qoriq: add support for WatchGuard Firebox M300

This device is based on NXP's QorIQ T2081QDS board, with a quad-core
dual-threaded 1.5 GHz ppc64 CPU and 4GB ECC RAM. The board has 5
ethernet interfaces, of which 3 are connected to the ethernet ports on
the front panel. The other 2 are internally connected to a Marvell
88E6171 switch; the other 5 ports of this switch are also connected to
the ethernet ports on the front panel.

Installation: write the sdcard image to an SD card. Stock U-Boot will
not boot, wait for it to fail then run these commands:

setenv OpenWrt_fdt image-watchguard-firebox-m300.dtb
setenv OpenWrt_kernel watchguard_firebox-m300-kernel.bin
setenv wgBootSysA 'setenv bootargs root=/dev/mmcblk0p2 rw rootdelay=2 console=$consoledev,$baudrate fsl_dpaa_fman.fsl_fm_max_frm=1530; ext2load mmc 0:1 $fdtaddr $OpenWrt_fdt; ext2load mmc 0:1 $loadaddr $OpenWrt_kernel; bootm $loadaddr - $fdtaddr'
saveenv
reset

The default U-Boot boot entry will now boot OpenWrt from the SD card.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Acked-by: Rui Salvaterra <rsalvaterra@gmail.com>

