From 2a543531c140a7166328cc5fc588f2fd3a8d69ba Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Thu, 21 Nov 2024 13:42:22 +0000 Subject: [PATCH] Deployed dfd6b4a65 to docs-develop with MkDocs 1.5.3 and mike 1.1.2 --- .../asset-implemetation/index.html | 22 +++++++-------- .../driver-and-assets/index.html | 26 +++++++++--------- .../images/modbus_asset.png | Bin 0 -> 88368 bytes .../images/modbus_asset_fullview.png | Bin 0 -> 179285 bytes docs-develop/search/search_index.json | 2 +- docs-develop/sitemap.xml.gz | Bin 127 -> 127 bytes 6 files changed, 25 insertions(+), 25 deletions(-) create mode 100644 docs-develop/connect-field-devices/images/modbus_asset.png create mode 100644 docs-develop/connect-field-devices/images/modbus_asset_fullview.png diff --git a/docs-develop/connect-field-devices/asset-implemetation/index.html b/docs-develop/connect-field-devices/asset-implemetation/index.html index 3e156dbdf26..d722c480d98 100644 --- a/docs-develop/connect-field-devices/asset-implemetation/index.html +++ b/docs-develop/connect-field-devices/asset-implemetation/index.html @@ -4579,59 +4579,59 @@

Channel Example

2051 -LED4 RED +LED4_RED COILS 2052 -LED4 GREEN +LED4_GREEN COILS 2053 -LED4 BLUE +LED4_BLUE COILS 2054 -Counter 3 +Counter_3 INPUT REGISTERS 515 -Quad Counter +Quad_Counter INPUT REGISTERS 520 -Toggle 4 +Toggle_4 DISCRETE INPUTS 2052 -Toggle 5 +Toggle_5 DISCRETE INPUTS 2053 -Toggle 6 +Toggle_6 DISCRETE INPUTS 2054 -Reset Counter 3 +Reset_Counter_3 COILS 3075 -Reset Quad Counter +Reset_Quad_Counter COILS 3084

The corresponding Channels definition in the Asset is as follows:

-

+

As shown in the previous image, the Channel definition in an Asset results easily mappable to what available in a generic PLC documentation.

Once defined the Channels in an Asset, a simple Java application that leverages the Asset API can easily communicate with the Field device by simply referring to the specific Channel of interest.

Channel Definition

diff --git a/docs-develop/connect-field-devices/driver-and-assets/index.html b/docs-develop/connect-field-devices/driver-and-assets/index.html index 55e39227d4c..de3afb52e0f 100644 --- a/docs-develop/connect-field-devices/driver-and-assets/index.html +++ b/docs-develop/connect-field-devices/driver-and-assets/index.html @@ -4430,67 +4430,67 @@

Channel Example

2051 -LED4 RED +LED4_RED COILS 2052 -LED4 GREEN +LED4_GREEN COILS 2053 -LED4 BLUE +LED4_BLUE COILS 2054 -Counter 3 +Counter_3 INPUT REGISTERS 515 -Quad Counter +Quad_Counter INPUT REGISTERS 520 -Toggle 4 +Toggle_4 DISCRETE INPUTS 2052 -Toggle 5 +Toggle_5 DISCRETE INPUTS 2053 -Toggle 6 +Toggle_6 DISCRETE INPUTS 2054 -Reset Counter 3 +Reset_Counter_3 COILS 3075 -Reset Quad Counter +Reset_Quad_Counter COILS 3084

The corresponding Channels definition in the Asset is as follows:

-

+

As shown in the previous image, the Channel definition in an Asset results easily mappable to what available in a generic PLC documentation.

Once defined the Channels in an Asset, a simple Java application that leverages the Asset API can easily communicate with the Field device by simply referring to the specific Channel of interest.

Drivers and Assets in Kura Administrative UI

Kura provides a specific section of the UI to allow users to manage the different instances of Drivers and Assets. Using the Kura Web UI the user can instantiate and manage Drivers

-

but also can manage Assets instances based on existing drivers.

-

+

but also can manage Assets instances based on existing drivers. By default the following columns are hidden: scale, offset, scaleoffset.type, unit. You can manage the visible columns with the related button in the button bar.

+

The user interface allows also to perform specific reads on the configured Assets' channels clicking on the Data tab for the selected Asset.

