# Open and cheap DIY IP-KVM based on Raspberry Pi Join the comunity chat for questions and support: [![Discord](https://img.shields.io/discord/580094191938437144?logo=discord)](https://discord.gg/bpmXfz5) Also here the our website: http://pikvm.org * **[>>> DIY Getting Started <<<](#diy-getting-started)** * [Our Raspberry Pi-KVM hat](#the-future-v3-platform-work-in-progress) * [Limitations](#limitations) * [Tips](#tips) * [FAQ](#faq) ----- A very simple and fully functional Raspberry Pi-based IP-KVM that you can make with your own hands. This device helps to manage servers or workstations remotely, regardless of the health of the operating system or whether one is installed. You can fix any problem, configure the BIOS, or even reinstall the OS using the included CD-ROM or Flash Drive emulation. ### Features * Supported **Raspberry Pi 2**, **3**, **4** and **ZeroW**; * **FullHD video** using advanced **HDMI-to-CSI bridge** or **USB dongle**; * Extra low **100ms video latency** (for CSI bridge); * **Virtual CD-ROM** and **Flash Drive** emulation; * **Keyboard** and **mouse** (with leds and the wheel); * **Control the server power** using ATX functions; * Access via **Web UI** or **VNC**, ability to use **IPMI BMC** and **Wake-on-LAN** to control the server; * **The ready-made OS** and packages; * **Authorization** and SSL encryption; * It only costs between $30 and $100 for parts! * 100% Open Source!
Detailed about the Pi-KVM features ## Fully-featured and modern IP-KVM * **Cheaper, but better than commercial solutions** Costs between $30 and $100 depending on the features desired. Even the most expensive configuration will be cheaper than a $500 commercial IP-KVM. * **Easy to build** A ready-to-use OS that can be created just by running `make build` and installed to an SD-card using `make install`. The hardware can be made in half an hour and without soldering. * **The widest hardware support** There are many ways to build a Pi-KVM. Video capture devices can be attached using the CSI-2 or USB interfaces. Raspberry Pi models 2, 3, 4, or ZeroW may be used. Any combination of hardware is supported, and Pi-KVM implements the maximum possible set of features. * **Very low latency** ~100 milliseconds of video latency. This is the smallest delay of all existing solutions. * **Extra lightweight and fancy Web UI** No weird proprietary clients. No ugly Java applets. Just use your favorite browser to connect to the Pi-KVM. No flash plugins either! * **Keyboard and mouse** Mouse usage works directly in the browser. The keyboard emulator supports displaying the state of the keyboard LEDs. * **Mass Storage Drive** On the Raspberry Pi 4 and ZeroW, Pi-KVM can emulate a virtual CD-ROM or Flash Drive. A live image can be uploaded to boot the attached server. * **ATX power management** With a very simple circuit that can be assembled on a breadboard, the power button of the attached server can be controlled using the ATX button headers on the motherboard. * **Security** Pi-KVM can be opened to the Internet and no one will get access without the password. SSL encryption is used to protect traffic from being intercepted by third parties. * **Local monitoring** Pi-KVM monitors the health of the Raspberry Pi board and will warn you if it's too hot or is not receiving enough power. ## Production-ready * **Linux-based embedded OS** The Pi-KVM OS is based on [Arch Linux ARM](https://archlinuxarm.org) and can be customized for any needs. Thousands of pre-built binary packages are at your service and can be updated with a single command! * **Read-only filesystem** By default the OS runs in read-only mode, as an embedded system should. This prevents damage to the memory card due to a sudden power outage. * **VNC server** The managed server and its BIOS can be accessed using a regular VNC client which supports JPEG compression. * **IPMI BMC** Use `ipmitool`, `ipmiutil` or any existing network infrastructure that supports IPMI to monitor and manage the server's power. * **Wake-on-LAN** Pi-KVM can be configured to power up a managed server using WoL. This will be available in the Web menu. * **Extensible authorization methods** Multiple Pi-KVMs can be configured to use a [common authorization service](https://github.com/pikvm/kvmd-auth-server). PAM and its rich authorization mechanisms can also be used to integrate Pi-KVM into your existing authentication infrastructure. * **Macro scripts** If repetitive actions must be perfromed on the attached server (or on several different servers), a macro can be recorded