OpenWrt support for Vodafone Gigacube (B157)

Hello Guys,
I have a Vodafone GigaCube (B157), FCCID-URL = https://fccid.io/2ACCJB157 ,
but it's kind of useless because the vodafone mobile connection is really bad and its accept no other sim cards. However, I found out it's a IPQ8072A SoC, and a very exciting topic for making it work with promising progress. (Link: https://forum.openwrt.org/t/dynalink-dl-wrx36-askey-rt5010w-ipq8072a-openwrt-support)

The board has very spare labeling (Just Antenna marks), I can't figure out where is the Serial-Port ? (images below)

On the internal images of fccid.io, I can see a micro-usb port, but on mine, it's not soldered on it. Could be this the serial port? Pictures of mine are attached. FCCID internal Images link : https://fccid.io/2ACCJB157/Internal-Photos/TempConfidential-Internal-Photos-PART2-5395671

There are solderpoints next to the power connector, it seems to be a usb-a port ?

Im loving to use openwrt, I have very fantastic Wifi6 hardware but the firmware is limiting everything and makes it useless, I can't even upload a firmware-image file, just pull OTA-Updates if available by vodafone.

The webinterface is built with vue, there are no ports open except 53 (DNS) and 80/443 for webinterface.

Regards

Since I'm a new user here, I have to link the other images externally:

Images: https://imgbox.com/g/IOqNUDfKhL
, more images from the backside (@Borromini ) : https://imgbox.com/g/3k8fdCOPYB

I'd think any soldering pads for serial would rather be on the other side of your PCB, going by the FCC pictures. I couldn't tell you which ones though.

1 Like

I added few more images from the other side

This board has many, sadly unmarked, test points, hot candidates might be the three horizontal ones left to QJ2012A and the 6 vertical ones above that chip, but many of the other could also be the one (e.g. the trapezoid made out of 6 test points below the three mentioned above). You will have to measure, ideally with a scope and/ or logic analyzer.

The pins/ test points for the serial console are typically not too far away from the SOC, often quite close to the flash chip - and their 4 pins (Vcc, GND, RX, TX in random order) are often easy to spot, but not always (and Vcc might be omitted, so 3 pins can be enough - or even 2, if you borrow GND from somewhere else on the board).

3 Likes

Looks like the three horizontal test points left of QJ2012A, as marked on the image, are the serial port for the modem (not the main CPU). Careful as it's 1.8 V. My (homebrew) serial converter works fine with those signal levels but I'd need to build a divider for TX.

Bootlog isn't very verbose:

UEFI Start     [  833]
 - 0x08F701000 [  847] Sec.efi
PROD Mode   : On
ASLR        : On
Timer Delta : +13 mS
RAM Entry 0 : Base 0x0000000080000000  Size 0x0000000010000000
RAM Entry 1 : Base 0x0000000090000000  Size 0x0000000010000000
 Could not find the DBI Dump region .
UEFI Ver    : 5.0.210901.BOOT.UEFI.4.0-00195-SDX55LEZB-2
Build Info  : 32b Sep  1 2021 08:34:05
Boot Device : NAND
DEP Enabled
PM3: 33, PM4: 42, 
-----------------------------
Platform Init  [ 1273] BDS
UEFI Ver   : 5.0.210901.BOOT.UEFI.4.0-00195-SDX55LEZB-2
Platform   : MTP
Subtype    : 11
Chip Name  : SDX55
Chip Ver   : 2.0
Core 0 Freq: 1497 MHz
-----------------------------
UEFI Total : 441 ms
POST Time      [ 1274] OS Loader
Loader Build Info: Sep  1 2021 12:14:54
VB: RWDeviceState: Succeed using devinfo!
Total DDR Size: 0x0000000020000000 
KeyPress:0, BootReason:0
Fastboot=0, Recovery:0
GetVmData: No Vm data present! Status = (0x80000003)
VM Hyp calls not present
Booting Into Mission Mode
Loading Image Start : 1378 ms
Loading Image Done : 1384 ms
Total Image Read size : 4096 Bytes
Loading Image Start : 1384 ms
Loading Image Done : 2068 ms
Total Image Read size : 7536640 Bytes
Loading Image Start : 2068 ms
Loading Image Done : 2122 ms
Total Image Read size : 524288 Bytes
VB: LoadImageAndAuthForLE complete!
GetVmData: No Vm data present! Status = (0x80000003)
Memory Base Address: 0x80000000
Dtbo hdr magic mismatch FFFFFFFF, with D7B7AB1E
Best match DTB tags 357/0B010008/0x0000000B/20000/0/0/0/20021/(offset)0x84B657B8/(size)0x00000000
Using pmic info 0x0/0x0/0x0/0x20021 for device 0x0/0x0/0x0/0x20021
Memory Base Address: 0x80000000
Failed to get Boot Device Base address, Buffer Too Small
Failed to get Boot Device: Buffer Too Small
Unable to get Panel Config, Not Found
USB Composition Magic Verification Failed
USB Composition Magic Verification Failed
USB Composition Magic Verification Failed
Cmdline: noinitrd ro rootwait  androidboot.hardware=qcom msm_rtb.filter=0x237  lpm_levels.sleep_disabled=1 firmware_class.path=/lib/firmware/updates service_locator.enable=1 net.ifnames=0 atlantic_fwd.rx_ring_size=1024 rootfstype=ubifs rootflags=bulk_read
RAM Partitions
Add Base: 0x0000000080000000 Available Length: 0x0000000010000000 
Add Base: 0x0000000090000000 Available Length: 0x0000000010000000 
Failed to get MinPasrSize, Status = Unsupported
Unable to get splash buffer info, Not Found
Update Device Tree total time: 24 ms 
No valid dtbo image found

Shutting Down UEFI Boot Services: 2214 ms
BDS: LogFs sync skipped, No Media
App Log Flush : 72 ms
Exit BS        [2289] UEFI End

mdm 0742 sdxprairie ttyMSM0

sdxprairie login: 

Checking out the 6 vertical ones will require disassembly of the heatsink. Also, the 6 test points in the trapezoid don't appear to be a serial port.

Just to be clear, openwrt usually won't remove the sim lock.