Booting from a USB Thumbdrive

From AwkwardTV
Revision as of 05:49, 23 August 2007 by Lj0Wc2 (talk | contribs)
Jump to: navigation, search
franz listz miroslav altavilla philips 7630 logitech desktop ex 100 musoduro robbie willims mare di piu caldaie ricambi napoli southwest com ona je poput djeteta 100 na jednoga jeep nuova grand cherokee 2005 herramientas de negociacion clubprive milano mp-e 65mm asphalt urban gt2 pro evolution soccer 4 scontato a fine mese www enature net meteo biella regina elisabetta sia di fornaci immagini o foto del kamasutra corvo torvo fiat scudo jtd abito firmato nx6110 740 sen kombi canzone california dei phantom planet hamsterball www un posto al sole com sunshine baby la spada del deserto www verona volley it viava la pappa periyar funkytown kreuk radeon 9800 256 mini 40gb pentax mx lorena berno foto stereo samsung vcr ripristino xp bubble up videocamere jvc the keane il solitario della montagna britney the single testo pleasure from the bass lenny kravitz calling all angel caratteristiche auto lettore usb autoradio export area manager (regione lombardia - pavia provincia) follin hitachi dvd cam no quiero saber o zone dragostea din tei dj aligator vs emily alexander incontrare donne hercules xps favola di pinocchio mp3 hd 40gb live in japan voglia di te yu gi oh giorno del duello assicurazione fiumicino lg plasma tv 42 terzetti modem adsl ethernet pppoa musica per i tuoi sogni forcella corsa istanbul turchia eleonora dimiele hiroshima, mon amour napoli - parigi masterizzatore dvd usb masterizzatori schwaz robot briciola el vicio de tus labios www gaydar co uk piedi di sabrina ferilli video soldato foto naziskin holux sirf gps batteria canon bp-535 canon ef s 10-22mm apple ipod mini matteo licitra lost s02 affinita nome cazzi e maschi marinelli fontana interiore american yuppies titicaca, lago- gestione merci aziende commerciali wolfgang amadeus mozart il flauto accessori per autoradio musica tribal balinesi rocky balboa wallpaper scacchisti it albergo riva garda uranus samsung digimax i5 nara nara you are my soni apple ibook 14 mp3 bluetooth italianista sophie kinsella acer 19 lcd multimediale le vibrazioni testi canzoni ati sapphire x800 pro vivo agp lo strano perorso video degli u2 hauppauge win tv blutooth samsung wep150 ciak rivista mensile n 6 hit mania dance champion estate 2004 spogliarelliste t66 ericsson www pesca in it riassunti i promessi sposi spille pera vacanze mare italia neger khan lavoro sesto san giovanni bicicletta freni a bacchetta io sono vivo hardcore eleonora mazzoni travelmate m725 legge 46 90 bomboniera porcellana telecomando logitech categoria sexy wingfield hemo 15 im iv 1 fl 100 ml project igi 2 nocd overblood latemar michael bolton ralf www sanpaolo com voorne capitan harlock. disc 2 smeg 63 ct gruppo pooh avis auto usata assicurazione ciampino regione piemonte megaworks 5 1 marysbridal lida passeggino bi-kini system asus p5wd2 i955x z1010 bluetooth sony ericsson per testo canzone thank you di jamelia nail codici sblocco cellulare motorola umts angeli senza paradiso adesivi winnie guerin sportivo 1987 prait colliano carmrn electra nokia ngage-qd computer parlante lavoro come saldatore annuncio affitto arezzo ileana luciu volkswagen golf yachting noelia fonte try a little tenderness harry woods team prodotti strutturati logitech - rally vibration feedback apple mini ipod 4gb container usato tu non ucciderai photo michel vieth galleria foto cazzo airstrike3d wasted time palitana siam 3 piccoli porcellin occhiali lenti polarizzate curriculm europeo bologna varsavia obiettivo grandangolare fujifilm l cohen halleluya trailer angelina jolie modem adsl d-link dsl-200 carito il ponte sul fiume kwai batteria per mpx200 hp ac adapter notebook ricarica telefono smoking gilrs


Not Patchstick

This page is not about Patchstick. I repeat: this page is not about Patchstick. This page just goes into detail about the layout of the partitioning table of a possible USB thumbdrive, which might be used for building something like Patchstick.

The image linked in this article is an empty image. No files. Really.

You have been warned.

A bit of info on how the boot process works

Background reading:

If the system is booted with the "Menu" and "Minus" keys on the remote held down, it checks for a FAT32 or HFS partition with a Partition Type of {5265636F-7665-11AA-AA11-00306543ECAC}, first on a USB storage device, then on the internal HDD. If such a partition is found, it's mounted and a file called "boot.efi" is read from the root folder and executed.

A bit of info about the image

It's simple enough to create a GPT on a USB thumbdrive with the required attributes. I used GNU Parted on Linux, and I'm sure equivalent tools exist for Mac and Windows. The tricky part is making the image in such a way that it'll boot in the AppleTV and be easy to deal with if you don't have a Mac handy. The latter requirement basically rules out HFS/HFS , since Linux support is spotty and Windows support is non-existant, so I chose to use FAT32.

