Raspberry WebKiosk FAQ

About | Download | FAQ | Changelog | References

WRITE INSTRUCTIONS

Operating system detailed write instructions have been moved here.


OPERATING SYSTEM

SSH LOGIN (donors’ version)

You can perform an SSH login using the following credentails.
Putty.exe or similar software is required for Windows users while of course *nix users will make use of the ssh client.

  • user: pi
  • password: live
  • then type: sudo -i for administrative rights

Raspberry IP address is always shown during the boot. Alternatively you can make use of network discovery apps for your smartphone or netdiscover tool for *nix systems to find it out.

When maintainance screen password is modified, SSH password will be changed accordingly. So, if you set a password for the admin interface, the new SSH password will be identical. This way you can protect both system settings change via browser (admin interface) and via SSH with one step.

CHANGE CONNECTION METHOD

Raspberry WebKiosk defaults to DHCP if network cable is plugged in. If you need to override this behaviour:

  • unplug the Ethernet cable and reboot;
  • network interfaces admin screen will appear;
  • change network settings as you wish; they will persist then across reboots.

For cleaning network configuration settings just in case, you can delete the config files in the /iwk folder via SSH or by inserting the SD card into a computer running Linux, or clear all the persistence settins via the admin interface.

BROWSING WHITELIST/BLACKLIST

In order to add an internal filtering HTTP proxy with a whitelist behaviour, use follow the steps.

1. Install tinyproxy via apt-get and change its config file to include:

FilterURLs On
FilterDefaultDeny Yes
Filter "/etc/tinyproxy/whitelist"

2. Create a whitelist with only the domains that you want the user to see.
3. Change the default error page at /usr/share/tinyproxy/default.html to do a 0 second redirect to http://127.0.0.1/home.php.
4. Set localhost:8888 as the proxy server in the admin interface.
5. Hint: when displaying your website(s), make sure no resource loading is blocked by the whitelist; use the Chromium’s developer console for the purpose.

Many thanks to Louis DeRobertis.

ADJUST DATE AND TIME

The quickest way to adjust date and time according to your local time is to use ntpdate pointing an NTP server near you. For example: ntpdate ntp1.ien.it for Italy. SSH access required.
You can also set the time and date directly with the use of date -s command. SSH access required.

You can set your timezone with dpkg-reconfigure tzdata command. SSH access required of course.

1920 x 1080p

Modify /boot/config.txt file this way (thanks to Mark van der Linden, Brunner Armin and Guilherme Simões):

disable_overscan=1
hdmi_group=1
hdmi_mode=16 or hdmi_mode=82

Use mc -e /boot/config.txt via SSH or insert the SD card into a PC running Linux and use a common text editor.


SECURITY

BEST PRACTICES

  • protect the web admin interface by a password (set it in the bottom of the page) – this will also automatically change the SSH password of the pi user (who is also in the sudoers list);
  • firewall port 80 (iptables rules in /etc/rc.local) in order to allow network traffic from/to your own administration IP address only.