[opensuse-arm] Booting a Surface RT (Arm based) from openSUSE media
![](https://seccdn.libravatar.org/avatar/25bbc96d9c53647354cb724e744b2222.jpg?s=120&d=mm&r=g)
I need to boot a Surface RT (Arm based) from boot media so I can grab a copy of the hard drive (SSD) contents. I don't specifically need openSUSE, but it is what I know best. The contents are encrypted, but I have the decryption keys so that isn't a problem. Can anyone point me at what I need to know / do for this to happen. Thanks Greg -- Greg Freemyer -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
![](https://seccdn.libravatar.org/avatar/25bbc96d9c53647354cb724e744b2222.jpg?s=120&d=mm&r=g)
On Fri, Nov 11, 2016 at 1:52 PM, Greg Freemyer <greg.freemyer@gmail.com> wrote:
I need to boot a Surface RT (Arm based) from boot media so I can grab a copy of the hard drive (SSD) contents.
I don't specifically need openSUSE, but it is what I know best.
The contents are encrypted, but I have the decryption keys so that isn't a problem.
Can anyone point me at what I need to know / do for this to happen.
If it helps, the CPU is a nvidia tegra 3 quad core, which is based on the quad-core ARM Cortex-A9 MPCore CPU. I have no idea which flavor or Arm openSUSE to download and try. Thanks Greg -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
![](https://seccdn.libravatar.org/avatar/25bbc96d9c53647354cb724e744b2222.jpg?s=120&d=mm&r=g)
On Fri, Nov 11, 2016 at 7:23 PM, Greg Freemyer <greg.freemyer@gmail.com> wrote:
On Fri, Nov 11, 2016 at 1:52 PM, Greg Freemyer <greg.freemyer@gmail.com> wrote:
I need to boot a Surface RT (Arm based) from boot media so I can grab a copy of the hard drive (SSD) contents.
I don't specifically need openSUSE, but it is what I know best.
The contents are encrypted, but I have the decryption keys so that isn't a problem.
Can anyone point me at what I need to know / do for this to happen.
If it helps, the CPU is a nvidia tegra 3 quad core, which is based on the quad-core ARM Cortex-A9 MPCore CPU.
I have no idea which flavor or Arm openSUSE to download and try.
Note, I'm only attempting to make a image (copy) of the SSD in the Surface RT, so I only need basic functionality of the display, keyboard and USB port. I just read a note that the Surface RT will only run signed distress. Are there any openSUSE Arm ISOs that have a signed kernel? == t is important to note that Secure Boot is permanently activated on Windows RT devices such as Microsoft Surface RT, Surface 2, Nokia Lumia 2520 and other RT-based tablets. Since these ARM tablets are locked with Secure Boot, and there is no way to disable that option, there is no known method to boot them into anything other than Windows RT or its recovery image. == Thanks Greg -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
![](https://seccdn.libravatar.org/avatar/3faa48f7f462ca17481ecd1e2f45d53f.jpg?s=120&d=mm&r=g)
Am 12.11.2016 um 02:07 schrieb Greg Freemyer <greg.freemyer@gmail.com>:
On Fri, Nov 11, 2016 at 7:23 PM, Greg Freemyer <greg.freemyer@gmail.com> wrote:
On Fri, Nov 11, 2016 at 1:52 PM, Greg Freemyer <greg.freemyer@gmail.com> wrote: I need to boot a Surface RT (Arm based) from boot media so I can grab a copy of the hard drive (SSD) contents.
I don't specifically need openSUSE, but it is what I know best.
The contents are encrypted, but I have the decryption keys so that isn't a problem.
Can anyone point me at what I need to know / do for this to happen.
If it helps, the CPU is a nvidia tegra 3 quad core, which is based on the quad-core ARM Cortex-A9 MPCore CPU.
I have no idea which flavor or Arm openSUSE to download and try.
Note, I'm only attempting to make a image (copy) of the SSD in the Surface RT, so I only need basic functionality of the display, keyboard and USB port.
I just read a note that the Surface RT will only run signed distress. Are there any openSUSE Arm ISOs that have a signed kernel?
Unfortunately the Surface ARM series were very heavily locked down and reasonably expensive, so there was basically no community interest in the platform. In a nutshell, I am not aware of any Linux distribution running on Surface. Alex -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
![](https://seccdn.libravatar.org/avatar/c74cbeb07551a14855561761d1313754.jpg?s=120&d=mm&r=g)
Probably not possible, but a simple Google search returns these hits... A Windows RT Jailbreak tool http://forum.xda-developers.com/showthread.php?t=2092158 You can try turning off "secure boot" in your BIOS settings http://venturebeat.com/2013/02/06/yes-you-can-run-linux-on-your-microsoft-su... And, applying general principles without at all looking at how an RT boots, I'd assume that it should be possible to chainload the Windows bootloader like x86 Windows. This assumes that the RT bootloader is likely the same as x86 Windows bootloaders so can be modified the same way. Don't know why there are no hits of anyone trying to do this. Tony On Sun, Nov 13, 2016 at 1:45 AM, Alexander Graf <agraf@suse.de> wrote:
Am 12.11.2016 um 02:07 schrieb Greg Freemyer <greg.freemyer@gmail.com>:
On Fri, Nov 11, 2016 at 7:23 PM, Greg Freemyer <greg.freemyer@gmail.com> wrote:
On Fri, Nov 11, 2016 at 1:52 PM, Greg Freemyer <greg.freemyer@gmail.com> wrote: I need to boot a Surface RT (Arm based) from boot media so I can grab a copy of the hard drive (SSD) contents.