diff --git a/docs-develop/connect-field-devices/images/modbus_asset.png b/docs-develop/connect-field-devices/images/modbus_asset.png new file mode 100644 index 0000000000000000000000000000000000000000..817d596d27995b820a96802da8cdc5316fb8fbc6 GIT binary patch literal 88368 zcmc$_byOVD*7k|JH14h;!9sxGE)gt{;BLXS8}}wa@IV3y4ncxz;~FfuTjOqxyH4fa z_r3Ri-Z(fkIMg^uNJ#jvl;z(cA)%cjA)(M> zVE{)GviE)ie~{hYDaj(04$SqOZf|HJ5|KyF+w_I2ZhofZQ-#bdtz z|MK9O$y-SNkM|xftDV^9(c5SaN*&0jUt55-0qu{hT*wG`umM_)1Wyz9`T`pV&8ZrH z6!X)7HM*>QstDcgm@Lwkb8HO%?8V!36kMQNl~-X!c##i|l48X7%@_~TSn~7ubhR8Z z*-f5}TjAK);&=O5E{uT6j`ba*@nG_C`hfPRt;J;F`!`cr@mCN2_cswCn1s}J-U&wV z$x=i8MUV5i+R|IOXA8s1W-!ASG`-;6iFl#MwOFYrZrP@r-J;dDAXLfI#08NL^Z|D+ z$9Jd0`QA~bZIHueVF4~M`@z$L`x?9HDDI)0fX9bln+#6_9&eX61Q=_U&N@ldpz9vL zAp+Jz#D}eq$YOa+n}0Ym5-lYKX(mhbwdoU5Q|;}K8D<=(if6|lS%uoc_36l{7~y`m z7b5JB6Ghs*+dkA!N{w52Hit79-oYi#Cp1qySd6dwAMckQbKwwFOafA$%Y#9_bIgN7 zU>M{gOnP+kOn-k`t=~!~X??gUs$g?43b+SXSP!RXo`Q1}qt~ktKnpV}*xZvHDEfp@ zB~G)kxNdC5^CFG?uQNP%a$!VH&@amoV0iQW1$@=`@g}K4ks1AD@@(g@fu30^66Rq1 z0@ls5)*T)B-ItsI?f{3W*e|sh&bvki#M*+TuAgD!%@FWfnKV)u`^s4KCH|Qq@sfPF zGPgO^cWQoL+Il)9w%X6z`gSsJ%I!IEA4KZWSA+|8yPXre-aPz;EwZ9ZmzACUGjGdP zM?9V33<1i`Mt@Q#F0c5ZhlEl#p*<$@{a9|~>h)Geq~3yn|D9*grc-`4w8?F2=uH-@ z9xR2=G`QN(yHoyW1#k$@JRngFYny`ifi>L^7TudFQdJQa_$q-tVp!^NKAxGwUfAb? z_IO;4LOw;PL~hRNNL+;CnGWMu=`w?B1^2^6!+G$up^TvHxE)0ep^=WxguhA4;grvAtcuxJ_1U3c zj0{bW54R_7wT=tx4Sm*ya=-fcPLS1aCm}UDVwqGTOFz+1$V7!e;Vw&6*2DD9Egknz zC3I@rO&`K|O!(Ix^1kMi7R~;h@%#-*F(cn&1+OR(l~lsUlv-|sx{;>~gDJu^KJQQn zE8iD=_;aceGjRP@Z~*4GuzT(^0cJEjz0{#`g-n~a45^dgz-LX*2db)4=E80xTqBoe zbCd{=V*~DfpQemAFaVwU6~5A((=wh4d6r|3$y8=HUCOK!Ln||Tkeg)m<#J%2Kd6WH zq%WdBF9`9ga3AY zlFk5K@U)SS3cY~U0A(x!#ASXlAm)2jF3w;{2zz(Qa7)guw=P1sl(Qe?rbTVbAJ#JK z=d?FfvLSSC#SqNg;&CuvZv^?IwAlCc=?2WG+53-Ohg0RPY9q+I6HTDt$V*i}$ zhwlOTWHSWxULey(_Z?=}%>k-%#KfWJ##iliC(TPt8(yQP88>bkVaKxuf>X&o|DV`p zzt8fp^^^Nq?1QQmW9bnhsjut^mvu`zK8?`Ny3Mkdo4&2XPfGMB!v1m@l72s% z)!Cg1nurlY$LRakJS1+L1IG=*S3E`cF$_{X=KhZ7Q{PGw0_V{qwdLq1XS*lYZYZS|6*Q@<2 z%^aQHtGx9!>N(F`cwOF-|E&sr2!&xUE-<*h^?>(hG!A;sf1HL-p4#n<9W-0wc4;moBzC1BcdS1 zH#clgzU5&f$=G7fQwD$d{RBhdqCifJ5;ZVxRE`HK8ZQo8ZdLs$#81BQ8uRQSRfomr z#}PWK-rt-%3?C<1_J8x*cw>;_{cwZozc*ih`V$NOOOqpB%;O-grRmF)c3kVZY8%%O zv#X<(^q2-JcddbCE97vwDL*9i0i3Z9nZXL?(-aQ|G^NNpoC7;zL>5Tr>{MwwoO`cc zz3N_ERxUGK9yGm(3sM=lT<}#x{liR)ETQLds*HBMz)Lu5@10H;e+2Qte3XpbNqL__(+@ zS)I4|>jE#H#Sc5jh-7@HNmZUsW$)yyIoK188@_9fk;eLpxI<=6I~QKAg@flvgXRf; zI;rB~XHSex(N!TBF%}?j2cloYC6`p$hMb22V*(z5icyqAZV)IU(K>Dxvh!q(MJeWN zw_FBP17ZJA1_?9Gk>pm-46K+;F>Hi*dG*RZOBDqd_F(M#45dpvRnXh>$eh;|i`hK% zyV=RNR6<%MgvqS;cx3sj6`3FGiN#wNFWIy(fNu8>!cgb~3#TQ_zZUwGniLI()5$&qO1bX*;ce~xH+2``xfT?sa4`5T(@j1T6pp3Ci-dtl!frG1*gcSnUmqX6H}TU z_T^plIh2^SQW^BWoOg>Q&3$)^kF>)w{C&K`rPu9OZtM-4PSzlSFGY*Mlbyuy$jF2k ztoAvAR`|2D$MLLmgclZlHUQ{_ixG5fPC+C0kHED3!NTydT;30Lu+GEix zzdG$EEo+&4a!#R;&)! ztcbJ8{<;U!pl^GsXo_8O9nUaiXoLGw=w(eQ_Cs#)${B2ats(Cdee{oD>#!8dMs53v@{s>hN@I+l` z@^ZUg_$YqeXI+Om<@@PV!43Tj_JQkXBYVn(SujJ}0s^1h*I%3bY2-!bQRmfW=r2jK zILv!uzD6@7ip>*}RYvA2$1|V!>y&9MXeavo{Qjdh?;zPBzmw6jQC+BVU)r4Zk}6sr zoPjvOrH(3$%9IO#9=xWB8jRG*`ZK@7DGZP5%chqoGJIvQMYlJkJZaGtv$4Q6cuQ7CNY1eR@;sTQbUt_L}mDl5x$jlBT@n(>^YSniJ-$RUCHxIduTbc$) z3RT-YHLha4iQ#11fv}IGvUBvz7f$glsiv6j$ZfNf0+JtAbf(+Cb)VXHwV^hUHZY^Dbn~tqi0pP zLujUKsNG{l*Q&)BbmaW_mClrAUemXh`m*1)=kEHn-%evX5`8+;{*!niR0%vkk|o!C z!XY}kOX+C^r%NEWf4_e;yc3vWdw9;HF+&f~K^)7+XO=#Agu<(GDL}A0w zKnluZDU}+sgwAVgkket``gpe`Rax5Q?K?5ae8m!Zzido8Wh-8ZKHd_?5~US)?RZ71ljT$ZWE5IR59RxG z*e2ph{@Vy-J2?HW$Hfr*wTt?LjE+mc-vzX~1!TjAmnYl?}ng?7zHpES>GwD6Ovz+Y_6~AMW<$V(78{b)O6mE<_;1#S{1eM zMQ3It1@CKqEV2xo=}w7?qT)NYX2>st`pUc5m=@VwbY#W9GnA~uMvP9{NLo^znV#Oa zS6~x^Lz*)Nr2|RYToH^Er?1D5A8ig zrcC55jtlN3J-pu`v{gmE24FBCn(TIp?d>#3qEAVZX0;C9}q%!@K@m>alrXUZ%P=N_V7* zb58x7-?kpnHY%c~Fs3nCiHI1kQv7p^uFqts4+tB-{A+*dx1HAF!zEyXT`Kn|XF9Gs z99(e^Er}2}6R~iat>KI$S$ff3u8E6T>kO6CmK&7T1@G2Tui8bY_Y8TEG@Qm42>XJu z&if#wK*USTYs|Fwd-oleg{sAsETVP04P06U%dg-BWUuYcgFCMK#tFqAuGWk$HD{54 zx!c3PNdUIxglEmKD{}VGPimqJhQWU#lG zXtic>JGl4BqJ#~+foTwjseui~>3oXik8Ry#RJ%0t=;t=8U@)vt4Y&^jVeT}E2*W#bC;E{`dgY%LjE`mD|D`M}H9JG&c z$@erm|L%qu-Bb+A>m|k|HFGvjO=z40`TcmLUx^Kh@Jy8MK7UAL7a_Df=ru~8WnG0) zN`eMqM}JblMYzoNRaSO~=)~Lv{jv>_ZDTTelk~_R_6K4|_znv7_kt!ZPx@{~EV7DZ zr!kc4K8c4e%UDXN>Jw@m9YV-6MYiy)5F{BwX^r#l@;Nv|T z=$1Jniz)Yns)Jotq2NTf&OV8}H8Cl)mG&dUt*^SS?(cT6X-6&#G18)U&StUoCt z4I2|%%#yNXWtrb{MuKOVyB%l4Q;1<9l+Yn%PWvswqdZ(vV-)&62GK*%BNKay#AUIx z310{Smnh}YvWztfotm+1_;=|R0j*3HAb>ptBNF2<`LWXYi!p&4)3qFU=q)c^?G|9B zAAByj@2rjf%hoQ?Q7)W84%o@p^(UBV-#XV5kDs zjA%}t5|hYFJJkCVN>OtMb}1dK!Fh#)m+5dTBjDQ}WzkrM=n~!m|Ba)kMhF&xr%?`} z9p*{4;msyu^KAJ(`ph}air)Xq^hvPUyz;tO(+Jk)_mIQj%x`lZy8IcahlZ&ned32t zrP?3`*NtM}Qqo<;WPbhupr5!(oOVHD3hA}!O>jym_lso4CmOSD%TL^_nw%Glu1`h+vnB?|mv zb3CC;eQ~8dw7ZzNQwx=-bVWLJ0plIVayyn5H4YH)jBc};2(%~*`oyf_h9^)-ukkXD z@vt|*SIqOUQ%tg(JXyZc%yK!eFU$S~ZUg;tgc26C-}(9ArTVp{r7;~Ua8n7=VYA6P zIVugW7hgD2CC#Cy1wy1$rj;PK**F0d8VV!n( zWb!EL%X)cThn!4klF)HB=7;trZ3pI_r)}N_Ig9&tpU&S%Tsi(kZ^zw%PYN8V2O=8W zBQ8&Ncjsy%_h)jaArF}c@nw6^a`J+b_dn{S`s^@=U#&BQyV=a5cNEUX^yQ4;onVih zSPFn2i5hbE(V0-UI0t$P5U=-@@qc165yIp?a*IA3B*ByGSdBh^ZjWl*-18ooF7Cse zs^bl;Yh4bke3mG)H z|Jw3i$t66rm~iM#dP#9n`RUF~!)SU1qm>3G>b6-N9=Z3di&6ZM$FPBQS|bc&jV&C) z=wI8=gXM(3N&j?UCyQRmd-FM7B1gt7eO-^0)=UX?ETPE^Zx!bAxw9GT7Ra85Zo9~p z>Y1^hp|Nd&ox)X%paI33uUzln-I33$iHl9L3UGRWPC(ef;A%sY#XhmaRQY>P(sP~v4U-^p>^=8;<_8`>|?uemN;%X8-<;S7|k%j5v z1;0Go$+ikXX(Hl*jn{pzO*16fQ4Lzs1{VF5r>SKi;S2r=KOg%)*)3>*{8C~k*}Zz&XV7DxE*jaum3YI-(r);@AR>b&;Z zulFJ{B3kejk&ir$eJr4*P;Z_ZJMF63LQbk`iV2aa2wu=!DcebTb&T^t;N{Riot4xam3<7OI=a0Rir=n{yfzV8f>DMHPbfqbC)0 z8-%{P@+sw~ykKA-DsH*Ae=}Z8M z`?{6PZnhilc@9$HUeaNxuD}6+YMSRM?y(X!4%W4%8Hl<^w`y_IRtJMOX3aFhC;Ikt z%qJ?lv_KbDb&h2nV=xLvf*>5LN>$gvDt$yY=#YO4`Dq<_s9?qlt>^0*(+7V$N!(4* zJEnKAQ*_bMWX{eTnj=Mnh?2St+g5KoyL3vqpieIkFn24Wfc^yqjKpieG|kk#9m4)_ z4P3g7WXdqrw?c$ea1C%V@;+>Z?&@VD+lO`YQ;+vSJ|^dw=h%lO+14(6>zZ_K5&34t zXYxrb(L8X7PMj&uzfRhk7@W{x1zpPI=@z_N%gq=6^X`;W4pVNH9{j9@WD)JbH~-xK z?lj}^%u8w@!GUuG+xz5CLnR9;6JeTqxJ)wkdu*?d)|P+1%uZ^wh)5d0YzMDin>4G= zP*0QKf#xP9w3b_BO-?u-+x+Y31uG)RfJI{vBJ|q=q!3Ado*FyLTCx;v{+aCQw_Sc5 zfUA3PdT{H#pa7~k^~D1Gj_&!YbQ?E8sF;@ZxKog+z4qc+5cYzF4Cb+k%UNXm&dghQ~I)4}^ z%b^4OBI3@-bJ;Y?t4TS`F%X<69HswV;?{6=)*Ak^fMZN9@2Pfa=Qo@ckUHbaViXGY zu@abmBwVJ45FJFqIq$v4{rrONyY~CfAL97;n=+L>kES6&Hf<)&w$cw#Wl#1+U%_AW z03ils@fIc9XmEH2MHeHLO@_34l{}TR_`||ph~^f|tmH;^^JB0pN%j|jQ93@x4>QUp zci}aO^jMHPBWmq3LvbhDIsjOy$_uOuCG*jywFpMe%+XhH5t13ll@5h5NI98(e#g(R zh@*G-W}uF4bppRx0y>F}uO{e_$CWS!G+AEL07Gd`!luMg{w~})<*5i8fUn%Broa6n zOW*W{G1>G4*HbCe5FJ^LAwOP^;rD^lL<~ z7QuI|km~!8r4j{mQmjoI4@5Ao%g6^_g&e&Ve*~pt%OIcAOeG|g^@$1yy1cfAuds3K zDthkyinBwCCr^lFv>*n5NeD!Id#1~E`>qe-x#NBDjJovPuF9aGKYSMAwE{OJw-B8A5NFB2qF2*(?%myhmN_&rX>4D4nZV6QT%ovgcmfsC|C7ZivU{ z1gQ8-8#e~qD}F3G3h~Ez=3;mwF)zmGlTb?NBUSyp$e$QthpluzQ4kos3PqaFz8q|`{|+gAt0 zN;+yJXKh7G^fK}MCd4SRTg$t284#%!RxL3pP<1Y}cSf!oWieivk3w6tV46T#^nheF z#baD9NgNEQl<~}|5*EYUd@$-A@{J~v9m0w+;C}b#L@emU+$Lh~_Q1vs;NY4}2jz6o zCZKp?D3q?DwycW}w}iT4#tOT?Ykhq1q2k*4IaFAgHd}=I_tnc7M#unl*A%?#5YJH8 z>q%{6>pD>qI`NrfU~8AK@_qDRef1$nvk)pCC7f%Yj|R3BgVr%EWf@q>!$t7t9|2VE z1N0KXhB|)3A^AwNoP$OfvzF+$PI1rm6}F>*hf{`~ozFr)#)A+*A%)2SQ@_5sf&7m$ z65D!~LsZ4$T+MCceq_hDFhWdW8D&;oAhnJvy}p1uZBRlA9?h|59J@Y$rT?4rHk`Kd>A=j%&I!ZdoEjbJ6n)NrVfn{3#g{Kz8hEFK zrLWJ)kAXG*Z(k_)Lkd1RHF6g{%jArs`UAnrd0%yz{M(M~}J8X5hxq*I&6VJ%xG|#I~jAzJ?V%_5RJOEEVQeN3MQ8} z+vHW1xr@5n=KsQLYN19+o!^5k1|n z8us2VuqupZFPxWwD&%X;62Rm|v|w`i=P_dQFuC{G@SWv*(tc@iAlN*#K|m%=kvQ;ENtr2y z3110iwZ|kPAO5}86Oah=x!LJ{r-VgDE5Iu&-K!E)}AF3aLu+s7w z|F@>(p8^eB2MRGA2L-qY#Wyj(h-$?D1APqBc!hb-%M|Ya(B^0$2@tsn>Hmj#$1Lux zc9~JGb^31+msKdIL0x%;qVh+RmNANd>O!&*XB+E(60%L&gPAq+-u@MR{PQURG0B^E z@4nP+rTd_q954?d!TM8#c_sc+HWZ=oKWaTk+XxatgGxtGnXjPR=G!%r2qCsNl8lAg zWmd%tok<9wB*OM^m+-!UBoF}rwI60jAE&l%I$XDW`@V5M<$7P3m_2_@J>Yk-KfBr; zP18*s!Or$NF%g^xUUo8ur3hHZT>TZ92okFR^)!}#I){9QuE?Y~#M=M|VUGg?m-`#A zd9*yq3;}qvq;}EP-et`WCF=TgD{_6^0{9|fEcZ<$kcWL9_%1-BKktl!CyNz9#E3!0 z`ydSHY@n5CHAHW*uo*xnpGlu|xaKo~PIRnyv7t@b3Xx+FY83wP4OO*71PYN~xIkcB zn5cjjEXO(>VYHE<-B7|9a`I9=+^fO0C)2v(ISeVynJm zTplhiF7`S~M4n&T2p}6g+`~;)gL-2S4f)CM*C!iqOmnK68bv)0Qac1f^;C$pB2{!^%XtUUx%!PmEmQpi5J0H8z_@0BZxfFwHGX{n|A+Yw59iOX7dHlVZU z{x)*j_q43{m}bJM!^7;NSoywNhb5W+6nJ-xs_EjU#S1@WLq9V!nI=}S%jYPnUGLYG z>0f3|Ul9OV2{};8CoO9cm7XXy?3vkR=PAwE6AgGV<@ntD44(b=du6wtJ#ioZ>EC+r zT&>eyCBmSdE`vtM{#gSAaUe3}JHV0Q`wS2uNXS{Y`rj+0iN<1DZ2d{#Xn>U*i!RzK z1&p13<%q)!BV^b)Pa9>P>KRCRZW&aqS!RT|Z&-?mIB1&4?Z=HNS1WfO5Vy|hKEUZp z_9`G01KV=ssiraYgm!E-fHQ~}8o(ZOTl8x{ZQm{1yr;F_{Gj>LXtdgf1+Gi~csY~|r)nFgBhz?|k5@fKl?N(MGr&8<95D=!PM>ei;+44S z<|0|d*AiELlo>X%OX*)Phk%*ie0$dY!`X1jq5^`jEwihlCwWFIpk}O9k2{&{HJBpB z4Mf^Cz4SK~PFgZBzfK)b4XZX+W;Bgt0)GkC%>aO$bna^9^2Ig2FZQGquA(^Sg$X$ zy}de4$Q?BDug{sbp0GA-aKD^jIaqTUkhhtxceB1N&hfr{2=iQx;AlR1CEKB{&2Ys( zo5AM?+Cu$2T3QS#SA1<8lbMmwLF$DGCwp>euI~ zIs7deQ!><U`WWxh=VJeQ%&N+2@N@<# znim}^QM1sLjKGUOnE1u2EoYl!Ewzs$=6`pr)UDw-zf<1|Z%Q7o659j<**m`KemN-U zi;~b-JNZp?y+hIwZhpnwsRjmP!L8PO~Ix_%KxY{lH zZPdXp|FW85&`Uc4yy<(5s9ow6Cm79xAbPr1eup)U$uwLp>Z`+;25n5mheQk;ijK)|!AKrKN+yt;kNK0r5~Lz~y0JqUlso`i_+ITR@VuFRw?2Y6Wr<4)#y?^s*))6q%ED1WqdOnmtBxZdV_#T#EH}RLlz+JLpSH@u$L$^Sw8( z-EhdCtrrfndt#&7XcTJMXw)6~y$g2^zR&PEKzG?zH(@$F>MhbPYdPB%@L8QG*6nxc zz%<&`D$#qdRje~w^}=a!eyS>8Ekn}m_a}U#3%qq-V#(!M@OtmG(e+t^8Y~wCzd*pB z+D;Vg)Zo*5=)>&41QYZzK$)w#-|K-84d6Yd{-DVVKo5|eOkt{CrkWzeW@u@@(YJ9D zirOjSN%F%1ORW`9Qr6uREQl|D>=gh7R$2D5Pe-KuRe^%{re?j9Nw$bJ1*ewt>gCtM zsv?%YJdzG}XYd2+#xMf9FU)#+vXo8xj5ptZYaCO-2NpeTMgdLIT7t9S{_dYsgu2a- zR<+QjAFYHa#(ZrgphaKCRMTeGJLz7ViESH=Olf4Qhma%HfWXY8ME5b?<6-RO!8MO1 zI)N$2V22qBeD6zt1)Ktq)^BWaB&K;?iRUs!9~?RXndR((8xDhi9shf{MkdoQWF|u1 z>}0jGeC;yHlThT{fhY?#PgXtjgo&Bz9XXf%nNiZq?c2lFgmW84vyYjX(X++60#tu0 zd@dd9i}h-_6gc^yO~aD6&$?=^d?c}XYiuV~S43)E*1R<;*HMiS=vXrS-?)!O4}vgX zzjES%x-g>=@$#&c(pHlc{NYTD@mNrVl$$F0q``*gSO*BSvgeJd*wVF+QuIx@FaigM9 z>nKsC2ncMNnW%+|w`!8*T$nm#-o9f>A(Yfn6;iz0Vg1D)Ka?TG@hFyde|z~kOU{^r zg4gH;%;a6*8?%}6_LFGSYSB+e&Trq+CY2tBAxa?WFI}46YGQ|ijPJYB7Byizxfmxj zvLmwi`w2e~SQV&iIPXghbRn7h>8I3x7kx6n4kY}M1^VX@KK<+z#e-wKJG9JRk4B8eOl~F7a)q3begpo*CMg!GT9pe`R!_P-TLw zbc9y&`T=5fU5?6waYAnHsq%TcY|C7+&QID0@hjDAhkuyAxep$CbK;H$%qmn|1iImT ze5nzvsJAw#fU1SX1)XY|2}Q%i9qYK1HzPN6B@v4!FioVi9*kN@_QG;dw})TE`xbpx zMQNL1KZ4=b=IguwmgCyGwHPr2y43c{ieO>mtEgkCa$dbOalsX=MSILh;7VX{o?WMy z7)NDU4@p_YFFA^f+j&ERjYBY^E$H#io81c$;iv605+od|>vd-QP#kW<7T;e*ZmE?a z=%&RQIVl}8DNZr&;NFKP9KGT0hNc{264w?IqlJ@IMsz}r{HLJ8?Waq!S0BfIX1yIQ zJzXf#S96&*^oWRO3HwtnJn{Vs?@(wT*V?P?h`X%yp@DSFFSIwCThwNZ6+YA|wUyAT zo3BNK^`h-mH99GbpVn0KEsXEu2vY3ANVgVK4OT^Hd5pX5R55}|jnHfE zPrCj?;49Wj>tUWnPZk-R_naO%iug$zC3e&FF&8|cTfC(tE0rrpc)$6iL7mIZz-snO zGu88A_FD|m83-j+z*=?s)C@{G=}dS;bNd^RG_S3}oBb8Hn&5zm@ zCR=106*CU2y)>bnLD1mUq2lkI#dNLVwL%6$F`xaGXDnt+cN@z{-U(eV~A1KUzJhe8% zB{ND9c9Oha+L`y-N&|GB8h{M$)K!t&lQUhyN0pVeiAhXi6m13eYtSHtK2a%MH?vD< zZ=E{GjQoyT*pYc$njTNdde&YnYHyVlPPBD0_J&tuJ6gm0VxPOm{(dbsF`Z`$o3FfW zkJbyhBZTgVPw5`_FkXF=s!DnK=PQ9({!TQSAT07emSJ&!Dp-k8vr(QM2PkuhR@5DO zwUZyYy5N!jNA&b;r^;17hE^mhrvr5kdVGBRPFX43{(N_`%WYU*#Grul8e?=dCGe-gF0uUMIYl^GEbXEi$7*A z_ukw6)J;74HMR(%qm@4%kM|0l))@$_qUn^@<S^Qn#&oJ+>h|~Vy%WAu6)gfj(vNJvz zbaKx!)8}}e<)+0V=vH64g!WNE=tM@D$^7P@j{ivEkTr<-l;5<}E_(ORxN1fT#D1s1 z;!-)auLnAwnNS?TcMwjzdWRnU3`+mqTDc1)3uIoL%f|k+OmZWw5VdZKh($4?M87ti zPE3*r8=HmB3_#{(Bi|>R8-OZH=6Mb*=F;utkm-N`qtWU!#;+lf`WFZr2eqNXmYq${C`4 zZc*TiOy^jEX5>L9206omP&SG@dGZS8bnk_cd+AFo8W$F4EqU)A=IdfNDAucge4J+4 zTTPW3=4vI`;(M*sS@`~`g_mID>sYCSi-+HlmSV$F3vEs`qV9D~)|?(882H~vWTB1o zPt;@6qz=gsNehBk&a=qp*Sa@mo;{aLMntG*H(Wx&O1Y{LlK|wsMsL~cLsBg zZGl0RPIOP;M1G^NsfJBkDM4xv#XIMR27@Ci_;YGd<;WG~bBl1&{t2^mUGitTm7VA1 zqC2y(>L~V_e{Cy&Hv{SSn}2xjkgNJ+wX}k>&To(M+<%CozA%FLT?!VeETj0JWsN+zT<+SJ^rht(5vX zu|HH^(n{OwxB8b1Fl=JbH$7!)3(XGsY1K#f+(Lau)Iha{j*0bz(SUS~7F}=2#9)~1 z4Y?P#c`_D`dCw<(<+dxcqqpsz8A0K3AQWMTInF)pD$qwVwi41O@3dIiRpY>$z*elb zK%(q;Y+9WBedbS~JH#oc9p~#R()r#B^Z}~d*?p0Ev##ggTi?IrmKOE=75=#C`U&hg z+u`%UgGnvORoKxW`jhrImEgf(!EwktNnB^axNF8i9FN|DoepwJhIU)zwP z!z-5Iv8=$T`IGT9*^^}eD(s7mK`Iz|5_&ViJoQ(5_!`Aa*!9b9iWtG^UKJ@DWF1L! zPGs#z7yZ7H;x|XeLBm!|suAHhz6?|RBB333ep9CvyvfI>fFzmKJBt1uHdAF?>yEEI z6I-IK=6f-lKX!W%!Lg5sJ-!?uG1VF0f!D?Y^Rv_*x`VYy+1SjNirO?VSF;Dw${BV< z!Fz_~romWD9-^Mo;}k5+fsqiVl&3pULqkXyDIy^jhsmVOO!%p2d_(>p^P!2;$orRJ zTUrSqP<+FiWi?3cvn%8oW0D-G>^{Hf>sF1Yn<{>tr=7Jha|;yWIkP53Ga#bhYhEHqNv8Z0KB3AfY2zGR8;XNIi_OSyx&WWnhOVu z@>(yXSX2%02JR1dub)S#ibDX>xgSPnFMx_8;^i_r2i2Z*c^{skMK~p zo63b^-Ghq5AHq&upQK5#yCI?#p2vEC-zO=WS1 zA$nW?`z?Z#MCC{I(VI+`6($j?1P_2e;Nc^2(CrC0JltKEo_?|P>2yqO0&GD^Vx$kmanXQNR0gScY_f;<4+`*YxR+&?#6QjE}B#h1~N1qNdvC_~W{N}2W(5eV`dV&mjgNa6T7K&jy)LpE znG99;0=~}aqXW(lN%y)TCKwhcrg~m&{a^M>Dx!g(jaGx+WxC5HxZNBzkb}Q~j@aja zvt&|Q6(QsGGp{h#@WFx67&%{mCpD*-%U=e0$j>aIFD}I`1&hXzpM3v60=&SDU6Iui`46MGYdhB^xOVC#1saNE0<+b zGv)-IHT*Gi=x3agvW3^#Xd&sz3v^gcoKm=3=6{h<)Xk@U0D=yMjZ=7UiqLE@k%n8- zyGZ`>@)#B1y(w^|2=}0Hk^D=f1%_v#a{{qu=@{jwz-#-L;}OUWj0S%QDgabCnw#~9 z`amT2JCaiXD)YFm_nO)>jY7?g>}3F$4V(u=aD|~%5gTpHHokvA@;FY-Mu-EB7gU}S zYn${0i>XtJ-e;d5$BQ3J;`BveI_>`s@Oer8ySV^9_x0K&+L9aoPp_;Q<^RM<8@Dr4 zVV;T<@^3qB9A}(Vz(XK=Tkn5(R9!z%%gSQ^>xut*Q~}#uJif)yKmo(QX#GD952tU~ z!~X5Rg?4iNkBq(~CLfV77uZ+Yv|E0Nd6XVU$ftZ^V*tG`)DoI3@{a{X&m_CV@U=)_yQ~z|1U84yWbTZ7d@)wg>&na zOWy$l`Y*Y+>`RQ_h=GmAu6DiYh2*uu^y{3n>iq8;DipJ^?ZZS*fi0#WtnS#d5g@z~ zfaM7=p#DhYG1Qy-{sHdtf5PUO6#idg^I{&3|2J$tK7m8+wb;zpMgZvpaqAUaf#|*U zqTl7h6Z^z(9@;?6()1LL>&@yj@?A-DIk&7;29Rnii<_(Qb zz2^VI=YRbC$vS&bUIonVe{%JI)O8|EtBFrP9JX?C#az9bpG6cKw*YdxWGSx+BKKL*leUELC z8lL@vK}i1$=CqV<#&0fRHTLsWHUKqY!9ayK;C|1zoBEHk`@y`-3ws^ju9KU+M{C-Z zJdK=u``F)Rh!MaLpyRj%LztWQtE{ey=DlR-*EXgTieY>Ri@1^UI(RJz}{K zA0N9IfyY<7a2>4M=tR%JWosDt)XReATlH>R@(Jwt8=fKsMS%8`gu$;`aB|kY#6~qa zu2)z3)!Xr=>v6Nu>}%My?_a8oXV~m5uxkqt?QDQAq(6V|eVwe#4hs?7g% zkmxUY*M780(4Li>1M*r0SJ%plP&AZX;Tgxr2S20B_YRLh>n+8`Z@liVT#N*Y8)BVS zMK|lJvF&s1?F@w+Zuk@=Unx^^0eJR{+3nemrsbl>7QK{zs)HgiN#}gBmxtvbYfKau zYYVk*?~H8lN;@V)BFa*+ZdDZb0kYjn1?EBHq2zUjg}9L)I8dk6KVdpJXoZR3dj-I3 z!R5o;`a+R7WLypOEh!ER#s4DC`p2rb=vhT>nPS7|g6_azaDEin!bxU)D9Q zCJZXktGOs_B~)`L78E-9NVl2m|ZuRfrm_HFDQlAeNd?Emo z-W6%m01&+tKa1d!