality registered for level 5
md: raid4 personality registered for level 4
raid5: measuring checksumming speed
   arm4regs  :   292.400 MB/sec
   8regs     :   242.400 MB/sec
   32regs    :   261.600 MB/sec
raid5: using function: arm4regs (292.400 MB/sec)
Kernel event proc (C) BUFFALO INC. V.1.00 installed.
MICON ctrl (C) BUFFALO INC. V.1.00 installed.
Buffalo CPU Inerupts Driver (C) BUFFALO INC. Ver.0.01 alpha1 installed.
Buffalo Gpio Control Driver (C) BUFFALO INC. Ver.0.02 installed.
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
md: Autodetecting RAID arrays.
md: autorun ...
md: ... autorun DONE.
RAMDISK: Compressed image found at block 0
VFS: Mounted root (ext2 filesystem).
---- in linuxrc ---
Version 1.00 2008/ 7/ 1
grep: /var/tmp/devlink: No such file or directory
Thu Nov  1 00:17:42 JST 2007
linuxrc:choose operation (timeout 4[s])
 1:RamRoot other:HddRoot  ? -HddRoot-

-- rebuild mdadm.conf for BOOT, ROOTFS --
md: md0 stopped.
md: bind<sda1>
raid1: raid set md0 active with 1 out of 2 mirrors
mdadm: /dev/md0 has been started with 1 drive (out of 2).
-- setup max error counts --
/sys/block/md0/md/maxerr_cnt is setted to -1
Starting :fsck_disks(boot) ...         [Success.]
Starting :mount(boot) ...              kjournald starting.  Commit interval 5 seconds
EXT3 FS on md0, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
[Success.]
Starting :umount(boot) ...             [Success.]
-- rebuild mdadm.conf for BOOT, ROOTFS --
md: md10 stopped.
md: bind<sda5>
raid1: raid set md10 active with 1 out of 2 mirrors
mdadm: /dev/md/10 has been started with 1 drive (out of 2).
md: md1 stopped.
md: bind<sda2>
raid1: raid set md1 active with 1 out of 2 mirrors
mdadm: /dev/md/1 has been started with 1 drive (out of 2).
-- setup max error counts --
/sys/block/md0/md/maxerr_cnt is setted to -1
/sys/block/md1/md/maxerr_cnt is setted to -1
/sys/block/md10/md/maxerr_cnt is setted to -1
kjournald starting.  Commit interval 5 seconds
EXT3 FS on md1, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
PRODUCTID=0x00000013 PRODUCTID=0x00000000
/dev/md1:/mnt:19%
-- CopyFromInitrdToHdd --
.........Finish

umount: cannot open /proc/mounts
kjournald starting.  Commit interval 5 seconds
EXT3 FS on md1, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
VFS: Mounted root (ext3 filesystem).
Trying to move old root to /initrd ... okay
Freeing init memory: 120K
--- rcStart (hddroot) ---
cleanup lock files...
Thu Nov  1 00:17:55 JST 2007
ldconfig: /usr/local/lib/libfuse.so.2 is not a symbolic link

