This document was created by Steven Baltakatei Sandoval on
- under a Creative Commons BY-SA 4.0 license. It
-was updated by Steven Baltakatei Sandoval on .
+2020-06-29T12:14Z under a Creative Commons BY-SA 4.0 license. It
+was updated by Steven Baltakatei Sandoval on 2020-06-30T19:44Z
Ninfacyzga-01 records (logs) its position in time and space using a @@ -282,23 +282,23 @@ before being processed and written to disk.
See the OEM webpage for this product.
bkgpslog : The bash script that performs the location data
@@ -349,7 +349,7 @@ should be copied to $HOME/.local/bin.
bkgpslog populates a 60-second buffer with NMEA data from gpsd via
@@ -362,28 +362,28 @@ encrypted with age, and then written to disk.
See the Wikipedia page for this.
See the Wikipedia page for this. WGS84 is the datum used.
See the Wikipedia page for this. WGS84 is the datum used.
@@ -392,7 +392,7 @@ See the Wikipedi
-
Files produced by the bkgpslog script are encrypted against a set of
@@ -421,7 +421,7 @@ Help information for
Files may be encrypted to several recipients using a command similar to:
@@ -442,7 +442,7 @@ bech32-formatted public key strings.
-
Files may be decrypted using a command similar to:
@@ -462,12 +462,12 @@ The version of
See OEM (Ozzmaker) quickstart guide for the BerryGPS-IMU.
@@ -475,7 +475,7 @@ See OEM (Ozzmaker)
-
BerryGPS-IMU must be electrically connected to the correct pins on the
@@ -490,9 +490,9 @@ possible.
Install Raspbian 10 Buster onto an SD card image. See the Raspberry Pi
@@ -523,9 +523,55 @@ Linux) in
+Since standard Raspbian 10 (Buster) install involves copying
+unencrypted file system image to SD card which is mounted by the
+Raspberry Pi, system memory may be written to disk in the form of a
+Swap file as described here. In order to reduce the chance that
+location log data is ever written to disk, swap file functionality
+must be disabled1.
+
+Raspbian 10 uses dphys-swapfile to manage a swap file. It may be
+disabled persistently2 by running
+the following command:
+
+To view the status of the swap file in Raspbian 10, run
+After disabling the swap file and rebooting:
+
Edit the user cron job list with
The
@@ -581,8 +627,8 @@ The options are:
Log files may be shared to other machines via
An
Turn on Ninfacyzga-01 by supplying 5VDC power to the Raspberry Pi. No
@@ -651,8 +697,8 @@ further interaction should be required.
No interaction beyond continually supplying approximately 100mA of
@@ -661,14 +707,14 @@ is required.
Log files may be transferred by use of
The
The system may be shutdown via SSH by running:
@@ -692,8 +738,8 @@ $ sudo shutdown -r 0
Ninfacyzga-01 as described and setup should tolerate unscheduled power
@@ -702,8 +748,8 @@ seconds worth of location data may be lost.
LiPo batteries used by the PiZ Uptime 2.0 module should be disposed of
@@ -726,11 +772,27 @@ lead-free solder.
+Persistant disabling of swap in
+Raspbian 10 Buster:
+https://www.raspberrypi.org/forums/viewtopic.php?p=1490692&sid=5c596a124b7805d6b10dab8d3d7caf16#p1490692
+
+
age is available by running $ age --help
-
+
+
age used to perform the encryption
1.3 Operating Procedures
+1.3 Operating Procedures
1.3.1 Initial Startup
+1.3.1 Initial Startup
+
+
-
+
$HOME/.local/bin.
+
+sudo systemctl disable dphys-swapfile.service
+
+
+
+free -m:
+
+pi@ninfacyzga-01:~$ free -m
+ total used free shared buff/cache available
+Mem: 432 86 36 21 309 268
+Swap: 99 0 99
+
+
+
+pi@ninfacyzga-01:~$ free -m
+ total used free shared buff/cache available
+Mem: 432 89 214 3 128 289
+Swap: 0 0 0
+
+
+$ crontab -e to add the following
lines:
age1z2...qkv6p is an age public key string. Please see the
-Key Generation section for an explanation.
+Key Generation section for an explanation.
-
+syncthing. See this
manual for how to set up a shared folder and add Ninfacyzga-01 as a
@@ -598,15 +644,15 @@ of this document.
-
+age encryption key may be generated like so:
$ umask # Gets current umask
0022 # Note: This is the default umask for Raspbian 10
-$ umask 066 # Sets umask so key.txt will have no permissions except for owner (you)
+$ umask 066 # So key.txt will have no perms except for owner (you)
$ umask # Confirm umask set to 066
0066
$ age-keygen > key.txt
@@ -642,8 +688,8 @@ be readable, writeable, or executable to anyone except the owner
1.3.2 Normal Startup
+1.3.2 Normal Startup
1.3.3 Normal Operation
+1.3.3 Normal Operation
-
+
syncthing shared folders.
+
automatic-upgrades package, if installed, should automatically
@@ -678,8 +724,8 @@ install security patches to packages installed via apt.
1.3.4 Normal Shutdown
+1.3.4 Normal Shutdown
1.3.5 Unscheduled Shutdown
+1.3.5 Unscheduled Shutdown
1.3.6 End of Life Disposal
+1.3.6 End of Life Disposal
Footnotes:
+