PI bootstrap

> sudo apt-get update
> sudo apt-get install ansible git python3-pip
> ansible-pull -U https://github.com/monkey-codes/hydroponics.git -i bootstrap-pi/hosts bootstrap-pi/local.yml

After bootstrap, sudo to allow members of sudo group to sudo without password.

> EDITOR=vi visudo

change %sudo ALL=(ALL:ALL) ALL to %sudo ALL=(ALL:ALL) NOPASSWD: ALL

View service logs

> journalctl -u github-webhook-receiver -f
# OR
> journalctl -u upload -f

Restart service

> systemctl restart upload.service

Copy the certificate files (hydropi.cert.pem, hydropi.private.key, root-CA.crt) for AWS IOT to the device under /home/hydro/

To find the endpoint url:

> aws iot describe-endpoint --endpoint-type iot:Data-ATS

Trigger upload

> echo "/tmp/test|logs/blah" | socat - UNIX-CONNECT:/home/hydro/upload.sock

Testing using VirtualBox/Vagrant

Setup vm

Install virtualbox and vagrant. In a new directory create a Vagrantfile

Vagrant.configure("2") do |config|
  config.vm.box = "debian/bullseye64"

 config.vm.provider "virtualbox" do |vb|
    vb.memory = "1024"
  end

end

Then run vagrant up & vagrant ssh to get a shell on the vm

Create a virtual webcam

> sudo apt-get -y install v4l2loopback-dkms
> sudo modprobe v4l2loopback devices=1 video_nr=1 card_label='MyWebCam'
#/dev/video1

Stream static image to virtual webcam using ffmpeg

> sudo apt-get -y install ffmpeg
> ffmpeg -loop 1 -re -i ./test.jpg -f v4l2 -pix_fmt yuv420p /dev/video1

Creating Users

The intention is to restrict api access to only manually created users, no public sign-up is supported.

Manually create a user in aws console using cognito. This will require a password reset. To do a login call the initiate auth api

> POST / HTTP/2
> Host: cognito-idp.ap-southeast-2.amazonaws.com
> content-type: application/x-amz-json-1.1
> x-amz-target: AWSCognitoIdentityProviderService.InitiateAuth
 {
    "AuthParameters" : {
       "USERNAME" : "user",
       "PASSWORD" : "*****"
    },
    "AuthFlow" : "USER_PASSWORD_AUTH",
    "ClientId" : "xxxxxxxxxx"
 }

The first time the api will respond with a NEW_PASSWORD_REQUIRED challenage. Use aws-cli to respond to the challenge:

aws cognito-idp respond-to-auth-challenge --client-id xxxxx --challenge-name NEW_PASSWORD_REQUIRED --challenge-responses USERNAME=monkey,NEW_PASSWORD="***" --session "xxxx"

After a password reset the initiate auth endpoing will return IdToken, AccessToken and a RefreshToken

At the time of writing custom scopes was only available through hosted ui / oauth2 endpoints and not via InitiateAuth api.

Useful commands

npm run build compile typescript to js
npm run watch watch for changes and compile
npm run test perform the jest unit tests
cdk deploy deploy this stack to your default AWS account/region
cdk diff compare deployed stack with current state
cdk synth emits the synthesized CloudFormation template

Lambdas

Manually run npm install (node 16) in lambda folders that contain a package.json. TODO figure out if there is a way to automate this through cdk

#Android

List devices (emulators and physical)

> adb devices -l

Install an apk on a (physical) device

> adb -s IVGUWGWWAQF6QK79 install ./app-debug.apk