5 files changed, 431 insertions, 0 deletions

diff --git a/target/linux/qoriq/base-files/etc/board.d/02_network b/target/linux/qoriq/base-files/etc/board.d/02_network
new file mode 100644
index 0000000000..35b7ce9f32
--- /dev/null
+++ b/target/linux/qoriq/base-files/etc/board.d/02_network
@@ -0,0 +1,38 @@
+# SPDX-License-Identifier: GPL-2.0-or-later
+
+. /lib/functions/uci-defaults.sh
+. /lib/functions.sh
+. /lib/functions/system.sh
+
+board_config_update
+board=$(board_name)
+
+wg_set_opt_interface() {
+	local device="$1"
+	local offset="$2"
+
+	ucidef_set_interface "$device" device "$device" protocol static ipaddr "10.0.${offset}.1" netmask 255.255.255.0
+}
+
+case "$board" in
+watchguard,firebox-m300)
+	ucidef_set_interfaces_lan_wan "eth1" "eth0"
+	wg_set_opt_interface "eth2" "2"
+
+	sweth_mac_offset=0x186d
+
+	for sweth in /sys/class/net/sweth*; do
+		device="$(basename "$sweth")"
+		mac="$(mtd_get_mac_text wg_cfg0 "$sweth_mac_offset")"
+		switchports="$switchports $device"
+		ucidef_set_network_device_mac "$device" "$mac"
+		wg_set_opt_interface "$device" "${device#sweth}"
+		sweth_mac_offset=$(printf "0x%X\n" $(( $sweth_mac_offset + 0x14)))
+	done
+
+	;;
+esac
+
+board_config_flush
+
+exit 0
diff --git a/target/linux/qoriq/base-files/lib/preinit/79_move_config b/target/linux/qoriq/base-files/lib/preinit/79_move_config
new file mode 100644
index 0000000000..54dd579660
--- /dev/null
+++ b/target/linux/qoriq/base-files/lib/preinit/79_move_config
@@ -0,0 +1,17 @@
+# SPDX-License-Identifier: GPL-2.0-or-later
+
+. /lib/functions.sh
+. /lib/upgrade/common.sh
+
+move_config() {
+	local partdev
+
+	if export_bootdevice && export_partdevice partdev 1; then
+		mkdir -p /boot
+		mount -o rw,noatime "/dev/$partdev" /boot
+		[ -f "/boot/$BACKUP_FILE" ] && mv -f "/boot/$BACKUP_FILE" /
+		umount /boot
+	fi
+}
+
+boot_hook_add preinit_mount_root move_config
diff --git a/target/linux/qoriq/base-files/lib/upgrade/platform.sh b/target/linux/qoriq/base-files/lib/upgrade/platform.sh
new file mode 100755
index 0000000000..1392d5eb22
--- /dev/null
+++ b/target/linux/qoriq/base-files/lib/upgrade/platform.sh
@@ -0,0 +1,36 @@
+# SPDX-License-Identifier: GPL-2.0-or-later
+
+PART_NAME=firmware
+REQUIRE_IMAGE_METADATA=1
+
+platform_check_image() {
+	case "$(board_name)" in
+	watchguard,firebox-m300)
+		legacy_sdcard_check_image "$1"
+		;;
+	*)
+		return 0
+		;;
+	esac
+}
+
+platform_copy_config() {
+	case "$(board_name)" in
+	watchguard,firebox-m300)
+		legacy_sdcard_copy_config "$1"
+		;;
+	*)
+		return 0
+	esac
+}
+
+platform_do_upgrade() {
+	case "$(board_name)" in
+	watchguard,firebox-m300)
+		legacy_sdcard_do_upgrade "$1"
+		;;
+	*)
+		default_do_upgrade "$1"
+		;;
+	esac
+}
diff --git a/target/linux/qoriq/files/arch/powerpc/boot/dts/fsl/watchguard-firebox-m300.dts b/target/linux/qoriq/files/arch/powerpc/boot/dts/fsl/watchguard-firebox-m300.dts
new file mode 100644
index 0000000000..54f7e06bc5
--- /dev/null
+++ b/target/linux/qoriq/files/arch/powerpc/boot/dts/fsl/watchguard-firebox-m300.dts
@@ -0,0 +1,328 @@
+// SPDX-License-Identifier: BSD-3-Clause OR GPL-2.0-or-later
+/*
+ * WatchGuard Firebox M300 Device Tree Source
+ * Based on t2081qds.dts from Linux 5.10
+ *
+ * Copyright 2013 - 2015 Freescale Semiconductor Inc.
+ * Copyright 2020 - 2021 Stijn Tintel <stijn@linux-ipv6.be>
+ */
+
+/include/ "t208xsi-pre.dtsi"
+/include/ "t208xqds.dtsi"
+
+/ {
+	model = "WatchGuard Firebox M300";
+	compatible = "watchguard,firebox-m300", "fsl,T2081QDS";
+
+	interrupt-parent = <&mpic>;
+
+	aliases {
+		/delete-property/ ethernet0;
+		/delete-property/ ethernet1;
+		/delete-property/ ethernet2;
+		/delete-property/ ethernet3;
+		/delete-property/ ethernet4;
+		/delete-property/ ethernet5;
+		/delete-property/ ethernet6;
+		/delete-property/ ethernet7;
+
+		ethernet0 = &enet7;
+		ethernet1 = &enet0;
+		ethernet2 = &enet1;
+		ethernet3 = &enet2;
+		ethernet4 = &enet3;
+	};
+};
+
+&soc {
+// Include first to make this the first interface
+/include/ "qoriq-fman3-0-10g-1.dtsi"
+};
+
+// mdio-mux under &boardctrl + its aliases removed. causes crash:
+// Oops: Machine check, sig: 7 [#1]
+
+/include/ "t2081si-post.dtsi"
+
+// add stuff below the include to make sure we override whatever is there
+
+&enet0 {
+	phy-connection-type = "sgmii";
+	phy-handle = <&phy1>;
+};
+
+&enet1 {
+	phy-connection-type = "sgmii";
+	phy-handle = <&phy2>;
+};
+
+&enet2 {
+	phy-connection-type = "rgmii";
+
+	fixed-link {
+		speed = <1000>;
+		full-duplex;
+	};
+};
+
+&enet3 {
+	phy-connection-type = "rgmii";
+
+	fixed-link {
+		speed = <1000>;
+		full-duplex;
+	};
+};
+
+&enet4 {
+	status = "disabled";
+};
+
+&enet5 {
+	status = "disabled";
+};
+
+&enet6 {
+	status = "disabled";
