Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Space

Armadillo Flies... Briefly 305

david.given writes "Armadillo Aerospace did their first untethered test flight last week, at the Oklahoma Spaceport, using their new tube-shaped rocket. Predicted height was fifteen hundred feet; unfortunately a computer failure caused the vehicle to tip over and dive into the ground from a hundred feet up, causing severe damage (i.e., it requires a rebuild, not a repair). See the report and the slightly depressing video footage."
This discussion has been archived. No new comments can be posted.

Armadillo Flies... Briefly

Comments Filter:
  • by dirvish ( 574948 ) <dirvish&foundnews,com> on Wednesday November 20, 2002 @04:35PM (#4718870) Homepage Journal
    unfortunately a computer failure caused the vehicle to tip over

    What operating system were they running?
    • by daeley ( 126313 ) on Wednesday November 20, 2002 @04:37PM (#4718894) Homepage
      Rocket Scientist: 'Operating System? Crap! I *knew* we forgot something!'
    • unfortunately a computer failure caused the vehicle to tip over

      I find it quite interesting that of all things, computers fail so often on these rockets.

      I mean, I can see a seal leaking liquid oxygen, or some micro-crack in a weld... but computers? for crying out loud, it's one of the most common pieces of equipment on the planet.

      sigh...

      • I'd like to see you strap your pc onto a rocket and see it survive the vibrations and other stresses. I doubt it would last even if it was turned off! Even the most ruggedized pc's are still very delicate and fragile pieces of equipment compared to many other rocket parts.
      • Until you've tried to control moving parts with software you have no idea how disparate those two worlds are. Completely unexpected behaviors are the norm. On the bright side, I'm sure they logged all the flight data and they'll be able to track down a bug or two. Plus, abject, public failure has a way of making you go and look at code you kind of skimmed on the first pass.

    • linux

      doesn't say which distro, though

      sorry, no blaming bill on this one.

      unless..... he used his secret anti-linux storm troopers to sabotage it in the middle of the night.
    • by Anonymous Coward on Wednesday November 20, 2002 @04:46PM (#4718998)
      What apparently happened is that the power connectors use screw terminals, and one managed to work its way off in the drive from Texas and subsequent shaking in the pre-launch tests. They got about 2 seconds of telemetry data after the launch and then it cut out.

      Going from memory, read it yesterday.

      • by iabervon ( 1971 ) on Wednesday November 20, 2002 @04:57PM (#4719137) Homepage Journal
        "Hello, Tech Support? My rocket crashed." "Is the computer plugged in?"
      • by Ctrl-Z ( 28806 ) <tim&timcoleman,com> on Wednesday November 20, 2002 @05:32PM (#4719421) Homepage Journal

        Actually, the batteries they used had slip-on connectors.

        From the story:
        "The batteries have slip-on connectors, which have bothered me for quite a while, but screw terminal batteries are not available until much larger sizes. We are going to drill our own screw terminals in the lugs of future batteries, and possibly solder them as well."
        • by ChaoticLimbs ( 597275 ) on Wednesday November 20, 2002 @08:03PM (#4720342) Journal
          What you can do is melt an alloy of tin, lead and bismuth on the battery contacts after wrapping the wires around the terminals. This method is used by NASA. very hush-hush stuff. This special alloy of metals actually flows into the connection when in molten state, and not only does it improve the connection's electrical resistance, but it also improves the mechanical strength significantly once it hardens. Try that. PS- it lifted off and I bet that if the computer had been capable of actually controlling it, it would have flown (up) more.
          • Uhh.. no (Score:3, Interesting)

            by malakai ( 136531 )
            Soldering a wire directly to the battery terminal is not a "Good Thing". When the solder hardens, it creates a point between the hardened solder soaked wire and the solder free wire. This, under vibration/stress leads to a clean fracture/break.

            Mill specs require you _not_ to solder directly to this type of connection. Instead double crimp (but don't over crimp) the wire to a mechanically fastened connector.

            so anyhow mister smarty pants, your dry humor was inaccurate and thereby makes me laugh at you, and not with you.

            -malakai
      • Oh My fricking-gawd... you have GOT to be kidding.

        something important like that and instead of using mil-spec connectors they use SCREW TERMINALS??????

        Unbelieveable.
    • "What operating system were they running?"

      Quake-based OS, and their web server's been fragged by /.

      :(

    • It doesn't really matter what OS you use if the powersupply lead shakes off at takeoff ;-(
    • This one. [dragon-tails.com] Yeah, its not Penny Arcade, Dilbert or User Friendly. Shocking, huh?
  • by Dave_B93 ( 528595 ) on Wednesday November 20, 2002 @04:35PM (#4718877)
    computer malfunctions seem pretty common for these guys ;-)
  • by Telastyn ( 206146 ) on Wednesday November 20, 2002 @04:36PM (#4718881)
    unofficial reports also state that their webserver was being sent on the rocket as a guinea pig.
  • by Amadaeus ( 526475 ) on Wednesday November 20, 2002 @04:37PM (#4718888) Homepage

    Think of it: id Software can be the first game company to be qualified advertise games with "Real Life Space Physics" if John Carmack comes back alive from one of his space flights.