ldconfig: /usr/local/webaxs/lib/libuuid.so.1 is not a symbolic link

** step1 **
Mounting /dev
Starting udevd
Waiting for uevents to be processed

grep: /var/tmp/devlink: No such file or directory
EXT3-fs: Unrecognized mount option "nobarrier" or missing value
mount: mounting /dev/root on / failed: Invalid argument
Adding 1000428k swap on /dev/md10.  Priority:-1 extents:1 across:1000428k
Waiting for uevents to be processed
configure files from Buffalo parameters.
kjournald starting.  Commit interval 5 seconds
EXT3 FS on md0, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
Restore previous configuration files
cp: cannot stat '/boot/conf_save.tgz': No such file or directory
tar: conf_save.tgz: Cannot open: No such file or directory
tar: Error is not recoverable: exiting now
tar: Child returned status 2
tar: Error exit delayed from previous errors
md5 check skipped
delete unnecessary samba lock files on ./etc/samba/lock... done
rm: cannot remove 'conf_save.tgz': No such file or directory
cp: cannot stat '/tmp/config/*': No such file or directory
Successfully unmounted /dev/ram0
Successfully unmounted /dev/ram0
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
ehci_marvell ehci_marvell.4523: Marvell Orion EHCI
ehci_marvell ehci_marvell.4523: new USB bus registered, assigned bus number 1
ehci_marvell ehci_marvell.4523: irq 17, io base 0xf1050100
ehci_marvell ehci_marvell.4523: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ehci_marvell ehci_marvell.167817: Marvell Orion EHCI
ehci_marvell ehci_marvell.167817: new USB bus registered, assigned bus number 2
ehci_marvell ehci_marvell.167817: irq 12, io base 0xf10a0100
ehci_marvell ehci_marvell.167817: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
USB Universal Host Controller Interface driver v3.0
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver usblp
drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver
/etc/rc.d/sysinit.d/S13networking.sh : Clear /etc/dhcpc/dhcpcd-eth0.pid eth0
/etc/rc.d/sysinit.d/S13networking.sh : Read dhcpc file eth0
/etc/rc.d/sysinit.d/S13networking.sh : configure : eth0
create network files.. (eth0)
IP=[dhcp], netmask=[], dgw=[], dns1=[], dns2=[]
/etc/rc.d/sysinit.d/S13networking.sh : Delete /etc/dhcpc/dhcpcd-eth0.pid
route: SIOCDELRT: No such process
Configuration network interface: eth0
/sbin/ifconfig eth0 mtu 1500 multicast
/etc/rc.d/sysinit.d/S13networking.sh: line 375: /proc/sys/net/ipv4/conf/eth1/arp_ignore: No such file or directory
requesting DHCP  tout=30[s]
networking.sh: dhcp requesting...
DontDownIfaceeth reg(9) val=0x0300
eth0: link down

alwaysFork
eth0: link up, full duplex, speed 1 Gbps
sendto:  count 6   sync 0
sendto:  count 6   sync 0
sendto:  count 6   sync 0
dhcpcd.exe: interface eth0 has been configured with new IP=192.168.2.53 GATEWAY=192.168.2.96
** eth0 : networking.sh dhcp fin.
configure files from Buffalo parameters.
ntpserver = ntp.jst.mfeed.ad.jp : specified as a fqdn type
/etc/rc.d/sysinit.d/S14update_ntp.sh: line 31: /usr/local/bin/time_set.sh: No such file or directory
Starting system logger:
Starting kernel logger:
Starting inetd:Starting errormon:Starting kernelmon: * Starting BuffaloXMLRPCServer ...    [ ok ]
/dev/md0
     Raid Level : raid1
/dev/md1
     Raid Level : raid1
/dev/md10
     Raid Level : raid1
KERNELMOn (lanact 0 half)
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
KERNELMOn (lanact 1000 full)
-- start data arrays --
-- setup max error counts --
/sys/block/md2/md/maxerr_cnt is setted to -1
/usr/local/lib/libmd.sh: line 574: /sys/block/md2/md/maxerr_cnt: No such file or directory
/sys/block/md3/md/maxerr_cnt is setted to -1
/usr/local/lib/libmd.sh: line 574: /sys/block/md3/md/maxerr_cnt: No such file or directory
/sys/block/md4/md/maxerr_cnt is setted to -1
/usr/local/lib/libmd.sh: line 574: /sys/block/md4/md/maxerr_cnt: No such file or directory
-- check /etc/melco/diskinfo and real RAID disks. --
mv: cannot rename '/tmp/diskinfo_clean': No such file or directory
array1 != . Rebuild /etc/melco/diskinfo
start_data_array.sh: *** diskinfo guess ***
cat: can't open '/sys/block/md2/md/level': No such file or directory
cat: can't open '/sys/block/md21/md/level': No such file or directory
cat: can't open '/sys/block/md22/md/level': No such file or directory
start_data_array.sh:  /tmp/diskinfo_guess check NG. sleep 2...
start_data_array.sh:  /tmp/diskinfo_guess check NG. sleep 2...
start_data_array.sh:  /tmp/diskinfo_guess is fail. restore skip.
-- Mount local disks --
This model doesn't support EDP!
XFS mounting filesystem sda6
grep: /etc/melco/shareinfo.hidden: No such file or directory
grep: /etc/melco/shareinfo.vfs: No such file or directory
find: /mnt/disk2: No such file or directory
find: /mnt/array1: No such file or directory
fs.xfs.rotorstep = 255
Starting mdadm monitor ...    [ ok ]
 * This model does't support EDP.
 * Starting hddspaced ...    [ ok ]
Starting logchkd: * Starting smartfanctld ...    This model doesn't support a fan.
** step2 **
** step3 **
=== diskmon.sh ===
=== ftpd.sh ===
ftp is OFF
=== atalk.sh ===
atalk is OFF
=== httpd.sh ===
start
Starting HTTPD services:

