Markus Fischbacher rockaut

Raspberry Pi on Internet via reverse SSH tunnel

HackerNews discussed this with many alternative solutions: https://news.ycombinator.com/item?id=24893615

I already have my own domain name: mydomain.com. I wanted to be able to run some webapps on my Raspberry Pi 4B running perpetually at home in headless mode (just needs 5W power and wireless internet). I wanted to be able to access these apps from public Internet. Dynamic DNS wasn't an option because my ISP blocks all incoming traffic. ngrok would work but the free plan is too restrictive.

I bought a cheap 2GB RAM, 20GB disk VM + a 25GB volume on Hetzner for about 4 EUR/month. Hetzner gave me a static IP for it. I haven't purchased a floating IP yet.

Guide

You can use the OpenFaaS helm chart to generate custom YAML files for your OpenFaaS installation on ARMHF and ARM64.

Why? tiller is not available for ARM so we cannot customize the chart that way. So instead we ship some defaults for the community which you can then tweak as you see fit.

But what might you want to change?

httpProbe - this is a much faster way to check functions are healthy than the default execProbe

Python zipapp web apps

What's a zipapp?

This concept is very much like .jar or .war archives in Java.

NOTE: The built .pyz zipapp can run on both Python 2 & 3 but you can only build .pyz zipapps with Python 3.5 or later.

Initial setup

Enable Docker Remote API with TLS client verification

Docker's Remote API can be secured via TLS and client certificate verification.
First of all you need a few certificates and keys:

CA certificate
Server certificate
Server key
Client certificate
Client key

Create certificate files

Problem: When linking to the raw version of a gist, the link changes with each revision.

Solution:

To return the first file from a gist: https://gist.github.com/[gist_user]/[gist_id]/raw/

Example: https://gist.github.com/atenni/5604522/raw/
Works even when you change the filename.

To get a file from multi–file gist: https://gist.github.com/[gist_user]/[gist_id]/raw/[file_name]

	#!/bin/bash

	# https://retropie.org.uk/forum/topic/2295/runcommand-warning-if-voltage-temperature-throttling

	#Flag Bits
	UNDERVOLTED=0x1
	CAPPED=0x2
	THROTTLED=0x4
	HAS_UNDERVOLTED=0x10000
	HAS_CAPPED=0x20000

	import argparse
	import platform
	import subprocess
	from edgetpu.detection.engine import DetectionEngine
	from PIL import Image
	from PIL import ImageFont, ImageDraw

	# Function to draw a rectangle with width > 1
	def draw_rectangle(draw, coordinates, color, width=1):
	for i in range(width):

	---
	####
	#### THIS IS OLD AND OUTDATED
	#### LIKE, ANSIBLE 1.0 OLD.
	####
	#### PROBABLY HIT UP https://docs.ansible.com MY DUDES
	####
	#### IF IT BREAKS I'M JUST SOME GUY WITH
	#### A DOG, OK, SORRY
	####