*ICE0wrdoqoASGunavzBp}_#BPb2jLOEX$MkfDY{5TfBg(1Wg1 z$6*rE&Nvkltr*BhOecK|#s^(dlfKUY0Ei7dh50MHLlF9QJ2 zHHm&ZJ~p(Z69y{jy!`FP7Y7SZfps3i#&fnmtM7ZY(w#Zh`PK?UH(8a#l*`SRoj z+3)6z2ngxlZi#}-F6N%Q0n&So8r%1?1VTxMZa05jl3tS7>8=~}U(6b=TLMo0z(~#D zEq*=<(bR&?u=DNFH{J^}BTwEJR+D}nfoa*uRLki~xNm1_i^v-1YyEmhddmE^Jvg+p z+D7wT;<&UH>g@jpaOH47jO=CQtdJgrlnM;ide!-}y=k>#{n{At z535eCXu&!gp3$on`_pWk5k(HBVZ8%I{WfP^@i<11i8uU?x4}UdrqYs|2A9ZaIs7onJn1$We_GK zRLspjcaSkO+W zS9J|2vsp^$3ff{87v8Nh-T4lrnP46xbhrpoH}=;O>cu|{XD{E=oK zLYJ!}Q*HeTIEjGzhvKWY_f|{pUw4YT$%T)$pQ$e!>3WDx!j4{sB8pod!x&nUV3G3o zC`^O|V#WPua{bg#tM&?$z=OOei{R4}ny>xrpI!`Z6m~*CN?aGe^knu7m6|H25g?4F zk(KS*9(DQ*lpwqWD;K@@@P}te0h{`2b`?}L4rkW)sNJ=ae^o7v190-3JOVF!Js`g- z;L(WcIrw;0!5o(zy^a-_M9-EeG3Nf@lKm%K?xqw}{%^LNemUdC)jT2X?*o(wqiaTx zZ+}{e$?hiusm|Gh%>TjOTSjG}u4~)UAl==mfV6a{g_HtP(kKnmC?ee;C?F+>f=Z`K zH`3i8-3<}~`dyE6t~KXcYp&XB@ArMbG4>zFaEeaiiTggU<2){m&<2fVjLIhjq1rDW zpXknEOZce?&m@|$FJ9n7qHU8|({&f1mvEN}{Pyk>?@08d%9AD9dU_uH4|i=GhZ8Y< z$BQksNAl=XA5dVdHIW}XMPEHQDcy8w#a;v87;_X2` zm+C$rqg*NWLxsNOWq*>Wv&F|;7-9GM^?6ENk#_%#O^8<}fBaTE|Iv9qi{&0vN+oML z?Ty9|V#Bh>@$_B7Stuv*7c_5!3&p@r*~8~(W_Rqo$8@dlLzBi}V~qr@njgCh?I!cB zGcalA(Zp0#&A6H76AW?+^o^7t2mM=Yxyj;gL${=th+&-9$C-8t&!lF;UJPhwri}WL zlu-*^lpVX2EVo`CfW2@n6bQ=Jvd}JbhF2M{o2Z^w$d}|i2pZXLljKh>o0rsWe41ya z@{z8i{ZeQtMzW@ii&DVw#TkEsyX<|8;Y4#eiG}dvPR9+k9hZ7)e`}`<=dKO0`*^^( zCKuKIa~6_Slzcs*RJuk9b}zeQ`S?qdh)YWowLObU`uPRBf$W*0 zN~ldW^iEY`dNsK)>0hQvHQtU?O2OKaoPVa8GTT_(UG^aSWe~wMh)F_)ztAu$3QeGR zD?JL2s-dK#xm0F5&c=2#m213ILAoTT^!C<|TU;X^idtN*Ng}&SjE)THFFy!av+-HC z@XY4oCiC%V-DT6u-oH5UoZv3m3IP)~!6ix#2To-jKO)z$QZMz(W2cEDask684i2;* zz%kOaJ@cv&PEHHqced3eybh98RNUoVJu|TCZI?O{NuNgs@3snHmyB4X=rgNzJTaPU zzF|hy>Ni6$)KS*(;gV_*t>dNb?^w!@SYnW3b!#8p!(Di687w}qrd>ip!s8C`JRwBLxxET zJ{ukruxIqSUb&LhSnHcG&FZGJ$7*=TUyqArMsZx5VB?E8yDMGQ#nAcBTtyaLEYdX+ zOO=K3ndFt`$(LP z?~f5@A3hhlYnQ7%uwI(o4tGAzC_m*8gEK$JyS*`5ba%fOJv?EbU5FQdy{#b|L}6U9 zdErYkcAoRmHsP+@G#wr#zt#jq_k^U^cpuSK7IzpI-a~TCll4P)l2E9yHYmOS%zdls zPywn!^QaV`KY!N137_9;<6yvN?Dqb)f){0Fhwi~CRb5=-OLsU&{JDTwHK?>?+z!C{%u^W@OU(q$Ce%))t2F z^VnO~!fB^+e9bm z$&*~}?Rks%{s&#QO(ou2>VDSE>0H%UIQKC)ABR3q3%WraD&E9*abbqE)Wa%@zy!41fZ*1?YFJ!>SJkOgs ze^U5$H3a7JTAp7dcN7ffRP1@br+P5qSc}2ok`SCx&mwqf>!?jDs~!+72g4kOF|>DxM05-Z zj3q*RJGS|bQg9|zTzU4WoqJQ2LE<98RFDI|`}*6t>4%ZJLYjNwl;Q{6`JROBFpky; zhdWQoK8HY72xSTTjTfusS-K^%4?|cro*<)s1mN-0<~`H+NusLFSSrqLiG!4H;g&rx zoi=af>IxdBwa5)n833Kbu=D+@+}g*^1(OnZ^jNfZJKV9|ykBpw0`qu$m+8DbFFW*7@XBn*^8A0L{4+JAr2MP=vcX2^v9T@-O(vOzUhW;2 z81chNL=cROTMQR_D!|4mEU5K(JBCJ4ssEG|$1O#-Ht_15VP5Vi(|FxhG@*MK(@G5K zGQ1iqLb7fpj)-5+?j~?EvgD|>_LD>YN-!&(Edbd#kuKfCl8XTnH+(lBJ)WgmPRv5u zpJ$kPe0&vQu|q_~sUBTy6x|ZD-ph$gHcxgsn7e|0Nsp7%ycX3v`p>z3R}uLQaK3V* z<2^|3T2mz}3Ih~~Lp=%=Aqj@*vLa&S{A*$i|1{#`G+u|cCJL}`te&H=xb`zUH;0R} zB4boECJIuD9K`HL%5dG~m~Ud(hyRhMQ?x^^_v>G=Z~&&UtFHfyvj2=$!zcUuFqZe< z31ff3yOGd;#(=;4qJAzm9+e+S=?!3D8Xe9e?5fEGf11|(rN2fVt=XGA8EucRn-U-^awDr1?`!3}!(fu^=V}QjzFSF)_FiZt%Ga z{w^kl_x-Dgn0Qgj>i{6^zln)E69tt2ZcLm6ceOu=iG`4w!OQY9b5qK=0_rVA@L4D# z@>Xs;5ybbf5tG0#l>A3hq0$4n(XKH}Hh+J7Ob^9S6625k1ehK<0$)+(40|&a?}_93 zQZzbcvA4PU21_+k%CyR-P+lDG6}XAA{8_eM7MNpTYY0@>P_H5kv z>5H9ug^py3PYP)rrG9z&x}5V0Q{u{9j0>=az=W7TotLI5Ji{ypMNZ7pUKvG5{f% z>P(^>Q_w}Xx{(j z3QEDC``e&cYUHrO-F;a%=Ia7W4H-?vLG4!aDB=-#g{LKwmOP9smoS#S`_NkVgF~r^ z=YGvEf5_+`y`S+c;c#^~ttm$HJN~B-(-ZEKQJt_GUFeI5Q6-Z7nP00|^<3>Znem=3Uh;N}6xhU} zzI@&L`|;8RGJzpe0GTh&&dpW%%LTi^sbq&nGh2;u2cT^VuPaI~otN-3j2k>JJRdgt zAw7pF96=>%?nOgp9rS3WugU48%$A;7&yI+En6K$rr~2D!fg|cp5K!A!li*&|yypRw ztzj82JxWrhMFZ&NR8on9Q`m2&Cd|6Or#-vUt(_`Em#ITS85ceLUfZj;!YxRUJbZ~L z_((Z87F=_C?~=%P46VdbHha?Zy=aAj7s{s;?@keChsy>>OQWp8;OlG2N6W8r-*&yR zzTsT&uh4~j)#SxuXBt@;S!a3Y66bBMSo7u8!S~H%jDh&{OjN>oTNjw;T59GJZAnkq zRB5(^PFCUiMhJvF5n!0R7rj)(;k-+u8IFqgck<#{coS>xT|HvUGmX5KRC~LvY{0Iziv2q_y{ zH9{!n;=Yo;3qeD!KE}paDY23FPC%g&|9J%Wo?}$=*%|@=lLU2)&;~V$sjWTdPEv$d zZv*@iiL3XDy)UwLK5GiX=1()Q*V zU_eddNwhx7?zAt;3HWf67 z*l$qrM8S6~NV|n!s``D-96UScS=o--fooQTxB05Z0073q@TDgxv^*)%a8NW0O%y*O zc;ogp48&PV3-HX%t)bkc_+hfKQZQwHO}39mXVU0c((7km$q@Dr+H2# zP76-Qv#7H)7SlrG1Uz~GGc$jBu(Fs~N9uu&>;QO2 z^I?}T(R>$?aLkL$J~Q#u)tybQDMGInT(~Id_V5aRW5){`k`)EmF%)=jG_zFu#4Qgu zCo`;iGc>$4Q#4B+GVZ>-ZXzvq_)0nIU|pHyD!db$4PYIZ>cXXa>Cv1w%?U`GK0nkg zw)kqpoQ}d&Ht1|O*ZeiZ>@!AX8>RnC7~{Ir9@e6~&J-rMiRCepI-Vt(^1LW5caBRv zBQqTH_^_tt*)idhZs@Z#nnrnG`-v5L?6HCB!N;aO#X#hp=JHfkkO;U(-*c~SgivyD z-u7ltiuCTk^`@9gZ=&{9F`&!llPiCXE`P=Ti7ppk`se5}R`mtVk%+|Ma(g3Fdxz}L zJbg)cA-GCWk2D8z^}653e1*xed-EH$Fz5xOus(RA)e1hn=dlrlK4KD(9LN8F_v~Nc z*$D@knoMbHGcsu|rPN2e~LzOr2@e>4Y2IGEsx5i>f#MfUvoSNY%u5gm~AX0*sd z(sH2jK%SlQ$trMnjn{ap=10HO`1lmUtkZEdPP}6aWXiMYL3BkM`*Wu-ziHcpdoEXb z)xnsx3C!>Aj3^3kKP6|Pu?gCRg3%d?E2WsAY+&z;mRsV`2aM;QUI^OjT&evI^LSEm zSDW~8^(g@5E6e2QL>%s>QSg~0kgyGI)qsYTLe%NQNa!d9N7Q7l08hPj}-U9u%E}TKy!8%LnRr7nBH8c=QSx?c-TZPLbF2%_`74pXIkh}W%CmXT9f0w&$vhxXS|YhXhBS%PBK z3m&6{ODJ0}Lx|Zu0}P2IWhyYbUsRd%3aEhc=WzztNA*S?qCm36e~M&gd;~J*l4%O1*zr;kw~8`DIwr zxMYz)@7eRO-Y>7kJysofyXUWrsvOK+xtk-0(iTj`gKv)dL{(oOL-aVjhF%SwH8cIOr$P|J>6k?t)bN*S!+4pa&(k5Q#WG*(g2g) z`OifL*Icy8F*}c zG?3;!zWjbzMGW-}-O>j-5n4@`;|PPla4-{W^lUy>3)%oq=lMb1dM}{nxQzcdLgfV* zSJ1l_M*EZ78p)RUY$cC)?7!o9%3j?1LNxaDbT@gg+3=|$K^`w84cdzQJtI%r@&lIp zUSrE!hhVsm8BY+hHXdVB=_VZ2OUPd&1IMcAjVji|fZf$%&j>Nfe-<%6_@9fIt0^Kg zb)L-JWvDmi;xJ-#zs-wt1KuJfr~It8nEc6R%4a+S3BCRV94iY7`&E+Cf6--OXNPug zHowWAf#ZK1EH8|t#$0r>iZ`WEch-ftjuE@>6MAqtFmKU3mH7sHW%oQ~sL6*P%mo&= z^VkTRweo@^eW}kC4uNs%4lzZvz2vsmxz;`(#6sq}g6X@A;<2Sn^^{n0u`aD2nEKw$ zDxmWdj-{YRok6_|;mEEus??sNPRB}gxUyV5$8iCr#L=7WBr^B$^GHeo*&GA^g_Icw zQs!P+4S@wn<~eL=FJ=7?gR6Ek7wWabqzFuvK^dWaylVV*RaFos`5DOi(<#R3{ zZ8u#V_-t~pp2&awqFT(kDFuoa+&PyQ{rb@6Ai;InX1b`6nXPg?nPIJ?=KEKB!Yad( z8;m6|#UCIx3_b{Skq|m(FA-c`op;k?Y9`@s7kizb;|5f>*RUD{UrB88KFU4+7VYP4 zNhzQoInysb^vM2Fn2u4w-Bg-l-M?mztNlen#oA7ZkYkT(Z-4h6ewEi~Mv?B#_kI_t zQQyVD{n!c2Hi}n%g?*`-d_HCG-UHWIr;Fjv(b zc`b(U=B(^*j4O8}i)vr4e}HNqzH`ub8yZYhyYc2_F`vS4jA%dEN?cCG{qfzvo}tFZ@~Y-zxFwUn*8av_ z{z2S#J6pz`zW(!cVOFHyp{T{+^-ckc^^x+*RYfjhHkPY=CSO-w`d)P;vsv_{3f_D7 zCDo!A{VVHp6|D2ytNC|I->s!yb{*yJU6XoSxH&N5CiAda095DlyZZ05;)&LH`Ov#s zq6HTBkPc#d=E%PAALD2mmEMm?E-mxe%aSxVYY6M#CSu}!_Nlog9DHof^xn;!rq z>=Xl7#~kL;<0VBw8|8i0en^ZO`q!{fd^UWPl0Q%+oJ<<+nv*FjEuTd)%Dmp_Xa3IWE=L-%m6( zHI2GrLYsqC?7=d_>TrIy6Qz=BYNJ2tW}No`Byl(wZLNvi-p~E7w^O=C>?1!+VtU@&NS&SE`~)mQ6mwtL5a2M z7?-Vj9+%-V7vPW4Zqt>I{arG-$ZvxPLYczrudgmBbR~~Ql$Lyc#u+5hGB(WuH)}ro zDTxaN#v%zIQ)nHv8hrAZi$R3(KH4myg0zit%Me#1qXydCT%G*Q4SHd_WOgm`r8%AJ z;l5{}kbwIF1W8O0|0rYTz-RPaTv5)J*i)HTUx`bvk*n9&=AqI#jbH>Cej^L)SShLakU+S~NFXX)dZ{Nt4+~a`1C+_omRydPwaWF?$6HaB5BXSv7O_d`|LVWpfazJc+Km_O< zi%n#J?!w0*x{dQ4iLtIO=WvQy5n){jKMdvG05t9I`&g9`zH6s*g)MZiqRIUr#QzyX z{)RszsNa45-rsBc~ zHBE}!@--t%++XNT5DOtjWfnWazX5Ok>n0t@oe?W@x_-&i;jsx{ph}M1zq3L}1St^R zp~sd8&wJrL&<9j$DkT?mcahXzUo|(~V5_!)Z9Eb?OKCZMDd%joKRUf8K_MuX8V0}0 zl4hBWt~&IJNEW(=A5X(&n;fdvyhAF27vM6RBan;Yb5b-3^TkGbpHt(U7%Po8*C};3 zt;Ekb3@iO@EWcS-!0|71Z8)DA;A3#H3fNbDy=@vsZB(XLViohjb>jul%80btJmp>~ zEqg74e>4S>iQ3MrkHAo{D#y4kwT6H6HWFh#IMlh^sE`?>T;8P0v~u1l;jjgNh#xp( z6hXE|9MnHnb}pg7^7zP1_Inx}X2(%v@lE5g_N~t_&64 zGUhJ!TqkmJ@|Hjs5>b!c%o0C?kJsR@=@vgPF(6TQ`E?w2&%@1Sb3!!04JCvI(0$X2 zH#gGKH{c&wQ1w_8y4NRX2CowkD&P2-HTymjUq~EIm&b4%w=JjCyOMe3>eZ*94S@js z_s?DmB~Cv3uixKi%m$}5rc8EyE1e#3!N{kwB!-_bOO^NGWR%Hh5w6L%{ia9U*W&ZY z;b11*#fErrGx}$e=QdV;=ky^|Ry~$pW{Z4i+r$G-joo@|o?w`;Q&?Yk3j>>OMPI@7 z1A4Ists=8*i>4rpvNh#|q&mEQs>&$j?+4CX0kxJ=-@Z#&UZaw5FBkzrF|;ZCYXV|D zjosuY53B&VQIo>yZJP$M59YilWq4PLcyJ)@+G`zH>+>U=c|!31e%ywmP7dw2*Vo9~ zH^$2z+Sq)&qOadVvSfM;ii2jtMtWX!6q_fGf&)wN??OS!8^`A93tX^4Fng#nxTZ>Y zn1s&dy6&?}8hIdlM4PCasmU3F-a~O~indRmmraFXmYz|SNlL2gz1^Kk_w)^%5As3P zn=TVCWl<_E)+Ipkf~daI@L;&yiofJI`zosJjaX8iP$w2KktjAt$UUeQ-Ql_;_~mk1 zzE0uw=jrdY?Uf90>7^6|?exEBDm6#>vu~3WehW?fW#8O5+uZgyH|XEAvSVS% zHvyEZVFOK^cOBxZ6LT$5#hof9PZFpFw(_9G8lxW2sLhN`si(q=*y*7$odi2v^p!Dw zK=&+uze7{dX4x+8X?WB7d^`ehg6!Vm<&|h;6mV@ZF2pGy1j@Nv{L%d&RoNiyk&m^_^>ukpoopOEE%= z5#F`@R`ZI<##lt^SpnyIw!dtExa6T*61lUdYs<^XCwE($DH&NvXhe5Q-M_7%XTa#( z&}FzjU~ge>vl-XTQa$8>$L>5SjMxrow86np#Qd(YLdG{b9=f#of?y)!M`{g$xi_;{Y|h!#*RidxcU!cW`h0g1JsmxWVG`t_7bPs z5bYbr@fc0%FjFQXOcr07(Z-BrTjm=>=oSA!WHBM2@^qR*E4v^;gpY6ikN{b)Auz%q zVl&3@iT=izivncMjgXtlIpMbYLH%8L2-6X-%JZv}i_Ybu>b~&CMmMvnC-LNqpVrcT z&@f-N9a~;~oEmdEMetsw1bCk53~Aesj`E5klf+z}#wSekz~U`ZkSQDxks~_BQl}24 zYAfa>fJU%gyq&`l4={w6$Jt}4hu?x>kkNh?EW_tzn_dM6yIbAI)qUp>r>&6!V-#CL z^tNYSDxoWjVtaq(y~tILGVEK!d!qVQ2prOjx$eH2`elPuA-=P5C3M~lp3*BWnt=cf^X zv&vP4S#Ohf%~TVD@m8k}mv{7b(=tYn1e$O2dmlOE7jB=@ZmD9q-S$PBDN{j7ko<~? zMS>{`(=G13G3F>O2ce+2E0h9z}U8x}XKErKz#7v58%vX%KSzf!Kb zusW2xG}!97mMbh_s+rwH6B^b&Y_ATZ{d04$G;JzkU&s&Gnh^UVrR)2dmwD?z zQy6&!cLK@uQ!rT-c$-pKvGZuvHt_K|>VK-HFDoCTG#y~L!Ac_M{gvF!bINq-?Y;)e z@kR)Hs^E|u#xG6`Q`p$mcY;BieX?26J#zH{lA$bS6Q^43SELRMQ6{&R2_9M#!docLIr_f7OSf5sz$$Y819i@qBj zbeRQ{+3Hw*t}`Si@I`V|CFbjYWLgtUX_rw_ycQ_80m*LqvyJ|{z zV}HSy&4o+&ZmDp~+01+ldNA$szPaBoVacqU+Xr3)D-cYL`&RC-Fns|P2XpgV!-*}2Lx+9BcczMqjSmW zng=vzKCqbnH;~K=E8G4=3o({tR)w8nAC+Dvpw%=-B((}gV>B@4B>t8-pZzXzrfNg# zW^hS1pnX?=$iR@vE)9aFYk>zQ1n%x@j4a$VF0LFhDe#$MBK9ISRcxuox-72rTP~E* zh&oXyD+aThmo@v46ShmlLLs8lqHcc9ExFLaL( z*&H2V!jMh%L3l7iZ6R^4QCEWT=_FD*-gtMiDECI#=qo~#Fc2ZZQVj~Zb>D>eRDLR3 zwM}U2U4n>?3wC`O=x(Z}h;f$#^WH9U(L4L(-U6J1cBf9p@@ub+gJ2+RZCIXO7bE}L zb+b%VclX^%A0NVp}5mH1eh79mIBa6gKZ&MoWI5+F642yh40}#0xdeBH*U0}R%gy6OeTS5Wps45?ltYKs=yb%w*pO_UCp&vTgJ++ry5mHW_?J zs_}vESJ8#vwB6Ei7WI)WELx2}#96TGd0FRV)2;GMyri8kGW%oB%j(8xw0j09jpOiM z-AX<+oaZqvDETrX%=(jK!{`F}e?l~OT+7xgxa$i(g{UP8@8-)-3!#L_N`D#Vl!9fM zxKm|vj|)9r{tF5V2}XuLP*_Nm+}le|koL**HcVW57D@Z#((2H|s{?Q69vLz|ASoU< zS+pyTZy9(S+q6C^V4k4$k_o9Ygg279c}+0uqxZ4K1*+9)MXgK~^_T<^*`Y+Jn0{gM ztfD|UFSiB)Psy18D|?+5O_c3sKlin@Zyl*#EJb(qVfSsbXFYExN0fNDku_d`VWCMP zm%znjG6vd8twtYb-NtWE(DvpNIzM51oR5Q#CNlrXX;`VC&`#T^KA^rBPms`vQMTLi ziqwUbtpRf(O!pZ+!{WO&*ts*;@`DrF<}(~O_1v)|X-^_c47h^ZS@^9|u3h@>DNnNI zCU@y5nb0@EB4q+O?8S7wUD};EwIxp6if!G!LXzEJll|rLCU_-%ZT+GCkxiB7Y;m{L zvnjWm66(VuebnJKmZ_KxFH}L&0#7q%bLQ*H+szdAJSnJR{BQ)veAjC!jD$|+|B-{> zc9?87HK0bL`1W1Z4~=5!5*I%;gPMtJaerNg&YvMff+9~fp4e6y6APc9gJA4M!cp0< zNE%4sGxo36EReae6VQ=jZpn*KN*oM0ZcDY~ym;%;98P=kT)QgR95AN~N`T&|dd4O8 zH{y)NvfUW8sJx8uTCj4|zOMmLGS6#l#JpS~|0J`yt$}ZqGF@tp(w}@nWO#Mu+4B+Q z`XD{;_IZKp4+q}~ISq{gFLe+X^Vg~iT?Tczs9W>>DJt>eX!Y7NZzqb(1)?Mgh9-&@ zIthjcWDLg2Hm>EF%KwWAGmOMbJO;H)rac^YHST5@6jqjpHZ<%~SbI8s+rPJRU-f6g z%!|zo3`Obb%?x>`-TYnY=Jo=>7!&T{)5apWK1KrI`chQ6jH=a7_xo8*JEb?P#k1ba z8X2v5C*J-T78X{#K~Q#o@G8jkWe4)}54YUJ*l(KDhf3SF(<)Gl%UXbKq7OS0q8Yxy z#9`b&HOA-LUER}hdW&KBNw-DiKF@f)42(Qwbi%+_#RyC>d7{nA!ByLA>>>$y`p1OM z1CU>TT@Mn*k1SVZcx;N;PulL360;ZiCxVb>f$~`|=9>xQ1I@S)wi|bjSbJi&qm#ow ziz9Qog^_VTHO#U4Q>dIT^h>Br@d*hL@YG?`7%uoqXqI?>3%~cwAg;3IN5`$zsgBv) z=QJ;qA-KUJjgrt%f~0a%=UNh!Us|1WBFGT`nP8BS;6@_9BH|#}rSzWcx&=}lmg%&t z#FOQqjqQ4YsJG>?dR0`4PGW!HJ3J9ZJ=xSC2cjg;l>p@hB$YFdf$0rIAjxY0Fh9F1 zxu;?Vf{1GWHi0MwI!KfuXWeI|K~T(QR)3*e;OGA~2DCF&4ndSDz^>rb=AsW{e4f2$|3(!4}+y<{yhUnPb>{ zco8qPp-@Wham9NKe_RK~2o;_5=q#R}o(LZ`ON~}$mLiF7R=3W3yg(jTZ)I*2{eyfK z5fSsIdNdv*3>K(!iBM5PM7ABym(veAUL|B9t)IsHjv{{gB0;;@;zkVcV~F^hWX~jQ zps^BI!Z5@^K~F_6J%L;g0rSGgy}n8c+_>u4ASB$+5z!h;+rYb9VGwW=q9cn10G_!M z1(!Xw)-c&W;HVMMbmH=FF)e~${wt#N-_bkEy@83xPcg%vf#r;IY&=+Ih}0Mi)QHqL zS%eXaS~fX^L{tg+zaym)@g;{&0fXh?pVpNF=*~P7yO<&B z|ITNI{J-Mq|38VR5kKdrhA@M;1jPzw=re8&7dgz_M<8Yq#lJoXRunn;wgwlZ!u0Xuued&CraruwwI=^PZ3w2U7&hUb7dTmUnUpp*u z;1PZ`c8gyAHCydr6V>rg@a(xl4{;U=s46cH^)2?jPFoO7W_f~mR{2NwyaYPB;keea z`*@Saa)J^B)JKrAXmVNPv_MXGtFfi!gk%WZ!S}q+ zH|~r7MwYn{?oAYWcKk2`5=DE+k*%Gdnllh01-`a(g^$kI^3e=q2>zF1{-33o$2!tW zFdgCGlIsp)f(Y&vQ&`xbA;{vnSC4JGF#bVCoNGBD8Mamc8X7-R;TCn%@$>bSKJ(0k z;=6Sc=Y>~Zs-@SP%r-U_e38erfd%ibLZ6g9v7BHCN(e_>0ywu|eimZDrxPjoq62TT z`>TWPgT|wvOco#_{u1-`yrE&jTAt5$=kWI%MZJTU#r|y<#$AXUtH(6O(wylv3huhS>hp&-(=$Z@nx3MHaN6ympVDI7Ce5~z-#xfWwg~A)H zr|lZJ%=bU}z0?GM^97Q0+qZpBtb&R>;Z&IKg!+%-WnPs0(LndnBKt3Ny|1qccjM&! ztzFq;Fr@MLZ#5W};kjnOG+$_rr2aF~oPb8=Kg`C)MrG}5TJ;>xz@8xi=}aSEt}|i# zCo4sylA)a^A%Npt-Js51_c-1YLyf*GHI35jkAK*=3F(EGa%#Bj z+vofpEH`mDp#;MG<|femX__)EqC(?^#L5~da&&?2ccpr@24KRQA644?PYZDZ@rK7?nO&y=#fx^vPa=RC7jD%|3%(B`%K$#=YeW3o`0(! zf5_SLL=>ImSTQ}a!C%D9&o<7Kyb@BTw$J?^b7HXlQzwQb3ZwnW!A4HMpu)c>#gNWJ zEHyCvkqCkaD^N5l&ts#nl>+Fgcs-Gyb^eKA_9KCvDCoYDfOdQDzFF1RA?nn^3j-#2 zO^TLSDGa1VpzdEVGi^-6y9sxXgd{`^DL^2hfoezVotrm$wR>*pOlKf8(1E*$9V zx+{k!K|@U3@_OyW*z0`?pAv4LmK|VI~_$OC)M3>d4eoZ;!&a z#~=u8vxPO*Zp%H4$I?RHA;E3poRUn;JM@37Z!R}KXPQ(yerY1rr1zzA)YNRG_@;x4 z1A2S&`6=%if#x5z)m9#F>i#H)_Emje|A+QwU$-8Rj8w_-gwVa5^jlI-c)(usm>|2k zeeH|S%MRrfvC`PsGm*h|^apE0niDR=2H+Sm=3mEkVUud8z&)wIMaMg|2a|Ql^ar); zgl|&?L{taI3BtE^H-MpvU;AFYiPcbwT^L~X0c@H(aF{B#35pSON!<>f23A%(^_G1nV=zRnvMD%UO%WhmxmC!A-4tZpyYn?mwdk524 z#NaU&ott^;i(KyHFT`P-Wl%wG{;D$#wm&}(tE+RF?h@Z3fvk}TaQb+G`*rd=>!Z$0 zj5D~SDKT7@c$f z=hNxR!|6YJnjIR$2rGH%1g)}FG}9 zdLs-x8jj%^SxY?KCLOnPKcFMUDUE?5N7@rzpQPa!&n2S~lV@<+r1y6>>8_9WujrJt>qa(A0^lOS*#T@;%h%yU7_H zX5h8w?mD`sh>M2p z-2})pSJ0#QC+VC(wMGou1ERT>n?y~aXH6qi4+m`OXU>_x(iUs;@4Uj>(^yDImq?h> zUR-c%jg~bg#!b18AaA zYSW0qpdF(g+8H=kxx+B^?UU5P$E?64kC^~+3PWl}-n_{Vj;4~v2^MiJw9WZKUaENr z42Y6c6+0Tw@ZxOEM=q0xbx%B;IxHpwB+%O6qeF@&NO=sIG8XV=IaWFLu3=uEMbSIf zv{2JF;SX1CrAlwnN2fIzo?odVFSc)!(TE?=-mB0dh`(aiBNnfJ`ZbVa zXv<%JTa+1@v16Sti%e+LZ&Iq1BfU$T>TQH<(8GJQrcE!Z?{s8-^*SeYGKSG{l5;J) z>B_9d-wU~ow|YbVP}w}U@j6yU`3owiWzk+&!0yh~;iTt=gxGsU?17e@=W71Go}Hr`@{GFg zwv>Nto#{DD}YsDg$$+ss{UzDxP0`u-r5sI~3h;!Ur%Rs?iLVFGpwF{s5}QUA;p&GC!o zIkPJx#r|rb;oQgW>rJ_HXGrbHvvM^ z@jg+&vhBz3JMHDzOZ(;(y2TTwUxe(ZLUDaLh{87>nC#4!&Ss@uqO|_*csMEARNQ@e zNX+QXt)k>1|DkCxeP1Nx_%X5Y$ zyw!o_dAn6U!3H`}Hj;J(3%->02;A?&@A2vmi<8y&`Oq6q!f4TJfgg1+7C(H=Tvdns z_eXCpT%s5kvi%nRO5zniRUOpg1|s=;Gp}IRpo$UEJ&on_2zvOjq34`KS)o+_Vt3k> z7>{n5@_O^@E1- zxR_y#cLp;&7^G>tU(Q?kj6lxB@9ML*kYv$fsJ_Q?YU6oCmeySX^`!~aI5ZgQx4A)^ z8#Cp6zs`(|AerDZ(hlZ^27Tit+&!ySvTA!LeF-~?62d5FG6Ao?x_ z?zp<~lck{&s}92P92Z0Y5je9JMBuyGPRiX9XFv1t2FS+)aW)c_e`2*ie^F5iH2GBr z{gbwQ0jdq$yE%r2Yws1*p9KI0U=i+NpL>>t5hgy0@YmzX&?Gjir-qRzPWq;E19^d4C zlFAq^Y!Ey%wZDqG{W?19LIExOE*a$yWXh0+bKs}TNbCjgUFoa{OZDhgepVqVj89XujS*j?E+CE^nbNIPwn@dwF2=! zjHUgr!