with keyboard & mouse actions and can be played back mutiple times. ## Open Source * **Community & support** Pi-KVM has a large community. Join the [discord chat](https://discord.gg/bpmXfz5) if you have any questions. * **Extensible** Pi-KVM was designed as a set of microservices with a plug-in architecture. It's very easy to modify and maintain. * **Comprehensive API** Everything that can be done via the user interface can also be done via a powerful HTTP API. * **Know-how** We created [our very own MJPG video server](https://github.com/pikvm/ustreamer) written in C with multi-threading support and GPU video encoding - the fastest streaming solution available to provide the best video quality for Pi-KVM. We also tested a lot of hardware configurations so that you can be sure devices you assemble will work reliably.
drawing ----- # DIY Getting Started ## Required hardware Pi-KVM supports several different hardware configurations, referred to as **platforms**. At the moment, there are two main ones: **v0** and **v2**. * **v0** was designed to work with Raspberry Pi boards that do not have OTG (**Raspberry Pi 2** and **3**) and requires a few more components for a basic implementation. It also does not support the Mass Storage Drive feature. * **v2** is the most modern implementation supporting all of the features of Pi-KVM. It was designed to work with the **Raspberry Pi 4** and **ZeroW**. **It is recomended to buid v2 since it supports all features including the Mass Storage Drive feature. It's also the easiest to make.** ## Hardware for v2 * Raspberry Pi 4 (2 GB model is enough) or ZeroW. The Pi 4 is recomended because the ZeroW is very slow. * MicroSD card (min 16 GB recommended). * USB-A 3A charger (female socket) or power supply. * Video capture device: * **Recommended**: [HDMI to CSI-2 bridge based on TC358743](https://aliexpress.com/item/4000102166176.html) - it supports the compression control, has a lowest video latency for ~100ms, and may determine the source resolution; see the FAQ above for the explanation. * An alternative (not available for ZeroW): [HDMI to USB dongle](https://aliexpress.ru/item/4001043540669.html) - high video latency ~200ms, no compression control, can't detect the source resolution. * Only for Raspberry Pi 4: * Parts for Y-splitter cable: - 1x USB-A to USB-C cable (male-male). - 1x another cable USB-A to any (male-...). * Only for Raspberry Pi ZeroW: * 2x USB A-to-micro cables (male-male, for power and keyboard & mouse emulator). * For ATX control (optional): - [4x MOSFET relays OMRON G3VM-61A1](https://www.digikey.com/products/en?keywords=G3VM-61A1). - 4x 390 Ohm resistors. - 2x 4.7k Ohm resistors. - A breadboard and wires. ## Hardware for v0 * Raspberry Pi 2 or 3. * MicroSD card (8 GB is enough). * USB-A 3A charger (female socket) or power supply. * For keyboard & mouse emulator (HID): - Arduino Pro Micro (based on an ATMega32u4). - [Logic level shifter](https://www.sparkfun.com/products/12009). - NPN transistor (almost any NPN transistor: 2n2222 or similar). - 1x 390 Ohm resistor. - A breadboard and wires. * 2x USB A-to-micro cables (male-male, for power and HID). * HDMI capture device: see v2 description. * ATX control (optional): see v2 description. ### A few words about HDMI-USB dongle It's completely supported and Pi-KVM works great with it. However, we recommend to use [HDMI-CSI bridge](https://aliexpress.ru/item/4000102166176.html) because the USB dongle has several major disadvantages compared to it: USB gives a lot of latency (200ms vs 100ms) and it doesn't support stream compression control (you won't be able to use Pi-KVM in a place with a poor internet connection). It also cannot automatically detect screen resolution. All this is caused by the hardware limitations of the dongle itself. In addition, some users report hardware problems: the dongle may not work in the BIOS or simply stop working after a while. It's a black box, and no one knows what's inside it. If you have problems with it, it will not be possible to fix them. ### Addition * If you want to capture VGA from your server instead of HDMI, buy the [VGA-to-HDMI converter](https://aliexpress.ru/item/4000553298530.html). * Pi-KVM can be powered using PoE, but it is not recommend to use the official PoE HAT: it is unreliable and [not compatible with the HDMI bridge](https://github.com/pikvm/pikvm/issues/6). Use any other PoE hat without an I2C fan controller. * **Don't use random relay modules or random optocouplers!