=== smb.sh ===
Can't load /etc/samba/smb.conf - run testparm to debug it
Can't load /etc/samba/smb.conf - run testparm to debug it
Can't load /etc/samba/smb.conf - run testparm to debug it
configure samba
load_info ItemValue = off
LoadConfFileStringEx:key=[ad_dns] not found in /etc/melco/info.
LoadConfFileOnOffEx:key=[info_visible] not found in /etc/melco/info.
LoadConfFileStringEx:key=[array2] not found in /etc/melco/diskinfo.
LoadConfFileStringEx:key=[usb_disk1] not found in /etc/melco/diskinfo.
LoadConfFileStringEx:key=[usb_disk2] not found in /etc/melco/diskinfo.
LoadConfFileStringEx:key=[msdfs_link1_unc1] not found in /etc/melco/msdfs.
LoadConfFileStringEx:key=[msdfs_link2_unc1] not found in /etc/melco/msdfs.
LoadConfFileStringEx:key=[msdfs_link3_unc1] not found in /etc/melco/msdfs.
LoadConfFileStringEx:key=[msdfs_link4_unc1] not found in /etc/melco/msdfs.
LoadConfFileStringEx:key=[msdfs_link5_unc1] not found in /etc/melco/msdfs.
LoadConfFileStringEx:key=[msdfs_link6_unc1] not found in /etc/melco/msdfs.
LoadConfFileStringEx:key=[msdfs_link7_unc1] not found in /etc/melco/msdfs.
LoadConfFileStringEx:key=[msdfs_link8_unc1] not found in /etc/melco/msdfs.
LoadConfFileStringEx:key=[msdfs_link9_name] not found in /etc/melco/msdfs.
file:/etc/samba/smb.conf
>IconvCodeCharset CodePage=0,charset=CP932
buf=array1=off

buf=disk1=normal

GetSpoolDirectory> returning devicename [/mnt/disk1]
file:/etc/pam_smb.conf
Setting up msdfs symbolic links... [Failed ]
Starting SMB services:
Starting NMB services:
=== clientUtil_servd.sh ===
Starting clientUtil_server:starting on eth0
=== bonjour.sh ===
Starting Bonjour services: done
=== lsprcvd.sh ===
Starting lsprcvd:=== daemonwatch.sh ===
Starting daemonwatch:daemonwatch Ver.1.01
watch list file : /etc/daemonwatch.list
=== cron.sh ===
Start services: crondgrep: /var/lib/logrotate.status: No such file or directory
=== checkconfig.sh ===
=== ups.sh ===
ups_link.ups.melco.etc is not "on"(off)
=== pwrmgr.sh ===
AutoPowerSW status is off. So no need to bootup pwrmgr.
Shutting down pwrmgr:
AutoPowerSW status is off. So no need to bootup pwrmgr.
** step4 **
=== lprng.sh ===
/mnt/disk1/spool/samba created
/mnt/disk1/spool/lp created
Start services: lpd
lprmd 1.00 started.(BUILD DATE May  8 2009 18:02:38)
=== ltbootd.sh ===
Starting services: rarpd tftpd rarpcfgd fwupdated.
=== pmcd.sh ===
 * Starting sxuptp ... This model does not support sxuptp.
 * Starting foolwatch ...    [ ok ]
 * Starting twonky.sh in background...
 * Starting update_notifications.sh in background...
bittorrent is off
configfile doesn't exists. terminated.
configfile doesn't exists. terminated.
 * Starting lighttpd ... This model does not support HTTPd.
--2013-11-24 00:18:54--  http://product.buffalo.jp/download/driver/hd/autoup/fw_info2.xml
Resolving product.buffalo.jp... 157.7.164.170
Connecting to product.buffalo.jp|157.7.164.170|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11064 (11K) [text/xml]
Saving to: `/tmp/fw_info2.xml'

