• servers
• makarov

makarov

• RPi Zero W
• RPi OS buster Lite (based on Debian 10.10)

• Linux makarov 5.10.17+ #1421 Thu May 27 13:58:02 BST 2021 armv6l GNU/Linux

• Located wherever I take it

network

Static DHCP assignment in IOT VLAN, it should have minimal access privileges, it literally only needs web access. No IPv6 apart from usual linklocal stuff.

services

• SSH
• Some avahi junk I should probably disable

apps

• muzak systemd unit plays music, running as the pi user

• frontpanel systemd unit manages the LCD and button inputs

Muzak app

Runs mpv with a playlist of Youtube links, super basic. Audio goes out through an I2S soundcard. Playlist loops forever as you'd expect. Playlist and extra stuff is in /home/pi

Frontpanel app

A python script with some basic GPIO interfacing, controls mpv by talking to its JSON-IPC socket. Displays images and UI on the LCD screen.

Optimisation

Aim to disable as much stuff as possible, to reduce CPU load and boot times.

Try to disable:

• bluetooth

  • dtoverlay=disable-bt in config.txt

  • systemctl disable hciuart --now

  • systemctl disable bluetooth

  • reboot then apt purge bluez bluez-firmware

• apt-daily-upgrade

  • echo 'APT::Periodic::Enable "0";' > /etc/apt/apt.conf.d/10periodic

• ModemManager

• avahi-daemon.service
• keyboard-setup.service
• Make the filesystems read-only, or at least /boot can be

• Remove the Mopidy stuff that I installed

  systemctl disable mopidy --now
  undo this: usermod -a -G spi,i2c,gpio,video mopidy
  as root: pip uninstall mopidy-youtube Mopidy-PiDi Mopidy-Local mopidy-raspberry-gpio
  apt purge mopidy
  rm /etc/apt/sources.list.d/mopidy.list
  remove from apt-key