Even newer Custom Firmware for Xiaomi Cameras based on Hi3518ev200 Chipset. It includes free RTSP, ONVIF and other improvements based on the work by roleoroleo

I have successfully installed two Yi Outdoor 1080p cameras with yi-hack-v5 v0.3.0. One was on a clean SD card (which was not yet provisioned), and the other was over an existing remote yi-hack-v4 v0.2.0. There were no problems encountered on either one.

I am now trying to install yi-hack-v5 on a third Yi Outdoor 1080p over an existing remote yi-hack-v4. I have done everything exactly the same as the first two, i.e., from my PC:

# cd yi-hack-v5/yi-outdoor
# ls -l
total 8601
-rw-r--r-- 1 rwk rwk 7792172 Apr 14 05:03 home_h30
-rw-r--r-- 1 rwk rwk 1014184 Apr 14 05:03 rootfs_h30
drwxr-xr-x 9 rwk rwk      10 Apr 14 05:04 yi-hack-v5
# scp -rp ./ [email protected]:/tmp/sd/
home_h30                              100% 7610KB 218.8KB/s   00:34    
rootfs_h30                            100%  990KB 216.4KB/s   00:04    
mqttv4.conf                           100% 1854    53.5KB/s   00:00    
...
# ssh [email protected]
# reboot && exit

But when the camera comes back online, yi-hack-v4 has booted. I rebooted again, but still it boots to yi-hack-v4.

Here is an ls -l of /tmp/sd on the camera in question, still running v4:

rwxr-xr-x    1 root     root       7792172 Apr 14 11:03 home_h30
-rwxr-xr-x    1 root     root             0 Apr 27 23:48 last-download
drwxr-xr-x    2 root     root        131072 Apr 28 12:04 log
drwxr-xr-x  479 root     root        131072 Apr 27 23:48 record
-rwxr-xr-x    1 root     root       1014184 Apr 14 11:03 rootfs_h30
drwxr-xr-x    3 root     root        131072 Apr 28 11:52 save
drwxr-xr-x    9 root     root        131072 Apr 14 11:04 yi-hack-v5

Is there some way to force it to install and boot yi-hack-v5?

Thanks!

P.S. The camera is in a difficult to access location, so I cannot readily retrieve the SD card. I would like to get it to work remotely.

I take on all risk and responsibility for my own cameras but 5 cameras dying from this hack is a little excessive.

I have a bunch of Chinese Yi version (yi app not xiaomi home app) 1080p cameras. At the beginning of the year I started playing with yihack and found this v5 version worked for my cameras. Problem is now I've had five stop connecting to wifi and seem unable to be reset. The first three happened one day when I overloaded a fuse on the circuit they were connected to. I thought it must have been a surge or something but this week I've had two die simply by disconnecting the power.

I think a much stronger warning needs to be attached to the readme for this project.

edit: https://youtu.be/clLbNu7ALdo I had a camera plugged in for months and today I needed to unplug it while replacing an airconditioning unit. There was no way to keep it powered so I decided to video what happens when a camera has been plugged in for a long time and gets power cycled.

There absolutely should be a warning on this hack.

Hello, I run Home Assistant with mosquitto. Seems that camrea tries to connect but then disconnects and motion detection is not working. This is part of mosquitto log:

[12:02:20] INFO: [INFO] found mqttUser on local database 1618135340: New client connected from 192.168.1.XXX as xxxDome1 (p2, c1, k120, u'mqttUser'). 1618135571: Socket error on client xxxDome1, disconnecting. 1618136267: New connection from 192.168.1.XXX on port 1883. [12:17:48] INFO: [INFO] found mqttUser on local database 1618136268: New client connected from 192.168.1.XXX as xxxDome1 (p2, c1, k120, u'mqttUser'). 1618136269: Socket error on client xxxDome1, disconnecting.

I am SO happy to see this release. I have so many problems with rtspv4/viewd. I have Allwinner on my Yi indoor cameras and it works flawlessly. Did you base the rtsp server on the Allwinner code?

Is it possible/safe to use the yi-hack-v4 web update (in the Update section) to upload and install the yi-hack-v5 home and rootfs files?

I hope so, because access to my installed outdoor cameras is difficult, i.e. to retrieve the SD card...

Thanks for this release! I am looking forward to using it with great anticipation!

Same as issue: https://github.com/alienatedsec/yi-hack-v5/issues/2

• Updated to 0.3.0
• Formatted the SDcard with the Yi app.
• Recordings are being made while the cloud functionality was still on.
• After turning off the cloud functionality (and turning on recording without cloud), no recordings are being made.
• Enabling watch_process enabled recording.