    Coming Soon: Doom VIII: Space Warfare

  • by Greedo ( 304385 ) on Wednesday November 20, 2002 @04:37PM (#4718890) Homepage Journal
    Click here [216.239.39.100] for the Google cache of the home page. Not much info, since the cache was made before the test flight.
  • by sprytel ( 242051 ) on Wednesday November 20, 2002 @04:37PM (#4718891)
    for some inexplicable reason, i'm suddenly in the mood for a game of lawn darts...
  • by The Evil Couch ( 621105 ) on Wednesday November 20, 2002 @04:37PM (#4718895) Homepage
    don't try to compile my kernel while flying a rocket.
  • Ironic... (Score:5, Funny)

    by Spytap ( 143526 ) on Wednesday November 20, 2002 @04:39PM (#4718918)
    This is what happens when you name your vehicle after one of the dumbest animals alive...it acts like one.
  • Someone please G2 Shareaza [shareaza.com] the video before it gets totally slashdotted.
  • by srw ( 38421 )
    From reading post, it sounded like it went up 100 feet, tipped over, and smashed into the ground. The video shows a different story. That thing was going over right from liftoff. That's some pretty serious instability.
  • by Epsillon ( 608775 ) on Wednesday November 20, 2002 @04:43PM (#4718968) Journal
    Microsoft issues a statement calling the launch a "complete success" and promises 150 feet by "service pack 2"
  • by JJAnon ( 180699 ) on Wednesday November 20, 2002 @04:44PM (#4718977)
    Flight Unsuccessful

    November 12, 13, 15, and 16 (busy week!) meeting notes

    Flight Unsuccessful

    We prepared for and conducted our first remote flight test at the Oklahoma Spaceport facility in Burns Flat this week. Several lessons were learned.

    We built a checklist for our flight operations, which was a very good idea. Going through it before setting off caught several things we almost forgot.

    The five hour drive from Dallas to Burns Flat was rougher on the equipment than expected. The tarp we put over everything to keep people from staring was damaged by the wind in several places, and the wooden cradle we transport the vehicle on actually broke one of its 2x4 support bars. We are probably going to arrange some hoops for the trailer so we can tarp it like a covered wagon in the future. I may consider an enclosed trailer with a suspension in the future.

    Everyone was extremely helpful in Oklahoma, and we set up in the middle of a service road well off from the main airport runway. Our expected altitude with only five gallons of peroxide was under 1500', and our parachute drift range with 13 mph winds was only about 2000', so we had plenty of room. Bill Kourie from OSIDA stayed with us to communicate with the air traffic control tower during our launch activities.

    Our setup was a bit slower than we expected, but everything got done fairly smoothly. The VOX on the radios we brought was more trouble than it was worth, often triggering with wind noise, but this was our first time using radio communication.

    We did a full water test, then loaded up five gallons of peroxide. The engines all warmed quickly, and ran perfectly clear, even though it was in the mid 50s.

    When we were cleared for our launch, I smoothly throttled up the engine over a two second period. The vehicle tilted a little bit on liftoff, but seemed to straighten out, but it then continued tipping, eventually tipping all the way over and flipping into the ground from a hundred or so feet up.

    There was still peroxide left in the vehicle tank, but all the pressure had drained out by the time we reached it. We tipped it up to allow the remaining peroxide to drain down into the main engine and slowly catalyze away, then we carried the vehicle back to the road to run some low pressure water through it to clean it up.

    http://media.armadilloaerospace.com/2002_11_16/f li ghtUnsuccessful.mpg

    We drove the remains to our bunker to strip off the good parts, and left the main body there.

    http://media.armadilloaerospace.com/2002_11_16/b un ker.mpg

    Analysis

    The telemetry cut off only four seconds after throttle-up, indicating that the computer died, but there was very valuable data.

    Immediately after liftoff, there was a +Z angle rate kick, probably caused by the funny takeoff aerodynamics underneath the tail flare. The piece of aluminum sheet metal we put under the rocket for ground protection was folded in half and crumpled up after liftoff, which was completely unexpected. You can briefly see that in one of the liftoff video frames. The rate peaked at 22 deg/s, with the opposite attitude engine full on, then it started coming back down. The liftoff test last week did not show this behavior, but the feet were changed, and the surface was different this time. It is also possible that the main engine mount was slightly distorted by the travel.

    The Crossbow stopped updating 1.25 seconds before telemetry ceased.

    The vertical acceleration was right at one G when the Crossbow stopped updating, and very smooth. This was slightly higher than expected, indicating about 600 pounds of thrust from the engine at 280 psi takeoff tank pressure. The plumbing on the test stand was definitely limiting performance compared to the straight shot on the vehicle. The welded catalyst pack continues to perform very well.

    The battery voltage started dropping rapidly at this point, but the computer continued operating for another 1.25 seconds, until the battery voltage reached 9v, at which point telemetry ceased. The 15v power converter for the Crossbow probably suffered a voltage drop before the 5v power converter for the main computer. The main engine feedback potentiometer reading fell off as the 5v supply dropped below 5v, and the engine pressure transducer started falling off faster than it should as the supply voltage dropped below 10v. All of this points to a general power system failure, rather than just a computer power failure (which has triple redundant connections to the main power supply from the manned lander work).

    During the last 1.25 seconds of operation, the computer continued using the last valid Crossbow data, which caused it to hold the same two attitude engines on, which built up momentum on all three axis. Presumably the attitude solenoids all closed when the computer died and stopped sending an active signal to the solid state relay boards, but quite a bit of momentum could be built up in that time. The main engine would remain in the full-open position. As the vehicle did its flip, you could see it slowing down while it was pointed upwards.

    The flight control code has in the past had stop-all-engines behavior when the crossbow stops updating, but on this flight there was no cutoff checks, which was a mistake. If there had been, the rocket would have just dropped from about 20' in the air, and suffered much less damage. The exact timing for deciding the crossbow isn't working is a tough judgment call, but a quarter second should certainly be enough time to decide that the attitude engines should cut off. The decision to cut the main engine is harder, because the vehicle should be able to continue flying as an unguided, aerodynamically stabilized vehicle if it is going fast enough, but right-off-the-pad, it could turn into a land shark.