@KSrD#b4p?9XIT!58Qt3_&n@fLKorj2_@OdtTfJPt4!GVsMkdDK*@N!P!FT z?By@6>|X>UqFx7FmcJn5zhvVqxBo5BJNcYEipcV1EDSKc!xFiOn=E5-T*r^IHC`7L zx)MYE0WP0MdpB>dsGci(um4da6e(CYZ4J9UW$%JsSq=v{B}1K-tYx+V4iBRiwxd88 znmN=ph7yN-YaWi;)jdI*1^vQL-dgibIG0;V$|DjUL%A}6v(iam9Gc*@A_BHG-W4B6 zgcTR>3!5Uq5q+mbMZdzeQ-`@X6Rx{OT_t0Y#CL%i4?oA3?Y>h(X|2E>w~>Q;K~Cl9 zakO@(3gL4wc0{*`Y2IX*C*{5qSJqDuEX(EQnPEd7yeyxLu&&;d5* zY_UDi?5h5@i?PD@k9RRL@>_P<*s#X1i5?3Nf2nOt+3i^CN%#A(Q8pfqkU+Dteg=!j z21ww4_w2=a^(>*>^T#c9$HtqpU3QjdcO2F~`DypVT!xs`|oin;8ChRulYdDqdYSOK!@28F6Z8gv|xvrEvhI^e<(|P`RGq(~6nV z#1O4F@Hs5t#=*Wd@y@MXmm82|2}L@Xx`p2%aXlG8-lpEB95z?7#a|Q#pMB1MWQ3Lq zs2Bd?-G4+vLC`|LY4`n-clo5-sKFt~^fZF)>Q1F9Os9N)JUs7qujivPMsI;}6-oPA z{*N?A|0GDPiX`#EO66-FteAX!I9?VN!7U8e!h~6GE~AGoBO*_ZP@3;Pz7btB_&*9{ z+n}W9t@g31dhhoRX<7D{z7aK+W3ohI<+}lI=wXUsi{p!Xu*m&0|AViqo!ReU;azZZ z#2UQQAMI?pTj(`ahY+`Tbyk1t6joN~e-okqF!F|>IsUzt7B@1`;6W_}GyBWk3fP+E zF{xd8))gfyMbA4--WP@zia{(Wf;!mbvk?W z!4A+8Cx&@5U)cwb-OubzAVRh|F}MwzEqTCBX_^!891z2s;gGfIFju>O9YiuY`*y<+ z8$B>c#H@K!glniy3OZoxZ8!hd4)X8XLB3ZwqB4GieR*V`Ji})9!Z0>FnTpJJ$Z%Aq zWqKOMiHpmr>Wzo$oX3`drRtyxcxNTm99W z;W9c&&nx-jm|`%ve=bKj_WUAuuq(%V$TIdXDi=Hi$eUwPF##GrAz-}CPAMN&hV#>O%I#>^1UrM@Qdv9n>u2mVj5gYT z_6fC^qrCK%LdyGtWw=PGj{L0+4z-t$PwmNc2n^S{Ki-a$LHFgAoGur%8R^k+p6lM) zJEW_n<{Kd}Arc{Qq7w4FvskK3_jdYz&he5hhAhv8l}w}AG~(K%7Vw+G8f4V*0v@XU z&9hJvHOA~fV)t`$9|YV2N#S%&*q>EnS)WE)^Wn-c=oDM{tqZ0~`xp+r0$FrXZVP-T(bO-hXojgk7k6b{d5MmY z@;-v|Hb?#ZXUZGoBFwo#^pAAbCq8O!HtaxAicGwQ5&gdkd@m|vN`bP8AWCwP8)vl< z$p6OPS3e55-CSp~Rnxr=>1ILvomZA!&TjECM`y>ELUi|rc4F6k8%LC=E@ZULXD(Tq zw%AdcBVFH4K#J^juR>*jhhUfYlw^$`_OLa#t$$iIH`oiSbepU^Raz(tVZ7n|@gg7N zotsjec&V6%Gf_h8&0+F>ENauD7>qYUyjK)&WEdNE7(RAIrlHckoiF3_D6Qu39Agc` znBkL8e4hJB8Q_30jL3nLOoPDXfIA)OAC|e&i8JLc(|Z>r+k_wW&wNJ6!oXlH3M<*x zztm_4UN@+8?;Uw^1?f_VaRd6lk;K;`r7$_?no*^kets^dKAYGZA_w`mvX*r%>$1U>$f`B5Q>5 zcYPz0zxqZV{Rh4gVOS5;{6hHOP>ytZ|GUZ&4rAO1EpNQbU>=E*aK_{;yI^b!U61CW zqy#jPV0VU*EqqkLP4E&~$9;d& z=f_#<9suKOny1VwuT)dmC748j0)J*%)y=_tzfvNO5L3+2k#>Gwpv}(8^j-8F;K!Zu zS8CU8M`U5}bt85u_PoC4hTxcXnyIlgvgJNf3*G;~Wp7Y%;7}sWQ*Y>)f*Fq+WJyu^ zO5L*F3pO}tW{K>q7jx4xFEgTwfH-3oj!7!&xQFM`V(91Q>;o}^!l0uc0_LH1SMFY@ zZR8G~_>f||8WNI*O|nH+s;khbaBysPytvXawiD)Vjbhn>O`2dpc2Saw7nWG=#RciZ zjdz~!Xv?};kCR~jr`Qe+y>hwdgT@zXRR;dq3K7ac$-f`cYq@iyV+{L>Z&hmI&`Vu~ zS&(5@HX42t6bVE8{e{i4*k3SAxOOG$rsCb?P^a^-@Fg41iM2)z)!nw9_z-d(#e+AY zq_6(Z3l)*K(j4ZMi70s!(bnUK)bQNV-_EVCs*zS>ATdfF!{3YamwGDdsjQ3`; zi{)WcZMwX2FkrMO($l}y;`?lE)UTV03Tr681W+Q*-H zRaR^J@#Z2q7`u#mTI(Ch7b!IgWjGostXH`|^2BMUoi86m`X^?SOx*uDv&nDrY*?ke z$_xtNbF~6#*#2?m5y?cDFgZ9dzIG5O5ejdD3IiM6j_=!7 zj0uz)OZPqhT5lyrVb_+udA4%}Cylq7?4G(8LLF?{dCT6BnUW8C#}vX~iT10uw!GFD+jtgeEpSC>ZG5-C2-T?F^;Dx zB+fSN@7PVRw`=D;Uij&#QnsX;u1LGRPLTF8euP56F|is67(5;@)NwXuV4lGrQ}DI< z%CDO#)CHQWo4v}oeCbRw!NE;U_=Vm3^Lj@Vz4Ogyl@Xe8ygGCEeA2Fs!YSvTT%l{y z(i$D(v`R{H-Vt#_tWE!1 zJqn)dH^17RO)=_i)LO%ANl7?yF^EWWHaets6w$n!97%Z1RGMGKXUItL{6kyZO818< zlF50OZj*h<=X+=5X0W-|Xt=r5czMWq|BcNS=8ijr0p3QRtqTa^=7fEA!l=Ujr`YYb z{~Ej95f3OXAm9vnA@L+go%yxBQ~nQ2>zk-gJj1Y0LCPs{LiYezg|TF+ENpBpBkY&& z(S@t@;B8X%FjReQuDGYf$GY{ZL@YX8?t1N07b?Z#$N||?~f53|C_>WCrFH)?YkeE13vc=%(>bo>_&sx<##lYjfyqcY) zWKf=)pT=1U;JQwGlF~-Uc*Y)G(Dgs_E4o{V2Sno^@%_$P*q`Eiom0EJnzJ3n?K;}p zNtOYK(b-?&{rtgRa`%Ur`1}balr3&=i{hgMplokoKKPPje9L~uUaCLA5gI}S)H{W= zy1SAaaNI9ytvpHRj2B}$kemFj^_0JPeP~(W(v$L!nM(8tr3B3~X1r|05FDtXhc-Tw zyjyq>G6}+++Ate4k3Au z?m-6Zvf9RM{8u!J88keVPpHsh_CDoQJ+=~96#okC`A^a{F$a1Kp5_x-k9U!O#uEi_ z6s%uxlp9$^OGgVuJr|47K{CsGv+0C5l{8a2d|Y(58}QI^>f4Hpt(5&CyYROK*W&f_3(pOoPNjgHpgKQ&!l0L-S5pAf<<$ z=w64@UIwKFIE@y`3i-bSQRJLY2O)`y`XlrkEx7N#<>^Sarw>A+Au3tQDpOsF0i||8 z8R;iR2jUF`en|JU;~3mWI0jndQPaIQvTwJ2A|DKg-*tPXIG+<&I{oML{U6BfKPcR2 zDmM%)@JmeTnvtjUXCr+7;dG3H>N<>lf}x#3{abY%4Lr%y)tQ1r%Wq&5@6u1`j{_u4 zAmDrZa?x%3E99I zP;G~V{BOys)W5?Vxd>H;P;~D6$4`e8hu>L_flMDgR^w_$2G~tB;j5HCG5~1k$G6({r{uv{&=(cUuXAqG1w0I+>Q?bb7KA_x-^98ZFeX5F$kz%O^@`$ zmqMPx$zltN(a^=`g6{tC_b@nwm_I`zQCM#-zrG~UO$l=w%}w0Fz>kw&TDS9&-@70LSEiDGC%%Hbn%=| zGsroQ_eg_AX!__y;?>e`g{fgBgBh@K4@R!87R{URZl3{P@u|uKTw=OQ;j;K!#(~jhyCj!lO_SZ`G9q= zo|N?wq3&`4i$VTX2$3??JJll+gzet~{(75}9KiT}5Ysyhc-v65gi;yNjI+@U-0D-B z?WUDR1HpLmY7af(zl1oeeG3xc(+7R8LZ-Js>LghDm4!FgD0scVZL{BC5^sXov?nE2 z5Iw(|UC)pstFkb-c2ZET%O8L{QAl=#h*ApjLi6f9k=>Y-Jfs&=wt(Xz2VXM0!?s}Trx5_SZ(A5vBv0rHIHUkW9iDoW!-IU@zm<=> zy4rg~OEp!-ta*V(kvEH`jlzPNMZGp)dRYm#mbh+-i!!#vrKR zFa3HSrpLAfyUM-L94Rm#;59n$bi2}oRQM04BPOvzpp?l%c%vb0mOYp}(k1 zIr0tJTSfNs_jU?cc|RPC!5%&y)@jSH~kebX6*ZN?PhooFu|$>CysxnyJp^~ zsxDa;fH2lN_$;w&3=FrIbPRv=#jaI>?I#G@rorDlXO*?3J%Q9Asb;O>=CN8=tsz~? zGwOW;KM6f1sS&*p(8m-CGOm&dFu7eSy-HYV&Ne>lM>*VHX5;0c{_%p4&BTq~YFEAj z$7Qov^vJxe}x6vswQmDp-RWRth?EzapfP2Os!YP1E_s&^1Xb*sP-QMQ%2r{ zhi|w+J`FA?F5PAF%w7W}DM~@X4BOLz zTS@=A$8Nb0`fs+_RbDW@Il)NWD9)ey9p^Yqm+pE#YIyF6c)m&3$)N{G&%>&m8|I(0 zjI|=*9CoATySFmJj1Is!k?Mu_qvFQK4wp8W;CR?VG3)iQ3`VlAe^!6g{$1TJYf|6fJu z*%7<1vu~M#blK~MsTbyU`}?JcYlTq`FdV-Ex zb&k15)OK!S+_x-k!3!A=c-2_hq~|}FHrJE6<#R2xq|T$t@(Kn#A-`vrxxyNcyi?m!w9x@bTT#HCXUe?Z*%BRxNa`$q`e zenM0;zZ!TzwG=@tx)Eua`HlC$VR87wMzR$dZN0p1;G=xnb|t_lsSX_j zu^9~wwYJhTR~_ur$a zoW0@<1BMi3Vg0SZJ3Ul1nRAwS*MH`08SKvt=y{Hi`J119sle?{syX-Bxq;c68GtIz z_tH)nONYe;T*Q=M=gsv=a=Sis%JSBk+aaKaTw zi>g&SGkBbD$LYod){NZtyH>^?6Iy*+ z7CugMvW7sAhKL7=wdGi-a~ft*gXF6KcDiduJi~0zGI|Lpfh#0rTJLQ$A!UQ=SfsR25Q6B|}40CxLGZmAcp?PxmbGxl4EUmpy9( z;b~45#mbsYiiKQoW=W|_l%pT3Xe`t-&DpN}&Q;mtOP{dh#yFq>3 zEJ+6BhcT7cD5+etUPHqMUpd45pK|Hy1+{0jUPe4uxJn~#p;hbgu9JS|B;7GqMRH2@ zH=K8R8fb5U=wUgGWQS@icdFWq%PXVS+K~75sigLE<*90Tw9N~p@fE0rX)xE^zu>xc zi;C?`mMn%fQ|P4ss&Ll>UcH(-!T!QdBxg8p-(g`>jI^HtUSnCHF5j^4zY4Tfvo_** zG$y{U$c)tgO%u5wRAJbBQN!fU)$`)QPHzH_W(os0aR_HVTu8L1TqEajoNQrjw^gfh z3JQEC68JLfWhWmae-N?7w33tP+|675B<++%T=e3dcL)69_*x^5)b8ZzHs;L-lmBOZ zbZ>v(<1o7r4;^Nw$3d7)c(=KxIK04nxnO;w(VpSmBRv6pdSJGlhhEcpoyId;M)Un- zsqR~EHfmfa@LeMm|5vOP6P1C#vQ~H{dV-F1s(2=NmI}ArQ07TJfJIVqdG*aUq>>CT zg1~p1F^P!Ib?&NDs?oi!&q$+|aQBXE-KL8MlIi5k@HE9PTGRQ!@Z_Rg%X(wIj zMtE;r)PXPxS)IbaGH__x6cplB@$G+btZ)(O4>2etyNe*S?UwgE!IAhaB9cXPf-+dnFX{epp?tBD5ppeg&?t`t!%7q3g^UoO5DUVoo9cgqeh zqakh)yl~7iJ#f!*tukjQX1qmF)H&?@l>rl5pwBRnGLX=HcOz;?#;={}F-6f32*$F} z0QdS;#8Tf)G3NAk9sW}D;SH+MR zM;jjp*SBPYg!6v|*Iw>mhj1+GzdmSMCVIK}VMWylTPBBd#8E=_=jw#!_%Bhk7FU?P zKdN1NbX%))ya3|RjaRo{*)o}SFSKY5PqoKNr5IU0f=XsqJalx)1Nj|n(Kg-Rb8Ey2 z%sf72ql-`FTQoeLgo>z{)SL?Q9JSl3qD9 zvpf6V%S9T@MhhcC{~=-OGfR{pg^cBj2u3>FqVr*c_;((V$7L--7X1H4a{V+wnE_2= z$(R|D>8bkuvR#K^R0qH;5YmD#lk8y+GT8ZCT{r!ogXK3t&X69G!wSz8Xv9li;475{ zQ6wBA+CUZZn@|!5@?H2iSofrWq$@**7NhYOtt9;xBnW7$r2)eWsGa*Fj+_<>TK}8+ z$W@SaCV{N;j|3XP;0FI`!5lmI&$dak|A@#U4zEb8=NQbN;FIN;5lVs-u|wklydD1% zr9%jOT`*Ee;HAeu0&IYlCyBZ~EBe)>{}qgrX8$|=cWlKcX(wnNC;DRP?K}j2WeYp0 z<;`bq;=m0WQm+i+Lv;a7a({xNhKIiR zMGhx+uIvfVl;Pa8%ra9`lZ20#_uRx%N0WbC5?#M{S55Sw#+rnbRh)=RV=c8sB%Q3? z;Y&CHry5Ua!A>ivD z&u0kSoM%do?FdnftkaY`Vo=OqtEJMTlk7??Go0n|zTX63$)9i0*UJU<8W`ElXY{nE95$#mvrVCHwT9S0yCzi_t&CCWFo*`tjFe3n+u8# z*+-gc`0{p#oG3@&j&$#Ht`4di3IO$kq{5I|Gl_94=L`@y?mhDE`BrL~xEcl=x@)n8r@gKmS!2;oG5 z08_CaDeIyA_mB0Hn$Sq1qF9akiYzFg)iHkO@q9W~?a*=|>gHsN((n>!5?|;6RZhFs zsCBR9IdxOB{Y^XMvmPCxp)GlND3WZ9;4(YGE*nD=63F4|U5FBpYPliGr+M zhme8WU9&dEGzMI_6X3!D6)v56jniZzN_ z9&D+E*nerH5_tWpLa;kj)*Ibm4+7r#P`5)RfXp=1;7vhd9~*zQ^QE@p^NsherFSh7 zFB(U;E@bO@INy4<2URSm&#Xxz*RI{m$jCTrF3a$O)@SiF9dc~7^6e(1U)2`!@AANN z{k=ClW9i%Hk{-DSF&o2K=e0%^R28G6N$-n1&=E8LLKGpm3)IgAf#@uTIop|$1ksSI zf^V~ay4_bXQg|%ju%He=49XvtCMI9YZJ5~DTBKNfB2P*v7;NUKE_a3W`*c+;LKn0} z^XM!9h^xM^r#LmJ$FxHkt{I+v7D;v=ZjBasT*;ANb{)H1b?|vr{d2|M<~+MK)4dZH zs(Tt;7tBS~OpNQENElAGoTnosZIq(9XjDc|VP4n+Ut=(UK`N|jv@ET2zO08*U+FDb zV%1uW_}K%?d-qM-!@s;swXyV6I~-k~IUg+ucG@)5Nf7CnEO1I69b%2lcZCdfpS=V6 z#OuJ`9;&8w@S~08&yp3@n=?(MT;EyPlBo98Z|g=A$t{M9>+SPIQmv@h`{c2-EoZ|V ztoDBnG}j&-6lNcY%&Va`Ha@-kx;VAJ6JqSW15er&s7bisH7qv`mQ&azhD<{N7Xk0? z&9mQ!7Xw(K%iKcuCjHwR)o+!%59dcv5IJ>zAe5B_D1N2e;4f}@tr>46Vt#G9V_Ai_ zc6Ux*qlIy-|IKT5>;J4LP>Ff|#=n(kb zn{|wk z0D76EW$aFKTprCm(P2`m_FNT6m1?enLwr3~WfCrKhqx|Ps1cAT<{uUHl%BcQBd%A+ zoab?H((vaB30;xem)wJ_NnhfP%W!gHgHzCyE}Vmx#&=Xk%}h3#fG64%yrs&~)t)SZ~nj$)EQTHqabL6k&zs>gQJwc$Qr4a{9m3g5X zGwm>Y0?geDw@3KaqIc;SF`j|=^t$in84k>c!F{Q>YS&e-g% z85^Bq!zpKi@Q^F@?DdEGc*Lz!Q$bfYck-+IyW3QJ?6}ep6WO&HDLn!MF~WK-FRB=^ z&kxpJ`+=s|B`Q zdFbqDMn|_VS=`8Q&b+a)RtORsWpVhFKZaj@@eoeXjY`pl@ayQ#E zNA9UPvvR8{ZoZJsfFxB3Dg3JMIq5M}(;BaRiS;-b<^B4YrUccq%<-fn2`SC0?%=(1 zUZto>8Y&?Bfw&%ogxubChOtcJF=L zFF=PSSefLEcX#8S6{B00^qPauG7JcU&@FASacYB&v#ZJ6sntM>W4;mY!%f_IRTHOU zE(i3Yi4+T?)hODBxQ~`qd`#`>8$821BkSOR~WAHEK!(AH!nV&mcC)_aLLF`CM`I+ra6t@mo`%Umj703_z( zGFA8Z+{%8lJ(IQ|d5VE77PbV@s4E9|vPf%?Y086NJQ}E_IE?UJhuVAX3Eh{-mey~0 z#HT^bx_|(tTFilFI=yD8raAE;6UA~37gucgT^iSttgBD&NPmqI4T-OuH@#q@I+JjL zIGO0NdS}cX@w!G9Vtv4t*j5f@cOuOMYg>e#X1!{-)rIPbUwIFw8;gVl zm7ki7OaEnOT@(}N8@H&$(~M@GK1OK@2JMT=WB0=IPqHo)TOU;|6z>QW_|2(Pawsbw zItrs_HL|y8SfOshay$TlpO4J#zHHl%WO6V706fO_6SjC*q9_uF1Lud!n9V#t!8&v& z1;_;4qQe!qoQdX5iDx}ce^oTaj@P~oWlDBpFh8Dp2qk@gAeTr|BXGu zgj9=8Qw<|HkMF?*rAg~)oRPFArt6_ zNaO;DDXu`xOx%+fkTtZ|wP4r+iv~Tz!QuK41?GNx{bpa`BXQMiifi8>hPzQwD-i&a zNBAWuq~jX{h=ZWP_DaivvG}F7VLEo8!*@sVtj1m7Y02$XZ;v`q8D`HhA4>824!&%E zpZj9;6zy{kc+8N42@Q4OXtF4uSGZRa99uTrgd z%M&~406lnku^LyYruN`nJjmsB7&l$kDUtki7g;1=Iv^GzWM?9eN*1!aM?@Ejue;_~ ztbJ|!s~saHp`2Oo7KwDg6~5q+*1RCYouc3cjiR;zof*B0r6zQU$?zZ!epl`%xHQq8 zk~ED|l!LiX;!RS#9MDhT*>^hADGswg@U5KFee(Tdyy=t6O5x+gXcoy-i6%}pWNRO2 z*jId2Q(t1sJ?Uu@j_v6g*j~X&iRAt~%g7##>CNFGX4j20Bt|YqI!fc)9C|BKNJexD zWEgrW2hy0=G~ESad)~ksvbvJ+vlnhECe)e_;4*PO$Y9Q;pEzf6_U#9LhM$rzPW6jt zfe&VFSLCr7Wg$PQu?P`1SY4qfR{w(DvKwxUm~?ndo^e7%r^iH>Oy7Je_w)bx(<=S; zt9B;AQmMKWz7>~yuqh&rMF%%pTafXwV6K<@JXyy`}j{@ji)N?e7 zZhldN{`{cPn^8}ve2ZgRyA?iu(ApKLYU+#kvuMct-;Z*B4A*)8lnZ{XG1$`A8^Bnl zh#{Hq+Fq`89o{ezrw2>ufs5Jhi+apbYC((g!RkGu2k3!BWxGvp{xS9D-IwLuL)FQk z+2*pi!$?A1BOMd0(T6LqMPS>C`~^d3f@yxUD{JVBMsLeO;t=O(JiG^p&-t~&Jx~^& z7G!-W!QYgVJLlv(c@ooCK$}}y-2SvZ-8we;&m^e(y)T;-h*ih$+oL;N0ey#@iVD8} zmmbxkU9Q#045izB9L_~l!jJO{TCO+^2iHdqp-5pm(f6n6gaW#M4qD(hhJ6`t(xroH zsm+KCHVA}9m z>TIL5avLr6L&g(3%?z51-%J^pSbXci4%xBQ&x5TgBgYNy5y}r>gGk(o@Z1+L+%^~K z5uOUI=DfvSMG^Hrwk8AO&N89Q5ti(29RH~G)B0$<8X=v%RW9IZ!dMVT|mV+^p@ z>vOnp5qACdj7i&5AC{%V&Xs^x^wA0H`qfFjxYCf5HZUH2C;wquFE@nrKUjCDwW6o*aIVWDMm1pXN-Z!kg zF3BWPk~4GfR}(oqQ%yzbP@T0WjZ%oFqhepBB;eIVlnOB{_f`TMX!95V%I~b+H@VufhC-Qn)r-7lJMz!ht~+!-nFtF4cl61dS8APfzQG7fpit z(WGTCq>fqOQ`xl14S_C%6@58MJTI*i^u zrm!Z{e;)PQu1@%d%fVU-k>gs{-hBAp(=!u`b$2)_j3 zMMrxB{5{(d&fl@RIo~4&rvZBN%}fd|K(Z)*M23fWZDY5?3RA#<6T<sXM0dIIY`8R?XN>Pb zM_cj)Akt5v8}h@V>leAHHUS9FDBv_>aBt`Y)^3p4(FWaUu(IZ5pIlySK(P1%g5?(w zo*af3$or7m|0-!;WR90}9C;r`S5&7(ImKRb8i7vEN!|YzQ3JE)1W^Z58bdWd3YKI7 zVP<^JT$Tm@(lIc;I9WIKoI`tj+g8*f$qsZ>v(p8Goh9bKxwIPoj&Pg1y!CgS{# zz#067!0{0y{nN+y0Rm?r_dK9&9^^1a`5Njzj!KDFgF{Uew;Hd}sUQ~e^>j1>2R`oY zy?0#Tq*M440w?|kz57%6ybS(8#KR*qAaEpqL&T>&nZEg_9{qoTh&TMV1`^N6*cBgP z68)o8FUj;9BAy3UO<$rB@yWuh(9fWQ6s6wl&!0#fyoo|!;p<*eUdP=U2tQJ4uMy zbd*>c!PJdWI%)B1Z{SyKEY0~hHNanoBba~F&ywkzVZ>O)D386SZhNH-VzzjORf!+X#N019Z6LW021mD{Asbg;JsR5d^p2%r}ms(G_SRmUgYj zh|>)wIjGtjCq7WvU+i)~t4Cp#F>^IsIvOZl?JhS^KW==8esy2$lOF24dcOERoCI4$ zNagfJiWADd+J+Rcov|j<=K&ZFI$T|rWvMti+>-&y!EpqC`OWcnF^H7mWGv5)(j;v! zzOjfodpv?v7$7*@_d+)nr5L6Px;~TPIfHC0bMX?kA!0r`g#(4dw2LssU?jFQ$+rNE z)bSbxP7QKhv)JtXQA}H8^jgTi9?*GrzJ>A;r=i^!b`%m94Mis0+>S484mr$tNI8An zN|)IV0Y0|ZtS}z9lc9yOpJ?sxk@*Lqm6^2Ws722qJ9{)-{@h+_cozq{vwZXkNJ6&h%tS9Py37K5u z1U$|UIv%8b3wlO_~9N*FXs`ai|?xWb&N6~n{{ts`TdxoQBahR#1 zv-2UnVw2qvNjF0_yHLO|;HB#K5}qUE4YJXmj{!hyZe)>FGQ2hP=i8*+UKo10=@=Te z$N?|4R1@dvSWjx#jK1>Kn9@CvVtz-L)(4gcS8EDpPTJTc_t8X5ulGcpb47TTKN|Ng z{s8Qykvym$Ef^54U(1(s5p+8`*q*xJHRwEC%=uueY`8ad-I<$=!-qVi!H0CsWqXNX zcjL!*JBe#?;!R?bNz!g^NjFf%7DJ>csz+p`x~qfMz&NB6aDdr@$|cKT*_kE@t^N}8 zB&X%-#UI_T%|&OYK74>?z4T?M60knw)w!?L4TS{Gc~CA5gkF|pVLMHx@ch!Ffhf5c zUB{l%U`y54x7Om_H#_(uf*?vm?{GVP7Cjyu%#bsC`D~pk6>(a5(z^Wi3oM;)7p6XN z2k@Ts>fUlKwQKf4;`=QjPD@NJPLyWcAG3od$Zh&^QZJkP^N7q1#;_|D_QX-04P*^yVw7ycSd4)`FZ4 zcV@#bH}sF2F^Q}R3+UG|6xd8sMBscoGZ9Hud62J8R$_%Jy$g#lAMDph9=aNpq?p1A zc&DIHQexcQrvI*Mt=s9) zqQ3zmB!KR8EiL}inaa%V+!jMs#rK$&5lhSB`7b1qNP2_qUN0~+rG-O6%I{QJovmf{@p^!SG+t2F^((l~^)^ADMI1+0>_a9)=ao zmSrO|=eWBaww2}wJo}6=&)_+ydhEUltGlATFj9FVN4-Fk?uyw*L~pj*l~t7Wt!9}G z_P3fmM4QiAC`q@^bhFvsUneKJD1u1uq%%asK2^sdAxeKXd{U|Q=TE1KQyGp6zW8KK z@HEcdT;XxB`@#OliC$c$=Xcw%K=d0q+e(D2+pTbVcWprLOP=2HwHiQv!hXr9ZS{zK z=CxM4$knV%)wrlf+I`xf&cBsu^^GV=yCF&d`toOYJ=6Up<{qpE1BYi6RZwjS0(6QM> zknI}-@@Jy=#=KJ?A#{UDmTM}7q-HyKvTC&9uFwQq;K-`NKL!L_OCyz)Wz381%n?YY z0j)TI>bHHPAr4#NAEpK%Ht;hs)OnzzBU+j-9iM`5zwmyt?wZvlSe~! zjN8BR`7v#r@2>!{TrQoE?chtg`cfcwfP=;)n4FUfWQ-oF_GX)NWm7(6fp+m;0~S(9 z3!z8)speG!BceXs?L^pP;H_!fW{HLJb4O|SunDOt**{GWx~a_t*c<)p7psEY-c=2B z8fpOwa>~=9@l+>~uVA2Z-9Ukt?Nl2HXZj9l!y~IekC~ok^Blq{yYaNFEWO$qx{j)7^f%ajrMseDy+BDZph^!UL+;}~;4njnyQKzfvfk%EM!6#U7NQ~9S+ zOcJTr_->v!@n^C~EZ1^5}Y{YQcL!jYjyfY$%mLi|AFE$2ih-pXDrC$2=AW z3v5MpYXV=_xs)K+I|T}t{STSjPwe_!xNw1P?;Xr@d$&H41P(T!;`Vtz?du1hN`e*_d}lQEo^R|dp{RDLJ)-MI9k5na>h2$plhxC z92&M$$#6Qg9jWwz;p>}^N+orK3PIPucZxR^F8SDh*H6d7@=|zrMTua1eo)-YY*Im4 zz{hU#d5*pgLuyFRIxhUk`AGVxSFojLNhX-OsVzfkMTYN&|7{vU^o$?xHe=#+hgxJZ ziRVeAAHkXEBR-w?97iI_KDgT*k#9QU_^8eKIqS|`aQmse)5QN#LO1_OfRXK5Q{t}M z;OIlssjPaTSY^D`e!bg0vk4+f$$X;9qjaA8_>(#-Pu%;8Xc--N;0)(-q>o|j$j97$ z5>4T$oX`F28g}Iou_VgZH99#yvk9As1IyBMyvq%A&{T8T!wsSS3;twZ0fzsxkyz}k z`E3;1#)>LqzdsOB^Zce|I+A4-WECceBOrF zo~(H#o$zDv(6bk`31a5NFn8$!)1J&LtWW)(gG-JSUG2zsq-(IbOIuT?#$gGyzBg5!1RJ}_6d*ASot4?gx8hH-u6 z)x1}uW8t!DMWv{yRf-N+b2VKb=&T=)X22<5vlB zk#P?zEv@k7z$1f%kF z2ldrQ`8+q0MatrSW8yE5%71m9O@?pdI56=o*>oFSPoX65(lZ>^F%!G<^z$;8;3GFz zbVp1h`(!LzFU(k)M1B(z6ujr6|Mnp2A?$smE%EF45Bi6{x2Jau`2&ehtFp7Ee1qXT zv`e1G^l((ZhGkL_*|)UO-OcEs~xF+0>ZMycGv)wim38tFD*FQ?(J%U`g`Fk%~&iV}_PlXQ1 zJHEI9@LhEXgah*j4>Wm4>s<-1CrOB--kI2&U%A4oHSf^e>~Zz%G>9pMjoj2DH27e_>19?P5~fiD7nPCgOK!&??<4dzia+PF*Q zlc&K1c~iT}N$wcN11I<3j10Bu7wpjh<2l@~SjzOOmv){?z|qVpQp_dcFsaXjKJ6L} zhYyud9A9UtlrAOvQ213!rz78VWc13D4?Ox}dT(eR5#Qb$DoNvVBgSm#dKxfXLLZw} zE&CfXKfUYpNizX5((8fro>e@fPDZaS1bUJy83xcM)j{s!tSYDY1acKF1i{A}zvc=j z4s@~)J`%$uco|u>kFjgr#(64@jl_qj4nimW-7TPz3wn^IpY zA?y8M59!Q>EdtuP?cz0XEKgZ4TUKHcTf+V`+u={N%hsOUY}a