** Some relays or optocouplers may not be sensitive enough for the Raspberry Pi, some others may be low-level controlled. Either use relays that are activated by a high logic level, or follow the design provided and buy an OMRON. See details [here](https://github.com/pikvm/pikvm/issues/13). drawing ----- # The future v3 platform (work in progress) drawing We are also currently developing our own HAT for the Raspberry Pi 4. It will have all the features of the v2 platform, including: * HDMI capture based on the TC358743 (extra low latency and many features like compression control). * OTG Keyboard & mouse; Mass Storage Drive emulation. * Ability to simulate "removal and insertion" for USB. * Onboard ATX power control. * An RTC clock. * CISCO-style and USB serial console port (to manage Pi-KVM OS or to connect with the server). * Optional AVR-based HID (for some rare and strange motherboards whose BIOS doesn't understand the OTG emulated keyboard). * Optional OLED screen to display network status or other desired information. * No need for soldering or other assembly. It's a ready-made, reliable board which you can use yourself or provide to your clients. * Continued use of Pi-KVM OS - all the software will be fully open. * It will cost about $100 - or less, we are working to make it as cheap as possible. Sounds interesting? [Subscribe in this form](https://docs.google.com/forms/d/1LA6iEYVtbJULvMDNktyNQMI4N9SYdNG03Wh9WK-80cM) or join to https://discord.gg/bpmXfz5 and we will let you know when you can purchase the board. Prototypes will be ready in Q4 2020, and pre-orders will be available sooner. If you are considering ordering a wholesale lot, please email to mdevaev@gmail.com. ----- # Setting up the hardware ## Connecting the video capture #### For the HDMI-CSI bridge Insert the flexible flat cable of the HDMI bridge into the narrow white connector on the Raspberry Pi (the closest one to big USB sockets). Use only the cable that was included with the device package, or make sure that the third-party cable has the correct pinout. #### For the HDMI-USB dongle Connect USB dongle to exactly this port. It is bound in the software so the OS does not confuse the video device with something else. | Raspberry Pi 2 and 3 | Raspberry Pi 4 | |----------------------|----------------| | drawing | drawing | ## v2 Diagram Here is a diagram shows that how to connect all of the pieces (click to full size). drawing **Raspberry Pi 4 note**: since one USB-C female connector is used to receive power and perform keyboard/mouse/drive emulation a special Y-cable must be made that splits the DATA and POWER lines of USB-C (see [reasons](https://github.com/pikvm/docs/issues/11)). It can be made from two suitable connecting cables, or soldered together from scratch. Be sure to check the circuit diagram below, otherwise you may damage your devices. The appropriate USB pinout(s) can easily be found on Google. Please note that if you make a Y-cable from two no-name cables, the colors of the wires may not match those shown. Use a multimeter to make sure the connections are correct. drawing See video howtos: * [Making USB Y-splitter cable](https://www.youtube.com/watch?v=uLuBuQUF61o). * [Soldering ATX controller](https://www.youtube.com/watch?v=hKnKOuH_f8M). Also check out this small PCB for ATX (if you know how to make PCBs): https://easyeda.com/mark.gilbert/zerow-kvm-v1 ## v0 Diagram drawing ----- # Building the OS See [here](building_os.md) for complete instructions. # You're breathtaking! Congratulations! Your Pi-KVM will be available via SSH (`ssh root@` with password `root` by default) and HTTPS (try to open in a browser the URL `https://`, use login `admin` and password `admin`). For HTTPS a self-signed certificate is used by default. ----- # Limitations * In very rare cases, old motherboards contain a buggy BIOS that does not understand the keyboard of the **v2** platform (bellow). The reason for this is that the BIOS doesn't fully implement the USB HID stack for composite devices correctly. Meanwhile, Mass Storage Drive will be detected. For this case, we suggest using the Arduino HID from the **v0** platform with **v2**. Thus the Pi-KVM will be connected by two USB cables to the motherboard: one of them will be responsible for the keyboard and mouse, the other for everything else. See [Tips](#tips) for details. * A similar problem can be observed on devices with UEFI: the keyboard works fine, but the mouse does not work. This problem is much less significant, since all UEFI can be configured using the keyboard and hotkeys, without the mouse. If you want