Leapster Explorer: GPIO subsystem

This is a short article on using the lf1000-gpio subsystem. This is used internally by /etc/init.d/rcS and other system scripts to start the explorer in different states via emerald-boot. at least some the 'registers' in the gpio subsytem are loaded by reading a 'scratchpad' area of nand, then converting that raw scratchpad data to a human readable form via the values you will see below.

I'd like to thank Nirvous, NullMoogleCable, PhillKll, Claude, JKent, Jburks, GrizzlyAdams and anyone I may have forgotten for their help :)

All of the kernel based magic happens via /sys/devices/platform/lf1000-gpio/ using cat you can find out the values of these registers, this is pretty much what emerald-boot does to tell itself which buttons config it should be using and how it should try and boot. /etc/rcS also uses this technique, again to setup the system for the different types of boot, mainly starting only the appropriate modules/services that are needed.

I believe that we can use some of the registers to our advantage and give ourselves extra boot modes where we only start a minimal set, which should see us getting some kind of performance boost from the various subsystems, this will also leave our recovery process alone.

here is a list of the registers:

/sys/devices/platform/lf1000-gpio/board_id /sys/devices/platform/lf1000-gpio/boot_image /sys/devices/platform/lf1000-gpio/boot_source /sys/devices/platform/lf1000-gpio/bus/ /sys/devices/platform/lf1000-gpio/cart_id /sys/devices/platform/lf1000-gpio/cpu_freq_in_hz /sys/devices/platform/lf1000-gpio/driver/ /sys/devices/platform/lf1000-gpio/memcfg /sys/devices/platform/lf1000-gpio/memclkdelay /sys/devices/platform/lf1000-gpio/memcontrol /sys/devices/platform/lf1000-gpio/memdqsindelay /sys/devices/platform/lf1000-gpio/memdqsoutdelay /sys/devices/platform/lf1000-gpio/memrefresh /sys/devices/platform/lf1000-gpio/memtime0 /sys/devices/platform/lf1000-gpio/memtime1 /sys/devices/platform/lf1000-gpio/modalias /sys/devices/platform/lf1000-gpio/pad_strength_bus /sys/devices/platform/lf1000-gpio/pad_strength_gpio_a_high /sys/devices/platform/lf1000-gpio/pad_strength_gpio_a_low /sys/devices/platform/lf1000-gpio/pad_strength_gpio_b_high /sys/devices/platform/lf1000-gpio/pad_strength_gpio_b_low /sys/devices/platform/lf1000-gpio/pad_strength_gpio_c_high /sys/devices/platform/lf1000-gpio/pad_strength_gpio_c_low /sys/devices/platform/lf1000-gpio/panic /sys/devices/platform/lf1000-gpio/power /sys/devices/platform/lf1000-gpio/pullup_enable_gpio_a /sys/devices/platform/lf1000-gpio/pullup_enable_gpio_b /sys/devices/platform/lf1000-gpio/pullup_enable_gpio_c /sys/devices/platform/lf1000-gpio/request /sys/devices/platform/lf1000-gpio/shutdown /sys/devices/platform/lf1000-gpio/subsystem/ /sys/devices/platform/lf1000-gpio/touchscreen /sys/devices/platform/lf1000-gpio/uevent /sys/devices/platform/lf1000-gpio/user_0

As you can see there are a lot of them, we are only really interested in a few at this moment: /sys/devices/platform/lf1000-gpio/board_id /sys/devices/platform/lf1000-gpio/boot_image /sys/devices/platform/lf1000-gpio/boot_source /sys/devices/platform/lf1000-gpio/cart_id /sys/devices/platform/lf1000-gpio/cpu_freq_in_hz /sys/devices/platform/lf1000-gpio/panic /sys/devices/platform/lf1000-gpio/power /sys/devices/platform/lf1000-gpio/request /sys/devices/platform/lf1000-gpio/shutdown /sys/devices/platform/lf1000-gpio/power /sys/devices/platform/lf1000-gpio/user
 * 1) this is how the system works out whether its booting a didj, explorer or LF Dev board(s)
 * 1) this is how rcS/EB knows which boot type it should use and which set of scripts to run once the kernel is loaded
 * 1) this is how it knows where it booted from (Nor,Nand,USB,UART)
 * 1) this is how the system differentiates between cart types (Game,MFG cart)
 * 1) this is how the system determines what speed the cpu should run at
 * 1) I think this tells the system whether the kernel panic'd or not
 * 1) whether it was a warm or cold boot?
 * 1) the type boot requested from the kernel
 * 1) how the system shutdown the last time
 * 1) tracks the power state of the machine
 * 1) used to get/set the boot partition