I have upgraded from v4 + rtsp to v5 0.3.1. I get a nice reliable stream with MQTT off. Switching on MQTT the stream stutters and grinds to a halt a few seconds after waving my hand in front of the camera. The web UI also becomes unavailable.

My suspicion is it is caused by the resource usage of the motion snapshot feature which was not present in v4. It is necessary to unplug the camera to get it responding again. I have swapfile enabled.

I would appreciate some guidance in debugging this. Is there a change I can make to disable the motion snapshot feature with MQTT enabled to test my theory?

Hello,

I own a Yi Dome camera and I know it has some hardware limits, so I was experiencing some camera freezes (it was responding to ping but no mqtt, ssh or httpd services - like reported in other tickets - the only solution was to power-cycle) and I spent some time in fine-tuning the settings to limit the resources consumptions (onvif off, mqtt on, low rtsp, cloud disabled, local recording, ssh on, httpd on, mqtt Topic Suffix for jpeg image empty and mqtt AI and sound detections empty as well). Anyway I was still experiencing the same frequent freezes. So I also decreased the swappiness threshold value to 40. From that moment things seemed to work properly but a couple of times each day I discovered the privacy switch (I'm using @roleoroleo 's HA custom integration as well) was off instead on. I had the feeling the camera was randomly rebooting (without hanging) and today I had the confirmation of this behaviour.

From the attached screenshots you can see the hack integration recorded a disconnection at about 20:03 which is also confirmed by the privacy sensor becoming unavailable and the mqtt will message "offline". Additional confirmation of this behaviour is the screenshot of the camera status that shows 57 minutes of uptime. After the camera reboot the privacy switch is reset to off (instead on, which was the initial state).

Long story short: the camera is randomly rebooting, in absence of motion detection/recording or events that may trigger a resources consumption.

Is anybody else experiencing a similar behaviour or has suggestions to solve/investigate it? Thank you!

@alienatedsec please consider building h20 image if possible, I will be happy to test. I tried using only home_y20 after renaming to home_h20, leaving original root_h20 from Keroi/yi-hack-v4 build - it did not work.

Can you possibly share some links to prepare own image - I am proficient with Linux, just going through the noise on Discord and having over 100 forks of v4 just overwhelms me to say at least.

Another question - should it be enough to just ssh contents of home partition to a running h20 image, replacing existing files? Maybe there is a way to mount home file using loop? I just need streaming support for home assistant with PTZ, ONVIF might do the trick.

I was given an NVR and I was able to connect my Yi cameras. I have a group of Yi Dome 1080p and a single 720p. Since all the 1080p Dome were on the RoleoRoleo MStar Yi-Hack.... He was able to resolve the issue. From what I undertand he created a new RTSP server and now all the 1080p Dome are fixed. The problem I have now is that the 720p is still freezing after some time and I have to either reboot the camera or the NVR. I am attaching here the long chat I had with RoleoRoleo and how he was able to resolve it.

Would you be willing to take a look at the conversation and see if you can implement what he did, on the 720p Yi Home? Thank you https://github.com/roleoroleo/yi-hack-MStar/issues/414

Hi,

Sorry for the noob question. I was trying to install the yi-hack-v5 on my new yi outdoor 1080p camera. I first configured the camera with the app and disconnected it from power. I then created the SD card with files from this link: https://github.com/alienatedsec/yi-hack-v5/releases/download/0.3.2/yi_outdoor_0.3.2.tgz This is how my SD card content looks like:

PS L:\> ls
    Directory: L:\
Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----
d-----        02/25/2022     16:08                yi-hack-v5
-a----        10/19/2021     16:58        7792364 home_h30
-a----        10/19/2021     16:58        1015264 rootfs_h30

Then I inserted the SD card to camera and plugged it back into power.

I was expecting to see the yellow led flashing for a while, but it was flashing for only 2-3 seconds. In app, all seems to be working as usual. I have found camera's IP and tried to log in via web-browser (to :8080), but it seems this web page is not available (not that I'm so surprised, as flashing process seems to be not working properly).

I was trying the above steps with two different SD cards with different sizes (one of 64GB and the other with 4GB).

Am I missing something with the steps to flash the yi-hack-v5 firmware into the camera?

