Apple iPhone 7 mit Ubuntu Linux Betriebssystem

Der im iPhone 7 verbaute A10-Fusion-Chip scheint mit Linux Ubuntu kompatibel zu sein und es hat tatsächlich jemand versucht das zum laufen zu bringen.

Ansehen kann man sich die Sache hier:

Eine Anleitung ist auch Online, wer hat mal Lust

Zitat von https://www.reddit.com/r/linux/comments/kux9xx/success_iphone_7_with_dead_nand_netbooting/

Prerequisites

1. writable directory available over nfs, including dhcp server on local network
2. checkra1n 0.10.2-beta (get at https://checkra.in/releases/0.10.2-beta#all-downloads)
3. Kernel fork for h9x/A10 (https://github.com/corellium/linux-sandcastle)
4. projectsandcastle utilities (https://github.com/corellium/projectsandcastle)
5. EITHER arm64 cross compiler or an arm64 native device. I used a rpi4 on 20.04 <-- way helpful to be able to chroot and setup, otherwise you'd have to use qemu-user
6. Bridge setup script/udev rules by me https://github.com/newperson1746/iphone7-linux-nfsroot

1. Rootfs setup

Make sure you have debootstrap. I'm assuming an arm64 native ubuntu device already running to which you have mounted the nfs directory at /mnt/nfsrootarm64

• sudo debootstrap focal /mnt/nfsrootarm64
• Now you can chroot into it and run some important pre-setup:
  • I'd install nano for convenience, I'll assume you have it from now on
  • apt install nano network-manager openssh-server
  • dpkg-reconfigure locales
    • This'll fix the famous debootstrap LC_ALL error. I chose en_US.utf-8 and also chose it as default.
  • dpkg-reconfigure tzdata
    • Here you can fix the clock
  • adduser <someuser>
    • This'll be your non-root admin user for regular use
  • adduser <someuser> sudo
  • nano /etc/apt/sources.list
    • Add focal-updates, focal-backports, and focal-security!
    • You can also add universe if you want to at this point

2. Kernel setup

clone the sandcastle kernel, and make hx_h9p_defconfig , now we need to make quite a few changes to the config. I did them manually by editing .config:

• CONFIG_USB_ETH=y
• CONFIG_NFS_FS=y
• CONFIG_IP_PNP=y
• CONFIG_IP_PNP_DHCP=y
• CONFIG_BLK_DEV_INITRD=n // (none needed, otherwise it'll complain about wanting one)
• CONFIG_CMDLINE="earlycon=hx_uart,0x20a0c0000 console=tty0 root=/dev/nfs rw nfsroot=<your_nfs_server_ip>:/nfsrootarm64,vers=4,tcp init=/usr/bin/systemd rootwait ip=dhcp g_ether.host_addr=12:a5:cf:42:92:fd g_ether.dev_addr=5e:bc:ca:27:92:b1 g_ether.idVendor=1317 g_ether.idProduct=42146 mitigations=off"
  • Replace the MAC addresses if you'd like, but I'll assume these are the ones moving forward
  • Fill in your nfs server ip
  • All of the flags are needed, I spent like 30 power cycles figuring out why nfs wouldn't mount unless i specified tcp.
• CONFIG_ROOT_NFS=y
• CONFIG_CMDLINE_FORCE=y
• CONFIG_DEBUG_INFO=n // to speed up compile drastically

Now you can export LOCALVERSION if you'd like, and CROSS_COMPILE and ARCH=arm64if needed, but now it's just the good old:

make -j 4 Image

• Now run ./dtbpack.sh to generate the device-trees that PongoOS will use later.
• lzma -z --stdout arch/arm64/boot/Image > ../Image.lzma to create the linux image that PongoOS can boot

3. Project Sandcastle utilities: clone the repo and cd to loader.

• make will fail so simply run manually cc -O2 -Wall load-linux.c -lusb-1.0 -o load-linux
  • (-lusb was before load-linux.c, which broke sometime after sandcastle was first released)

4. Networking setup: clone my repo.

• edit ethbridge.sh with your ethernet ifname (it can trivially be modified to accept it as an argument from udev or something like that, but I'm lazy)
  • Place it somewhere static so you can call it from udev later
• edit 70-iphone7.rules with the MAC of your g_ether if you changed it, and put the correct path to ethbridge.sh
  • Move 70-iphone7.rules to /etc/udev/rules.d
  • sudo udevadm control --reload

5. checkra1n: you'll need 0.10.2-beta due to a command in PongoOS that was removed in later versions. It was added back after its open-sourcing, but the linux loader fails, so let's stick to this one.

-----

PUTTING IT ALL TOGETHER

• Have the iPhone in recovery mode
• Launch checkra1n normally (no args)
• Hit start, and follow the DFU instructions. Once it tells you you've successfully entered DFU mode (sometimes it doesn't, just verify by dmesg -w in another terminal window reporting Apple Mobile Device (DFU mode) ), immediately CTRL-C before it starts attempting to boot into iOS.
• Now, run checkra1n -cpE
  • This will launch PongoOS' command line only
• Now run load-linux <path to Image.lzma> <path to dtbpack>

Sit back and watch the iPhone show the two Tuxs on the top, autoconfigure DHCP, mount rootfs, and start systemd and go to a login prompt!

You should be able to ssh into it by checking what ip lease it was given by your dhcp server. Or, add a manual assignment by MAC address so you know exactly what it will be, as the bridge to ethernet exposes the usb-gadget's own MAC to the LAN, and it'll be visible independently from the tethered computer.

-----

To be honest, I felt a lot of pride in using Linux for one of its classic purposes: repurposing otherwise-unusable devices. This iPhone would never be able to boot iOS again, as its nvme nand is completely dead. Yet, it boots Linux and mounts a filesystem over USB ethernet no problem!

Go Linux!

EDIT 3: Apparently they struggled to get Android to run because A10 mandates 16k page sizes, yet on mainline distros, there's no problem...

Credits

https://blog.project-insanity.…-now-running-on-iphone-7/

45611116
CommentsShare
Save
Hide
Report

Alles anzeigen