OpenWrt support for Xiaomi AX9000

For Developers
712

thank you

still fails but does create a cal-pci-0000:01:00.0.bin file

root@OpenWrt:/lib/firmware/ath11k/QCN9074/hw1.0# rmmod ath11k_pci;insmod ath11k_
pci
[   82.229683] ath11k_pci 0000:01:00.0: BAR 0: assigned [mem 0x20400000-0x205fffff 64bit]
[   82.230337] ath11k_pci 0000:01:00.0: MSI vectors: 16
[   82.236554] ath11k_pci 0000:01:00.0: qcn9074 hw1.0
[   82.398635] mhi mhi0: Requested to power ON
[   82.398828] mhi mhi0: Power on setup success
[   82.471670] mhi mhi0: Wait for device to enter SBL or Mission mode
root@OpenWrt:/lib/firmware/ath11k/QCN9074/hw1.0# [   82.567189] ath11k_pci 0000:01:00.0: chip_id 0x0 chip_family 0x0 board_id 0xff soc_id 0xffffffff
[   82.567247] ath11k_pci 0000:01:00.0: fw_version 0x250a04b8 fw_build_timestamp 2021-12-20 06:41 fw_build_id
[   93.274808] ath11k_pci 0000:01:00.0: failed to wait wlan mode request (mode 0): -110
[   93.274864] ath11k_pci 0000:01:00.0: qmi failed to send wlan fw mode: -110
[   93.281635] ath11k_pci 0000:01:00.0: failed to attach wmi: -110
[   93.288353] ath11k_pci 0000:01:00.0: failed to start core: -110

root@OpenWrt:/lib/firmware/ath11k/QCN9074/hw1.0# ls -lt
-rw-r--r--    1 root     root        131072 Mar 31 13:04 cal-pci-0000:01:00.0.bin
-rw-r--r--    1 root     root        786836 Mar 31 13:03 board.bin
-rw-r--r--    1 root     root         37682 Mar 31 13:02 Notice.txt
-rw-r--r--    1 root     root      11905872 Mar 31 13:02 amss.bin
-rw-r--r--    1 root     root        337649 Mar 31 13:02 m3.bin
713

I honestly dont know what you are trying to do

714

trying to have the ath11k pci working with the qcn9074

i give up ... back to the ax36000

I still feel that with the three radios/wlans working one has just to be able boot openwrt without uart ... why is the AX9000 different from the AX3600 ?

715

But all that you tried has been tried before, until QCA sorts it out I doubt anything will change.
I dont get your question, AX9000 has the QCN9024 card that AX3600 doesnt

716

it is fine ... thought to have a go with the lastest ... a little bit frustrated ... ax3600 no usb + 512mb ram etc ...at least i feel we should be able to boot the ax9000 it without uart and level it up with the ax3600, from a speed perspective nothing more than the wrt3200acm i have apart from the sae support but without usb !

with providers getting over the 1GB line on fiber the ax9000 witht the wan speed of 2.5GB feels a good investment of time hence my go this weekend ... good fun & learning though :slight_smile: about the qualcomm quirks

717

Well, it should be flashable like AX3600 without UART

718

so tried the following

  1. bootm with the fit image
  2. ubiformat both mtd21 & mtd22
  3. reboot

in the u-boot (it gets set to 1 everytime is booted) - I am using the international version

set env flag_sec_boot_enabled=0
saveenv

to overvcome

System is in factory mode.
Erasing NAND...
Erasing at 0xd60000 -- 100% complete.
Writing to NAND... OK
Kernel image authentication failed
System is in factory mode.
System is in factory mode. U-Boot BOOT ERROR!

bootm
get the following

IPQ807x# bootm
## Loading kernel from FIT Image at 42000000 ...
   Using 'config@hk14' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-5.15.31
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x420000e8
     Data Size:    4045786 Bytes = 3.9 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x41000000
     Entry Point:  0x41000000
     Hash algo:    crc32
     Hash value:   40a818a9
     Hash algo:    sha1
     Hash value:   a1768ec901b4736fdff4a7f2682a35ef28779476
   Verifying Hash Integrity ... crc32 error!
Bad hash value for 'hash@1' hash node in 'kernel-1' image node
Bad Data Hash
ERROR: can't get kernel image!
719

Well, that is due to secure boot in the international version

720

has anyone installed the chinese version on top of an international version? I presume if one dumps each mtd partitition from the chinese version i can then flash them on top of the international version ....

721

wonder if the process would be the same as "Netgear Secureboot" @Ansuel ?

722

Without the U-boot source its impossible to know what is it checking.

723

Could the Chinese U-boot be flashed in the international version or the U-boot must also be signed and that would brick the device?
What about running the Chinese U-boot from ram, would that allow to run openwrt from flash mem?

724

It must be signed as the SBL will check its signature

1 Like
725

there is nothing on the ax9000 that is workable ... those that bought the chinese version maybe be ok ... so suggestion if you are buying it source from china! ... i am now using it the international stock just after taking out all of the bloat stuff out & it is working fine

image

726

Well, its just shit luck that they decided to mess with the international version

727

yep ... so much for opensource that qualcomm / xiaomi announces .. i bet one will find how to hack the sbl as they did for the phones.... really opensource is not a concept for chinese companies until the point they copy everyting and make it their own ... the world is doomed for extinction... i am off any chinese stuff

728

They are just using the feature vendor provided, however they are d*cks for not publishing the required GPL sources.

Good luck using only stuff made outside of China

2 Likes
729

yeah you are right! unless you want to buy an international ax9000...i got the ax6000 out already

730

the point they used on a purpose to lock it ... look at Ukraine ! just embargo all the shit coming of Russia and China

731

What are you going to buy thats not made in China?
Especially when it comes to consumer goods

They are being d*cks, and they are not alone, Cisco/Meraki and now more and more vendors are using the secure boot to prevent anything outside of their control from being used.

1 Like