    There was one GPS update after liftoff, showing it at three meters above the ground, but with only a small vertical velocity. The processing latency on GPS velocity and position may be different.

    My initial thought was that something had shorted, perhaps in the motor drive feedback or pressure transducer, which have power running to them from the main bus. When we opened the electronics box, the cable to the battery positive terminal was not connected. The battery still had full voltage in it, so we believe that the terminal came off during the flight, causing the voltage drop that led to the failure, rather than during the crash. It is unfortunate that it seemed to work during the water test and warm-ups, but the drive from Texas probably loosened the connection to the point that it was barely hanging on. The batteries have slip-on connectors, which have bothered me for quite a while, but screw terminal batteries are not available until much larger sizes. We are going to drill our own screw terminals in the lugs of future batteries, and possibly solder them as well.

    The Damage

    The important thing is that the Crossbow IMU survived, because that costs more than everything else put together, and can have an 8 week lead time. I am going to buy a backup, in case we aren't so lucky next time. Crossbow is now offering (but not shipping yet) an improved fiber optic gyro IMU with half the drift rate, but they jacked up the price a few thousand dollars.

    The main tank actually seems to be ok, but we are not going to trust pressurizing it again.

    The fiberglass nose and tail cones were both broken.

    The engines casings for the parachute tower still look OK, I guess they bent away before the body hit them.

    The tower was mangled, of course.

    The pressure transducer at the top of the tank was broken.

    Our aluminum engine frame at the base was bent a fair amount.

    One attitude engine broke the jet holder fitting off inside, but we can probably remove it.

    The main engine servo valve had the half inch pipe fitting permanently bent in it, but we were able to swap that section of the valve with scrap from a valve broken in a different way, so it seems to have been saved, but we haven't leak checked it yet. The plastic connectors on the valve were very brittle from the cooking they took on our hover tests that stuck to the ground, and broke when disassembled. We are going to run Tefzel wire all the way to the valve motors in the future, instead of using the supplied pigtail connectors.

    All the plumbing survived, except for the two fittings that jammed in engines.

    All the engines look ok, but we will have to carefully check that the main engine hasn't bent its inlet connector.

    The WinSystems SBC computer seems dead. The memory SIMM was ripped out of the socket, which also partially detached, and even after reseating everything, it won't boot. The flash drive still works fine in another system, which saves me the effort of building a new linux system from my last backup.

    The antenna connector on the Esteem wireless unit is broken, but the unit looks OK. Taking the case apart showed that we can save a large amount of electronics area and several pounds by just mounting the guts and ditching the case.

    Both batteries have cracked cases, although neither one spilled any acid gel in the box.

    The fan over the power supplies was wrecked.

    The A/D breakout board was smashed by the batteries.

    New Vehicle Work

    We are going to proceed with the next vehicle design, as if this test had succeeded, rather than rebuilding an identical vehicle. The major change is to move to four large engines that are differentially throttled, instead of the single large engine and four solenoid controlled attitude engines. This goes back to the control style of our very first lander, and is motivated by the fact that we are bumping up against vehicle size limits for being controlled by the thrust we can get from solenoid based attitude engines.

    The vehicle will pay much more attention to streamlining, with the intention of being capable of supersonic flight. The nose will be 10 or 15 degrees, and we will be using a honeycomb composite constructed box fin arrangement for stability instead of the tail flare. There will be no external protrusions or loose cables along the sides. We are going to try a rear parachute ejection system, with an intentionally crushable top nose section

    The propulsion system will have a master cutoff valve, run by a separate watchdog computer. We have talked about this for ages, but not yet implemented it. If implemented on the last vehicle, it would have dropped it from a much lower altitude.

    We are going to make many changes in the electronics to improve reliability.

    There will be a backup 9600 baud telemetry radio, in addition to the Esteem 802.11b.

    No more solid core wire for DB connectors, move to 22 ga stranded Tefzel wire. All 18 gauge wire is already Tefzel, but I had been using solid wire for soldering serial cables, which is a known poor practice. I am moving to mil-spec double-crimp terminals for all flight hardware, instead of the single-crimp industrial terminals we have been using.

    Mount all the electronics, except for the inertial unit, on a vibration isolated board.

    New A/D breakout board

    The breakout board that WinSystems sells for their A/D board takes up a lot more space than necessary, and uses bare wire screw terminals for input, so we are going to replace it with a custom board that is smaller and takes ring terminals.

    16 signal inputs with #6 ring terminals, one ground is common to all signals measured.

    The range is +/- 10V, so we need to cut the main battery voltage in half before sampling. It is a toss up if this should be done on the A/D breakout board, or on the power supply board. There should be a grid of holes for soldering in random resistors or capacitors to modify signals.

    The grounds are common to all the signals, so I think all we need is a single ground ring terminal that we will run back to the power supply.

    The connector going to the A/D board is a 26 pin ribbon cable with the following pinout:

    1: ch0 2: ch8

    3: ch1 4: ch9

    5: gnd 6: gnd

    7: ch2 8: ch10

    9: gnd 10: gnd

    11: ch3 12: ch11

    13: gnd 14: gnd

    15: ch4 16: ch12

    17: gnd 18: gnd

    19: ch5 20: ch13

    21: gnd 22: gnd

    23: ch6 24: ch14

    25: ch7 26: ch15

    Watchdog Board

    Trivial microcontroller that watches a continuous signal from the main computer, and uses a private motor drive to open the master cutoff valve only when the main computer is healthy.

    Input:

    One optically isolated digital line from the main computer

    Private +12v / GND

    Output:

    Two #6 ring terminals to control the master cutoff servo valve (the main computer will still read the pot feedback of that valve)

    Power supply board

    Multiple, diode isolated batteries for redundancy, with an additional port for running on external power

    External charging ports for each battery, so the electronics don't need to be taken out of the vehicle for charging.

