yi-hack-Allwinner-v2 Support for QFUS - yi 1080p PTZ outdoor Camera

Hello Roleoroleo,

is it possible to customize the firmware to support the yi 1080p PTZ outdoor Camera or is it all ready compatible? This model is quite new I guess. and I bought it via Ali Express. it is fully integrated with the Yi Home App, but I was not able to find a custom firmware to use the rtsp streams. Regarding some Discord channels some of the developer mentioned that your firmware is the closest one that is compatible with the camera. Is the true or does it require some development time to get it working? Firmware Version is 9.0.45.00_202101251914 and the ID Beginns with "QFUSXXXXXXX"

May 17 '21 11:05 ABrauser

Same camera here, seems to do something r30gb (does boot into yi hack and can get on the yi hack webinterface) can take a snapshot, but the image seems encrypted, after taking a snapshot the cam reboots.

Would be nice to have support for it, if testing is needed i'll be happy to do some

May 31 '21 18:05 bfboarder

Are you able to dump a backup? Check the wiki.

About reboot, enable swap file.

Jun 02 '21 12:06 roleoroleo

Are you able to dump a backup? Check the wiki.

About reboot, enable swap file.

Yes, backup seems to have worked

LINK REMOVED

Jun 03 '21 05:06 bfboarder

Your cam is a r40ga. I will try to add it.

Jun 03 '21 16:06 roleoroleo

Here it is a first alpha version: r40ga_0.1.7.tar.gz

Probably rtsp and snapshot don't work. Install it and check if ssh and web work.

Jun 04 '21 10:06 roleoroleo

Man your fast :-) thanks for all the work your putting into this. Below my test findings on the alpha version:

Configuration: Hostname - works date time server and timezone - works ftp - works ssh - works telnet - works Mqtt seems to work, but when enabled and rebooting the cam using the webinterface it will never let you get back into the webinterface without powercycling the camera bij unplugging it from the mains. Allso making changes to other settings and rebooting via maintanance locks you out of the webinterface untill you power cycle. Disabeling yi cloud does work, but no files are stored local Motion events does seem to create a folder, but does not record On ssh I get "mount: mounting none on /sys/kernel/debug failed: Resource busy" Not sure if this is related to the not recording and the freezing after sooft reboot, but it might be that it can not mount the sd correctly?!? snapshot - not working rtsp - not working onviv - seems to find the camera but shows a connection refused ptz - not working (stating it is not availale on this cam)

Jun 04 '21 12:06 bfboarder

Ok, send me 3 copies of your /dev/shm/fshare_frame_buf It's the video buffer. Make a copy, wait 5 seconds, make another copy, wait 5 seconds and make the last copy. Compress it and send it to me. I will try to fix rtsp and snapshot.

Jun 06 '21 12:06 roleoroleo

Not sure how exact the 5 seconds in between have to be......but i tried to stay close to 5 seconds :)

dev_shm_fshare.zip

Jun 06 '21 18:06 bfboarder

The video is very different. I need a lot of time to make this cam compatible.

Jun 07 '21 17:06 roleoroleo

The video is very different. I need a lot of time to make this cam compatible.

No problem, the cam is not going anywhere so take all the time you need. I wish I could help, but my linux and camera knowledge is not so good. If I can do anything, help testing or sending files/logs let me know, i'll do what i can.

Jun 07 '21 17:06 bfboarder

i will donate you some beers to keep the stress level down during the process! cheers :)

Jun 07 '21 18:06 ABrauser

Thank you, I'll let you know as soon as possible.

Jun 07 '21 18:06 roleoroleo

Overwrite the files in /tmp/sd/yi-hack/bin with the content of this archive: r40ga.tar.gz

Jun 08 '21 07:06 roleoroleo

Overwrite the files in /tmp/sd/yi-hack/bin with the content of this archive: r40ga.tar.gz

Test with the new files. no luck

snapshot page stays empty
no video is saved in the motion tab (only empty date time folders are created
VLC won't connect to the stream (vlc log below)
onvif does find cam but gives connection error as well

-- logger module started -- main: Running vlc with the default interface. Use 'cvlc' to use vlc without interface. main: playlist is empty live555 error: Failed to connect with rtsp://192.168.1.43:554 main error: connection failed: Connection refused by peer satip error: Failed to connect to RTSP server 192.168.1.43:554 main error: connection failed: Connection refused by peer access_realrtsp error: cannot connect to 192.168.1.43:554 live555 error: Failed to connect with rtsp://192.168.1.43:554/ch0_0.h264 main error: connection failed: Connection refused by peer satip error: Failed to connect to RTSP server 192.168.1.43:554 main error: connection failed: Connection refused by peer access_realrtsp error: cannot connect to 192.168.1.43:554 -- logger module stopped --

Jun 08 '21 16:06 bfboarder

* snapshot page stays empty

Try to run the webservices: http://192.168.1.200:8080/cgi-bin/snapshot.sh http://192.168.1.244:8080/cgi-bin/snapshot.sh?res=low

* VLC won't connect to the stream (vlc log below)

Did you try both high and low res? Log in with ssh and check if programs are running (command ps).

