This firmware is completely based on the work done by TheCrypt0 https://github.com/TheCrypt0/yi-hack-v4 It's a clone made for Yi cameras based on MStar platform.
But you can't choose between TheCrypt0 and MStar: if your cam is based on Hi3518e Chipset then you have to use TheCrypt0, if your cam is based on MStar Infinity Chipset then you have to use MStar.
I have no time to support the project, so feel free to clone/fork this git and modify it as you want.
This firmware contains the following features. Apart from RTSP, snapshot and ONVIF, all the features are copied from the TheCrypt0 project.
RTSP server - allows a RTSP stream of the video (high and/or low resolution) but without audio.
ONVIF server (with support for h264 stream, snapshot, ptz, presets and WS-Discovery) - standardized interfaces for IP cameras.
ONVIF compatible devices/software:
Beta testing devices/software:
Snapshot service - allows to get a jpg with a web request. Gets the latest yuv image from the kernel buffer and converts it to jpg.
MQTT - Motion detection and baby crying detection through mqtt protocol.
Web server - web configutation interface (port 8080).
SSH server - dropbear.
Telnet server - busybox.
FTP push: export mp4 video to an FTP server (thanks to @Catfriend1).
Authentication for HTTP, RTSP and ONVIF server.
Proxychains-ng - Disabled by default. Useful if the camera is region locked.
Original watermark image removed.
The possibility to change some camera settings (copied from official app):
Management of motion detect events and videos through a web page.
PTZ support through a web page.
The possibility to disable all the cloud features.
Online firmware upgrade.
I wrote a daemon that reads the video stream directly from the kernel driver memory and sends it to an application based on live555. I was inspired by the following topic:
The RTSP server code derives from live555 - http://www.live555.com/ and from the archive rtsp2303_srcbin_20170414-1630.zip posted in the link above.
There is a known problem with ffmpeg, see https://github.com/roleoroleo/yi-hack-MStar/issues/36 for details.
The datapath of the audio is as follows: Mic -> ADC -> Kernel sound driver -> TinyAlsa lib -> OMX ALSA plugin -> Camera application (rmm)
To maintain audio support for the original Yi application, the audio should be cloned at one of the steps with the following in mind:
Audio support is implemented by replacing the original TinyAlsa library with a version that copies the read audio frames to a pipe. This pipe is read by the RTSP server. The RTSP server uses a patched WAVFileSource to read the audio data from the pipe. (Since it tries to read the WAV header 2x I saw no (quick) other way than to hardcode the PCM format into the WAVFileSource code.)
The performance of the cam is not so good (CPU, RAM, etc...). If you enable all the services you may have some problems. For example, enabling both rtsp streams is not recommended. Disable cloud is recommended to save resources.
Currently this project supports only the following cameras:
|Yi 1080p Home 4FUS||4.5.0*||y203c||-|
|Yi 1080p Home 6FUS||4.5.0*||y203c||-|
|Yi 1080p Home 9FUS||4.5.0*||y203c||-|
|Yi 1080p Home BFUS||4.5.0*||y203c||-|
|Yi 1080p Dome 6FUS||4.6.0*||h201c||Thanks to @skylarhays|
|Yi 1080p Dome BFUS||4.6.0*||h201c||Thanks to @skylarhays|
|Yi 1080p Home 4FUS||4.2.0*||y25||-|
|Yi 1080p Home 9FUS||4.2.0*||y25||-|
|Yi 1080p Home 6FUS||2.1.0*||y23||-|
|Yi 1080p Home 6FCN||unknown||y203c||-|
|Yi 1080p Home 4FCN||unknown||y23||connects to wifi and :8080 setup pages works|
|YI Dome Camera X||4.0.0*||y30||Experimental|
This firmware completely overwrite the original firmware. So, USE AT YOUR OWN RISK.
Do not try to use an fw on an unlisted model
Do not try to force the fw loading renaming the files
If you want to know if your cam is supported, please check the serial number (first 4 letters) and the firmware version. If both numbers appear in the same row in the table above, your cam is supported. If not, check the other projects related to Yi cams:
Check that you have a correct Xiaomi Yi camera.
Get a microSD card, 16gb or less, and format it by selecting File System as FAT32.
Get the correct firmware files for your camera from the releases section (https://github.com/roleoroleo/yi-hack-6FUS_4.5.0/releases).
Decompress it and save both files (for example home_y203c and sys_y203c) on root path of microSD card.
Remove power to the camera, insert the microSD card, turn the power back ON.
The yellow light will come ON and flash for roughly 30 seconds, which means the firmware is being flashed successfully. The camera will boot up.
The yellow light will come ON again for the final stage of flashing. This will take up to 2 minutes.
Blue light should come ON indicating that your WiFi connection has been successful (if not disable using app).
Go in the browser and access the web interface of the camera as a website (http://IP-CAM:8080). Find the IP address using your mobile app (Camera Settings --> Network Info --> IP Address). If the mobile app can't be paired, you may look for the IP on your router's portal (see connected devices).
Are you using Home Assistant?
Do you want to integrate your cam?
Try this custom integration: https://github.com/roleoroleo/yi-hack_ha_integration
If you want to build your own firmware, clone this git and compile using a linux machine. Quick explanation:
If your camera doesn't start repeat the hack as described above (with a lower/higher version) . You can use the same procedure even if you have a backup copy of the original partitions. If the bootloader works correctly the camera will restart.
Special thanks to the following people for the previous projects I started from.
I AM NOT RESPONSIBLE FOR ANY USE OR DAMAGE THIS SOFTWARE MAY CAUSE. THIS IS INTENDED FOR EDUCATIONAL PURPOSES ONLY. USE AT YOUR OWN RISK.