I don't specifically need openSUSE, but it is what I know best.
The contents are encrypted, but I have the decryption keys so that isn't a problem.
Can anyone point me at what I need to know / do for this to happen.
If it helps, the CPU is a nvidia tegra 3 quad core, which is based on the quad-core ARM Cortex-A9 MPCore CPU.
I have no idea which flavor or Arm openSUSE to download and try.
Note, I'm only attempting to make a image (copy) of the SSD in the Surface RT, so I only need basic functionality of the display, keyboard and USB port.
I just read a note that the Surface RT will only run signed distress. Are there any openSUSE Arm ISOs that have a signed kernel?
Unfortunately the Surface ARM series were very heavily locked down and reasonably expensive, so there was basically no community interest in the platform.
In a nutshell, I am not aware of any Linux distribution running on Surface.
Alex
-- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
-- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
![](https://seccdn.libravatar.org/avatar/3faa48f7f462ca17481ecd1e2f45d53f.jpg?s=120&d=mm&r=g)
On 13/11/2016 18:48, Tony Su wrote:
Probably not possible, but a simple Google search returns these hits...
A Windows RT Jailbreak tool http://forum.xda-developers.com/showthread.php?t=2092158
You can try turning off "secure boot" in your BIOS settings http://venturebeat.com/2013/02/06/yes-you-can-run-linux-on-your-microsoft-su...
And, applying general principles without at all looking at how an RT boots, I'd assume that it should be possible to chainload the Windows bootloader like x86 Windows. This assumes that the RT bootloader is likely the same as x86 Windows bootloaders so can be modified the same way. Don't know why there are no hits of anyone trying to do this.
Well, IIUC the jailbreak came years after release, so hardware was already not terribly interesting at that point. Also there are much more hackable alternatives around, so people never really cared. However, I'm not going to stop you from porting anything over :). Patches are always welcome and if you manage to make Linux and openSUSE work on your Surface, I'm happy to help you integrate that work in our code stream. Keep in mind though that the work necessary to get Linux ported to an undocumented new platform is above the 1 man-year level. If you know exactly what you're doing and have prior experience in such porting efforts. Alex -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
![](https://seccdn.libravatar.org/avatar/25bbc96d9c53647354cb724e744b2222.jpg?s=120&d=mm&r=g)
On Sun, Nov 13, 2016 at 1:55 PM, Alexander Graf <agraf@suse.de> wrote:
On 13/11/2016 18:48, Tony Su wrote:
Probably not possible, but a simple Google search returns these hits...
A Windows RT Jailbreak tool http://forum.xda-developers.com/showthread.php?t=2092158
You can try turning off "secure boot" in your BIOS settings
http://venturebeat.com/2013/02/06/yes-you-can-run-linux-on-your-microsoft-su...
And, applying general principles without at all looking at how an RT boots, I'd assume that it should be possible to chainload the Windows bootloader like x86 Windows. This assumes that the RT bootloader is likely the same as x86 Windows bootloaders so can be modified the same way. Don't know why there are no hits of anyone trying to do this.
Well, IIUC the jailbreak came years after release, so hardware was already not terribly interesting at that point. Also there are much more hackable alternatives around, so people never really cared.
Worse. The jailbreak came out early on, but it only allowed users to run unsigned userspace code inside RT. No significant value to a Linux hacker. And the jailbreak only works on the old RT 8 release, and probably and unpatched RT 8 OS at that. It definitely doesn't work on the Surface RT I'm working with. ( I tried it. :) ) I've read nothing that says an unsigned kernel can be booted on a Surface RT. It's either do it right, or don't do it.
However, I'm not going to stop you from porting anything over :). Patches are always welcome and if you manage to make Linux and openSUSE work on your Surface, I'm happy to help you integrate that work in our code stream.
Keep in mind though that the work necessary to get Linux ported to an undocumented new platform is above the 1 man-year level. If you know exactly what you're doing and have prior experience in such porting efforts.
Seriously? That is unbelievably hard.
Alex
Greg -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
![](https://seccdn.libravatar.org/avatar/25bbc96d9c53647354cb724e744b2222.jpg?s=120&d=mm&r=g)
On Sun, Nov 13, 2016 at 12:48 PM, Tony Su <tonysu@su-networking.com> wrote:
Probably not possible, but a simple Google search returns these hits...