* onvif does find cam but gives connection error as well

This is normal because rtsp doesn't work.

Jun 08 '21 16:06 roleoroleo

Both web requests return a blank page (empty even in the dev tools there are no tags or anything) only a 200 OK

Request URL: http://192.168.1.43:8080/cgi-bin/snapshot.sh?res=low Request Method: GET Status Code: 200 OK

Below the list of running programs:

  PID USER       VSZ STAT COMMAND
    1 root       980 S    /sbin/init
    2 root         0 SW   [kthreadd]
    3 root         0 SW   [ksoftirqd/0]
    5 root         0 SW<  [kworker/0:0H]
    7 root         0 SW   [rcu_preempt]
    8 root         0 SW   [rcu_sched]
    9 root         0 SW   [rcu_bh]
   10 root         0 SW<  [lru-add-drain]
   11 root         0 SW   [kdevtmpfs]
  207 root         0 SW   [oom_reaper]
  208 root         0 SW<  [writeback]
  210 root         0 SW   [kcompactd0]
  211 root         0 SW<  [crypto]
  212 root         0 SW<  [bioset]
  214 root         0 SW<  [kblockd]
  255 root         0 SW   [sys_user]
  263 root         0 SW<  [cfg80211]
  269 root         0 SW<  [watchdogd]
  289 root         0 SW<  [spi0]
  299 root         0 SW   [kswapd0]
  383 root         0 SW<  [bioset]
  388 root         0 SW<  [bioset]
  393 root         0 SW<  [bioset]
  398 root         0 SW<  [bioset]
  403 root         0 SW<  [bioset]
  408 root         0 SW<  [bioset]
  413 root         0 SW<  [bioset]
  418 root         0 SW<  [bioset]
  423 root         0 SW<  [bioset]
  451 root         0 SW   [irq/302-sunxi-m]
  453 root         0 SW   [irq/166-sdc0 cd]
  509 root         0 SW<  [bioset]
  510 root         0 SW   [mmcqd/0]
  535 root         0 SW<  [kworker/0:1H]
  551 root         0 SWN  [jffs2_gcd_mtd4]
  557 root       980 S    -/bin/sh
  588 root       980 S    /usr/sbin/telnetd
  615 root      1172 S    ./dispatch
 1114 root     52624 S    ./rmm
 1176 root         0 SW   [RTW_CMD_THREAD]
 1195 root      1424 S    /backup/tools/wpa_supplicant -c/tmp/wpa_supplicant.c
 1433 root       980 S    udhcpc -i wlan0 -b -s /backup/tools/default.script -
 1586 root      2896 S    ./mp4record
 1601 root       860 S    httpd -p 8080 -h /tmp/sd/yi-hack/www/ -c /tmp/httpd.
 1619 root       844 S    pure-ftpd (SERVER)
 1634 root       876 S    dropbear -R -B
 1636 root       668 S    ipc_multiplexer
 1835 root       860 S    ntpd -p pool.ntp.org
 1911 root       996 S    {wd_rtsp.sh} /bin/sh /tmp/sd/yi-hack/script/wd_rtsp.
 1967 root      2072 S    wsdd --pid_file /var/run/wsdd.pid --if_name wlan0 --
 1968 root      2420 S    framefinder r40ga
 1993 root       860 S    /tmp/sd/yi-hack/usr/sbin/crond -c /var/spool/cron/cr
13609 root         0 SW   [kworker/u2:1]
22850 root         0 SW   [kworker/u2:2]
23347 root         0 SW   [kworker/0:1]
26439 root         0 SW   [kworker/0:0]
26777 root         0 SW   [kworker/u2:0]
28729 root       900 R    dropbear -R -B
28784 root       980 S    -ash
28868 root       980 S    sleep 10
28890 root       980 R    ps

Tried high and low res, both give the same connection error

Jun 08 '21 17:06 bfboarder

rtsp is not running, I don't know why. Try to run it manually and check the log:

killall wd_rtsp.sh
. /tmp/sd/yi-hack/script/env.sh
RRTSP_MODEL=r40ga RRTSP_RES=both RRTSP_AUDIO=no RRTSP_DEBUG=1 rRTSPServer