    Short run from batteries to boards, no in-line power switch. Use the power pin on the DC/DC power converters for switch-on. Use redundant switches to prevent a switch glitch under vibration from turning everything off.

    Run nothing from the unregulated power supply, except for the A/D line for current voltage level. We previously ran a couple things from the unregulated 12v supply, like the Esteem wireless unit, and the pressure transducer. It is possible we were losing telemetry momentarily earlier than the computer died, depending on the details of their power use.

    Instead of running wires from the power supply board to jumpered barrier strips for distribution as we previously did, build plenty of terminals directly onto the power supply board. At a minimum:

    Lots of grounds.

    Unregulated +12v: Battery A/D line

    +5v: computer (two lines)

    +5v: 6 motor drive potentiometer feedbacks

    +5v: several spares

    +6v: laser altimeter

    +12v: pressure transducer

    +12v: GPS

    +12v: Panel-PC LCD display

    +12v: Several spares

    -12v: Panel-PC LCD display

    +15v: Crossbow IMU

    We might want to use a higher voltage for the IMU, as the range is 15v-30v, and we have been warned by someone about running avionics at their minimum recommended voltages. Today's result seem to corroborate that it is closer to going out than the rest of the systems.

    Current draw signal for telemetry? If we ever have a short somewhere, this would be helpful in diagnostics.

    Isolated voltage signals for each battery? If we don't have that, telling when a battery has failed will be difficult.

    Actuator Boards

    Our current solid state relay board still has bare wire terminals (although they are high quality ones that haven't yet given problems), it still has the old power supply on it that we don't use, and one bit on the input connector is flaky, so it needs to be replaced.

    Isolated voltage signal for A/D telemetry?

    Isolated continuity checks for each actuator? The motor valves can be self-tested by watching the potentiometer feedback, but solenoids and pyro would need a low-current test signal. The actuator battery needs to be completely isolated from the main battery to avoid noise problems, so a continuity sensor would need to be isolated as well.

    We have known needs for up to six solid state relays and six motor drives, so building for eight and eight is probably good planning.

    • As far as I can tell from reading the report and looking at the video, this crash was not due to a computer failure.


      It was due to a design failure.


      The rocket appears to be unstable, which is to say that the center of gravity is behind the center of pressure. Looking at the pictures, it's not too surprising. The vehicle is too short vs. it's diameter, and the flared base isn't big enough to stabilize it (i.e. not big enough to push the Cp back behind the Cg of the vehicle).


      I imagine that Carmack etc. knew that it was aerodynamically unstable and counted on active feedback controls to compensate, which was their primary mistake. By doing so, they greatly increased the critical complexity of the system, which is to say they increased the number of things that would kill the vehicle if any one of them failed.


      It would have been far better to design for simplicity and graceful failure by building a vehicle that is aerodynamically stable. Someone forgot KISS.



      I guess I shouldn't be surprised -- this is what happens when you let programmers design rockets. :)

    • I hope Im not the only one who caught the real genius reference....

      "Would you classify that as a design problem or a launch problem?"
  • by Bamafan77 ( 565893 ) on Wednesday November 20, 2002 @04:44PM (#4718979)
    Quake physics is nothing like real life physics. ;)
  • Too many users... blah blah blah

    Probable cause: http://www.slashdot.org

    Try again in a few seconds...

    -xian@idsoftware.com
  • Too many users... blah blah blah

    Probable cause: http://www.slashdot.org [slashdot.org]

    Try again in a few seconds...

    -xian@idsoftware.com

  • Ouch! (Score:4, Interesting)

    by Raetsel ( 34442 ) on Wednesday November 20, 2002 @04:45PM (#4718988)

    Boy, that "from the lawn-dart dept." crack is painfully accurate. I just got the video (at ~12K/s), and that thing came almost straight down! (Yes, there was much tumbling involved, but at impact it was pointed pretty much 180 from the way it started.)

    Also, if you look close, you'll see metal (?) plates flapping on the ground at launch. (Looks like a folding launch pad.) Did they interfere with the rocket and throw its' stabilization routines off? Who knows.

  • by brandido ( 612020 ) on Wednesday November 20, 2002 @04:47PM (#4719008) Homepage Journal
    Predicted load of fifteen hundred users; unfortunately a web server failure caused the web site to tip over and dive into the ether from a hundred user load, causing severe damage (i.e., it requires a new server, not a new OS)
  • by Eros ( 6631 ) on Wednesday November 20, 2002 @04:48PM (#4719021)
    If my computer wasn't working, I couldn't get it up either. ;)
  • by Reality Master 101 ( 179095 ) <.moc.liamg. .ta. .101retsaMytilaeR.> on Wednesday November 20, 2002 @04:51PM (#4719048) Homepage Journal

    I believe that you stated in your write-up that you are going to go on the assumption that this one test had been successful, and move to the next model which will be capable of supersonic flight. After that, the X-prize level vehicle.

    It feels a bit like you are more actively trying to get to the X-prize level sooner rather than later; earlier entries seemed a bit more relaxed about timings.

    How much pressure are you feeling as far as competing with the other teams? How far ahead or behind to do you perceive yourself compared to the other teams? How do you like your chances of winning it all?

    (last silly question): Do you feel those competitive "deathmatch instincts" kicking in to win against the other teams?

    • I wouldn't hold my breath expecting an answer from John Carmack if I were you. Slashdot posting links to leaked copies of his company's software probably pissed him off just a little bit. But hey, why let shitting on the face of one of your site's biggest contributors stand in the way of a few warez?
  • The filename is: Armadillo_Aerospace-flightUnsuccessful.mpeg
  • Armadillo Aerospace News Archive

    Flight Unsuccessful

    November 12, 13, 15, and 16 (busy week!) meeting notes

    We prepared for and conducted our first remote flight test at the Oklahoma Spaceport facility in Burns Flat this week. Several lessons were learned.