A Windows RT Jailbreak tool http://forum.xda-developers.com/showthread.php?t=2092158
A jailbreak is basically a piece of malware that leverages a vulnerability to grant Administrator (root) privileges to a non-privileged user. As the vulnerabilities are found by developers or jailbreaks, the OS providers create security patches to keep them from working. Microsoft has worked hard to keep there from being any well known vulnerabilities in Windows RT. With Android, the vulnerabilities often exist for years at a time on any given phone/tablet. Anyway, the 2013 jailbreak you linked to long since quit being useful on a Surface RT with an updated OS. In particular, that one only ever worked with RT 8. RT 8.1 was released a couple years ago and the Surface RT I'm trying to access has already been upgraded to RT 8.1
You can try turning off "secure boot" in your BIOS settings http://venturebeat.com/2013/02/06/yes-you-can-run-linux-on-your-microsoft-su...
A Surface Pro is just a fancy Intel laptop. All the normal Intel laptop solutions work. I'm not overly concerned with the Pros at this point.
And, applying general principles without at all looking at how an RT boots, I'd assume that it should be possible to chainload the Windows bootloader like x86 Windows. This assumes that the RT bootloader is likely the same as x86 Windows bootloaders so can be modified the same way. Don't know why there are no hits of anyone trying to do this.
I don't claim to understand Arm bootloaders in general or the RT bootloader specifically, but what I've read is it implements the UEFI secure boot feature and there is no way to disable it. There is a way to tell it to boot from a USB drive, but I would need to have a functioning Arm kernel that was signed by a legal MS key for it to work. Thus my asking if any of the openSUSE Arm kernels are signed with an MS key. BTW: I believe the openSUSE Intel kernels are signed with a MS key, so it isn't out of the question for the Arm keys to be. fyi: There is a signed Windows RT Rescue kernel. I've successfully booted it, but it continues to refuse to run any apps not signed with a MS key. If I have a copy of dd for the RT/arm architecture that was signed by a MS key, I'd be done. All I want to do is make a copy of the SSD. The equivalent of dd if=/dev/sda of=image_file.
Tony
Greg -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
![](https://seccdn.libravatar.org/avatar/3faa48f7f462ca17481ecd1e2f45d53f.jpg?s=120&d=mm&r=g)
On 13/11/2016 23:03, Greg Freemyer wrote:
On Sun, Nov 13, 2016 at 12:48 PM, Tony Su <tonysu@su-networking.com> wrote:
Probably not possible, but a simple Google search returns these hits...
A Windows RT Jailbreak tool http://forum.xda-developers.com/showthread.php?t=2092158
A jailbreak is basically a piece of malware that leverages a vulnerability to grant Administrator (root) privileges to a non-privileged user. As the vulnerabilities are found by developers or jailbreaks, the OS providers create security patches to keep them from working. Microsoft has worked hard to keep there from being any well known vulnerabilities in Windows RT. With Android, the vulnerabilities often exist for years at a time on any given phone/tablet.
Anyway, the 2013 jailbreak you linked to long since quit being useful on a Surface RT with an updated OS. In particular, that one only ever worked with RT 8. RT 8.1 was released a couple years ago and the Surface RT I'm trying to access has already been upgraded to RT 8.1
Sorry, I haven't actually read the link above, but rather assumed it was this leak: http://www.theregister.co.uk/2016/08/10/microsoft_secure_boot_ms16_100/
You can try turning off "secure boot" in your BIOS settings http://venturebeat.com/2013/02/06/yes-you-can-run-linux-on-your-microsoft-su...
A Surface Pro is just a fancy Intel laptop. All the normal Intel laptop solutions work. I'm not overly concerned with the Pros at this point.
And, applying general principles without at all looking at how an RT boots, I'd assume that it should be possible to chainload the Windows bootloader like x86 Windows. This assumes that the RT bootloader is likely the same as x86 Windows bootloaders so can be modified the same way. Don't know why there are no hits of anyone trying to do this.
I don't claim to understand Arm bootloaders in general or the RT bootloader specifically, but what I've read is it implements the UEFI secure boot feature and there is no way to disable it.
There is a way to tell it to boot from a USB drive, but I would need to have a functioning Arm kernel that was signed by a legal MS key for it to work.
Thus my asking if any of the openSUSE Arm kernels are signed with an MS key. BTW: I believe the openSUSE Intel kernels are signed with a MS key, so it isn't out of the question for the Arm keys to be.
fyi: There is a signed Windows RT Rescue kernel. I've successfully booted it, but it continues to refuse to run any apps not signed with a MS key. If I have a copy of dd for the RT/arm architecture that was signed by a MS key, I'd be done. All I want to do is make a copy of the SSD. The equivalent of dd if=/dev/sda of=image_file.
With the link above you might be able to get to your goal, right? :) Alex -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
participants (3)
-
Alexander Graf
-
Greg Freemyer
-
Tony Su