100%[======================================>] 11,064      --.-K/s   in 0.01s

2013-11-24 00:18:54 (816 KB/s) - `/tmp/fw_info2.xml' saved [11064/11064]

--2013-11-24 00:18:54--  http://product.buffalo.jp/download/driver/hd/autoup/fw_info2.xml
Resolving product.buffalo.jp... 157.7.164.170
Connecting to product.buffalo.jp|157.7.164.170|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11064 (11K) [text/xml]
Server file no newer than local file `/tmp/fw_info2.xml' -- not retrieving.

 * Starting MySQL server ...
   User mysql does not exist.
   Creating user mysql... done!
This model does not support MySQL.
KERNELMOn (PSW_on)
Squeezebox Server is disabled.
1st time bootup?
key file(/etc/ssh_host_key) is not exist!!!
Create key file, please wait for a while
Generating public/private dsa key pair.
Your identification has been saved in /etc/ssh_host_key.
Your public key has been saved in /etc/ssh_host_key.pub.
The key fingerprint is:
55:c0:18:10:24:0d:e0:64:54:b2:e8:88:b2:d2:3e:c4 root@LS-SL9AF
file(/etc/ssh_host_key) is created failed!
1st time bootup?
key file(/etc/ssh_host_dsa_key) is not exist!!!
Create key file, please wait for a while
Generating public/private dsa key pair.
Your identification has been saved in /etc/ssh_host_dsa_key.
Your public key has been saved in /etc/ssh_host_dsa_key.pub.
The key fingerprint is:
2e:22:19:ee:20:2d:ad:29:dc:c1:bc:08:76:02:8c:d4 root@LS-SL9AF
file(/etc/ssh_host_dsa_key) is created failed!
1st time bootup?
key file(/etc/ssh_host_rsa_key) is not exist!!!
Create key file, please wait for a while
Generating public/private rsa key pair.
Your identification has been saved in /etc/ssh_host_rsa_key.
Your public key has been saved in /etc/ssh_host_rsa_key.pub.
The key fingerprint is:
84:c9:1a:4e:87:4e:aa:c3:81:49:9b:42:68:a2:fc:8c root@LS-SL9AF
file(/etc/ssh_host_rsa_key) is created failed!
load_info ItemValue = off
LoadConfFileStringEx:key=[ad_dns] not found in /etc/melco/info.
LoadConfFileOnOffEx:key=[info_visible] not found in /etc/melco/info.
LoadConfFileStringEx:key=[array2] not found in /etc/melco/diskinfo.
LoadConfFileStringEx:key=[usb_disk1] not found in /etc/melco/diskinfo.
LoadConfFileStringEx:key=[usb_disk2] not found in /etc/melco/diskinfo.
file:/etc/sftponly_config
userinfo finished
groupname admin
groupname guest
groupname hdusers
file:/etc/pam.d/sshd
Disabling protocol version 1. Could not load host key
WebAxs service is off. terminated.
Usage: /usr/local/wbfs/bin/wbfs_stop [Options] <MOUNT POINT>
Options:
   -k: Kill processes which hold mountpoint.
   -h: display this Help
*** WebAxs2 file not found. ***
httpd: Could not open configuration file /usr/local/webaxs/apache/conf/httpd.conf: No such file or directory
thumbnaild service is not running.
WebAxs3 is OFF
=== bootcomplete.sh ===
** step final(after bootcomplete) **

BUFFALO INC. LinkStation series
LS-SL9AF login: bootarg "func" is disabled.

root でログイン?

ひょっとしてパスワードがついてなかったら root でログイン出来ないか?
BUFFALO INC. LinkStation series
LS-SL9AF login: bootarg "func" is disabled.