    We built a checklist for our flight operations, which was a very good idea. Going through it before setting off caught several things we almost forgot.

    The five hour drive from Dallas to Burns Flat was rougher on the equipment than expected. The tarp we put over everything to keep people from staring was damaged by the wind in several places, and the wooden cradle we transport the vehicle on actually broke one of its 2x4 support bars. We are probably going to arrange some hoops for the trailer so we can tarp it like a covered wagon in the future. I may consider an enclosed trailer with a suspension in the future.

    Everyone was extremely helpful in Oklahoma, and we set up in the middle of a service road well off from the main airport runway. Our expected altitude with only five gallons of peroxide was under 1500', and our parachute drift range with 13 mph winds was only about 2000', so we had plenty of room. Bill Kourie from OSIDA stayed with us to communicate with the air traffic control tower during our launch activities.

    Our setup was a bit slower than we expected, but everything got done fairly smoothly. The VOX on the radios we brought was more trouble than it was worth, often triggering with wind noise, but this was our first time using radio communication.

    We did a full water test, then loaded up five gallons of peroxide. The engines all warmed quickly, and ran perfectly clear, even though it was in the mid 50s.

    When we were cleared for our launch, I smoothly throttled up the engine over a two second period. The vehicle tilted a little bit on liftoff, but seemed to straighten out, but it then continued tipping, eventually tipping all the way over and flipping into the ground from a hundred or so feet up.

    There was still peroxide left in the vehicle tank, but all the pressure had drained out by the time we reached it. We tipped it up to allow the remaining peroxide to drain down into the main engine and slowly catalyze away, then we carried the vehicle back to the road to run some low pressure water through it to clean it up.

    flight video [armadilloaerospace.com]

    We drove the remains to our bunker to strip off the good parts, and left the main body there.

    http://media.armadilloaerospace.com/2002_11_16/bun ker.mpg Analysis

    The telemetry cut off only four seconds after throttle-up, indicating that the computer died, but there was very valuable data.

    Immediately after liftoff, there was a +Z angle rate kick, probably caused by the funny takeoff aerodynamics underneath the tail flare. The piece of aluminum sheet metal we put under the rocket for ground protection was folded in half and crumpled up after liftoff, which was completely unexpected. You can briefly see that in one of the liftoff video frames. The rate peaked at 22 deg/s, with the opposite attitude engine full on, then it started coming back down. The liftoff test last week did not show this behavior, but the feet were changed, and the surface was different this time. It is also possible that the main engine mount was slightly distorted by the travel.

    The Crossbow stopped updating 1.25 seconds before telemetry ceased.

    The vertical acceleration was right at one G when the Crossbow stopped updating, and very smooth. This was slightly higher than expected, indicating about 600 pounds of thrust from the engine at 280 psi takeoff tank pressure. The plumbing on the test stand was definitely limiting performance compared to the straight shot on the vehicle. The welded catalyst pack continues to perform very well.

    The battery voltage started dropping rapidly at this point, but the computer continued operating for another 1.25 seconds, until the battery voltage reached 9v, at which point telemetry ceased. The 15v power converter for the Crossbow probably suffered a voltage drop before the 5v power converter for the main computer. The main engine feedback potentiometer reading fell off as the 5v supply dropped below 5v, and the engine pressure transducer started falling off faster than it should as the supply voltage dropped below 10v. All of this points to a general power system failure, rather than just a computer power failure (which has triple redundant connections to the main power supply from the manned lander work).

    During the last 1.25 seconds of operation, the computer continued using the last valid Crossbow data, which caused it to hold the same two attitude engines on, which built up momentum on all three axis. Presumably the attitude solenoids all closed when the computer died and stopped sending an active signal to the solid state relay boards, but quite a bit of momentum could be built up in that time. The main engine would remain in the full-open position. As the vehicle did its flip, you could see it slowing down while it was pointed upwards.

    The flight control code has in the past had stop-all-engines behavior when the crossbow stops updating, but on this flight there was no cutoff checks, which was a mistake. If there had been, the rocket would have just dropped from about 20' in the air, and suffered much less damage. The exact timing for deciding the crossbow isn't working is a tough judgment call, but a quarter second should certainly be enough time to decide that the attitude engines should cut off. The decision to cut the main engine is harder, because the vehicle should be able to continue flying as an unguided, aerodynamically stabilized vehicle if it is going fast enough, but right-off-the-pad, it could turn into a land shark.

    There was one GPS update after liftoff, showing it at three meters above the ground, but with only a small vertical velocity. The processing latency on GPS velocity and position may be different.

    My initial thought was that something had shorted, perhaps in the motor drive feedback or pressure transducer, which have power running to them from the main bus. When we opened the electronics box, the cable to the battery positive terminal was not connected. The battery still had full voltage in it, so we believe that the terminal came off during the flight, causing the voltage drop that led to the failure, rather than during the crash. It is unfortunate that it seemed to work during the water test and warm-ups, but the drive from Texas probably loosened the connection to the point that it was barely hanging on. The batteries have slip-on connectors, which have bothered me for quite a while, but screw terminal batteries are not available until much larger sizes. We are going to drill our own screw terminals in the lugs of future batteries, and possibly solder them as well.

    The Damage

    The important thing is that the Crossbow IMU survived, because that costs more than everything else put together, and can have an 8 week lead time. I am going to buy a backup, in case we aren't so lucky next time. Crossbow is now offering (but not shipping yet) an improved fiber optic gyro IMU with half the drift rate, but they jacked up the price a few thousand dollars.

