Volumio 4 Feedback Thread

[G-rig]

Hi guys sorry if it’s an obvious question. I’ve noticed no updates for a while on my RPi4.
I assume we need to download the new version 4 from the getting started website, not OTA?

Thanks,

[Wheaten]

My crystal ball is currently being polished, so a bit more info would help.

Your running Buster (V3) or Bookworm (V4)?
If Buster, You need to download Volumio 4 and Flash it, OTA is not possible as mentioned more times then I can count.
With Volumio moving over to Bookworm, I doubt there will be any new releases for Buster.

[G-rig]

Thanks- nothing special just whatever the original volumio 3 was.
will no doubt have to get the sd card out and load it up from the flash when i a minute.

[G-rig]

Ver 4 sorted now thanks.

Just wanted to ask which easy security tune ups you’d recommend applying for the app, router or ssh etc. I’m not sure but get the feeling someone is pausing and hitting play on it sometimes.

something like this perhaps?

Thanks,

[SimonE]

Disable ssh when you’re not using it.

[G-rig]

Cheers, done that and changed the default pw.

[nerd]

@G-rig

changed the default pw

Why I should not change root password

Hey @tweed77, Short version: Do not set or change the root password on Volumio. It is unsupported and will break updates, plugins, and any non-interactive scripts that rely on the stock authentication flow. Your EEPROM updater failed because a script expected the default, non-modified credentials flow and could not elevate without interaction. Why it breaks things: Volumio is an appliance OS, not a generic Linux workstation. Many backend tasks and plugins elevate with sudo in non-interacti…

Frankly, applies to volumio user too.

Kind Regards,

[G-rig]

Better change it back then.
Perhaps Mac filtering is the go at the router, like a deny all policy.

[metro]

Yeah, I discovered this back in Volumio 3. Normally, everybody should be in the habit of changing their passwords from default when they start using a product. As a software developer, it was shocking to discover that all Volumio installations all over the world are required to use the same superuser password to work properly.

[G-rig]

There are a fair few topics on it and various search results when googling it.

So then, it’s not recommended to change the password. Is with worth doing any of the following:

1. Secure SSH Using Public Key Authentication
2. Add a Unique Admin Account & Block Default SSH Access [1]

google search 1

3. default deny strategy and router hardening (i’ve got the basics turned off like uPnP)

google search 2

So it’s fine to ignore this?

Thanks

[nerd]

Hey @G-rig,

I think you will need to expand context and content a little.

@G-rig

Add a Unique Admin Account & Block Default SSH Access [1]

Are you suggesting Volumio deployment in clustered mode on Nutanix? How are you planning on DAC/HAT and all other physically attached consumer endpoints to work? You do understand Broadcom’s hefty price-tag on esxi/VSAN, etc, when clustered? Do you expect Volumio to absorb the cost?

@G-rig

google search 1

@G-rig

google search 2

@G-rig

So it’s fine to ignore this?

With no details what community is looking at and only screenshot, you are leaving everyone guessing. Personally - I do not do guessing, I do however facts.
If facts is something you want us to look into, follow this simple guidance from post #3:

Volumio 4 Feedback Thread

Dear Volumionauts, How to report a problem We need clear, complete, and specific information to help you. We do not have a crystal ball. When reporting bugs, always include: Your device model, storage type (SD, SSD, etc.), and Volumio version A log link from your device (see: How to send a log link for a bug report? ) A clear explanation of the issue: what happened, what you expected, and how to reproduce it If your report involves hardware, include: Full identification of the device: …

Kind Regards,

[G-rig]

All good the links were of general suggested security tweaks at the router level etc. good to do a general tune up.

Perhaps volumio could apply some secure certificates or suggested tweaks to harden the security. Some of those threads very old and options change.

Cheers

[jajao555]

I’ve noticed a strange minor issue where a song will get stuck in loop and just keep playing over and over. I’ve noticed it maybe 3 times in the last few moth since updating 4.119. This is a playlist I created from a NAS and just put on shuffle.

Raspberry 5
HiFiBerry DAC+ Pro
NFS share over Wifi

Here’s log I got where I caught it happening today:
http://logs.volumio.org/volumio/RuuAjVZ.html

It starts at this timestamp. It plays it quite a few times until I come back and realize its still playing the same song and just keeps playing it lol.

Jun 14 13:46:46

NAS/proxmox-share/Music/Toro Y Moi/Underneath The Pine/02.New Beat.mp3