Jun 08 '21 17:06 roleoroleo

Do the . /tmp/sd/yi-hack/script/env.sh and RRTSP_MODEL=r40gb RRTSP_RES=both RRTSP_AUDIO=no RRTSP_DEBUG=1 rRTSPServer need to be on 1 line? if i do it on 2 lines i get the error below

on the same line i get no error, but it results in the server still not running i think

root@TestYi:~# killall wd_rtsp.sh
root@TestYi:~# . /tmp/sd/yi-hack/script/env.sh
root@TestYi:~# RRTSP_MODEL=r40gb RRTSP_RES=both RRTSP_AUDIO=no RRTSP_DEBUG=1 rRT
**SPServer
Segmentation fault**
root@TestYi:~# killall wd_rtsp.sh
killall: wd_rtsp.sh: no process killed
root@TestYi:~# . /tmp/sd/yi-hack/script/env.sh RRTSP_MODEL=r40gb RRTSP_RES=both
RRTSP_AUDIO=no RRTSP_DEBUG=1 rRTSPServer
root@TestYi:~# ps
  PID USER       VSZ STAT COMMAND
    1 root       980 S    /sbin/init
    2 root         0 SW   [kthreadd]
    3 root         0 SW   [ksoftirqd/0]
    5 root         0 SW<  [kworker/0:0H]
    7 root         0 SW   [rcu_preempt]
    8 root         0 SW   [rcu_sched]
    9 root         0 SW   [rcu_bh]
   10 root         0 SW<  [lru-add-drain]
   11 root         0 SW   [kdevtmpfs]
  207 root         0 SW   [oom_reaper]
  208 root         0 SW<  [writeback]
  210 root         0 SW   [kcompactd0]
  211 root         0 SW<  [crypto]
  212 root         0 SW<  [bioset]
  214 root         0 SW<  [kblockd]
  255 root         0 SW   [sys_user]
  263 root         0 SW<  [cfg80211]
  269 root         0 SW<  [watchdogd]
  289 root         0 SW<  [spi0]
  299 root         0 SW   [kswapd0]
  383 root         0 SW<  [bioset]
  388 root         0 SW<  [bioset]
  393 root         0 SW<  [bioset]
  398 root         0 SW<  [bioset]
  403 root         0 SW<  [bioset]
  408 root         0 SW<  [bioset]
  413 root         0 SW<  [bioset]
  418 root         0 SW<  [bioset]
  423 root         0 SW<  [bioset]
  451 root         0 SW   [irq/302-sunxi-m]
  453 root         0 SW   [irq/166-sdc0 cd]
  509 root         0 SW<  [bioset]
  510 root         0 SW   [mmcqd/0]
  535 root         0 SW<  [kworker/0:1H]
  551 root         0 SWN  [jffs2_gcd_mtd4]
  556 root       980 S    -/bin/sh
  588 root       980 S    /usr/sbin/telnetd
  615 root      1172 S    ./dispatch
 1114 root     52692 S    ./rmm
 1143 root         0 SW   [kworker/u2:2]
 1177 root         0 SW   [RTW_CMD_THREAD]
 1195 root      1424 S    /backup/tools/wpa_supplicant -c/tmp/wpa_supplicant.c
 1252 root       980 S    udhcpc -i wlan0 -b -s /backup/tools/default.script -
 1469 root      2932 S    ./mp4record
 1485 root       860 S    httpd -p 8080 -h /tmp/sd/yi-hack/www/ -c /tmp/httpd.
 1496 root       844 S    pure-ftpd (SERVER)
 1510 root       876 S    dropbear -R -B
 1513 root       668 S    ipc_multiplexer
 1633 root       860 S    ntpd -p pool.ntp.org
 1734 root      2072 S    wsdd --pid_file /var/run/wsdd.pid --if_name wlan0 --
 1735 root      2420 S    framefinder r40ga
 1752 root       860 S    /tmp/sd/yi-hack/usr/sbin/crond -c /var/spool/cron/cr
 8436 root         0 SW   [kworker/0:0]
11064 root         0 SW   [kworker/0:2]
11748 root         0 SW   [kworker/u2:1]
15051 root         0 SW   [kworker/0:1]
16334 root       900 S    dropbear -R -B
16347 root       984 S    -ash
17053 root       980 R    ps

Jun 08 '21 17:06 bfboarder

Some more testing makes me think "RRTSP_MODEL=r40gb" is generating the Segmentation fault error, if i change it to any other model it does not give a fault but starts spitting out:

1623176041877: warning - unexpected NALU header
1623176041902: warning - unexpected NALU header

the "best result" on frames detected get when using RRTSP_MODEL=**h30ga:**

1623176730956: warning - unexpected NALU header
1623176730956: frame detected - frame_len: -1118294888 - frame_counter: 14578 - frame_counter_last_valid: -1 - resolution: 0
1623176730981: warning - unexpected NALU header
1623176731056: warning - unexpected NALU header
1623176731057: warning - unexpected NALU header
1623176731082: warning - unexpected NALU header
1623176731082: warning - unexpected NALU header
1623176731082: warning - unexpected NALU header
1623176731107: frame detected - frame_len: -1317021074 - frame_counter: 1024 - frame_counter_last_valid: -1 - resolution: 0
1623176731289: warning - unexpected NALU header

Jun 08 '21 18:06 bfboarder

Sorry, model is r40ga and not r40gb as I wrote above.

Jun 08 '21 19:06 roleoroleo

Sorry, model is r40ga and not r40gb as I wrote above.

lol...i tested all the options and did not notice the type error :)

anyway, the same error when using r40ga

root@TestYi:~# RRTSP_MODEL=r40ga RRTSP_RES=both RRTSP_AUDIO=no RRTSP_DEBUG=1 rRT SPServer Segmentation fault

and a small beer donation to keep the brain going :-)

Jun 08 '21 19:06 bfboarder

Thank you for your donation. This segfault is strange. Looking at the code I don't understand. I tried to start it on my y21ga and I have no errors.

Please try to run it with --help: rRTSPServer --help And please check if the size of the file /dev/shm/fshare_frame_buf is 1786156

Jun 08 '21 20:06 roleoroleo

dev/shm/fshare_frame_buf is 1786156

in the help the model is missing, not sure if that has something to do with it?

Usage: rRTSPServer [-r RES] [-p PORT] [-d]

    -m MODEL, --model MODEL
            set model: y21ga, y211ga, h30ga, r30gb, h52ga, h51ga or q321br_l                       sx (default y21ga)
    -r RES,   --resolution RES
            set resolution: low, high or both (default high)
    -a AUDIO, --audio AUDIO
            set audio: yes, no, alaw, ulaw, pcm or aac (default yes)
    -p PORT,  --port PORT
            set TCP port (default 554)
    -s,       --sti
            don't overwrite SPS timing info (default overwrite)
    -d DEBUG, --debug DEBUG
            0 none, 1 grabber, 2 rtsp library or 3 both
    -h,       --help

I will try to run it on my y21ga tomorrow and check my results there as well

Jun 08 '21 20:06 bfboarder

Thanks, I will check the code again.

Jun 09 '21 06:06 roleoroleo

If the help doesn't show r40ga model, you aren't running the new binary. Please check it.

Jun 09 '21 07:06 roleoroleo

Snapshot + higres +lowres rtsp is working ! thanks man!

If the help doesn't show r40ga model, you aren't running the new binary. Please check it.

You are right, it was still running the old files when i checked on the SD card.

Overwrite the files in /tmp/sd/yi-hack/bin with the content of this archive: r40ga.tar.gz

It looks like the overwriting of the files did not work. I removed the SD card and changed the files directly on it now with more succes.

Jun 09 '21 08:06 bfboarder

Good news! Now, please check other services: onvif, ptz, etc...

Jun 09 '21 08:06 roleoroleo

Please try this new archive. I made some code improvement. https://github.com/roleoroleo/yi-hack-Allwinner-v2/issues/179#issuecomment-857515796

Jun 09 '21 09:06 roleoroleo

Please try this new archive. I made some code improvement. #179 (comment)

Tests done with new archive:

RTSP High/low - OK
Snapshot - OK
SSH - OK
Telnet - OK
FTP - OK
Legacy FTP - NOT TESTED
Swap File - NOT TESTED
MQTT - OK
NTPD - OK
PTZ - WAS NOT WORKING - Extra info below - Pan/Tilt working, no Zoom option on the webinterface (not even sure if the cam has it, it's not showing in the yi app, so guess not)
Onvif - detected on network but can't connect
Motion Events - motion is detected but files are not saved (date/time folder is created but no recordings in it)

Jun 09 '21 09:06 bfboarder

Motion Events - motion is detected but files are not saved (date/time folder is created but no recordings in it)

Some extra info on this.......

recordings are made and stored in /tmp/sd/record/ (can find them using ftp)
recordings do not show on web interface
recordings are on the SD card when removing it from the cam

Jun 09 '21 10:06 bfboarder

yi-hack-Allwinner-v2 yi-hack-Allwinner-v2 copied to clipboard

Support for QFUS - yi 1080p PTZ outdoor Camera

yi-hack-Allwinner-v2
yi-hack-Allwinner-v2 copied to clipboard