+};
+
+&enet7 {
+	phy-connection-type = "sgmii";
+	phy-handle = <&phy0>;
+};
+
+&ifc {
+	ranges = <0x00 0x00 0x0f 0xefc00000 0x400000>;
+
+	nor@0,0 {
+		reg = <0x00 0x00 0x400000>;
+
+		partition@0{
+			reg = <0x0 0x10000>;
+			label = "qoriq-rcw";
+			read-only;
+		};
+
+		partition@10000 {
+			reg = <0x10000 0x20000>;
+			label = "wg_cfg0";
+			read-only;
+		};
+
+		partition@30000 {
+			reg = <0x30000 0x10000>;
+			label = "wg_cfg1";
+			read-only;
+		};
+
+		partition@40000 {
+			reg = <0x40000 0x10000>;
+			label = "wg_mfg_data";
+			read-only;
+		};
+
+		partition@50000 {
+			reg = <0x50000 0xb0000>;
+			label = "wg_bootopt_data_and_reserved";
+			read-only;
+		};
+
+		partition@100000 {
+			reg = <0x100000 0xb0000>;
+			label = "wg_extra_reserved_1";
+			read-only;
+		};
+
+		partition@1B0000 {
+			reg = <0x1b0000 0xb0000>;
+			label = "wg_extra_reserved_2";
+			read-only;
+		};
+
+		partition@260000 {
+			reg = <0x260000 0xc0000>;
+			label = "wg_u-boot_failsafe";
+			read-only;
+		};
+
+		partition@320000 {
+			reg = <0x320000 0x10000>;
+			label = "qoriq-fman";
+			read-only;
+		};
+
+		partition@330000 {
+			reg = <0x330000 0x10000>;
+			label = "u-boot-env";
+		};
+
+		partition@340000 {
+			reg = <0x340000 0xc0000>;
+			label = "u-boot";
+			read-only;
+		};
+	};
+
+	nand@2,0 {
+		status = "disabled";
+	};
+};
+
+&mdio0 {
+	// m300 ethernet port 0
+	phy0: ethernet-phy@0 {
+		reg = <0x00>;
+	};
+
+	// m300 ethernet port 1
+	phy1: ethernet-phy@1 {
+		reg = <0x01>;
+	};
+
+	phy2: ethernet-phy@2 {
+		reg = <0x02>;
+	};
+
+	phy3: ethernet-phy@3 {
+		reg = <0x03>;
+	};
+
+	switch0: switch@10 {
+		compatible = "marvell,mv88e6085";
+		reg = <0x10>;
+
+		mdio {
+			#address-cells = <1>;
+			#size-cells = <0>;
+
+			switch0phy0: switch0phy0@0 {
+				reg = <0x00>;
+				interrupt-parent = <&switch0>;
+			};
+
+			switch0phy1: switch0phy1@1 {
+				reg = <0x01>;
+				interrupt-parent = <&switch0>;
+			};
+
+			switch0phy2: switch0phy2@2 {
+				reg = <0x02>;
+				interrupt-parent = <&switch0>;
+			};
+
+			switch0phy3: switch0phy3@3 {
+				reg = <0x03>;
+				interrupt-parent = <&switch0>;
+			};
+
+			switch0phy4: switch0phy4@4 {
+				reg = <0x04>;
+				interrupt-parent = <&switch0>;
+			};
+		};
+
+		ports {
+			#address-cells = <1>;
+			#size-cells = <0>;
+
+			port@0 {
+				reg = <0>;
+				label = "sweth3";
+				phy-handle = <&switch0phy0>;
+			};
+
+			port@1 {
+				reg = <1>;
+				label = "sweth4";
+				phy-handle = <&switch0phy1>;
+			};
+
+			port@2 {
+				reg = <2>;
+				label = "sweth5";
+				phy-handle = <&switch0phy2>;
+			};
+
+			port@3 {
+				reg = <3>;
+				label = "sweth6";
+				phy-handle = <&switch0phy3>;
+			};
+
+			port@4 {
+				reg = <4>;
+				label = "sweth7";
+				phy-handle = <&switch0phy4>;
+			};
+
+			// OEM bootlog suggests multiple ports are attached to switch
+			// Keep this until OEM supplies GPL sources
+			port@5 {
+				status = "disabled";
+
+				reg = "<5>";
+				label = "cpu";
+				ethernet = <&enet2>;
+				phy-mode = "rgmii-id";
+
+				fixed-link {
+					speed = <1000>;
+					full-duplex;
+				};
+			};
+
+			port@6 {
+				reg = <6>;
+				label = "cpu";
+				ethernet = <&enet3>;
+				phy-mode = "rgmii-id";
+
+				fixed-link {
+					speed = <1000>;
+					full-duplex;
+				};
+			};
+		};
+	};
+};
+
+&soc {
+	i2c@118000 {
+		tpm@29 {
+			compatible = "tpm,tpm_i2c_atmel";
+			reg = <0x29>;
+		};
+		hwmon@2c {
+			compatible = "winbond,w83793";
+			reg = <0x2c>;
+		};
+		hwmon@2d {
+			compatible = "winbond,w83793";
+			reg = <0x2d>;
+		};
+		rtc@32 {
+			compatible = "ricoh,rs5c372a";
+			reg = <0x32>;
+		};
+		pca9547@77 {
+			status = "disabled";
+		};
+	};
+
+	spi@110000 {
+		// DTS decompiled from OEM DTB contains flash@0 but doesn't work
+		// spi-nor spi0.0: unrecognized JEDEC id bytes: ff ff ff ff ff ff
+		// disable for now
+		flash@0 {
+			status = "disabled";
+		};
+
+		flash@1 {
+			status = "disabled";
+		};
+
+		flash@2 {
+			status = "disabled";
+		};
+	};
+};
diff --git a/target/linux/qoriq/image/generic.mk b/target/linux/qoriq/image/generic.mk
index e69de29bb2..0d7f5e4c10 100644
--- a/target/linux/qoriq/image/generic.mk
+++ b/target/linux/qoriq/image/generic.mk
@@ -0,0 +1,12 @@
+define Device/watchguard_firebox-m300
+  DEVICE_VENDOR := WatchGuard
+  DEVICE_MODEL := Firebox M300
+  DEVICE_DTS_DIR := $(DTS_DIR)/fsl
+  DEVICE_PACKAGES := \
+	kmod-hwmon-w83793 kmod-ptp-qoriq kmod-rtc-rs5c372a kmod-tpm-i2c-atmel
+  KERNEL := kernel-bin | gzip | uImage gzip
+  IMAGES := sdcard.img.gz sysupgrade.img.gz
+  IMAGE/sysupgrade.img.gz :=  sdcard-img | gzip | append-metadata
+  IMAGE/sdcard.img.gz := sdcard-img | gzip
+endef
+TARGET_DEVICES += watchguard_firebox-m300