    The main tank actually seems to be ok, but we are not going to trust pressurizing it again.

    The fiberglass nose and tail cones were both broken.

    The engines casings for the parachute tower still look OK, I guess they bent away before the body hit them.

    The tower was mangled, of course.

    The pressure transducer at the top of the tank was broken.

    Our aluminum engine frame at the base was bent a fair amount.

    One attitude engine broke the jet holder fitting off inside, but we can probably remove it.

    The main engine servo valve had the half inch pipe fitting permanently bent in it, but we were able to swap that section of the valve with scrap from a valve broken in a different way, so it seems to have been saved, but we haven't leak checked it yet. The plastic connectors on the valve were very brittle from the cooking they took on our hover tests that stuck to the ground, and broke when disassembled. We are going to run Tefzel wire all the way to the valve motors in the future, instead of using the supplied pigtail connectors.

    All the plumbing survived, except for the two fittings that jammed in engines.

    All the engines look ok, but we will have to carefully check that the main engine hasn't bent its inlet connector.

    The WinSystems SBC computer seems dead. The memory SIMM was ripped out of the socket, which also partially detached, and even after reseating everything, it won't boot. The flash drive still works fine in another system, which saves me the effort of building a new linux system from my last backup.

    The antenna connector on the Esteem wireless unit is broken, but the unit looks OK. Taking the case apart showed that we can save a large amount of electronics area and several pounds by just mounting the guts and ditching the case.

    Both batteries have cracked cases, although neither one spilled any acid gel in the box.

    The fan over the power supplies was wrecked.

    The A/D breakout board was smashed by the batteries.

    New Vehicle Work

    We are going to proceed with the next vehicle design, as if this test had succeeded, rather than rebuilding an identical vehicle. The major change is to move to four large engines that are differentially throttled, instead of the single large engine and four solenoid controlled attitude engines. This goes back to the control style of our very first lander, and is motivated by the fact that we are bumping up against vehicle size limits for being controlled by the thrust we can get from solenoid based attitude engines.

    The vehicle will pay much more attention to streamlining, with the intention of being capable of supersonic flight. The nose will be 10 or 15 degrees, and we will be using a honeycomb composite constructed box fin arrangement for stability instead of the tail flare. There will be no external protrusions or loose cables along the sides. We are going to try a rear parachute ejection system, with an intentionally crushable top nose section

    The propulsion system will have a master cutoff valve, run by a separate watchdog computer. We have talked about this for ages, but not yet implemented it. If implemented on the last vehicle, it would have dropped it from a much lower altitude.

    We are going to make many changes in the electronics to improve reliability.

    There will be a backup 9600 baud telemetry radio, in addition to the Esteem 802.11b.

    No more solid core wire for DB connectors, move to 22 ga stranded Tefzel wire. All 18 gauge wire is already Tefzel, but I had been using solid wire for soldering serial cables, which is a known poor practice. I am moving to mil-spec double-crimp terminals for all flight hardware, instead of the single-crimp industrial terminals we have been using.

    Mount all the electronics, except for the inertial unit, on a vibration isolated board.

    New A/D breakout board

    The breakout board that WinSystems sells for their A/D board takes up a lot more space than necessary, and uses bare wire screw terminals for input, so we are going to replace it with a custom board that is smaller and takes ring terminals.

    16 signal inputs with #6 ring terminals, one ground is common to all signals measured.

    The range is +/- 10V, so we need to cut the main battery voltage in half before sampling. It is a toss up if this should be done on the A/D breakout board, or on the power supply board. There should be a grid of holes for soldering in random resistors or capacitors to modify signals.

    The grounds are common to all the signals, so I think all we need is a single ground ring terminal that we will run back to the power supply.

    The connector going to the A/D board is a 26 pin ribbon cable with the following pinout:

    1: ch0 2: ch8 3: ch1 4: ch9 5: gnd 6: gnd 7: ch2 8: ch10 9: gnd 10: gnd 11: ch3 12: ch11 13: gnd 14: gnd 15: ch4 16: ch12 17: gnd 18: gnd 19: ch5 20: ch13 21: gnd 22: gnd 23: ch6 24: ch14 25: ch7 26: ch15

    Watchdog Board

    Trivial microcontroller that watches a continuous signal from the main computer, and uses a private motor drive to open the master cutoff valve only when the main computer is healthy.

    Input:

    One optically isolated digital line from the main computer

    Private +12v / GND

    Output:

    Two #6 ring terminals to control the master cutoff servo valve (the main computer will still read the pot feedback of that valve)

    Power supply board

    Multiple, diode isolated batteries for redundancy, with an additional port for running on external power

    External charging ports for each battery, so the electronics don't need to be taken out of the vehicle for charging.

    Short run from batteries to boards, no in-line power switch. Use the power pin on the DC/DC power converters for switch-on. Use redundant switches to prevent a switch glitch under vibration from turning everything off.

    Run nothing from the unregulated power supply, except for the A/D line for current voltage level. We previously ran a couple things from the unregulated 12v supply, like the Esteem wireless unit, and the pressure transducer. It is possible we were losing telemetry momentarily earlier than the computer died, depending on the details of their power use.

    Instead of running wires from the power supply board to jumpered barrier strips for distribution as we previously did, build plenty of terminals directly onto the power supply board. At a minimum:

    Lots of grounds.



    Unregulated +12v: Battery A/D line

    +5v: computer (two lines)

    +5v: 6 motor drive potentiometer feedbacks

    +5v: several spares

    +6v: laser altimeter

    +12v: pressure transducer

    +12v: GPS

    +12v: Panel-PC LCD display

    +12v: Several spares

    -12v: Panel-PC LCD display

    +15v: Crossbow IMU

    We might want to use a higher voltage for the IMU, as the range is 15v-30v, and we have been warned by someone about running avionics at their minimum recommended voltages. Today's result seem to corroborate that it is closer to going out than the rest of the systems.