fQT2&t+n$e@l3lgnT_fFj5NuOmN0UF z6@f-evVYAda6vE>)VV6S=kA`ys8EDEF^05+FOmcDJIksy;&uDIbx|yt|y03 zY7kXO>3Rm7UX-M`o^BD~^(4judh@5UzO_vT?^;=^eO@Rr>mVfOVA%G#5u~%{gUmlG z%SFuZIaINZ1r?;(OS)WV5zH1>?Ax!*de7gwMZ;K&>(OY?NIKQ{^-&NjL>uH#CQq0@ z{HOpHKKWo5uY8-y>m-zvaV;ST;z|+wxhdTU+%Y`&>w1^&Y?pTuv?JO(1L&7*LuO2r zOD86cJ`LXMCs{v)rLcT}_{EZ2b*A?jMZ9u3l6X|MzW?czTbZw~^iE>h=qaj;pBsxV zeSV=Aj!d6<|744llh6$Z7-72)cIyk9;d=UcLuKU zH>}c^N>1gGywAqY+z7{sPd+n|q~Rn_OcQWA>heIU{dMj6S*EHJ^W<13i5}U%P^&CU zWUpMoowwiHO`$q5+hm_@r&%j?De~#1o1+%~r)e#6R!^lIn`Jq`Ec1n5RrT;p3U>XPsXoNo^LzP;__!ygCyZj_z0Aby~Ic~tT z+w*;I$LI?3#pX6lEkYvRU$;6Lf6Wr4mFERr_d9KWR*WA5Ge9x(93by{X+UI zvnk$swwZhX!)=3ifb{9ToGM!b_G&R*LYr+|V*a-6PTYLD^pUD<{d^~$FJonr)lL4QU?cTRiXz!p4d(rZqNXmb zl0;3y(g~^)li- z9H%4}P-SZG{ka$H=KCq>-8a%;Rbt;}?;GjPb|;yEde5gkJ-rL2-Izo8pGc4wT0Y6M zdwJd3+oBct{G%ul1B(hxZ6Dpn^+E(8MgtyQbXs_GFy#przHRl<@aU=n0}KhJ()d<)O+?;=hIw=^Vd?5%NLyvYFoVPt-G) zNajj*=zP~1Xw(+-R_qTSxwUp)hiOE!dHnA4%k#fhB&Ktjq3`qbctv6sFx#Qzv7MMf zq%Jv3sY|{^qX`l}xsb71rJ*(`EQ2mcCGcz%h>Kq>4p)y2Un$=?0BIpxIK3FJq2cY0 z4*)-DDm1nZLi;;iui}2?V=@p)=hJ|G)$6X88J>cGlh7lA!$WPMq zwm-5*8F_lF#0TMJ*b7aa-WL*BUpf$&JuZXwxuXV&$yw0lL;k=aCHr*o?MYaV7`{a` z^GkLv2qBF%{4~eQsy$c_7LY5 zO(;C(%-*<_@W5Yt+^PP3K|&H1BpRe%|8+q^;9o3A zcyGXhgjyaWbT7>z$466rfYkcwnCjDuruu{tY!kv%;$i;{X=v?-US^2~AduLdYQoPB z(B6;Q?0z5Sn+h0zD2%fZkhdwJgn)BDhl}1lVDytrsZl=OIFLw`V~mJgS!-kN=a_mx zU~vP!x>@nxqhB7i-vKpfYEios2cic#;nuglly0g!rLxJ3SmvE@`yKI9dW`rP8;kJ8 ze8%nmD}|5SXsQCJeh9o$(PI=y26QsmXZo{Lq+m;>LtTmqzq#r=8u0@kherGWZ~fCh z5I-b9Dkw@+^j`|P>83=|8w6So>61rNV& zl&tFe4fphi{ah`T)J{dm(0o150y#&_e4SXX*iS4BCa$@BIgZ_#!1bI+3!uBHx?IJI ztygRoRqk={9zAV9KjsU5dj1oYxQNze9PY2fxFCqdxZ_#uW_anRh-g;%4<4^;OSKB` z2mJ)FNvI=Bbe)5lfOW+*g^>c+s6`pbXpXbk--Zw{(kP)tf72p4P8ceGh(5YBN|LNx zTI7%c>I*DMFsnDKFJHozq(j{j^@@ZoKbv6~Mw~1d{Sj2C!;nsFa}u%k(d1-@10b?6 zTx=ti$2tV^WJ12Ii3JgHa@MvTLFO29)b;Zhkzd4=goPREL9J@lVA(cm750XtLKBGm zqdRMzAwdu1P%?;q6NuEVgoU{|J2tnpyk50p7?ACvkw0Eg2+8!b@0zMgaPxw0GJB9a zKCT@b@OHmKQ)5D-Ac>!X8Tql{TRdU{yXJ7$wZL|o4ML-fwa?CQ3kJh+@Z1fuU;mI5 z1^gRc*`5@w-Mgue$@Xfh=1eDb9`^wRK?Q=YOY*fI2ce>p#JL7=$Y>EcD$w17JTvrs z+9WI)trcN5yS&3A!DFX72*YP&8T@aqGaMAL!p`d*0JMEFf;*UndQ(9t2C)F1Vc5CL zYvm?Qk*3mSgseCB(N2Qa5_nkrR8VWp5frxgy-@4mQU`b5K5CFTwk0gJc!W5_Uc44o zIx9R{!?(jOUkMDEe>&sDlj`a5dC=!4mMwoBTbAqpVz(hM2Dn4(W{Kb^FciVEl5F6n z+k-Q1n^8+QEEfj9R-pb+b9(q~uFhnW>$0ViqoB^b5bQwA@VsDo`(SjRv*7U$CX_9x zb#7_|{Jyqu3%&oKbAwI6WkeLkRSJIc4@O)4e6>h6sB`gvVQ)fZ`_ahw6p1rJpc<#pA4x@FmjNzxHoW;A{x@VXGf z#vJ0kbePXS$Tj$F#bFZp#k|1f%bV?)=DB*4QHP%^21f5Zfx)k-J5Q#BG{})NhJblu zvFzIxp1Z>GcJup<8eCm1%NN~?i&qqv*H`HFG<(hvog_NTB53t>qJZH7vWZc^0R~EJ zdtXZ}v$NC-qUUES`?p#iiuRP-km=0p7M?i@JhB+fS9Ey2U^cQ#HL&G4y)0@y%JiV9 z!jAI2rE=MlQA>*C#d~tB#nAfi5Ggk8ZYGYPej$T`Kd-;?D0RM&+G9ok)aL(S zECG^>I|ME)Z-@T6uCVuOU12UF&v76suV(l57ZN-t`#B_AIGyN(4P8>%qj9D};s@6# zzr=B?rI3yLCcxF9q6J}UiE8^}XF=HW(9i~DSr!ET;L5#B^wz=!F9P2xC9#9g*T<-N zAwXw_>Hhf$>Pu#U0O(2l3E%8cQM}%`tcL~spS8~E$$nM4n%EZArOMy7ApZ4@dO

