CVEDIA-RT BOX

This document covers common how to's and maintenance tasks related to CVEDIA-RT BOX deployments.

To learn how to set up the box, please refer to the VMS integration NX Witness guide.

Timezone

CVEDIA-RT Box will attempt to automatically detect your timezone based on your IP's geolocation. If this process fails, the timezone will default to UTC time.

Networking

By default, CVEDIA-RT Boxes come pre-configured to work with DHCP on all NIC ports.

To configure a static IP, we recommend using your router/dhcpd or logging into the box via a shell.

Ports and Firewall Considerations

We don't recommend exposing the CVEDIA-RT box directly to the internet, as some of the services could be abused or could be subject to DDOS attacks. By default, services will listen on 0.0.0.0.

For a complete port list, please refer to Network and Ports.

Shell Access

CVEDIA-RT BOX has a pre-configured shell user, cvedia, which can only be accessed using an SSH key. There's no password authentication enabled by default on any user.

You can request the private key by contacting support.

Future versions of CVEDIA-RT may include fail2ban as an additional security measure.

CVEDIA-RT Install Location and Updates

CVEDIA-RT comes installed at /opt/cvedia-rt. As of the current release, 2023.5.1, CVEDIA-RT Box will not automatically update your installation. If you need CVEDIA-RT, you can download the Linux redist package over the existing one, then recreate the Docker container with the same parameters.

Please check scripts within /opt/cvedia-box to help with the update and container creation process.

Reinstall Considerations

If you have access to a CVEDIA-RT Box image, you can flash a fresh installation of CVEDIA-RT Box in various ways.

One important note is that if your device has additional storage, such as NVME, SSD, or HDD, the installation process will preserve everything you previously had on that drive. This includes CVEDIA-RT license keys, cached models, VMS keys, databases, and recordings.

If your VMS files are corrupt or you want a completely fresh installation, you need to unpartition the storage drive.

Low-Level Debugging

CVEDIA-RT BOX will broadcast message logs on port 59999 with debug and diagnostic information.

This is mainly used to troubleshoot the installation process.

You can listen to/inspect this using netcat -vkul 59999.

Example output:

2023-10-20@22:03:44.657581019  CRT SYS INSTALL FSTAB /opt/docker.img /var/lib/docker ext4 defaults,nofail 0 1 UUID=a7b3c8ea-7779-4ae6-83d0-d3a95573e37f /storage ext4 defaults,nofail 0 1
2023-10-20@22:03:44.802050869  CRT SYS INSTALL DOCKER2
2023-10-20@22:03:44.971319691  CRT SYS INSTALL docker setup completed
2023-10-20@22:03:45.445652127  CRT SYS INSTALL COMPLETED SHUTTING DOWN
2023-10-20@22:03:45.611331148  CRT SYS BOOT OK

After the system is configured, these messages will only appear on system boot.