Parahub AI
c5b9229ad0
OTA: build.sh writes version/profile to firmware, generates manifest.json with SHA256 per device. parahub-autoupdate script runs nightly at 3am, fetches manifest (Yggdrasil first), verifies checksum, runs sysupgrade. sysupgrade.conf preserves /etc/parahub/, yggdrasil.conf, dropbear keys. Guest IPv6: Yggdrasil 300::/64 subnet assigned to guest via SLAAC. Separate yggdrasil firewall zone (5 zones total) with guest→yggdrasil forwarding. IPv6 exempt from tc shaping — full speed to Parahub services. IPv6 to WAN blocked. Heartbeat now reads version from file, not hardcoded. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
73 lines
2.8 KiB
Bash
Executable File
73 lines
2.8 KiB
Bash
Executable File
#!/bin/sh
|
|
# Phone-home heartbeat to Parahub cloud
|
|
PARAHUB_API_YGG="http://[200:abb9:5810:37d3:8a4c:98a6:b82b:969a]/api/v1/iot/mesh/heartbeat"
|
|
PARAHUB_API_PUBLIC="https://parahub.io/api/v1/iot/mesh/heartbeat"
|
|
HEARTBEAT_KEY="IqPosrcpTQKSbLHxOG3iLTl_K2MsDxvd"
|
|
|
|
# Read firmware role
|
|
ROLE=$(cat /etc/parahub/role 2>/dev/null || echo "unknown")
|
|
|
|
# Read identity from /etc/parahub/keys
|
|
. /etc/parahub/keys 2>/dev/null
|
|
MAC="${NODE_MAC:-$(cat /sys/class/net/br-lan/address 2>/dev/null)}"
|
|
HOSTNAME="$(uci -q get system.@system[0].hostname)"
|
|
YGG_ADDR="${YGGDRASIL_ADDRESS:-unknown}"
|
|
SSID="${PRIVATE_SSID:-unknown}"
|
|
UPTIME="$(cut -d. -f1 /proc/uptime)"
|
|
|
|
# Get mesh IP (br-private address)
|
|
MESH_IP=$(ip -4 addr show br-private 2>/dev/null | grep -o 'inet [0-9.]*' | cut -d' ' -f2)
|
|
MESH_IP="${MESH_IP:-unknown}"
|
|
|
|
# Detect hardware from board_name
|
|
HW=$(cat /tmp/sysinfo/board_name 2>/dev/null)
|
|
case "$HW" in
|
|
glinet,gl-axt1800) HW="axt1800" ;;
|
|
glinet,gl-mt3000) HW="mt3000" ;;
|
|
glinet,gl-mt6000) HW="mt6000" ;;
|
|
xiaomi,redmi-router-ax6s) HW="ax6s" ;;
|
|
asus,rt-ax53u) HW="ax53u" ;;
|
|
glinet,gl-ar300m16) HW="ar300m16" ;;
|
|
cudy,wr3000-v1) HW="wr3000" ;;
|
|
*) HW="${HW:-unknown}" ;;
|
|
esac
|
|
|
|
FW_VERSION=$(cat /etc/parahub/version 2>/dev/null || echo "unknown")
|
|
PAYLOAD="{\"mac\":\"${MAC}\",\"hostname\":\"${HOSTNAME}\",\"yggdrasil_address\":\"${YGG_ADDR}\",\"firmware_version\":\"${FW_VERSION}\",\"hardware_profile\":\"${HW}\",\"uptime\":${UPTIME},\"private_ssid\":\"${SSID}\",\"firmware_role\":\"${ROLE}\",\"mesh_ip\":\"${MESH_IP}\"}"
|
|
|
|
RESPONSE=""
|
|
|
|
if [ "$ROLE" = "bee" ]; then
|
|
# Bee: no yggdrasil, use public URL only
|
|
RESPONSE=$(curl -s -m 10 -X POST \
|
|
-H "Content-Type: application/json" \
|
|
-H "Authorization: Bearer ${HEARTBEAT_KEY}" \
|
|
-d "$PAYLOAD" \
|
|
"${PARAHUB_API_PUBLIC}" 2>/dev/null)
|
|
else
|
|
# Bumblebee: try yggdrasil first, fallback to public
|
|
if ping6 -c 1 -W 3 200:abb9:5810:37d3:8a4c:98a6:b82b:969a >/dev/null 2>&1; then
|
|
RESPONSE=$(curl -s -m 10 -X POST \
|
|
-H "Content-Type: application/json" \
|
|
-H "Authorization: Bearer ${HEARTBEAT_KEY}" \
|
|
-d "$PAYLOAD" \
|
|
"${PARAHUB_API_YGG}" 2>/dev/null)
|
|
else
|
|
RESPONSE=$(curl -s -m 10 -X POST \
|
|
-H "Content-Type: application/json" \
|
|
-H "Authorization: Bearer ${HEARTBEAT_KEY}" \
|
|
-d "$PAYLOAD" \
|
|
"${PARAHUB_API_PUBLIC}" 2>/dev/null)
|
|
fi
|
|
fi
|
|
|
|
# Sync paid_clients to speed control (Bumblebee only)
|
|
if [ "$ROLE" != "bee" ] && [ -x /usr/bin/parahub-speed-control ] && [ -n "$RESPONSE" ]; then
|
|
PAID_IPS=$(echo "$RESPONSE" | jsonfilter -e '$.paid_clients[*]' 2>/dev/null)
|
|
# Flush and re-add all paid IPs
|
|
parahub-speed-control flush
|
|
for IP in $PAID_IPS; do
|
|
parahub-speed-control add "$IP"
|
|
done
|
|
fi
|