OpenBMC on Real Firmware

The capstone. Everything you practiced on the emulator was modelled on a standard, and this module points the same tools at the real thing: the OpenBMC firmware image the project publishes, booted on an emulated AST2500 service processor. Read a live bmcweb service root, take a session token and watch a forged one get refused, drive the power state machine through ComputerSystem.Reset, run ipmitool against the firmware own ipmid, and finish with a root shell on the service processor itself.

Labs in this module

The Real Service Root - Point curl at real OpenBMC firmware and read what a BMC actually exposes. Identify the service root schema and protocol version, follow the
Session Auth and the Token - Stop sending the password on every request. Open a Redfish session against real OpenBMC firmware, catch the X-Auth-Token out of the response
Power Control and the State Machine - Drive a real power state machine from four hundred miles away. POST ComputerSystem.Reset against live OpenBMC firmware, read the 204 it answ
The Event Log and ipmitool - Run ipmitool against real firmware and learn which numbers on a BMC you can trust. Pull mc info, the System Event Log and the 135-entry sens
Inside the Firmware - Walk the whole chain and then open the lid. SSH into the OpenBMC service processor itself, find the ARM Linux kernel, the flash layout with