lets break that down a bit further into scratchpad :

board_id

The system uses board ID at compile time as well as boot, this is crucial to the system as it tells it which board type and consequently which types of boot it can perform, for the didj this will be nand or uart, for the explorer it will be nor,usb or uart. At compile time CONFIG_BOARD_ID is crucial for the system to know how the gpio pins are configured for the buttons.

boot_image

this is how the system partly determines which set of scripts it should run at boot up via rcS, valid values are:

PLAY, RECOVERY, IMAGE_2, IMAGE_3

I believe this also tells emerald boot whether to boot normally or from USB for recovery purposes, discussions on the #didj irc channel have suggested the use of the unused (needs confirmation) IMAGE_2, IMAGE_3 options for our own purposes such as USB kernel boot using an NFS rootfs or SD rootfs.

boot_source

This is how the system knows which boot source should be or was used to boot, as mentioned in board_id, valid values for the explorer are: valid values are: NOR,NAND,USB,UART,UNKNOWN valid for the explorer: NOR,USB,UART, UNKNOWN valid for the didj: NAND,USB?,UART, UNKNOWN

cart_id

The explorer and didj systems use at least 2 types of cartridge, a normal game cart or a MFG cart, with the latter being able to perform system recovery, cart_id is how the system can tell the difference between cart types.

request

The explorer has various types of kernel boot modes, that it can set on exit or during the course of a session, on next startup these 'requests' tell it which scripts /etc/init.d/rcS should run, with valid values being:

TRAPDOOR, SHORT, FAILED, UNCLEAN, BATTERY, UPDATE, RETURN, PLAY

for an explanation of what they do see /usr/bin/show-scr and linux2.6/arch/arm/mach-lf1000/include/mach/gpio.h

PLAY in general does a clean boot, as will RETURN. BATTERY and UNCLEAN should start normally but might trigger an update/recovery via LFConnect as they check the system at kernel boot time. UPDATE boots the system in recovery mode, waits for LFConnect or pager.sh to send a .cbf file containing either a kernel or a kernel + rootfs, it then presents you with a different partition table to a normal boot (needs confirmation),


 * please note* setting these registers may have adverse effects on your explorer/didj, be careful and use valid values.

as mentioned you can 'cat' the various registers to find out their current state but equally important (if not more so) you can set the registers using the following method:

echo PLAY > /sys/devices/platform/lf1000-gpio/request reboot

this will reboot the system normally.

If you want to kick start USB boot on the next boot without holding any buttons try the following: echo UPDATE > /sys/devices/platform/lf1000-gpio/request reboot

just as the system starts you will see something similar to the following:

EB1.0.8 0003E252 Request=UPDATE: USB boot

this is the emerald boot version, the raw scratchpad data and the requested boot type, at this point the system is waiting for at least a kernel to be sent in a .cbf file (build a kernel, use make_cbf.py to create a .cbf file, use pager.sh to send it).

The system is expecting to do a recovery at this point, so dftpdevice is started, if dftpdevice isn't used then the system is flagged and it will reboot into usb mode on the next reboot. This can be a pain but is relatively simple to clear, you can either power off the system by holding the pwoer button down until it shuts off, or you can do the following:

touch /tmp/incision

this will fool the shutdown system into thinking that we have completed the update and will allow you ro boot from the normal kernel by simply issuing the reboot command.

This is a WIP. more to follow.