    Current draw signal for telemetry? If we ever have a short somewhere, this would be helpful in diagnostics.

    Isolated voltage signals for each battery? If we don't have that, telling when a battery has failed will be difficult.

    Actuator Boards

    Our current solid state relay board still has bare wire terminals (although they are high quality ones that haven't yet given problems), it still has the old power supply on it that we don't use, and one bit on the input connector is flaky, so it needs to be replaced.

    Isolated voltage signal for A/D telemetry?

    Isolated continuity checks for each actuator? The motor valves can be self-tested by watching the potentiometer feedback, but solenoids and pyro would need a low-current test signal. The actuator battery needs to be completely isolated from the main battery to avoid noise problems, so a continuity sensor would need to be isolated as well.

    We have known needs for up to six solid state relays and six motor drives, so building for eight and eight is probably good planning.
  • Rumor has it that apparently ATI was to blame, they leaked/launched the rocket before it was truly debugged and optimized. Investigation to follow.
  • by iiioxx ( 610652 ) <iiioxx@gmail.com> on Wednesday November 20, 2002 @04:52PM (#4719068)
    ... by the fine folks at Acme, Inc.

    There wasn't a coyote strapped to that rocket by any chance, was there?
  • More information... (Score:5, Informative)

    by Reality Master 101 ( 179095 ) <.moc.liamg. .ta. .101retsaMytilaeR.> on Wednesday November 20, 2002 @04:53PM (#4719076) Homepage Journal

    Carmack makes quite a few posts to this Amateur Rocketry Board [erps.org]. Makes pretty interesting reading about the technical aspects of his rocket launches.

  • Some of us are forgetting mentioning that they suspect that the real cause was a total power failure which in turn caused the computer to loose power and cease functioning. In the article it explains that, for some stupid ass reason, they were using slip on battery connectors...come on guys, its a rocket, it vibrates, and it appeared that the terminals came loose before ground impact which would explain why the rocket behaved as it did.
    • It may take them quite some time to figure it out but, I have already done the research and know what the precise cause is.

      Deceleration trauma was in fact, the cause of failure.
      • I would hesitate a guess that deceleration trauma was, in fact, the result of the failure...

        unless you count don't count "not going up" as a failure in the lift-off sequence of a rocket.

        I find your methods of deduction and data creation^H^H^H^H^H^H^H^Hanalysis interesting though... did you study under Jan Hendrik Schön [slashdot.org]?
  • by xenocide2 ( 231786 ) on Wednesday November 20, 2002 @04:54PM (#4719085) Homepage
    The lecture. [virtualave.net] "The missile knows where it is, because it knows where it isn't"
  • It was a loose wire (Score:5, Informative)

    by LucVdB ( 64664 ) on Wednesday November 20, 2002 @04:55PM (#4719093) Homepage
    The computer died because one of the battery wires wiggled itself loose. I wouldn't really call that a 'computer malfunction'.

    The computer runs Linux, by the way.
  • It's heartening to see so much interest in this flight. I mean, I can't get to it -- and I've tried numerous times. Fortunately, I've been following their work for some time. So I will make a few general comments.

    OK, the rocket didn't work as hoped for. That's what experiments are for. People do these things to learn things. From this experiment they found problems with software. Problems like that can be fixed. How many times have people here written even a simple program that failed more than once while debugging was going on?

    It's good to see someone with some money striking out on their own in aerospace again. We need work like this to advance the field. We need independent work to try out new ideas and drop failed paradigms.

  • Long way to go (Score:4, Insightful)

    by heroine ( 1220 ) on Wednesday November 20, 2002 @04:56PM (#4719110) Homepage
    When they get up to 10 miles they're going to need to pump more fuel than an electric pump or a pressure sphere can generate. They'll need to build a turbopump and run it at its bursting point. This will require an engine redesign to recirculate propellant through the turbopump and be hundreds of times harder than what they've been doing for the last 2 years.

    When they get to 20 miles they're going to need to heat the fuel beyond the melting point of their engine casing and they'll need to circulate fuel in the engine casing to cool it. This will require yet another engine redesign. There are so many problems in getting altitude that if it took 2 years to get to 100 feet it'll take hundreds of years to get to 150 miles. Anything less than 150 miles for a spacecraft just isn't practical.

    • Re:Long way to go (Score:5, Insightful)

      by silentbozo ( 542534 ) on Wednesday November 20, 2002 @05:33PM (#4719433) Journal
      Huh? Their "fuel" is hydrogen peroxide, which converts to steam when it hits the catalyzing screens just prior to the engine nozzles. The screens should be plenty hot when they hit higher altitudes, and a pressure sphere will increase in performance (up to a point) as the the outer atmospheric pressure decreases. I really don't see how a turbopump comes into the equation, as you don't have separate fuel/oxidizers to combine and ignite.
    • Not true at all (Score:2, Interesting)

      by Anonymous Coward
      Pressure fed rockets can achieve significant altitudes, just look at the Scorpius and Beal efforts. France developed and launched a pressure fed orbital launcher years ago. No turbopumps are required at all.

      Even if pumps are decided to be used, there are a couple low-tech alternatives to turbopumps that have been demonstrated in the past ten years, the ASTRID piston pump and the Flowmetrics Pistonless Pump come immediately to mind.

      There's also the gas generator to be considered, basically pressurizing the propellants with a specially designed slow-burning solid rocket motor or a slow peroxide feed on a catalyst pack connected to the main propellant tanks.