zh)CDwCWd!DcABiEPp01X(#W)6T1O(E{ zJtsHfP1oUrmLEgXCoZUg#hQu>n7-_(EjYsZ^>tI9-z>{S&{a31kyXL+CQG%oIplT} ze2U2u(f32sWtK@)U$X@4U-7L2H!GQ1HO+r-nIS4^|GkCU%1Xmmhw822s|BzmJbdr;T1=x(UfVUH7KSWvlLwI~NHphl@$j z+mf)$Knm+tYb))TP;5Da_9dZu1B$J#&|8=3cm*^93+H8k5?(P6C ziz?XJ;58`LatnqY6E9bZYoIqB#;||ebO;PM4+|4yU@ms-84JD$`2QQ>G;5-AuRMwz2Utdd zq?q#669S3LPwTJ{4av^@IcEKD!{RT`E1)bDPhib%So}Zjy>(cX`P%m_T>^_1kXV9% ziU=aoT`B@%f;0-Kq#&>s-61M4C?So3G)TjuyRqn&P>}9^&V|m5GxyBi_kQ;MJn!+o z@18&AIL4t|z;*qu^Lu_jpL*HDzZD+>Ooj(xU*woZNq$lUAv+>XyWl(p6HLK5``+Em zW6iUuXLZTVaPIKgy%294f9GAI5eVv7J>{oNt!S~`?oJU(@3I(?`x32dI}=fv@_Y(% zZ=B{UiE1Hds)dq7Ep~xELf}@v*A<4JtXxHVAJ7Dqvd8~k zP;n#X@Jvch&tswFiWf`Jk!a5UjcD{+M}mRuSG{2)&(-|3P? z!E({x0g?XE(KaF_^A<+{R4TfRS9xmkK7UP(l#%$Dl_@OSdeD_<+x2=DU+_@Fkl9if zmxps#l<~LjcZqtXo2)Tu0=M+&Ci>|$!5?sl*AM~zfadT_c5#l~gQ$)kLO_l@-HU0f z^x86R_y{24$3hXb!wYonibUoqUcdo7b$bAJVBd}!_gObyw|5rB~LE3 z#3Z$av+`I4Nn6e>I0^pTq>#ooDcJmTJZ>Q57G{f2tmu6v@Av9BI}&@Fd*YY?4qlT? zpB74xP0IP4?`BFq{|jWv2>zP5xAZR9?&_X@JWGSL29X9y&&rFvrAF>Jf8ZPp&LDe$ z_!mitZ?FZ=;5B5YFvEjV*26N{_A@slO_{oU5T$NA)B3YBD4vuj!a3F>atrX$J_Mfd zj;AD}qQE7ZQs3Dmf4@CQLUR7}qt56XGtlW{H9n~4Dl+KI+6~ef8zVr@+DJ}qc~MHe z%##GA5xdf(Lwr8xS9aVszj6!M+)nJynfwq%-6W?vRCX!=04uk<#VJP$Au#apNB1r1S!Lw=m~C9S_@;1S>tO?}Ct?nkr?|K7r-YMZ_3edAZQ`}SZZ+;^ z?!Acd6-MU!q)5qZdnmJPDyQh`mAjTMf2?-0i%SM_xRdx30jt!Tc_|Tq5Z+o-+@$fh zpRi}8yxNtn%^mABE801OxLh#%*^=roGJn1)hm`yc$8mkuDPsJX!onvui;PDPCj1Ne zhEfSO->}mAL%yL_?L=w(%63v@p+)eAS-@eo-)Q*@)#av|Rk|C$<&(a~BJ8>N#d9=$?q4bG#b$B86E@JI4t-^@;$ z{2*5oM>}taQH-6}BuJm8 zcF~lsC&wftv!tc`ws~tmJ2&wqTt>`DhnB1!f&l-Fzs7o|iN>|~>KEQT`t_c$fYiLV z>sjc0QNg2~0EPRcUr>abtGvRVK>I5$B=_)BNH zA7+<=rPqh|kwOmz9u98B3&7V(KENS6#rTZbnlH@C8q6|8w(8Jh}oM)zB4r8AMZCzHtQN;K>e}Q&^Wg@gn zE`MAi@{SsBjp~ZILiv@BAL+ZeD2K9uLzi)!kj~K29M2!EjQ+$T#;57)>)mJaui4dL z_T(ugd4WQ3bYEw%U&lc7&q(Y&z#BS=L~87sym5e%JGq&bV)h4nHm1*cj~8BiyA)p-nC z)-c$4?9#&-4d1n2grgGViI~lty^_)q1}(9HG9WV^{9R^jX;T{*j(~MIx==1vI(WDr z&}2q~%s2sL#vr0I-r#rmE;Bx~FEj4WLLz_2jPHQVSPKxvxajiJ1)xaZQTdp<_VSIk z@QSNXhenHKU}Q2$j9GGoo`(IcYhx8{O- z3qfv5V~zrmha_g^W$1t8CRGTlcUCoL#~X<{Cgoz~F22NZVmD`SG4bv4CHhl%Vw;f% zOAk$AFRJe1w0ZeGT(`;yM3ti!>=Qm5d)g*-+C_4s_8nMhM z&v9{q$mQ~ifgZDh5Sv!L$|!+)bFqQ!l*BapKz}pUqPv#bNaO)ZsT1>Ga!5ViDP3qf zwJ5FgEghA^f+3tQ5w;p^dV!bZog->X->`y`G-*Nggj{2{VkM02uHWu^9+bB`@wEs2 zt(zo&Qg|-NT1yCrbbitqRzPc@IsOdqZjJ+KlfmBZsiuB3k5|ayFD5niVsJ%neiZ{d zp2J;p(b3UNbu7%x&o6zk9!VXnt*z~`FI$LD20CdXbdGMixh2_dp0VlQG1i{zNOCv0 zwX?$jEEJ+AP)#VMh#vMaWsNSImvf4Y`%ofJ$7pS6sO5yno1C1KAzKV zd2!xd?6gJiMM~zXEsDuXFX>ckzjpcO6#i>!)b>@fkWFx1l)CtFu9USQ&r+F7Q#A$q=)Z>+r;h(XTj9LJ6|tTAYoY8O99rY(EN zmQ9vkJ0?4?prlQ2v37{tgGk{{<~MUc0S1X(yrS?sM<<>!IiHU%qmH<#pIC7cfNR@z z;*yQ#Mi4?UQZ1cZCw?8FT&0p5hz96~7TlKUKF7EL=wCb6Jh>o3QJ}rY`$7vx0{0;! z)(V+r49S>76aj5K=j<)fRG_G6vZMO2a=YlvAUVM|^;*A3&o&#lA7 zKp)_Psa#k_Az}t!8;ThmwAfEf3uTRNquA?`;rG*R9=>1ATzHrSK%bzm`Siu-RJtT`Eeh9xT zEq`UiOcu*V=hI-K;1gDGHy903X3dt2h1vXl>VH%i0aw8$^?n+I4QgPt9DWHk5i%c~ z{0DwgW6OWaApa?Y$PvH$6DjLIWsv_jmq7q$hp@?s7P)^JI4o)xqw*UvjT?W-8wKeu zK&HN@al)WR9&|6*J@F)FMfxk(>P-1!d0okuTYv>i1b~HJIJWuWL>LDRjmCBn=k=^? zF4SL5dg0bt2JHU-I}Xj)rFp0V=+cb3prgaxW#?*zDXD~xr~+(qK5}?>p5Jx?V9l}*zI3!1 z_Yv4g>IvWbr~nI3)unOhI7%s$eoNe(i*Flf0w2OcAz4Ek&;;(MYfomEe|oYT-L4%e z!w3saUl$@nj`Z42sK%9P_9laX!F6Y_u`$^=*{m!7NtU{jVVi{M3mXT56Q+958c991 zsQdiv*SxN}0H{DU+k(qd{dc<~F=Qi+Rt0EHr$xv#@MZr)w=YPICEG zIAOyoP|A|tOR9sL;gLh7pXk!E;-?aW@fLYebLjnqM@vA4<3`TS?^`s+j)8Z!^>8{H;*kaS*XLFW&e!I)NZ%w!`x|4 zf+bA8ipwU36T2H6Wb@0@r|c;=GLO~MOss%*0Rc)fyY`yEvs;5sbE-=_4?N&6;3K-^ zZ2ia13N!JorYn@0>2EAF>G^abOxX1MTGuyu-6~8C9GymW*o!Ut3u|wA6v9H;?OQ=t zzpYjqm3}pcvI(gGBvPt^cW{0KRRO4DtB#eELq^lf-IR#%DWZMesXeOTT(9|TzmFwz z{L(A;tfbB;hMX7}`bav}eG2LQHb_xY^#qG1%f4|uc~WJ^e91^EZa`|XJucicL6`A} zckrVF2`YI$nssoF-rgEI6}UFoXW7^Jy-=cAV*g?*;#AqX&c!&XYY!QQyR%Q#Tu~RI zJ*k~fKiz3zGgolC(Fo0UZ41Y_tZ1MHb`zyh(UjdYegt^8o!d57lH&v+nh`w^C+QTs zW2I3J zVqFlSY=gQkRgd49II?Nvd!p0+T*B=T5$oLY&&i*;3%{M?UijT~7F|$F;ZhX&WdA91 z?=};1?t{AYO4f;UaA^CB^hfyh=#fomF3|frs(dC3*djHh5q*m$C5)sZzK5uj+Fid@ zG@Pe(yLuV|$R>+<&nPLE;_Rbz@V(QNP6fXmYuq>`ai%T|$i7#H6d15^4fN#^S;3yN z6qq!iqnuow8=AbPbJ})q$M{u54m|CU3Jc5rjGpphi2r0pp|0AuUoBBxSuEDNLJhQadl^@2T>EGGry?7;>N_CfAj66-dRCN)MQ?(FqSf#M0>+OUsU-A_pvXaXo zANlGqTp`tk$}j0-CO0O;wFbQ1nA0y8u-0olKgUB)YDe(j2+Ds%l5yNtkVn`9@tLBLfyD9oMzFq^#dO|I{OQFE9>Ew&f3eRjxsDbHNJwOlo; zQXbCD;wp2|rA})PM{5HE!MFTQQiMg=GMW~Bi94IcYYTqGiwj<~Gttm+NNtSK6tOfz zzTF=i(76=Oqaha?=c#Ay!EU({-G@QH;L+Wb3M$4y-WhKiXWbfb&}aPG>cg+*&7P=M zrLF!hHkLAx7`!o#_M<;9GT&%G`U*9FzE|UYM{>qf#QC`GkmiCnNzs8c1D1Rw@7p^X z?U%-gSWy+IXU}O)mCl#|?Uz$gj?O5RKCRkxqZ;OFuY}ob$G$egHisgVqa?+&Zq;Fq zL!ojmJ3{`x0Kzlkrx?ZYn%c|XX;i1Tr{IQA$8?d@S`nl`SEU4&C&m46Q6jL0h)Hhu zn@P8i1?-_j5;dv7`bzl6CCR%^Wy>;X`9jSskMG?N_DlrEjo2oa^ym&eDRu%Y;K9a=XjUYzy znxcY4n8iaV44*dSnAGu^vdS^jirZtj<5EWNGRj!ep!$4zukcbsV^X=_b!#RAr|nXY zR%PfZjM6TpdEiq9-{;o&f9!jlviTC(9Hg~e(ClX_85c9`$GODgRk?dI<{osOhf4*G zn`ncgr8tW{I+7O0$q$QY_LkXBu8sow^CZ#j?k8K(<=p{h>Jl3IjzUpHy7oo02+Kov zddTX~fZIDdi&;{Gwv;vFs_$8v%#i_Ki-Z))h({K%8NeDaaNkP9>y}+yrEAK7uYq^h zy*}vO>Et`svS8g3D|W8bI#Zo4IuEVZU7+ESDUsUYzWH)-JfTdsqw+QxOgU}($X$N5 zON>a&Ke@K?t6hRW;IG>sUohdsPQL@FyjL0i3P42SM99_kUQ0rCf%|&?HjFsPQj>P6mS4!g)w@MKX+ZxKafFONi}){F z9(Vp(%j0Zmq?r{Vkf7-AWVeYGDaA(+lyj**Z?cU)=qslw*hhiZ1(?vN&hQS+!^Lw) zC?)g(gG?~yX0@MgL@AEiqoxyBz+qR;%V3WzwvVXId#!qFYxI9oe^JK^q5Twx*khft5@AGHBN5YQ{!i*1xRfT_tAqI`<~v}D zW;_}s?a8J^l-UeJ_L9=I;l{Osayl9|m)sLC^{jS1iR$EiIsNx`=1gI2+x%_`^tv8a zdI?mjlm&-10|1L}%m_(xvUkwsFZvzQ77g+y1nP))va)=X1U5c!bv_m(>RoWWg+>Ry zw@NOZumSK$D0ze!F|pkkNd(Lzq3QEYT-+EU(;2ieVe;V!^%)a+dA0#eA+>yU;*^#bIiQZum z%O%q~6!4aX5LfLjmR-YMkgEIU+iy7pZzVfDy5zDx!!H|#@1AJ(DfoMXOYfI8;*xw` zsj{dySCilRKb}EQ&pk8noQsYSk=x~3&j4OjgI~=EtxE6^#gW4{vS_l(98ak`uutAU z=+!{*nE$RsOMdSOj!EuaufHQkU3C$h+XJ*xppe=1qS9NR^6ObuR(7ksjK$lf2Pzy? z&YgQ&&Nv13WcljnUNk$4D&d!F#R+L6qa7HblW-yL7H{`aK`?b|w3JesRD;>+S zUSOaw@3zi%TC0C=??p%+_BEr*7&gdz^KX{#eP!ZQlQ>mYy6mSj&otdYj^(hFPCu<@ zt|H1(^XNi+`Dj0l&j81sY*+eN^ERk=kh*XdpTEF#)atCfAH~_ubwYJ*WJQI_$4Ae3 zkfj0q?D$oo2U(4a2gb1IY*=JJ4!=pqFFai@$v(UIrpH?zrzZa~b64}C;p}iF4KA(@ zzk-y|mDwyqc~2WD@#uS4W|xcz>#X$rk!;_wW1p_cS|#Gzc*}~&wW)EVp1xFuEmB1rklC2*erDS{IK9KP(}7Ds>JMy- z!fLX2Ls=77@aF4sNOMeDVx36sT$f#94wtrP$tugEF(Y|&d8#aCG0Rnb_A6+U?6z&KP79CWnG(e0Y5Q;Z z*;Ye(Uzswp+S707J1@WUd%rciP(M@37vk0~LFKz5v9q~C2XedM7=D&Ynp+a352z0{ z0B=@6K1Qkp*m&$MiXK@vITOxKx_Szmmb;!(`3u6+v-rvVZUvD|XQZuj+45yJxPeC{ z>J%;J&m67VX3wvzR%7wf!ZIXARtG)b_|5l?jghcgjM}#6JsX@YBMgVz!LwK+?8Jb~ z(Y|OUi(Nt>c$HssQX{^!hMEs+QHCRlt&1O5#*lDN^(_jQ%Q}9d?Jjht7*`iIr60)m{zT z=kxp7x^o+Inkz3KZHB|PoZu7*&fX!EUUc!{?$CyEhL+<`9(RZzCRL{nndFFI-=-V1 zB{sg6$S6nHfg{(QnmME3hIy6>O#g-l*5nhIDlcnG%jEInU@0#OBp{R&0jx2jgG z9IaHw$mpihCj&jf@v63+>HG2Z3A7{Ola0}$h; z#Y8#dckPO-U%+gLE!Yrk$rmo!?Y8)*I51}G=9s82IXq%#Om>J!X0c1W`+?q-Yw*O?8Y1~!*F zQYKF)s9I`lTJDkEh^*48E$kdo%}*sm$pw&bWyRZi*7APb=$$=v+(FMVP#V1g8~Gw$ zK*hoC`!mfsLnO(Eew0^zo)}qa1T(kG>~f9~uocwQbLW$1BQLuMk_b%8%aYlwc-ppY z;tCNJ(^RaE_qG6h^(uI>eFJN(u*MoIOpY>1i25(ZgK-$F!(|F3*gtxK1wrvpA{{3P z*v3emVWM-FYY;UVLoQ1qL>>lp4e6A@cY^BD*k~YO9*dW{@|$?MifC~g$rg`ZMf0{W zg2>rhf#Oe~plWj=cS9{s+LsI_+NF- zOD?32EKatYV$n>7`I`w-y7Bp`Iz!9;zYXF`$T``cZE2Yz_|jIy@_W%N;ONg{wBK#E|DJ{RHPu7+*N zY`-vReNMZWi1>>y5Fkx@T)(zU;3J}zS~%MLVt-atC?`*hJ&I4Ku%hR?spETt zB;fkLg0sTquIMbsaav;U$gkRZG+glz+Z>WlZ=m^=rKO4VZqYz? z#%z}RQe{&hmOm`sNj0|o^}~C((zS(~>Rr63(#z-h=B%LAAm*<5SaZpVvuDpfcEBTH z`?W5n+NT%{{5r5OLmV3drzk8M3R)q>yM))V4vP9GEVbzcgV+`aID7=(4jGz?JO1oY zr>=#>G+h#6l^W!u|LU zDM7_2>A)YLD1E(^oCUs3_b5l$X)5J|c81{UK`HBzT2mraT_)NTYn|1=~WR-1^3~X%NWqZ3NXDr^EWj>~X zpZoC1V$?$7mycidjp`otBwCMD+2}&!!>B#By}w?_yjwFrue09(d=&wq+*Z+hz@!Ys zIu`W(>`F#Q{7yU^sa7s*hlc#EOhMYRr8dH@w{>K3Br0$=_~P@-eAhWptrFZk~tx z{CN_{pPt)D80txb3nSZg=jPf)%$*$23J#tbQfG(&?NWqbJCTD)`;jM)j~|y})B30x zTIAuN?HFrmqAt>}lfDJdUUgljuZX-cq;$s*&H0CVe97O3QF--)LmFseMp&CgbsqRq zj@7{9l~8Lufo8j)WxqmKad-{vl`=cQOy7`Pm|UDc-W%mRnPk!_OB zd@t|Y5j$Ap9y^O#ZiUuW_b(4KXH3%Kpfbr3)V^2?$2uM1@tT8y9-MEn5URrxD0TxR zf!AS_*2hp3@D}ldRs9k|Uf@qD;$Y!Un=4LQj!(6T9vxWAR%T28j3mb5 zw=r9@Tm?Jas*bw(H&8rAgL4q^J;b7UiDru6YYogKr)!FU3yJDR#DY`zdz-`QMM8_rfi~>Ejr!%UL*?b&S%!FhXIlMJ=*{lr zNF+9TiPmHua|?(#KlwN>l4k7f7KDzHRo54orn6MXKU{$)09$1LF=q?m7mE{-(kd*I zR%((u;nWn_nm)?ZF)|Hz``3?Yl_A8u=hfWY4F7%9{ah$lLdx*V34<-XTHtuuPr$V{cxTO;brYFEM{2X7?vwUumG8k? zJBJ0slT`va*193{=4JVR8X9~ibvxtEeX)VSfM7a{oNTcqLcp(R6Go0PjQ;nVQq@js z`Yo;FF(GnLru3`k-j;`tQ0@=zic>bS?*Fq{!5Ys$ z&I(+A%?j){9&H!24&|`deO4?p%HP_6p!Zi`)SCFRA~X<> z?TahE=z?S7QFl7j( z%QZV^xS@@0UUErlImo&w=j}Da-taMVi2boHHCAkK67%*dTGDRnsh{NVxZmg2Nspai zsNe0kFUGO$i}YY3NM-)2exal$%l*D!PQ_@Vg^_W!OkMl!y;s{>JrV9 z;XgJh6e%QaHw3zDOPo=iOFbm6=S~NmKJ;zqJz&n;hz4b`Rf>kM@`=pEF30r;D?Gej z&4@#TLJvJYWFzA{Q`o){7*n`fL$mVgMh?2eIDDF7#MdLN)F3*^X-#jmO?-|PY&+qG zR(Av!mpkAjJ$^1ZUxW{Dww>VbedF2&VAGkqw2$0s0 zwUc7zh8s;4bx+))QFR9Sq8Dq1zU#ELfYpr1|)HG{^*JOpyd5=2b~N^Rq0KY1yn_q`Mq zO9W%>kQ=Ni&GZH}WodC*`W3MDR>F{`*~X9|(acXv$E^2^62)w+Yw@!eibT1QBqSU) zFb<-(!U$Z+kDP4N4W7mtqQB9x0^w+8bKrT?5ShzI@Ii5_mezRPg495KKQ$=+ks6pY z1tArJWad@QpQnPy53)#^$jCn?2sS~Rgh-YZ@KV4tUFK z`xy{t6B)&}S)833=tu|{ZF&}06J=F~oE`vm*jTXydhw8x55Q|0g4}9S`s}+xl9!AJ)nWr*IyD@N%(l=c?3ZVq9Rq87sm3v>QG*qVl}bD z=J>@h+obh)fkRsF>ff0s?r7RtC+fR?y_|wdk}2_BecvS{gHbGdfbBZ04S(YPPJ!}! zP07S-Py$?)z=0C!uzYAWXQduyAdmVR5R|Yxf@rR|SBXNr<&YWu`R(N zAVSG{e6+mCa%5+;mQ457Gtyo%H0eh$QG^??i`u z6>*Rw!tVStJpZDpVnmzM;+R9C(&L*?7E^o*hSwJ|Rr(aY3NKc9b-o%~Jk_Nbu$wgI z*%it7;BxSbw&PD^IInC>&-Xs;ef=a)&2hw{WK$wX({z`2`m7s2n>tecRNa#pcAz7l zzzVL5R;B`jq&6=(4oU8!ByXv!2mkK}3$`W3e^f{OOThw#*S{SsaHx+rRZC5kyy+?= zLjHnZe^avbY4@a=lZawyi`);LMETtB2q(VO-w{q89TXakyumyP^~V>#sufPh;Etru zOIY@tuCt)@7Ai1DbJPe)4##w643K5Gcts6a{dW=tD22*n6NOiV`qW98_*}iuc&r0O z#3afW)YRc1&aK<(MIv@|K2{rsJWlM78H)iA%(=JKtF~OPT~x*UDE?>aNkh0HfSs@t zLn1D$wpE!Ot8Eoq=+ut-DOAv9*(AIfuA;xf$H&)Z{}b8CV{mBb>#t}O+1zXz9Y7s$ z{+udALgNG&?Iz+92Yi3T3L_zY{5|lq()TbCb?FhK6%`lR{RCJaS?oVf%aBkM(P32K zjx#$0>g(P4`5epo4gTsGAl`&g$4lEW4{u+M+D58?Td{EI_(4~5?F{Bg>c(uvpFjdfC^6PE{e z88S}$$t(Cjj(wwH?#SIA*mWG6F5!_jWKf3)9v=cCc_o4V>xIeVda#3I#2LJQ* zgNX@7*z&Aj`7DTyQUfKOC<2?q-A)f~Of)^)Yq}+J9{+m`RwbV1D@_)p7X)z`D>_@st&tx)G{ zYKE>xyO<$Rr0~N!g9g|xfonzG5{+iy(?P(Rj%|;$8FC8D_O*SyOewPiq3Q=`kPhW3+c(F>s*%zX=s!kolRc)uSTOkB%KQTIboRU z%}eL_7ODYb@t!yRx|L1;Fl5Lm>oC_Sv^Ff_1MMgvtxab?W9bKdH_a@wut2HCP~o<{ zDzX{H>CX1T%<5uYfKbrY&W~{PPnvb6Wv@eoHg0xe4wF-vmv-N!y(nYuuC&t^l~d%w zGcfg3f8`Vl%hQZ=o|Lu|UjtJd;H&Yo0edTR*P{7z3wVNh>Js|wM3+B6Ae-$10;+4^ z^gk8*tXS4d>1`P@jyWF~9z)l{ONy3CTsFo97NE(f&>mY_dn-tCB*RK%4GUv`dH#x^ zs#G>Mx6wYt(DhEp{{Lbd0nSjpg^~ks;_RWZgyjD2>O$VYqs;b2Lhnj-sSSmLtPu<>{Y`LImQ2l%GFs*9Zm!E#wA1F>{&t=K7e)V7k0H<4cm7Ni%iV0uh z-wPf@-F7jw2WOfPNblSD#JVXbYfigvPmd1mxoTm+(AbwxD5vLvO9109kU~2z)J__0 zE+=2c9H@Wdf{b-cNw@>XGtC0aP^a>vD)h};Z+a<*ms)4I!q{BbD?d9|SW5FAV*hO0 znW?@Ly|Kj5jI;i&XQ_XP%*#;7`rMp^w|5}$y#m4XK1KiKfP%;}L+iL+fZe_}gM#HlN4Mb!;6; zz6Zx4=?_%ZZ zA2k=VpSIfAu4lTcIP%CxdkH7>_|7kbFeA=PqHkd4vG0FnN3mKQxi6*h$%xz{O!