====== Installation with Console ======

This guide installs EFW 3.2.4 on [[http://www.pcengines.ch|ALIX]] or [[http://www.pcengines.ch|APU2]] boxes.

===== Preparation =====
  * You need a null-modem cable and a USB to DB9 cable, if your computer does not have a serial connector (current computers do not have a serial connector anymore, but you might find an extension card to add a serial connector)
  * A null-modem cable is a DB9 cable with Pin 2 and 3 crossed, see [[https://www.db9-pinout.com/|DB9 Pinout]]
  * Check that PuTTY and your cables work by connecting Pin 2 and 3 on your DB9 cable with a paper clip. Start PuTTY with baud rate 115200,8n1, and type some characters
  * Boot into the APU2 box to verify that connection to console is working. You might need to press the reset button at the front of the box with a paper clip to enable console output
  * Download the [[http://www.endian.com|Endian Firewall]] iso file

===== Preparing the image and start installation =====
  * Endian Firewall can only boot from a USB stick formatted with ext3/4 or ISO9660 filesystems. The latter is the filesystem used to write CD ROM disks. All of these are not available under Windows, and preparing a USB stick with ext3/4 filesystems is tricky under Linux, so I chose another approach as outlined below.
  * Since the APU2 box has no video output, we need to prepare the image to be used with the console. This requires to modify the file /isolinux/isolinux.cfg's APPEND like so (omit the brackets, it indicates the settings for apu or alix boards):<code>console=ttyS0,115200n81 (apu2)
console=ttyS0,38400n81 (alix)</code>
  * Since the ISO9660 filesystem we are going to create is a read-only filesystem, we need to patch the iso file prior to writing it to the USB stick. I chose [[Install |FlexHEX]] to do this, which comes with a 30-days trial period. Start the program, load the iso file, and search for "initrd=/initrd". Then replace the following code block with the next code block. For APU2 you need to add 5 spaces at the end, for ALIX 6 spaces, to make the two code blocks equal size. Note that carriage returns are entered with "\n" but occupy one character space only.<code>
  # Automatically created by OE
  ALLOWOPTIONS 1
  SERIAL 0 115200
  DEFAULT boot
  TIMEOUT 10
  PROMPT 1
  LABEL boot
  KERNEL /vmlinuz
  APPEND initrd=/initrd LABEL=boot  root=/dev/ram0   console=tty0</code>
  * To be replaced with:<code>
  # Automatically created by OE
  ALLOWOPTIONS 1
  DEFAULT boot
  TIMEOUT 10
  PROMPT 1
  LABEL boot
  KERNEL /vmlinuz
  APPEND initrd=/initrd LABEL=boot  root=/dev/ram0   console=ttyS0,115200n81</code>
  * Save the iso file and copy it within a linux OS to the USB stick. If you do not have a linux machine, then download [[http://pcengines.ch/howto.htm#TinyCoreLinux|TinyCore Linux]] from the PCEngines website and copy it with [[https://rufus.akeo.ie/|Rufus]] to a bootable USB stick. Add the iso file to the TinyCore USB stick, boot the APU or ALIX box into TinyCore Linux and copy the iso file to the USB stick with the following command. Be careful with the device number (e.g. sda, sdb, sdc), chosing the wrong device will overwrite everything without further question.<code>dd if=/efw.iso of=/dev/sdX bs=1M</code>
  * Boot the newly created USB stick, which should give you the install of Endian Firewall through the console of the APU2 or ALIX board.

===== Backup with Clonezilla =====
You can append the following to the boot parameters. Boot into Clonezilla on USB created with Rufus on a Windows machine, then hit TAB and remove the trailing parameters up to "vga=...". Add the following parameter:<code>live-getty console=ttyS0,38400n81</code>

===== Links =====
  * [[http://www.pcengines.ch/pdf/apu2.pdf|APU2 User Manual]]
  * [[http://pcengines.ch/howto.htm#images|PCEngines How-To]]
  * [[https://drbl.org/faq/fine-print.php?path=./2_System/52_serial_console.faq#52_serial_console.faq|Clonezilla FAQ]]
  * [[https://www.foxplex.com/sites/endian-firewall-auf-alix-boards-apus/|Endian Firewall auf Alix Boards / APUs]]
  * [[https://www.linux.com/learn/using-new-guid-partition-table-linux-goodbye-ancient-mbr|Using the New GUID Partition Table in Linux]]
  * [[https://www.cyberciti.biz/faq/linux-remove-all-partitions-data-empty-disk/|Linux Remove All Partitions / Data And Create Empty Disk]]
  * [[https://askubuntu.com/questions/296331/how-to-mount-a-hard-disk-as-read-only-from-the-terminal|How to mount a hard disk as read-only from the terminal]]
  * [[https://www.cyberciti.biz/faq/linux-disk-format/|Linux Hard Disk Format Command]]
  * [[https://www.cyberciti.biz/faq/linux-clearing-out-master-boot-record-dd-command/|Linux Delete / Remove MBR]]
  * [[https://opensource.com/life/15/2/five-specialized-linux-distributions-computer-repair|5 specialized Linux distributions for computer repair]]
  * [[https://askubuntu.com/questions/397072/how-to-erase-my-hard-drive-completely|How to erase my hard drive completely [duplicate]]]
  * [[https://askubuntu.com/questions/372607/how-to-create-a-bootable-ubuntu-usb-flash-drive-from-terminal|How to create a bootable Ubuntu USB flash drive from terminal?]]