01:46 <steev> narmstrong: do you happen to have a link to the forums post? maybe i'm searching for the wrong thing but hikey mali gnome wayland isn't bringing anything up

03:37 <steev> hm, and whatever i did yesterday... isn't working today

03:41 <steev> http://paste.debian.net/1035197/

07:12 <steev> narmstrong: one other minor thing, not sure... the odroid-c2 can't seem handle 1366x768 correct, i'm not sure if other amlogic devices are the same, and in order to use a screen with that display on the vendor kernel, you have to set it to 1360x768. would that be considered too hacky to add in for the odroid?

07:14 <narmstrong> steev: all my mutter changes are here https://github.com/BayLibre/libretech-image-builder/tree/libretech-cc-bionic-4.14-mali-wayland/mutter

07:14 <narmstrong> steev: can you elaborate on the 1366x768 mode ? I also have some display showing it distorted

07:17 <steev> i'm not strictly sure on the background of it - but the upstream kernel using boot.ini uses `setenv m "1360x768p60hz"` instead of 1366x768, i'm not sure what/where the 6 pixels have gone

07:17 <steev> sorry, vendor kernel*

07:20 <steev> https://github.com/hardkernel/linux/blob/675df07786efe611d932cf331e252fad31f74939/drivers/amlogic/hdmi/hdmi_tx_20/hdmi_tx_edid.c#L1590

07:24 <steev> i also plugged in my vu7 which worked great, and this random lcd controller and it worked as well, which surprised me because it doesn't actually have an edid, it just takes whatever you throw at it and (typically) downsizes it to the lcd screen

07:30 <steev> oh shit, hdmi audio is working, i hadn't tested it :)

08:08 <ldevulder> narmstrong, hi, don't know if you had time to test installation of opensuse on the libretech-cc, but I try and my iso is not booting... I retried on the khadas vim and same issue... weird as I was able to install it multiple time... and I tried with new u-boot and the old one used to install and it's the same...

08:08 <ldevulder> i'm trying with a more recent iso

08:43 <ldevulder> ok, I tried to install leap15 instead of tumbleweed version of opensuse... and only tumbleweed work, so conclusion it's not good to try to test an os/sbc at a late hour :)

10:17 <ldevulder> narmstrong, lvrp16_, so I tested opensuse tumbleweed on libretech-cc successfully! Installation from iso on USB key on a ssd connected with usb (no emmc yet, but should be also ok, I tested this part on the vim board)

15:51 <narmstrong> ldevulder: honestly I forgot... I’m really interested but I lacked time... thanks for testing it on libretech cc !!!

15:52 <narmstrong> It’s pretty cool to be able to install vanilla distros like that !

15:54 <ldevulder> narmstrong, yes :) it can be useful when you want something more configured/tuned than an image, it's kind of server/desktop installation :)

15:55 <ldevulder> wiki page for libretech-cc on opensuse.org is up-to-date also (it's just a link to the vim page for the installation procedure, it's to not duplicate things)

19:20 <The_Coolest> Hey guys, I have a question. The Xaiomi Mi Box 'AB' model has secure boot enabled. We've seen that Armbian someone managed to boot on the device, but our build (CoreELEC) obviously doesn't boot because it fails the secure boot check. It seems that Armbian somehow goes around the secure boot procedure. Does anyone have an idea how they achieve this?

19:20 <The_Coolest> *Xiaomi?

19:29 <The_Coolest> someone = somehow*

19:30 <The_Coolest> Here's the uboot log from armbian https://paste.ubuntu.com/p/z8g8PVB66H/

19:45 <ndufresne> The_Coolest, don't you just have to use the same uboot binary ?

19:46 <The_Coolest> The same as what?

19:47 <The_Coolest> From what I understand, if the secure boot efuse is set, there's no way around it (normally)

19:47 <ndufresne> as armbian

19:47 <The_Coolest> They don't replace the uboot.

19:47 <The_Coolest> Simply stick in the USB drive, and it boots up

19:48 <ndufresne> iirc it's a simple chain, so the secure boot checks that the u-boot binary is signed/trusted, and boots it

19:48 <The_Coolest> It seems that armbian employs some sort of trickery to do it, or the binary is somehow signed to match the security check

19:48 <ndufresne> And then u-boot needs to carry on security

19:49 <The_Coolest> the u-boot checks the kernel image.

19:50 <ndufresne> I'll let someone that knows reply then

19:50 <The_Coolest> Look at line #184 in the log.

19:51 <The_Coolest> ok, thanks for trying. honestly I don't really know how all of this works. Just thought I'd ask, maybe someone knows something that can help.

19:52 <ndufresne> WARNING! efuse bits is disabled, doesn't that simply mean that you won't be able to flash the lower boot eprom from armbian ?

19:53 <The_Coolest> But they are disabled after the kernel has started already

19:54 <The_Coolest> We fail after the "reading" part on line 185

19:54 <The_Coolest> aml log returns a check error

20:00 <ndufresne> The_Coolest, might interest you, https://www.cnx-software.com/2016/10/06/hacking-arm-trustzone-secure-boot-on-amlogic-s905-soc/

20:02 <ndufresne> according to this article, most deployment only do SHA265 integrity check, no authentication

20:02 <ndufresne> If it's the case for you, all you need is to add the signature to your kernel

20:03 <The_Coolest> hmm. we tried the AMlogic sign tool, that didn't work.

20:04 <ndufresne> you could also drop an email to the armbian packagers

20:04 <ndufresne> maybe they just paid to have a key, and really signed it

20:05 <The_Coolest> That's an interesting find in that article. I don't think we tried it.

20:05 <The_Coolest> So we just need to use the aml-bootloader-tool script to update the hash on our kernel?

20:13 <ndufresne> The_Coolest, well, in the article, they update BL2, with a non-secure BL2 this way

20:14 <ndufresne> but I'm not sure how this is done

20:14 <The_Coolest> Well maybe the aml sign tool wasn't what we needed, because we compared the armbian image, and it doesn't seem to be signed with it

20:14 <The_Coolest> We'll give it a shot. Thanks for the find.

20:14 <ndufresne> finger cross, but keep in mind that you can likely contact privatly the armbian people

20:15 <The_Coolest> It was a build from one specific guy, and he wasn't very helpful, although I wasn't the one talking to him

20:15 <ndufresne> hmm, so it's not an official armbian ?

20:17 <The_Coolest> I don't think so