      Turbopumps are old tech!
  • by spun ( 1352 ) <loverevolutionary&yahoo,com> on Wednesday November 20, 2002 @04:56PM (#4719120) Journal
    As opposed to the outdated cubical rockets?
  • Mirror of the movies (Score:5, Informative)

    by OverlordQ ( 264228 ) on Wednesday November 20, 2002 @04:57PM (#4719128) Journal
    First Movie [bc-hq.com]
    and
    Second Movie [bc-hq.com] mirrored for your enjoyment.
  • Pull this story immediately! If someone sees it and tells Justin Timberlake, we'll never get him on one of those things!
  • Keep trying... (Score:5, Interesting)

    by Goonie ( 8651 ) <robert,merkel&benambra,org> on Wednesday November 20, 2002 @05:18PM (#4719296) Homepage
    On the off chance the Armadillo guys read this post, I'd just like to congratulate them for making it as far as they have, and hope that they aren't too discouraged by the less-than-perfect result of this test. If you expect things to work perfectly every time, you'll never try anything new.

    Good luck, and count me in for a ticket when the bugs are out of the system!

    • I'd just like to congratulate them for making it as far as they have ...

      As far as they have? I've launched frogs and lizards farther than that on an este's rocket powered tube of cardboard ten years ago... LOL

      Just kidding, I know they've put a lot of effort into this project, and I really hope they succeed. But I have to admit, the comments posted to this story (especially the link to that Dragon cartoon) are the funniest things I've seen all week. :)
  • Doesn't an armadillo burrow into the ground? If so, why are they surprised that their rocket attempted the same thing? It probably developed an AI and decieded "fuck space - I'm gonna dig myself a nice little hole in the ground!"
  • by tswinzig ( 210999 ) on Wednesday November 20, 2002 @05:31PM (#4719407) Journal
    "NOVEMBER SKY" doesn't translate into anything nearly as cool as "ROCKET BOYS."

    I mean, according to anagram science, Carmack should have been asking his girl to "SERVE MY KNOB."

  • by YrWrstNtmr ( 564987 ) on Wednesday November 20, 2002 @05:33PM (#4719429)
    This is what happens when you miss the timing on a rocketjump.
  • by YrWrstNtmr ( 564987 ) on Wednesday November 20, 2002 @05:36PM (#4719463)
    We built a checklist for our flight operations, which was a very good idea. Going through it before setting off caught several things we almost forgot.

    Except the one thing that you did forget.
    Haing a checklist is one thing. Having a complete checklist is evidently something else.
  • Comment removed (Score:3, Insightful)

    by account_deleted ( 4530225 ) on Wednesday November 20, 2002 @05:37PM (#4719466)
    Comment removed based on user account deletion
  • http://mi6hq.dyndns.org/bunker.mpg
    http://mi6hq.d yndns.org/flightUnsuccessful.mpg

    Enjoy .. my server maybe @rr.com .. but on a commercial account it should be able to take it.

  • Is that thing suppose to actually be able to fly? Whats with the base of that thing? There's no fins, just a big skirt.

    It brought back memories of the Junkyard Wars Christmas Tree rocket. It also reminded me of an 8th grade science project in which a fellow classmate built a rocket according to Wylie Coyote specifications with an nose cone that was significantly larger than the fuselage - it went about 20 feet and landed on the roof.
    • Has no fins etc because it is actively guided with attitude control engines, like most 'real' rockets are. Look at a Delta/Titan/Soyuz/Proton. No fins. The failure was due to the computer power connector comming undone.

      If you had seen their previous 'lander' vehicles, they were even less rocket shaped, just a frame with some engines, tanks and electronics strapped on, and flew quite well (at low speed and altitude).
  • by Anonymous Coward
    We built a checklist for our flight operations, which was a very good idea. Going through it before setting off caught several things we almost forgot.

    Hello? Do you think so? Why do you think pilots who have been flying for 30+ years go through a checklist before every single takeoff? Seems like the notion of a checklist would be so self-evident from the start -- saying "hey, we thought it would be a nifty idea to create a checklist" makes me wonder about this operation.

    It also sounds like the checklist ought to be updated to include things like "check all connections thoroughly after long and rougher-than-anticipated transport of vehicle."
  • Does anyone remember seeing footage of early attempts at launches from the '50s (Vanguard etc...)?

    Many of them did the same thing. Went up. Arced over. Went Down.
  • second try (Score:2, Informative)

    by satsuke ( 263225 )
    Bunker.mpg (mi6hq.com) [mi6hq.com] flight Unsuccessful.mpg (mi6hq.com) [dyndns.org] My second try for posting mirrors of mpg files. now with html tages (Because it's so hard to copy and paste or highlight and middle click)
  • estes! [estesrockets.com]
  • I like the way it flies neatly over the guy in blue jeans. You can see him just at the end of the clip. I can't tell looking at the clip if he's mission control or just some guy having a barbeque. My compliments to the Oklahoma Spaceport's range safety officer.
  • ... they should've waited for the point release!
  • "Rocket Flight DOOMed, But Not Due to Leak."
  • I love their current default overflow page Too many users... blah blah blah Probable cause: http://www.slashdot.org Try again in a few seconds... -xian@idsoftware.com
  • I'm sure I can rocket jump higher than this!

  • The test vehicle got a few hundred feet up before turning into the ground. That's a few hundred feet higher than the X-33 got with about $1 billion of funding.

    Rocket engineering should be like that. 'Crash and learn' is a much more productive use of time and money than 'here are the viewgraphs that your last billion dollars bought.'
  • Just think of all the crazy stuff that'd be happening now if they were called Donkey.

Top Ten Things Overheard At The ANSI C Draft Committee Meetings: (10) Sorry, but that's too useful.

Working...