BUFFALO INC. LinkStation series
LS-SL9AF login: root
Password:

Login incorrect
LS-SL9AF login:

電源 OFF

HDD を LS410D に USB 接続

root@ls410d:/# !tail
tail -f /var/log/messages
	:
	:
Nov 24 00:25:03 ls410d kernel: usb 1-1: new high-speed USB device number 14 using ehci_marvell
Nov 24 00:25:03 ls410d kernel: scsi14 : usb-storage 1-1:1.0
Nov 24 00:25:04 ls410d kernel: scsi 14:0:0:0: Direct-Access     ViPowER  VP-89118(SD1)    2.10 PQ: 0 ANSI: 4
Nov 24 00:25:04 ls410d kernel: sd 14:0:0:0: Attached scsi generic sg1 type 0
Nov 24 00:25:04 ls410d kernel: sd 14:0:0:0: [sdh] 312581808 512-byte logical blocks: (160 GB/149 GiB)
Nov 24 00:25:04 ls410d kernel: sd 14:0:0:0: [sdh] Write Protect is off
Nov 24 00:25:04 ls410d kernel: sdh: sdh1 sdh2 sdh3 sdh4 sdh5 sdh6
Nov 24 00:25:04 ls410d kernel: sd 14:0:0:0: [sdh] Attached SCSI disk

LS410D は sd? がどんどん進んでいくようだ。

md のスキャン

root@ls410d:/# !mdadm
mdadm --assemble -scan
mdadm: /dev/md/LS-SL-EM9AF:10_0 has been started with 1 drive (out of 2).
mdadm: /dev/md/LS-SL-EM9AF:1_0 has been started with 1 drive (out of 2).
mdadm: /dev/md/0_5 has been started with 1 drive (out of 2).
root@ls410d:/# ls -l /dev/md*
brw-rw---T 1 root disk 9, 102 11月 24 00:25 /dev/md102
brw-rw---T 1 root disk 9, 103 11月 24 00:25 /dev/md103
brw-rw---T 1 root disk 9, 104 11月 24 00:25 /dev/md104
brw-rw---T 1 root disk 9, 105 11月 24 00:11 /dev/md105
brw-rw---T 1 root disk 9, 106 11月 24 00:11 /dev/md106
brw-rw---T 1 root disk 9, 107 11月 24 00:11 /dev/md107
brw-rw---T 1 root disk 9, 108 11月 24 00:11 /dev/md108
brw-rw---T 1 root disk 9, 109 11月 24 00:08 /dev/md109
brw-rw---T 1 root disk 9, 110 11月 24 00:08 /dev/md110
brw-rw---T 1 root disk 9, 111 11月 24 00:08 /dev/md111
brw-rw---T 1 root disk 9, 112 11月 24 00:08 /dev/md112
brw-rw---T 1 root disk 9, 113 11月 23 23:37 /dev/md113
brw-rw---T 1 root disk 9, 114 11月 23 23:37 /dev/md114
brw-rw---T 1 root disk 9, 115 11月 23 23:37 /dev/md115
brw-rw---T 1 root disk 9, 116 11月 23 16:32 /dev/md116
brw-rw---T 1 root disk 9, 117 11月 23 16:32 /dev/md117
brw-rw---T 1 root disk 9, 118 11月 23 16:31 /dev/md118
brw-rw---T 1 root disk 9, 119 11月 23 16:31 /dev/md119
brw-rw---T 1 root disk 9, 120 11月 23 15:47 /dev/md120
brw-rw---T 1 root disk 9, 121 11月 23 15:47 /dev/md121
brw-rw---T 1 root disk 9, 122 11月 23 15:46 /dev/md122
brw-rw---T 1 root disk 9, 123 11月 23 15:46 /dev/md123
brw-rw---T 1 root disk 9, 124 11月 23 15:23 /dev/md124
brw-rw---T 1 root disk 9, 125 11月 23 15:23 /dev/md125
brw-rw---T 1 root disk 9, 126 11月 23 15:23 /dev/md126
brw-rw---T 1 root disk 9, 127 11月 23 15:23 /dev/md127

/dev/md:
合計 0
lrwxrwxrwx 1 root root 8 11月 24 00:25 0_5 -> ../md102
lrwxrwxrwx 1 root root 8 11月 24 00:25 LS-SL-EM9AF:10_0 -> ../md104
lrwxrwxrwx 1 root root 8 11月 24 00:25 LS-SL-EM9AF:1_0 -> ../md103
root@ls410d:/#