*9& z-)~)L{1lboS4{R$KmVW0=1hLi3sggpd3j0>h6sWwM+iyvr!RhNizHhkm;z}nAt8eDci0qwYi#ef9q zAyL|&`A$nukA;qbnZmy^6Fk{-=lhmk5j8Pa)q0YD3yqy2&c;Lg4DWd1JRK;F_(Fz{ z3v{LMF*m_^87b%W;Dax&%`n&uzgZ<4R3cuemgIfmIk3KP>pg14P&br|T%xzNF*Fp9 zwSwrgMBxx}n`)$jG&hpi1IBCW4YLl2(cz4o%t)T#S5VhH&|#PGL(r+*`1_y%hqTKLugL=G8Kc2Og11AK;DjFpEv)QLLYTg+lUG-8l5au~ zI1|#%vPLf?a(#^vRG${a03OVr>B*@#PQB4@SZI&TN09#s;&j>BYX|Y~*A(_4PXCY8 z6sk-F{#a8$Eg9n(m)v=9LOGD)A9yGvU>UY=r9|jiIRn0Ui;_ipILbQhn@5?svol8gVgYRZ zjRJ~t1+k3K6L;N4sgY6}u@@V9^7`|?k%lhrg@XPUWwPg#UA*r2Z4xF>Ot;5LbI$|@ zm?4Y;Pai-c_K=6*+xBf6n=0gvCw9mdtoBVs=?7=^_yrBA0(0hg_7Tiy*^y| zXlSs{o`AI%bS@XS7nJ8Yribl%Qm&a5tg%XL?5-9VjlKx7_xU*8sy|l@lZ36tLqkFDf<+|X%8)*$RT3awn)Z9%w;?&8zXcxY5SDy7W zq<8)lq&7Z0!6)z`%}2K&ugVz4?vJjga_Sy2-by>~Vnb4(>t-`Cf->0U#V92;>9iUt)OhmVdzq?R%9MK^k(a^;@#B-{RDjk$f?CGZq1(r`=^PQQdjdc(8)? zo~n!TKKa>$pKc#QI3qiJNBiUdT4F70d86b~PmH)U0ni5bQjS;i6aq34hoT+-bz|XuYHf; zBe7=aabAdWE7xIC_I#*J>xEI;5>dt?5W}9x#pFmEKXPX3r%OE}S3x{bMO3w5z30IY zAXG!mDid)CPxNf-AS(b>FeB@?A23vS-Ad&*Q$o)oH*dpgeH}9{+v4=i?eHB_E^V((W3FFjqkE*)|fgvBM_opKy zd7^7H7||{43exT8in@@eYqm`0;29%4IhzdL;7fA%0)I>_IHxW8^U|yEP5(&2AzIiU zEU-95H9?e3&T2n(sKpU>5)KwP98!?<9>RJf?$E?JWu!0LuL%_%mUK*8riI_DhuR%E z&FOvwBLN<{ewAWDxHCt?tVu}cr?3^~Y4J1ncgh-BSx}CHhQD+ZlxhAb*qGlE_4k&7#0$TN} zLq-%VHE8x+`KzbNIDc5IXC0Gdz#0+sCu;;MDbH-p(`;ziHw!M8s)warb!uu}hJ^xL zIl#DikXqDcjDOXdV*ceLZ^-Iy7Xdu;j*=vDm<_Kz@JcwI6PP$WwQ94e9R1`+&L3HH z#;5TvuX3^kw6G-(0!i}afZ-yEeqX>YAmwc*T0-{V3G+A6s})1rSFG9g^+cK3AcjsH z7t31z0H3xq5VS@{n57^L+BVQM_HLqG(ekyq(a}+JB5zoqqy`xjEfA6nN)ICaDco7U zO|j(n_(TC_S^XjZ?`G>Welo`~J(l1uxZHvjTa(4lH^@hr11Qu&QR8J)<)Z==>fnCh z@D}stlFqViNIm+uz@hUn8i6YyTL(+4FW2-;())g05&p?2p&WCkH`hlWmxYA<*s%yq zb=e?N=s?|Ur&BL%RO{5gYS{JHjg@G@2Z&QL{++%KoUQmFoVojdDU=vVGt!x!=j!`J zAdyh>L4o&p?x%mX(eOMB8VwibMDq+zlM$;mcn~cRyQrttS9C^Sp`_xPcf302&@BZd zL^XR^Vq{IoopG>91Q4oIj7t2SV4{+!2v^^=NdI|&Fvv9JFL`Gepn+=iVu}SK2d{q? zISBn*k;99s9bEF9^qVVGA<}MA*v7-boKN8O#m&x7Wa=C$n6C<&BPKXr!9Jf!S0YC*Eg6eo*8fE2hnxFj; zDq#Bxj~5Z7HG)ARam$#JFOdvr5M9)i1d6c1{yz5g@tlcN7Es3%S?Bo4P<<4-3-&X; z*p-!Ey9-|f(AWivBAfBkox$hi1Wpyl&n#o#4mK5!z~MMI70)1I-_dZ+JNZfyg^z?> z)j|9RP_sacvcaL}WiW%!Uwnb!d00OE?$`3g%yMm%DeHZyKk14SBCrh-tVja><`oqT} z=|zy1(4<2Mk(K}<dr~-fg!SFB`sAF+Vym>iT)q;w8woaYv zm~sF0EdRe$f%NeByUAx&`TW7JFEBY%{r$lIdZOq3U_h3*^oj=@otEZQuw-yA|FKg6 zr#nwg)5!LaG5+sN^54IU$p)xA zUOwT90;oeTs{$66wmbj&huLJ80#rAAX{b-#(gIgXD~CJHaqLoGykz48#P+T`1fSw# zxuy#A!e9LT?)+;ip`aBlURQOefJ+7+;$d;+%yIhz&hLfdd2nrQ+B!8oMp9S!HLhG$ zF&EDX5=k8L7S_m;q=>g`Xh`hOmgG7{oGU0T*lb>Up?aBt1z?*imJm38=Rt$H1rx!i zpGbcm))We^Rp#X1I@Etz@BBybtC#y-(r=yxWLmWyJ84=cPyBGL=KOYRjQiSu zJwg}gRr)8_V!91_qMEK(0^qmQumS^WMeLbpY5m-9_Yk^qu3PRGXd!5Nz-0Dq#6+hPs`rZFpTsw9MBl7VtaZV3#Vh z>tUE}L*E-<(NQ%?Q*F3gQ+!uUyHvG)dVWrw=G<96Kwmw=_Uy4v^Or8@v0u~2nl2gj zHFz8BEHN5LAU>XFqg=ai;(o%%sb~qTv|#hK=huMDntONq&R(~~n^PZj5{9ab%!;1)+NXTOa*pVNS8rz^;6_l*T99X-L1&Vx{s!%xM7O`q-dF;DK4|h z!7ws#J)`Pjv!&VP9_i6bjU3KyTN`dA9NKtk`^x*_--qhWpg^fwc~q>?tiP^Q^3( zfAvP>{DXg~gLb@~K4QT;yu>iut#BkHs*=VhtiYzDU8FbE1V@Tswr@K(VFq7mvJ?QB zdsXiaDxdZMd#`YLj%jyqCI?U3ajX)*`AYa^&_@ajH~p?fziNeYTh;*7b6M;=IT_?-7oD!q1H% z*?WMiaB^~SSweX8b(* zjBM?!OKr8uZ-3nQQk*z8jUH$qRI`^Qk>2|}zG%{&t*^Jp+=z^U*Fx9joLIOV{8wKI z#-68{p3#$a1io>@kxK)DYQlXevs?=>-KdNCBXTSq~=?UaaT7t zA*mfDo}`(X#(yELaABR57*on^{;KeEemF^xD<9l8C$o`;40pJMkJ5djv ze?Vq>Ujolc5zQ*Or6ZDtg;+k*)2>f3s<3~*3cG3ztQ)hd9E=FnyA4U0J+KjaE{PPNWkD_~=T@jkq$tUDx;_tC~B)hpSm)=kAfessYRu&qt%9cqQbr^XUmXM8l z6FGQfq(AsB3dlYCbkTD-Sh`YAa>}rN^p&RDDHdS)yW$|@F$Ib5U8~`JC4O<#PF&z- zJKGQvVj{QsjdihZK8n#xsDqEi5JWPZ*KDa@=v;L#jCt$+sVgk*sdI&`irns7dWp72 z6)q=TqWkT)@EGR!?~9wn>5{_2q;tdHJAK)@Kc_huq@w`e1y3dDpx+q<@YsWrblPSM9XY3;K%F) zhTSANRoPn*&w*4}6gaxHw<059TR+hVfPdxsw@X#28=CM?9;&B!^mDe#e_TsFiD{}Y*3xY)bNxWLc)q^H5iU`bR8 ziha3z3Ra{4!kEgP=S{7N2h_&HXg;YD)%CK2Ytrffib-IR-7L_@u+y|U=j7QOXVyGw znMscjMato}d9|F=AYc9NsJUT)CzB^mT< zDVKQP8F=k!F4-H2$+;!80;<4dtAOHgo24xwA3B};NS}fwN&MR0UD`6*DvLPix(xu%WPucfJsjE(J35YNJL{y`ZmBp!CXk@IS*H?Y3 z&qd5i#67{5*k@icqx8YZXv2Oizk*wHm}t7*H(2WlN&6)O)&{pypj2ATb$N+jf_!Kd z%kYF#ENgp?YoAz~rW?~}@ErftJhb>rnOQn|oywK4S~BTW_^D@M-)72=f_vOqF6h`* zr1D7Hzg_5NXlvRDOGyD%@|wX9j>9CAl4Kvfo~F&RNmJ1xA#dKY)3j#NWD$`kHW4rW+D?o>TnP+yK!-rDm+>MN@uGk7E>Xy0LK~ zT8UsPN1XJs|2_NVS#)3MiTwLnVvd>q`MQ~k{t+811GV9&*{?7w?ZoVCOewH6n3pN< zV8;f``$-dyStZ2%fTuAJuQ26b0hBj_c|50_$*3MHDTg@4-Trm;hVu3b+i?6fIEhf= z%c%hwE1j~ynBk>mZ_-mSJ@9Us(BavCBoK%+?pOF6vOb!Zm`)sY94hgyIK;lB@~of_ zuqJzE91fh#upe)>%*~^JQ|n^9Vd;HXtugddgw#ZFGY{X;xCR7~VeC@=q4bVp>V;lX z=^5UeRzpEvc@@x|HvghU0+FqAuik-qQV$Dhv)=w#8(10E&u_mqo!Z#R!~Nc$s=O-~ z)t(rQI22}=am+9iI!NZvMge=#a63&y`}NXvt^i=Em5LZ7B$=GDH_8iG4|dSB@=yES zsta=ceol^*7;515{j*UQN2X>{pcq7mJMCwuHoPWQ4O1J_FUr~FW1iS^A|4SJF?~4k zs-@`aiwfEX`DqTXek<*u)Dh|w1sMn|owV{r8M35(8-*$b=#yL>Qr5u4AX|*ogSONjb9k z4mXzp#H9GE48>Li6|S)Y(U}G^fHVy7b$fV4Qfy5;QkSoY3hQb3aEiF$T>0(YhtGwT zKJ_kS&17dW=WELwNaQ=k?D%S_%cXD;t19h-Nh!Ti*ISL`(G;)e6OQm7uSVM)-e5VI zH-y^g+&H%d0*H-?5`mKzsVLVRvyTC7ODuk1Tj0emSsl+cCLH)A3+C%;v-29LyRj7e z@bCK@RU5{4yed|Aqqx|;W0Ea>Qn`F5pFKPK^$~!*xxLi4jb4rAsO6K~#o znz1(GS0;!)TKSQ4#|XfBBUJ*L;O{tP^yQzgu&g{SikM<^Z`%B><-L<~({`=;LjI8K zXFUY(hi?WFxe)jkpr06%pBv*cG(?;F%rrcjRzlpz2Pjqwg7k|Ltn}S6efhO3v$WwG{%=Hhxx|6dF%l6k zo@^ad@B7BwtzJVw@BMjtzunyrcfz}!KV=B`&^r(hY^;1SV-JRzVy3ot4~{&BxoZ*h zP6+;z7JLvyX`0Dy_aAtaiXd%8V~ z^EwAz8z5?D47NTnz6;;mUII*s+a)DYBapSNK53TGWu$`DZ}YT(0N5|%G?WMP+VpKJ z`DK$>{^Sz3Tk@j*i^H>s@NuaDOEqIVeeBHYU-f*y1gbE@NNs$+tXiv7f*}FE8L&%9=Ha2ajXKu*EbM`m< zDrIuVc^_VAMc44mhjmLA*Fe$Tb52y{#&;kO+{-xeY$w-Pfh_-Vv7tsy1-UwRXvMFe zW-2`;_ftlK`sOQH4>~gyMoVdmdepFxHyiZ20N0XO&o5h^lsZ+n)EoEZ-AA-CW&PP$ zH>9IPa=2T7rp>7Uxm^?UE)6;;TM+#UTXXC~yr}fAb#Wb4%#B;qNYw1`t5RI8 z%M}@}AC~&#MYb71nnJ;pn|j~j^$q<)KNjutsrTN(?MZgjv*s!ZsS$nWdZhGEdK5{N zSz5}I;_HPMvl|7{3Rk*cYeufRH(p$nz-_&#G-9O2R@(!9DO_K}Mjv|ASPwGTBuCS{ms+;a9IdCZxs+Fh zDqJ;Sy^SBy-%xf-_UmoRybCtauoZryHeRTtPzoMF(@MM_`^>ud7S->tPO0aL!=(qv=Q;vF^Quy6 zy+;Urunf79X2;lGVzJv=$BPx1A@&nJyBKFQze2f(^W*Y8H(E;;5tJSg6DaLRsxsx` z4sQ2AL6eq)9Iq(9WeYDS$NJ|U(dc;>nX^gn^K^3e+BNf}9!3xN0P8d2<2a{kK+ck?oXMD+Sb1chi5nV3kD0<4=tSS( z!fLx{T952&yyaH>sLB=2P|ps!Up}Lo*IMeUACDhPBM0@Qb>_9WTr=VQ*^V(MyaJn% z(!8Q9HpuoEdh2`3s-7nz=ynOO&8RpibAD%*MQ z0w7(ecgXW?3CyK8eoAC-`4Xy*DAYv`Laf8e|I z)yO^1X#UAGT7>#>$94PY|QyI!|>4RCf#8a&!IwC+^0 z^7ew(;X;=MJ_pSePuXkX2}|`Ztk1`yeuRBN_}PUi%KH~2q>vG~pytO^iofPi_NvjN z$a#aSURJv+4~GIf&sIL`s;%5y#N;+1>BG~Ed%`{tb-JV#(wuKJ^22)6#yT^{nnkOU zQ(Wu|ER7#)n5Qr-XdpP#yUpL!oCA*o^jY4u9YfE(IL&aHN6|D%%#!2aZ6v2m5^)Bh zvbH&4Mg6#K(&@6xgLb!%I;!C%z?njysM>X}CUU$~>nMXGBD*;Lmv#R{SQUYba&B-V z2zB&()R=AgHV`;TrPO4f89hB#%mU#Nq2fL$LEkuY=+YIiPfExes`5@fjh|7LSbl%%-AMO_KJvZn;SuDAi zr;(;t=^DSOwjlX*JWf%EwTSEZyZCJ4)*3sM6vx@tx?jPiVUMb>=!`+*WDur;pHRr#=+WXtUqnmDyFmBYcjga7 z*l@-IA&pYWI)bG!Jo#HY{c7BKMprF`EXK z&pY~AGEYrM18m6!S%ffK_A4WiW{q)cQj=pyxXf$sjs#tx7+0sGfF0vFJi{(=t#YP} zvU`IBG*XojEP2rg-*+2()qSy7HSa0Y{dbS_8l{1q)F@gk7yiy4Ak0YR@zt*0`(@Y* z8F=L*x1;WzqJa4IQM;VOQeDqnD}dX}oFQXO%)v|4X4@f5Q9 z2z9$z4ylQvwLLKl;Z3`a;8hu*$poYGG1XzeXn1E7xB1TrK@)L1BCS<}OHR66KwRM7 zF2i+c7|Er$2+M)RCblnb{R9)@3)oL%$t>UKeO$`@prpC(UF3y!j_mj4gk1=8obnVT z*(j>k4vC1tN*i}gCpQT&nz-IN3r%F3Hcopy%Y#enhRKkPyY)ghU(fP+h`IKb`xDLce)Os$P^dGVa4wO}L180F$o_`z%N>NK`sgBdqs{iHkL zy64b}`#HC46Jm`gcH+ch$N-yv`x_s*mH*^7=vxx%aWvo#4#&a-cVKIDsiGVR{CSuJ)O+BCF_~zoT5( zJJiR|ui-gAzPi;~G@}zsuZ^3o=Jts zUX9qNKtd+p#|e09W%+E)wv+r&^^2RSo&&-&nuYInQ`SI$L+(=ODF|O@DL8*-*t@az z_dC3?-&pBQ*g2ClY*Nb6&+~~rRthz7j%9M4khPB_3Lb06jeh$pY}<}oR{!|mQH z?sQuiwv%+U9=paZBx`bCR(M`&&X29JIkCX(AQCt19ymkOnpQ0~ip@%4n7gQV&;Bsu zjvaP1a&eJ)xhvFHpHOIBR8*v=1%e^(o?PM?(Z$uYGuof2$E}EkbSkkO0=+UlDrsxB zOqt$hi*xy&LtiWx)+7l#4FUV8_=Q#9i|Sy?Bf}!>C%MDB#4saF!O%f+R@e4o6GlZE zV&?w2&qHcZOekKdp*CjOoyUR`NGqR!yQY&89~E1R4Y?^eS9o`5?G<&5``m9nf^K7Y zdzt`K5>~0VWl51tnyjPZbP@+;11sMoUH_io?PPqx=~kzfi8$IHgmeEl3jGj$e@B&4 z+1b!rF~w|(c}ooVI5xl6OP_lM(D!zy4>lBiA4-sZ|8^4QSd!eHnCH1cSgagIjcKpW zT{rmQl97<6`^;#Joa;Ae^znx+(ga_$|A97(K7lMhU#Yf+v(4{Lc{Y;@5R(DZWRalF z(#u0RI#V$}2hP#UP_`O$NAj}U*V`e~24xK6ukx8K_8}8Q6HND99@eh&^|MMhaz5G$ zbMM#OT~ACFA+C*x7f6#f(l#?&Cr3c{A%9soBU?=`CsEl2~rlN*WE;9GFm=y z!5{ceJaRsG+)!Uu^KESIXG(jyUZ*SX=*m0DOu`$Lgu{)`4R)?v}y}$=7 zSsf=N@HAIVetCxUx`yaJzAab!3sjZJOxEA0bjpOk(U|E=daIHlID&Cah!cy29Li@6ukhJwsl~}E8#i*9E#fXrYomyCh7KFrL9o5 z>VT0tD_~N+RJJjh3$dr4iOF(@S${`7DST$1!*&kBUrL)-^7vL#xI5Q1g_O4z(EA}4 zl%Q6Qk83J2tkfJE5axo#H#3*x_q~#;!N8NqT(BBh%^%K~p zkG^o#et}?&0TnM|>`)aZ3C4^mCv-RV`n!`?GM1G-Wk|p-$~YScP;QVe;+qW{wX9Le z(&6X>YmNMd3HZ45K=Yc)){ox2{Jyt+Fkp;lcOv3bE~R;n;UP#t*USAqcKg@)FnDqa z{P%tdX!e#Vowot)QGR&>}VRed#fW zG}b21L44kYRhF`!KJEE6Rw?i6Bi7_Jm$@Pe;YHKlQWDi~L*nVgj2ic<_Mu@U)w9^% z_l*|%T$_ddC?D&2bd*zcM4oq%famVX6AP_W8CZ{TuN?Lag)OFizwhT*vG`X4a72gv~Ru039-Or~W?1|9B&VC8!1(bd<%;Z@WCsJD3p6^^ZPdK<-BwOgdGF zOm5T;dH&XNUv(6h)7!Es^2G;wRK9}~FldG+hWtg$C4TU&FFE!kTupJDw>ad^z;y@S zSub&T8_oOtD`U4FKBYD*0hICQL0)LQM+EQcb0{jDl%}h(u|2<>3Mr8s1IaH_VecYH z_0w9@FrLZ~F8KJFN?YRSP~F1<-vYhFku4N`P)CcB$q~L?yia1t;f-@aF;gt^V3g6J z$F9Robm6Swg!y9^v}Dl@2yZEB{scRb*Gs9uoa%57uGyo%#39}4(_xp@IJM4uh!F29 z!4P5eUVD%hg%RB*ySTzaV3IhEL8d4y&vfx?!pHyd;hb{xg8nOx-* zxeq75yXF`-9REiTbT``Tn1&D(t^IWxEMi|%I?{PHBDJ-Irvr@(#{va86`scnzF3p6v4jViMZRtjydXI`)78_m7@`IQ&7=s*x6A#$>H=Vs_XE zJl34NBc%7*+`wQRM-}+}b@C#~zevxcv5WD^Rr3{>O!J{{iYAx2F*5Nr(DzzzRy!&$ za4vL&7WG9$<~Deu=-=uMHu#%4;64>hNR2exZw+RIcj*hfD;eDxQ~dO0%NvaC}26DQ^wJA`dkEYeYmwx5`k(WdFQbO1{Q1Yce`A+iqu>I>6XtUdC zKWOE7IDzP9_c+DPpCYWe@)y9~626|*mTTS#_;pvGlsKFl!-A$6Qtwx`WtQ8e>~4Jp zc}I(FmF*yl>sQ4BEQ72nr)iqfawRHd++*4HMvXB^DS72Oy)AmJkfe8`*+#-J6g&{+ z2oVkx*82-IsF;ievW060>lQmWVjhO3>6e*2$ZR_JPF!;OL_PkKS;gfmjvMA$Pg9M$ z;A+2pc(Q2WkisLb;twxLDC|b(r9p_-#ipAQkQ?^J@DYe~eEj_tvE|GkwLaHfhv~r8 z)GbJ*R>}dTmegQ6_+joSHK=eyCQJ`V=iF8mKi(vr`5;Fmy~~M47U_L;=C$H`-=KL7 zXeQc<13tpR-t;RKwo&o8#?T@lQy%)^GzCAlCPF1D04Oi_T6uPBqnc)oPndIt1yRTh z`#nbPsd*V=sUE%=wF}j>Ez*-nn~JC!pB4-FPcc|Y&kZbgL~3!U$*kaTu@b%zOm5Vm zHc`s&PQWH5By>jBrT}~1)_?^_pCWj!Dm-`RL{gh#%HbI#vM0O$u0p}Ey1U(Z_whcS%iQ623C=aR!__$x`>mg%!oh;gUOsCAiAm=!f_{$R3m6xv4X+D3m^n7mmD9F5 zX1ECj-#_99d_qQyiljTIh`LE8-v^|Blo}J=ehWFET5Ek^)_BBZHqvKiQo;~!E`aiJ zzshD=SG%(^ov*)F^l4%Zlja6Dv4V^80X*9Z_$DWiWLEgv-2AjXpx$doaO?Z4`lUP$ z_f!|lrw#hnsH2NI*bI2cMYfO3Zj70wvIOluOzQulRl z{@P@{A0(Ego9a$rm~L9AG9#FUjH2V7lvGOT+)ndAqD4-kuwt0ba$BF+J9PM2DYo-- zXkhQIC3QgHgOk52@~LHmz-F}(p0T$XZDsxGJ%1U*TEyJc`{^GARJRk;{6-3d^< z!Uv2h1&4r$_6f3P$fWHdJdoUH;7=su?GJX^rB_m-+Vy}ii{_N1=2oTIp$#e6yIR*9|i89o#Z1LmOTv+gf#w>miqq_f*-Ht`+u1b zJf{cL$2Wngcq^>>*xd*JQ2*zA7Up$38kCuzpe{HS{O4Tcvl5E<6+~&%-1AWjxK+jl z=A7xxDAHDz;CH3w2h1MaR`vU*CYtZ`q}<^SBElqW)}p6xHbTc9XErYl77wo@etCHk z&Ng;mrz7?TSg#yISn&m`wt=06TbeVyB7l?MOG)Id>*!SlGK^7hGh_18~DZ=+m3VMw`!>xqjY%XrICT| zKW~~p$5>zIdh~&F>5}ENe^)nCEMZESR`jG>^7ffwpD#@Xmrfm*)>QTXC@R0*8l8w_5IPnA#18MQ;D0qP@wHt62$LRsDa7Qez&w!}d1DZzwcuf$NOCm4dsIv40p zwjKrlu-w`ccPLme9jTL-l+KN;5iddPJ5siKHyy^N=1rrKHf2n~WZUP$KFsS=4-c&& zoHj(z&Fcc(9;lWMkc7RUCo2`2{W|tK)@nD!ch|*ka+l%!`kTNTDaX`eRXB~oIe^!* z9a8yx7@@tAjq;o7+M#PzqjDdtY(HwQhkkF!R{;pM^UNQ?0_db;O>!T~4r=UBFDgB= z^<(*CWDmzdn6#GJ`3J!rGOpQ%J z^7S&qz}rPde{u%Y!zr1QK=;+>_YdkPwL{)tfAY378RcZm(=jnT4jG(!AoW+(DE(-7z;WSTi0xAOb#jrn2WB37|cH823>c zFfHmQW)C)~T<>gV-?OJ|4ZE4Twpk%M52t%WJ-2NQQJ3#3EN#lPBx=s=HT2(9BbQUv zBdixqq3$yu_}z7m2Mq>dF>!