Windows has had some level of support for GPT disks for some time now, but it uses the Partition Type indicator to determine the type of the filesystem. Since we have to set this to the value for a recovery partition, Windows will refuse to recognize the partition as FAT32, although Linux will happily mount it anyways.

My first thought was to get rid of the "Protective MBR" partition table that GPT uses to hide itself from older partitioning tools and replace it with a valid MBR partition table that points to the FAT32 partition. Thus, the drive would have two partition tables, each pointing to the same partition. With this in place, the thumbdrive was mountable both in Linux and Windows, but the AppleTV apparently checks for the 0xEE partition in the MBR before trying to use the GPT.

In the end, I was able to create a MBR that contains the 0xEE partition required to get the AppleTV to load the GPT, but instead of setting the protective partition to fill the disk, I made it very small, then added a second partition in the MBR's remaining space that points to the FAT32 partition. Now, it's visible to Windows (MBR table), Linux (either table), and the AppleTV (GPT). You should be able to plug a thumbdrive initialized with this image into any Windows box (I've only tested with Vista Ultimate 64-bit) and copy over the necessary files from the AppleTV recovery partition (boot.efi,, BootLogo.png, and mach_kernel.prelink). After that, you can plug the thumbdrive into the AppleTV and reboot it while holding down "Menu" and "Minus" on the remote to boot from the thumbdrive.

Note that as is, the recovery partition image won't boot completely from USB, since the kernel basically cuts its own head off when it disables USB.

The image itself (sized for 256MB Flash)

The original image was posted as a base-64 text chunk within this page, it is now mirrored below. The complete image is only about 6K compressed. All you need to do is decompress the image, then write it to a storage device of your choice.

Note: This is a raw disk image, and will expand to 257,949,696 bytes. Your storage device will have to meet this minimum requirement to use this particular image.

Writing the Image

Mac OS X and other *NIX or *NIX like Operating Systems

You must have a Memory stick larger than 512MB of free post formated space for this to work.

Insert your storage device / thumb-drive / USB stick but don't mount it. If your OS automounts the image (like OS X does) you'll need to unmount before you write to it.

$ mount
/dev/disk1s1 on /Volumes/UNTITLED (local, nodev, nosuid) <-- mounted partition on the thumb drive.  /dev/disk1 would be the thumbdrive itself.  See note below!

Unmount (as root) For those using OS X gui, find NetInfo Manager in the Utilities folder, click "Security" at the top menu, then "Authenticate." A dialogue box will pop up which asks for the administrator's short name and password. Notice the command for un-mounting is UMOUNT with no 'n' after the 'U.' This is the command, not a typo. Unmount with:-

 # umount /Volumes/UNTITLED 

then use dd to write the image to the storage device (change /dev/disk1 to be the device that corresponds to your OS and device).

 $ dd if=Hybrid.img of=/dev/disk1 bs=1m

Important Note: You want to write to the device that correponds to the entire thumbdrive - not one of its partitions. If you write the image to an existing partition, the all-important partition tables won't be written properly. On Mac OS / Darwin, this will be something like /dev/diskX rather than dev/diskXs1. On Linux, the device will probably be /dev/sdX for a USB device. (Note that SATA hard drives will probably also appear as /dev/sdX - use fdisk -l /dev/sdX to make sure you have the right device before writing to it!)

If your storage device has a pretty LED you'll see some activity, once finished you'll see something like:

503808 0 records in
503808 0 records out
257949696 bytes transferred in 439.220493 secs (587290 bytes/sec)

The drive will more than likely mount once the above process is complete - unmount it and proceed with your install on the Apple TV.


Download dd for Windows and follow the steps above for writing the image. You don't need to worry about the unmounting part. Windows device identifiers are quite different from BSD / Linux identifiers, so look at the examples on the linked page for how to write to a USB Mass Storage device.

With dd.exe and the Hybrid.img file in the same folder type the following command to find out the name of your USB drive.

dd --list

You should see a bunch of output similiar to:

 link to \\?\Device\HarddiskVolume1
 fixed media
 Mounted on \\.\c:

 link to \\?\Device\CdRom0 CD-ROM
 Mounted on \\.\r:
 link to \\?\Device\Harddisk1\DP(1)0-0 3 removable media
 Mounted on \\.\d:

We are interested in the device mounted to where your USB drive is (d: in this case).

We then do:

dd if=Hybrid.img of=\\?\Device\Harddisk1\Partition0 bs=1M --size --progress

The important part is writing to the Partition0 part of the drive.

You could also just download a Linux LiveCD.

Download the image (Mirrors)

Here - dobedobedoh

Here - anourkey

Here - Galphanet (Swiss server)

Here (choose right click, save as) - MrZarquon

Here (choose right Click Save As), please be gentle on this server, use as a last resort!

MD5: a00685206de5cf5a313ec62594d2ff9e Hybrid.img.bz2 (compressed)

MD5: 1533fdfb2503851a545cf1955c2daea6 Hybrid.img (uncompressed)