Thanks,

Hello,

I have issue with constantly disconnecting WiFi from my Yi Outdoor camera -

[./rmm][5/13/22:52:26:887]: ai_get_aacstream: get aenc stream select time out [./rmm][5/13/22:52:29:71]: ai_get_aacstream: get aenc stream select time out [./dispatch][5/13/22:52:29:792]: wifi disconnected, now reconnect wifi [./rmm][5/13/22:52:30:718]: motrk img is too old. storetm:1620946349-725901, diff:1009 [./mp4record][5/13/22:52:33:144]: msg snd success[./dispatch][5/13/22:52:33:145]: got rcd heartbeat [./watch_process][5/13/22:52:34:512]: cloud crashed![./rmm][5/13/22:52:41:538]: got a new motion stop. send_motion_stop_msg [./rmm][5/13/22:52:41:561]: msg snd success[./dispatch][5/13/22:52:42:632]: wpa may crashed, now reset [./dispatch][5/13/22:52:42:766]: no usb dev

  Mode:Managed  Frequency=2.447 GHz  Access Point: 20:76:93:4E:A5:32
  Bit Rate=135 Mb/s
  RTS thr:off   Fragment thr:off
  Encryption key   Security mode:restricted   Security mode:open
  Link Quality=100/100  Signal level:-54 dBm  Noise level:-85 dBm
  Rx invalid nwid:0  Rx invalid crypt:0  Rx invalid frag:0
  Tx excessive retries:0  Invalid misc:0   Missed beacon:0

after reboot it works only for couple of hours.. anyone has similar issue and fixed that somehow?

I installed hack v5 in Yi Outdoor but it takes time to load the web and the screenshots, in addition to the interaction with home assist, it does not work correctly, it causes the camera to stay blocked, from the Yi App everything is correct.

Hey @alienatedsec, if possible, can you help-me to debug this issue?

I have a Yi Dome 1080P 15US and if I try disable the cloud functionality the snapshot and rtsp stop to work. Here is part of my log.txt:

[./rmm][12/25/3:1:38:336]: ai_get_aacstream: get aenc stream select time out
[./rmm][12/25/3:1:38:363]: (0), failed with 0xa0188005!
[./rmm][12/25/3:1:38:392]: (0), failed with 0xa0188005!
[./rmm][12/25/3:1:38:422]: (0), failed with 0xa0188005!
[./rmm][12/25/3:1:38:452]: (0), failed with 0xa0188005!
[./rmm][12/25/3:1:38:481]: (0), failed with 0xa0188005!
tFrame err, vi chn 0 a0078005
[./rmm][1/1/0:0:29:469]: HI_MPI_VI_GetFrame err, vi chn 0 a0078005
[./rmm][1/1/0:0:29:471]: HI_MPI_VI_GetFrame err, vi chn 0 a0078005
[./rmm][1/1/0:0:29:474]: HI_MPI_VI_GetFrame err, vi chn 0 a0078005

Full log attached. Do you have any tips to solve this?

log.txt

Very minor typo.

This would only affect the output when playing with imggrabber --debug as the function current_timestamp is missing parentheses so it prints location of function rather than running the function and displaying output.

https://github.com/alienatedsec/yi-hack-v5/blob/0b6b63a9492a283180543349d28f6e8b176cccb8/src/snapshot/snapshot/imggrabber.c#L719

Firstly I must thank alienatedsec for his great work, because I have 3 Yi cameras running his firware and they all worked perfect, until lately the Yi-dome 1080p had some corrupted recording tmp files produced on the old SD card (the old card seems still accepting new data write-in but after new insertion all new data's gone, so I think that card is damaged), and I had to change a new SD card on it.

With the new SD card, I had to re-flash the yi-hack-v5 firmware and after that however, I have been struggling paring it with the Yi App and it keeps telling "paring has timed out", and the recording function stopped. I've turned off "Disable Cloud" and "Recording without Cloud", and enabled "Proxychains-ng", and I tested proxy's I added and they look working normal: Nevertheless, I've tried like more than 50 times rebooting it and pair it again, everytime ends up with "pairing has timed out". I doubt myself if I did someting wrong maybe, but I can't tell where...my camera is 65CN by the way...

In fact I don't really care about paring because I don't use the Yi App anyway, but looks like without pairing the recording function doesn't work... Or could it be that I am actually wrong? is there a way that I don't have to deal with the region lock and can just make it recording?

Any advice is appreciated, many thanks in advance!

Hi,

I´ve running this integration without any problem until now.

At the moment it still works most of the time, but I´m having unexpected reboots and problems with the streaming on the lovelace card.

I get this from the depuration:

homeassistant.components.stream.stream.camera.yi_hack_v5_b1421e_cam] Error from stream worker: Error demuxing stream while finding first packet: [Errno 110] Operation timed out: 'rtsp://192.168.1.140/ch0_1.h264'

Any thoughts?

Thanks in advance,

Video recorded via rtsp. The sound speed is too fast when playing. The video time is 60 seconds and the sound time is 25 seconds after the sound and picture are separated