to get a mouse, the solution will be the same: using an Arduino HID, as in the advice above. Our future [v3 platform](#the-future-v3-platform-work-in-progress) will contain an optional HID module for such cases, so you won't have to build anything yourself. ----- # Tips * The Pi-KVM file system is always mounted in read-only mode. This prevents it from being damaged by a sudden power outage. To change the configuration you must first switch the filesystem to write mode using the command `rw` from root. After the changes, be sure to run the command `ro` to switch it back to read-only. * **NEVER** edit `/etc/kvmd/main.yaml`. Use `/etc/kvmd/override.yaml` to redefine the system parameters. All other files that are also not recommended for editing have read-only permissions. If you edit any of these files, you will need to manually make changes to them when you upgrade your system. You can view the current configuration and all available KVMD parameters using the command `kvmd -m`. * Almost all KVMD (the main daemon controlling Pi-KVM) configuration files use [YAML](https://docs.ansible.com/ansible/latest/reference_appendices/YAMLSyntax.html) syntax. Information on the format's syntax can be found at the link provided. * If you want to disable the web terminal use these commands: ```yaml [root@pikvm ~]# systemctl disable kvmd-webterm [root@pikvm ~]# systemctl stop kvmd-webterm ``` * To disable authorization completely edit the file `/etc/kvmd/override.yaml`: ```yaml kvmd: auth: enabled: false ``` then restart `kvmd`: ``` [root@pikvm ~]# systemctl restart kvmd ``` * If you don't need ATX power control you can disable the relevant Web-UI menu in `/etc/kvmd/override.yaml`: ```yaml kvmd: atx: type: disabled ``` then restart kvmd. * To use Wake-on-LAN with your server you must define some options such as the server's MAC address and (optionaly) IP address. Use `/etc/kvmd/override.yaml`. The format is: ```yaml kvmd: wol: mac: ff:ff:ff:ff:ff:ff ``` Replace `ff:ff:ff:ff:ff:ff` with the MAC of your server. By default, a packet is sent via a broadcast request to the entire IPv4 network (`255.255.255.255`, port `9`), but you can address it to a specific static address: ```yaml kvmd: wol: mac: ff:ff:ff:ff:ff:ff ip: 192.168.0.100 # port: 9 # By default ``` * To use IPMI BMC you need to set up an appropriate account and run the `kvmd-ipmi` daemon (`systemctl start kvmd-ipmi` and `systemctl enable kvmd-ipmi`). Although Pi-KVM supports the IPMI protocol, we strongly recommend that you do not use it outside of trusted networks due to the protocol's [insecurity](https://github.com/NitescuLucian/nliplace.com.blog.drafts). Refer to the file `/etc/kvmd/ipmipasswd` to configure IPMI account. * To use VNC you need to change the keyboard layout for non-US client keyboards using `/etc/kvmd/override.yaml`. For example: ```yaml vnc: keymap: /usr/share/kvmd/keymaps/ru ``` By default username and password authentication is used. This is not supported by all clients (we recommend [TigerVNC](https://tigervnc.org)). To enable passphrase authentication, you need to edit the file `/etc/kvmd/vncpasswd` to set passphrases and enable this feature in `/etc/kvmd/override.yaml`: ```yaml vnc: auth: vncauth: enabled: true ``` After that you can enable the `kvmd-vnc` daemon (`systemctl start kvmd-vnc` and `systemctl enable kvmd-vnc`). VNC will be available on port 5900 by default. It is reccomended to disable the automatic quality adjust setting if there is one in your client (this is called "Auto-Select"in TigerVNC). Please note: **we strongly discourage the use of VNC on untrusted networks.** The current implementation does not use encryption, and your passwords are transmitted over the network in a plain text. The existing anonymous TLS mode is also not secure enough. * To use Arduino HID with **v2** platform: - Build and connect HID according to the [diagram](#v0-diagram) (the bottom part with transistor, level-shifter and Arduino). - Switch to RW-mode using command `rw`. - Add these lines to `/etc/kvmd/override.yaml` (remove `{}` in the file before): ```yaml kvmd: hid: type: serial reset_pin: 4 device: /dev/kvmd-hid ``` - Add this line to `/etc/udev/rules.d/99-kvmd.rules`: ```udev KERNEL=="ttyAMA0", SYMLINK+="kvmd-hid" ``` - Run `systemctl disable getty@ttyAMA0.service`. - Remove `console=ttyAMA0,115200` and `kgdboc=ttyAMA0,115200` from `/boot/cmdline.txt`. - [Flash the Arduino HID](flashing_hid.md). - Run `reboot`. ----- # Troubleshooting * **Unexpected interruption while loading the image for Mass Storage Drive** If