マウント

root@ls410d:/# mount /dev/md103 /tmp/root
root@ls410d:/# 

root のパスワードを潰す

root@ls410d:/# cd /tmp/root/etc/
root@ls410d:/tmp/root/etc# grep root shadow
root:$1$$Yab.IC0XLDvJlIi3/A8E40:11009:0:99999:7:::
root@ls410d:/tmp/root/etc#
やっぱりパスワードが付いている
潰す
root@ls410d:/tmp/root/etc# vi shadow
	:
	:
root@ls410d:/tmp/root/etc# !grep
grep root shadow
root::11009:0:99999:7:::
root@ls410d:/tmp/root/etc#

sshd_config の修正

root@ls410d:/tmp/root/etc# mv sshd_config{,.orig}
root@ls410d:/tmp/root/etc# cp sshd_config{.orig,}
root@ls410d:/tmp/root/etc# patch < /mnt/share/sshd_config.diff
patching file sshd_config
root@ls410d:/tmp/root/etc# !cp:s/cp/diff -u/
diff -u sshd_config{.orig,}
--- sshd_config.orig    2011-01-06 11:07:39.000000000 +0900
+++ sshd_config 2013-11-24 00:29:32.000000000 +0900
@@ -20,7 +20,7 @@
 # HostKeys for protocol version 2
 #HostKey /etc/ssh_host_rsa_key
 #HostKey /etc/ssh_host_dsa_key
-HostKey /etc/apache/server.key
+#HostKey /etc/apache/server.key

 # Lifetime and size of ephemeral version 1 server key
 #KeyRegenerationInterval 1h
@@ -34,8 +34,8 @@
 # Authentication:

 #LoginGraceTime 2m
-#PermitRootLogin yes
-PermitRootLogin no
+PermitRootLogin yes
+#PermitRootLogin no
 #StrictModes yes

 #RSAAuthentication yes
@@ -55,6 +55,7 @@
 # To disable tunneled clear text passwords, change to no here!
 #PasswordAuthentication yes
 #PermitEmptyPasswords no
+PermitEmptyPasswords yes

 # Change to no to disable s/key passwords
 #ChallengeResponseAuthentication yes
@@ -71,7 +72,8 @@
 # Set this to 'yes' to enable PAM authentication (via challenge-response)
 # and session processing. Depending on your PAM configuration, this may
 # bypass the setting of 'PasswordAuthentication'
-UsePAM yes
+#UsePAM yes
+UsePAM no

 #AllowTcpForwarding yes
 #GatewayPorts no
root@ls410d:/tmp/root/etc#

アンマウント

root@ls410d:/tmp/root/etc# cd /
root@ls410d:/# umount /tmp/root
root@ls410d:/#

HDD を LS-SL に接続

電源 ON

シリアルコンソールから root でログイン

BUFFALO INC. LinkStation series
LS-SL9AF login: root
Last login: Sun Nov 24 00:35:56 JST 2013 on ttyS0
root@LS-SL9AF:~#
できた。

ssh でログイン

root@ls410d:/# ssh -l root lssl
ssh: Could not resolve hostname lssl: Name or service not known
root@ls410d:/# ssh -l root 192.168.2.53
The authenticity of host '192.168.2.53 (192.168.2.53)' can't be established.
RSA key fingerprint is 84:c9:1a:4e:87:4e:aa:c3:81:49:9b:42:68:a2:fc:8c.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.2.53' (RSA) to the list of known hosts.
Last login: Sun Nov 24 00:35:56 2013
root@LS-SL9AF:~#
あれ?できるやん。

LS-WSXL はなんでできなかった??



LS-SL
楽天市場




LS-SL にファームウェア Ver.1.68 の HDD
ハックの記録
LinkStation/玄箱 をハックしよう

もう一度ファームウェア Ver.1.68 のインストール

ツイート Tweet to @yasunari_y @yasunari_yをフォロー

Copyright (C) 2003-2014 Yasunari Yamashita. All Rights Reserved.
yasunari @ yamasita.jp 山下康成@京都府向日市