problems occur when uploading even a small disk image it may be due to unstable network operation or antivirus software. It is well known that Kaspersky antivirus cuts off Pi-KVM connections during uploading, so you should add the Pi-KVM website to Kaspersky's list of exceptions or not filter web requests with the antivirus. Antivirus programs can also affect the performance of certain interface elements, for example the quality slider. For Kaspersky, the steps to add the network address of Pi-KVM's website to the exclusion list is: **Protection -> Private browsing -> Categories and exclusions -> Exclusions** * **Glitchy/Wrong BIOS resolution** On some motherboards, the BIOS may be displayed at a lower resolution, or with some rendering issues/glitches, specially on newer ASUS ones. e.g ASUS BIOS glitch This can be solved by enabling the **Compatibility Support Module (CSM)** in your BIOS, usually under the **Boot** options. If you can't or don't want to enable the CSM, you can try connecting a DisplayPort monitor, or a [dummy plug](http://amazon.com/s?k=displayport+dummy+plug). If you remove the DP cable/adapter the bug will reappear. If none of this works, try connecting the DP cable first, boot into the BIOS, disable the CSM and shutdown (do not restart) your PC. Then, boot into the BIOS and enable the CSM before shutting down your PC. Then connect the HDMI and turn your PC on again. * **Awesome WM on Linux** sometimes can't recognize a video output change on a cable. That is, if the cable was first inserted into the monitor, and then you reconnected it to Pi-KVM - it may happen that you will not see the image. It seems that the problem is Awesome WM, since for example with KDE it does not reproducing. If you turn on your workstation with Pi-KVM already connected, everything will work fine. * If you have any problems or questions, contact us using Discord: https://discord.gg/bpmXfz5 ----- # FAQ **Q:** **Can I connect multiple servers to a single Pi-KVM?** **A:** Yes, but it will require additional work to set up. Pi-KVM can be connected to a multi-port HDMI/USB switch and the switch's buttons can be connected via optocouplers to the Pi's GPIO pins to switch channels. If your KVM switches channels using keyboard shortcuts, there is a chance that it will not be able to work with OTG (v2 platform, see bellow), since it does not fully implement the USB stack. In this case, you will have to use an Arduino board to emulate the keyboard & mouse. (Pi-KVM supports this configuration) **Q:** **Can I use Pi-KVM with non-Raspberry Pi boards?** **A:** Yes, but you will have to prepare the board OS yourself. As for the Pi-KVM software, you will need to replace the RPi.GPIO module and some files (such as UDEV rules). If you are a developer or an experienced system administrator, you will not have any problems with this. In addition, we are open to patches. If you need help with this, please contact us via Discord: https://discord.gg/bpmXfz5 ----- # Note This project is developed on a non-commercial basis by Open Source enthusiasts. If you find Pi-KVM useful or it has saved you a long trip to check on an unresponsive server, you can support the lead developer by donating a few dollars via [Patreon](https://www.patreon.com/pikvm) or [PayPal](https://www.paypal.me/mdevaev). With this money, he will be able to buy new hardware (Raspberry Pi boards and other components) to test and maintain various configurations of Pi-KVM, and generally devote significantly more time to the project. At the bottom of this page are the names of all the people who have helped this project develop with their donations. Our gratitude knows no bounds! If you wish to use Pi-KVM in production, we accept orders to modify it for your needs or implement custom features you require. Contact us via live chat or email the lead developer at: mdevaev@gmail.com ----- # Special thanks These kind people donated money to the Pi-KVM project and supported work on it. We are very grateful for their help, and commemorating their names is the least we can do in return. * Aleksei Brusianskii * Alucard * Arthur Woimbée * Ben Gordon * Branden Shaulis * Brian White * Bryan Adams * Christof Maluck * Corey Lista * David Howell * Denis Yatsenko * Dmitry Shilov * Ge Men * Grey Cynic * Jacob Morgan * Jason Toland * Jeff Bowman * John McGovern * Jozef Riha * Justin Waters * Mark Gilbert * Mark Robinson * Mauricio Allende * Michael Kovacs * Michael Lynch * Nils Orbat * Samed Ozoglu * Scott * Steven Richter * Truman Kilen * Walter_Ego * zgen