$3#@xtOBX)Z7qnF#s(vo#=VIT3JCvj#$ULVq(k|LYG ziSR;OYJL@AN}<9|^iG@`4Ny|nwh4eW7;!^Z;6mV0LbC}okXx@+_33jZfGFu3oc(Lq zH?*w*QRb=GGE?t6pj=1oLc>wvv?&QqYxLcPRFQOB{}vEc`wGd_M=q_ny_Wq16IOZT zW07;CL*3j5?Y&!@6J>+$FOWHzp>|wa{_E5qZ!-Q`LQ^v^!C)cNi|kRwEM`ILu+~Qt zVU?xN9{{c)^G=c<$GlEFfsxAxE_~CK1bKwdS7SDSao&beK_JR#voK^+{LQ-ck?iQX zK{YDR>fd8u>(xGoHLDyojTS{k*7kZo@W6r@+3{a-Lfmtrs$jCPq(gXcKT_gax`ar< z;zLw^)|7=ir_~A^7n%Td!Ferbz*S)>4CQ82%Jka1>zaVPve*i(NU4elh&TR9+4g=40jrnzu)ZjyoA+sD%e_G$@0L z@!f~>T*rGJOQ-jX+!If@pA;+k;dojvepMO`YamF;1n#z-#PJt*j0cbLf;U5O{@~TV zAmJeu8VO+#p_sXsh8>q&z^t8mR!bWww)8IYApa^-IPXjEh>$Jrs4vrmbfCaaI&xt* zjd}MB^1?SllVj;Y#N^96J{w zFzOEIng-zYz;p%;^gr#B1#71%uwKUELuBliI)4xXUMds^Z-wl6^`1JOh;e#N&CVD+ z#h*fkQKZ%VzJt=a2@ogsm#Ua(9v2dzPwbqs69M$^6P+)B+3Rx_2>r;DvW&-NGH@VI za}eFsE{9Kp7cbv~HW;SSsXC^@{4sru5!loIS1Zz)1dd*_P%rim7Rv=MW5{MSR7V2T za({NP%J5DH=(@+vhmRf{{n~F?aPnIw;C~{PqcV@hd7!60r=otcafXJ)Ddx`|1y3~l zaf&3+J5K(w`ESEs04y0=d=r3Qf4W@j@jVgvAI@i2rcp2yh94-E;TF6Stg6g-jT2bj z9$!`Xhb5o?b5HYEzvxx)uIVLkT9Z8gV9p1x!Ec1h7QLgVqL~9Z^A7$w;Gd%A4rm|6 z^ji&}H*|r_sGz$R<3EfZ1EbccavUh_Lb?683J%LhrtWgh&ODlKZ+RIu&Mp7^HG)qQ zG^0NK!dI9K+d+(BeBAf`CmG6PE<(;Z?TKSHM+QH>^p8pW%K_z`o-CwzE3C*ef}Z&=oHjt`s_NaBa4Q;#&1T>iIRJ z9i&7Me^>AyngnESPOv7~9e#lVqTW_BtD|FhVe zZj*KCM;a-*=HVz}ND65en{1Lr7le7ftCFQGc)J-+&8)NNs4GF9wfK*zYej-vW#Ub9?%$(A?Vl9VT)dhC)k6z2f*xe5IgKh`7QlZ%Tm57t_R1Vd! zst=}NDBh7$!%zA=JyX6j8D}#s{P0V+dE?pzfHN0Q!|-$&8Kr>KM17P`P(Jl+*p?g! z4NDagef~YjJEOp9_)OLdf$WJHI1P_#mi8lH+Bkpp8JR>({v%xFM3S0HxHdrgOp&x+ zb@l=#tj8{7>Fm|Jo!{QDqLL@GCrW5`YnPX!Mw)qw)PjvAAl|v~Jz?C=B~p0@tr39X z6>7vew=gTL-zak#SBbI%PbvZxlxy*SG}PRb@+5gS4!#DP7G>X2Ge?a=cU$Blv&G>r zy=quT#y~b;YR#(>)HI2pkYk_iV*>Vmg)hF7?EfuvbhH_baJ_k^Bp^+~{@%4qky26F zLCpj-#Cs#lH1Yf9l1L&k2kABQ=`lU7r3E^Yr8JF06p!ufIT@?rr~IH3SW;W6pTG|^ z)7l-O!>OChT(af***w^3dW9g0V~Pq;S{6=L92^(}bq06E<|!f(#8j4BM^0HI8>R*} zyo9Q8D;cy!yQHqBb^QMNE`s;n7{wH?MJkBu})CO#1NN}sP(Q70gvC+hxX=CS_%9EDMJ z5h=To!Okdii~@M2s`iv6PLagjMzi;8S^s~u0If%`4wYmOuTqrOT9~JJ2_Ph%FIRh0 zA`;~|=Z@h$zn4+zuY!g&s=Yb#ooR+&)hX;)Lo`){R#f6M{Gj#vYQJ==iB3&E^G5my zD(+tcc~->h$4Qe=l_brkpzjAhtmlETu{O&7B1Q3xUDq}~~(T1i#j(jYN<>Ch%3jAzUW2F*|%Ke|C$D=JGO;4tnLpX?vl zf9AZ>?lREATpWc0B}m>4>+aSFt#vUdu9@f2$@9XqjE{|nD0iGl-YFFwYvxTAC;QSk z3E$GvvX#82Dx64+Y+^evzd7ktG<1a1gFt?lOB5KT_rVZn!YhKt@mY93VsZ=4??su) zc<%!F^B5s|ig&Ml4Rpk>lPaY~AN4mf`zogCHqpD3bLxfUlFhmH2-~31ljJ$IaXg(G z7>@(Remp@sr0E}op8})gvJP4t!c8UO5FhC}P5Pl6?+SXKt9Rde5PD;GXmf&dC*pKP zvwJ&a_H%;sS&%ph%yt|re+k$94{_`gBH;_SII->?sbk}2C0WKWf zs#?lXaDU4}0Ze}|=<5bn?LzCD>ScUZT5vfwtQl-^e*|gs8A};I7{t%ajH!gbp=ot9KLY(rcISgpda2>1 z_-y4mosa`O)`?esH+5SbuZgNr`OS2|A8JaDCOkG3miftyP0*6fu>}Jx+gjvvG@{r# zj2>%~{FND&wX*k;de*dOXgu-ROZR&!ZQtdN$PmA zUrXJ2Je$G#xWUAjoic3RsIoEZlg)+(WpZ(T`Bl_qw4;9$KKf1I_g9;zNfQ@wB&vb` zDEO+LV3F+Fe0>f@x&9RtlPX=GpPG|?RKJ`FTN9zA;{aJF`V~{Ea&!Jw+6J4AGSkb|mingLWYYR$ zjNOvr4;J0BRa(}K!v>fOX4!UkhVp&`#)Ut6V|v&|y+dL?C(yxhr|E%|@kx)S0bx==^%I33FcmB7`ID`yepwAv z9^fh^aYxqzVuGMO+SQ! zNBXVxmU&?xZ4zKXDfU|4a$`keCW3>$(^Xi)JRipzI*A`z%D5IM0eaW23*^y zxWkPVABWr^nt>ypJ;(C;Ge~Ka2nM?>C8Jr2b&iA6_+iHg)f-Q_sB5+E49`W|CXr zA!+m=q%@l_Z}f6?_kf7!rB{I3r&!)bXJFKmg3m}2{4Te5#$LUuuV%~0z|`P_+wCR+ac{`T@1dloK&X=@k4^d;m#1&XfzTvp)S zMCyR!1?Cd80Io92TIPZ+-()$TNL&AJRqu9{uEc`Q7f#vkp(sbnd^#F9?|b+o=%H3e zk`SpptDS)2f|kaSU75DwZKxWatX{{m8R_2LwxF!uu>pEgCjEg(v~SC5{f6?qO|y!| zw(b%tqfdp?6Z-G4i9s7YV2^Q#uK+Qh(+iM2adTR*8W+oP$%-)EowE)bWn!MPH%D?a z1?|#RNxRm(2;=+-rgvu6GP0kFR;}7gOP*n44t`Dm5}f2ZGnY{Y_a&D9Y$hes>U}f7 zL?EjRF-e?0EB-{>c9|vIWv4r!zuc zDeGqrupSRqHm1x+iY6seP@H9=7%<&FQ4%z6+&q}2G->}-Sz$Xh3A;7wm;uZB#&Dk% ztQ7v^vojmJSVY!=3VsKhZA~b*ecr*lV}_gdO>H1fK^lmkFk^n(>2I6!x2ne6Im;+E zOFzgKQH0dRqnE0saQ$)rD1sReJPU^6Mqq z|H|*(;2TS*FAiq!(k*iMO}MNdoYoV5Y7O5V(c*W9qi4ZZxiczQMYdO8oMYO^aB~9l z`{$*b|1lyTi$2&DrL$^+&Dsm_z9ZZCt1vG8!RF9Sf*sRvwXr<6&$!K;wVOh3Jr~$! z{%IKXTM!M(u;Cf6(!b#~7e0YVG^n2wbr*PX4HT!u)AY^{lY0yflGpX^oP6HsQsQdg zRDY=e`#wuB#(MWYZB@xgDlG~9XVam21hy~B_{kq$G%Q-+3tD99743^Ep ziGmNd;Mn@$*w5F7!2JI2q5Xg6Y^MVbX})E_MnzL81U8aJL1M>KpIeA@q*OjU&4oOBRwYMCu;PD2cd!ifh%EhEMTK=1uks))9W+;(DSM)(MbF+ zvx(Zk4do@iLmjrhY7E%O;O$&+Pg3valrJx`fE#3Wj%ix$hH=Sd7o~go4LtbspwD;Z zPJyk}UGPEf`ER5C=|R-g{$~Nm9;O01EJ{5Sq=1Z2Om@mnTiK*f@%#&{^Z)hwmvffK zzc&MT@#-Wv*_opq$E`i{Dpdc-C+a#puXPNa*rdt9#<-Y7>-DOnPPrWAnCl3Ydy{KV z%-LP7eKksz?C-Nz`X;x|lgB(TW70f+i;#NCV%e3xeNue6q9B;%jKNT->KfLzT)R_3kg@^tFWArhR0Nalq^DIKxWIwG2Rs`1)uj#vd=QvE@7`uZ@Phu za7YLIFvNn~`BTfBo+&H@q#*=BzQyY)$I3sv{pVD!DW5p?Y-rDDSB&t?XUUyse~7Uf zXAb{WGURP#=yQEFfcYgWIBP5jLd>$L z<^NA?{>`JDSwP234-1MYVWKCTmXkt+?e;@`eyFc6r1Vsz!%)YvB8|tx7H{CXV-K zvb_#_Wa&iZzldf8Ax^QPbB;w=d#N3 zd%#?8H@-n1sha%ECmA*x@2$O>to)vhK5PKBeM0=ysEak{G@8NEm)VAt4r{9UWbNyU zc~q)g5IrW-xKJg=UNSbsf)?Y&l_~2x-QWTV9JxQ#A?vWJ;Qy6~{+$}*Yo}%hRjC!A zKBPLn#q1n=a~RUisGP|e`e0pbq*&1Tx57fV%oP&xAlmoNQzfgS7iB?qF4uN;Yde%% zuQ#(gpLuZ_%zuuT(tG}i@xA+Jv5t1vEWncq7A;i}TKa+Vae9l$JBIv&4c^#CQW^@E zX_CaPdFDQc`D%f^DCcxG``^^3KR&VWhh>@8y}%6~m_A|vm9@&wJ2D09=b-IpFDV2H z`me_`$=W}dCBmdGZfrNq2JnK9{w=Uz@IR*i-#q*0rV5TujP2_Yo86Fmi= zN8kHjwSa#P{B^yfu$Za#>`ag{q@GSkAaBh zNlZwhbl{B56JN3&atLkZKyjiJkT}oNzuvIUm;vjxJkhELO4)$`qZQ*M3AJt{Z-@9G z2U@}Cz2B%Y52*3=&17&m7r-F7AUkw_s1Xo+Hf*p0zjk#JmOyh?Syjb>SHB=(#We59 zzWjhnnmnkTZz0FH-V^WJJMDdpX`Yjva4_oA*{h$FwVNEg;_aO|0{jNoS?X)6%43VU z@m<0*eOyW37L*-6-dDYCS3tT9OlZkXc1r%&no$%1{oYZ)-REaw5eai)t@q=?Be;qE zy)z$Wv$Vy0jOxH`&SSL4;sCcCiV;z8Y->Fh_?~vOEq89;%*qB2ePs~mH`{p@Uh~yM z=x=VqO0CPuiT&W#q~}oGP^scy8@L(7>DmG@<&f120pFq!(Y>`+R;twYl(7+t)|pqB z%RI#Ps%-1PVDW&j;d9>x6Slrhjhpve5z-3*OfvddIUFAc>TtPQDLq;d&i$6BKD1@l z{W-}dg!twn#vRyR-HOU@Xf(%;fEl>#Aq$SjEB8F$VJbXZ$>f|9e#Gy9;$PL|h3v%- zGYGxZPzo|8&KP5JLF!iP`0TaAQ1?;VQYm_G?AsMiBR)^H>uH2*)vGdB8xrrSz46-X zdP}uTYm@_o+1DsS5yTOn7giC1$NWA|pNUs1aXK6sm%mgOx>hPTmhES+2iG63+e*>r z$PUHxLJ^hyDr~zy-Kje|6 z$L>n=JT%v$4Q=&uJ!6khAA68`V{NGaBPR|6$7&t?s~FeeRh@{skQ6me%m?u{_ygaM=3Rz~;ZRR5Ld32D^ zeUUjc4s4*IF~@XTh*7w`dYQj_eIZj}*^5|A5V69i^FW%iK&$!2=!;uK_1d(R?cUt{4k0z>s-!Kg`V5{#S(&e12;XAx) z=&AC#t*Q09&pEBk_3F(|-@aG=blMsT`0!NDzPZb|XH<(g+kUNWg&YB=9(zVHir*RID^6w} z_9rD#Plr2V8>;EEfCYOwLxuY{Hn$(xoJ>FgC|znP@Zl;*2HUcc^X>-Z^Rm0B@NZ7S zHLVJJUYhk)nO5w+%4*8&T$piUZezdm>D(KoH-Nol<7r2Nh=o4;o@n;ZVy{a}6Ifq> zyW>f_q5iX1l!IqF3oKJs(cIY5rX862x5@w^3b&~*IumbCceA#MX9+IU8%35 z7t}(p(KM$h2ffMppz=1+K^j^$Ph}sRXsb~ViiA`qRe~^;0D>hM?%D|(mOsnLV}G@! z^)mLpOf4M9T=O`u9)o<@opSfBR9Xb#`yhk(`mPAJiYor);o2(y38(t&xxwMQu4CxI zIUI4Ti*y)u;(Z@;4_E6=m@VN&D*9_NC=*~tAE>=ejr~yM_7?yWkm|nlej$6FQDiO6 zw6m##sZi`CQ-Lh&V6~o=dx8U(g=?()Imxm`9FgQqVl9iUC90l?ttm^ih>wc)%L^HF z)ys{2u_D)@uY)Ux_2j$7_=s1UPL_I^TCEU~w_N3BBepYnSRDF(hWx)>N|+0yn2~)?cwP|w`kFI|r~B~8Dbn=yoC{KsT(N_k99vL>wHK(* z@{x2?uBSms`{M~KrLNT%(X#n7tHua@Kh{F}c#b=$;Mdvr$y)hkDSD>v&85w61J#f| zdd;TtK* zyClT1BIrq_wxUZJt`yy?G^oW|o7r}HCM{$LL-H&UKKgKfI-$1qitBBct~~1vdL8wn z@z^tSOrBS^KglMKGJuSkDf&Fbvl(w}vEb6PnHHP=uJ&U+8fQC^j>z-dIAmgMC%okX(ro^7uA8;NVh%>4F z#xs181)jn8iY$m;D-VJ{Ba3%b8#4mdVt}JIlVsJ+_d%`E>gK-&V#4MbaB{xN4ge>g z0YN4Gz+(_md+9MgtIG zS4T_#8V1pM4K(+0%MC4%FlB()oMtEtbUtw(dI}o*iT*CDxynH41il4>6{OF=Vgpp? zHRil$y7QNUS;$?~v8MP5^9Y5`{<;u~{p4Be--LC%XBa4#r$Q@WjKFx$C_%Ci?9M+a z(681mE3htW)ZJ3nHdk#|T`_@GxBdFs=NL$4YiKW@*ZSi|eZUYIU9C=_ z#Qu+oI_nof2(dJI5nYZ;u5qwMkJb`XUoy>C>dhWGwMyI(5cnx?KfFGea44udKx^fX z5|H_ADyzLo?4NgE30J21J?1qB%F_lBfj;hhuQcphk5ztq^XKAvOGIPJZ4jFo?f+v!9JFdoi6z+wg3IwgOgz;AYytq=)b2()B%*Mk{#3_u7_XiS28>u z(^1%cr)Kwj-STG*IhO9iwP`(Y^#vntD)pi3(@33qSw0^`>Hmz55otFCSdT-q^Ggr7 zBRE0&!bn2wZ4>|3Dbs&y2+QMmxgYAzvF37kAwzf3%W2Y4cE2DSzpY<$d>F)3ffw-F zb;E?g+!$xE6tk?|7HJ(`rEkqitEJ$ax_|%6<;B7@;zB{PnR& zYmnCczh9rxk>FwZ0vN4c1eOF+N8-76b5(|30mSJOM`O77AmfD6PAhJ;$;%|pI^S8v zxoi2nWlh>MUs~Ou8js#}a4JydI<2};u>E?w$Sn{_{&z_ITf;pQu5$@yn_seG-riS- zwkSSdc75o~EXGdMxs9`!Wm#XG%4Zn`rYe)XlS1LhYP@6HG4c@JO}@Q!F@h35cmol z&lmPYAHD?55*M7~y~`*}dVHVjElJd_v+y97r=aXbZ6WRz$;AVJ3s)Ir7LQ}%bwa`i zcb@!i(diJ&@=o+xofX9Qk@uKveUQ}XH*0`>Z4&LwU7gp+v?fO=PtwSgwUEoshmIKR zFc;s=&p@ucEgeEwL|-)NU;v1@+@EdpO+^{%E-OiqWcQBs;+~r-eK9df!}Pg5b$)r( z-U$FlUl_Q&8GQE-gObRAeWYbbWu!bi%CdL{MKTgI6twwy9})?>O4o{ygVt)QwVr@m z-m0B{5dKE6uZZP7%VjI1>76S@(=C)Gx|ayY+IHX$3(*PRab|VS%ZU>u+__EOg5gU+U{aH;qz3X_ za2-a6^%1BW$9&DMhl68I)D5;-YdR9z;D0G1jB^w9|ISUmdH;Cm*ue+0h`?h#rn0vI zt!jSgWA;?K!cR*ZoS}hX>p>!kiOhi5{s6#KTb+~uH4{9g^K9!rN_^@`(&b=|Klp}g z-_`#7ae!}Gj418{EtBMJuL_9zK1Oby@6a`OeVGN^MpCVYWymcH`xksR2%#ZodHNp zb#56DXC8t0+i1swjvv6$hjbv=)JI$MN`9E?eqe1`nc=OQRSv)d}ZxU1kR z2rqlD9{H}D+p-L;Z5fPM*u!gxB5{*`CYd})0}~n&4XJ2Pq`*NC^$3>0fdb60om1Cv z1vX=#@T%c!+*jjr94OIxW9{({l?&86+k|%bH=g3r+y_2{u?p`9t+4Ym9C!?BL+T1? z_l|(=6>!p5fs0?x;*)LyB#v)cE00oC6}k9aD@=- zz^RNIpdyg#_PBLqg`l@4^7a#qnhG2_ko1Ojt_9KSLb?2IAbpE1U3C;26AwsOfh}3N zS1N7Yud*?Sw~D-B^2n(oe9|llL20sB4T_|O+F|s1ao{|Zs>Q!td+_004A)h)UG`#} zw>VLDRB{uovRm{u^|Us{xG8thCzLGD59L5eS-iV()OLcn;g` zA{yX!1Q;m)#nqAaN9ZeitSBfk?dwWEW+QsxFOrfS!!d3-FVTz$+yK?bp3ai?(dG0{ zThWvf=3;I;wmn_6l1PA5E(zpQ#O|&*G&_PMRNHS_P7@wV9uxC#PYVaE#%b!})e@2- z(yV1JD0XP`5uuJvn7sDZyVrD~X3^W=D=ZfzQUL9NCx2Ph%4U0hpc#@kpQqZq(28t} z+?9#$2U1UOMRw(jjk493-H@DQ?^|b997LOwmR8Ki*C~9|C*O+Z7)V4ckY4>a?rIaS~RZ14^^Z^TcnwQGjc6MyHIPn{Zy^E(abxW=r-!t&IwA-O-hp=9l>J0ox{Vj+q4_Ns`)U zv%63G9Q{~@P}uNZj(rCo$`Fx!4V`lI%R(DYe!FvmJmF>PL-bYiBz99_I$FRk)4l)(U3Ko&3Vm!2{56w&zo24XkUT<< zLhr5K>93!&ZUjC)u%kxwH2dzvac~?G&Ea%Hhg0{I{9zu+-7mORrdv?=bPEFc4A}yr zJ`YI44gR>jaGh<}@k*_LU0Cin57W~%V9!yyB4JPzSNImuKi4J+bo=gBwXRY>0;!;n zQmrknwXAAdDuy?uB&)6TJ9kMid7vF2oTmLt;;B2AmE0ifI&LB1>t}W z3Sxq>aPUg#NN{euA@?#Z4(h4=166-vi-7`Uq_AtTmv_qE6th3RiTR}YQT zvgJF|rlp3uDK>}_vd z%LmJ@l-@rdk5V#V>Dwo71SKQn>ejo^vY&7+rZ|r=yH89WgFD*CVm&_L-cW}+$Q2c4 zt{s*+`QL^6A?3v%A|^vU0jK{KvDMur*3$&CD%J3wO^PU_!iH~%jwJ{OKq6zSIq2ZW z`2$1nXY(q`U4bbcWQASvi!VE!7~`EhB>zEN)0D}B|LM)49EU-@g9CGZcnJ)eOE~Pn z*86-ADahc=;BnWgMgx$kX9zei&W-t!Bcv!c?4&^BiEEW+u8Wr0uA7A0wpac`?Ss%U z4ix+OG9D(_Rw?-wNTo36EaKq85amy|*92o2@qVBGyOHgKjNz1Xs ztt7#YJwPsli?$E60|Qy>YeNy4yoby_pJ`jqUmrG6%{xr5OLf!}(6xOF8)c~8l`-vF62xki3O>9}kT4@O$McsHb%Lma##@c8Pyy`JD83A#Zb_ zobM8JQ1yGa7^p+=KNLdtet%?X$F7N(RDQ)+@%VEq+lB*HjB8mk_sh2iIb3qxT|NMx zoAPY((fHe7zRyYGK6xVE3pRWpDzl7NLSBK1X}Y1ybXQ=4f)SrKCiQt zr7>Vmu{3C?+E7%8@T0@;`m=om8>MMVL8;#y4@N>^-5eY!D}{@@&whW&z4NrmkMU1s z+Gt!C_B`Tq7Glu_Z|TY)Y7Tb#I`7;pi|+Paq&Zcl`GeEZdvwxQV6fqCo@d;^v{Cgt zIPX*R+IF0uIvged8&Wso_+j%u%&Nr1b^tTMQcn=^%RiuFYXHXZ6vZv|T_XzoyGSvq zLQ1BlEW7s)*LJ-6+73wijP>%P?Y1L7#vhhVI0Mwl$${GGq_}dMF?>NA+X3xB!9hJb z$MTN(Ay2n|8-YL4Q+|xuZKA>%(9!I+aGoy zFhD^b>R6jxPTpN6I*`VJ^mm+$ch_%YZKS?%xMOH45T?uNKc{$IMe)w&w#-}aQ%K2> zzwLGP9TJ6SfO1doHVoMV)DU)hCqqZ4NuRZ0wJbG$$-Q^ORGDOus zg*^r%b-DSY*UcUL+b9+m1Y)QU$6&(`r$o-6bdp$E>RrV&U4Kl-zmNUp*=#k561)uglH_;v z>7aCSSy<}xcgsfYXAErrPTngrWX^PoH!V^f+bggrE)+hHh>Mg%AaR1CA+4d#kqR-|9{W%)hAQhSmWB)m?Tl5f z%#Ez=BzBS2ZZ=68!x70rU-mT6jNzIW$W-pC@oM47(YC7R72~rzS7fRY!cs%8ICt)H z)t(+6RLksGP4?&z(6e;}#@>FF`-eGu@$p`1iGnxC?3^ERB16};Ht9)Uy8Q#RcE@T? z8tyedrpbP-TvW_zz_*RL!NfNtcp*$#tJwdoT{%%5btqVqU}`KEt>K6Rp>f(8d1TUo zXqJ3qwkn%F&WCAU!qsKnGLgOB&^>o``z~`}gazrNKa6me<(5Tpv029zV1Y-v{inG$ z3D6`71W<_!rMoQs&hBjX;_fFvx6Q8ByS#6M?5PCAT#WI#ruCoX*mIji}kH z(dw|(oVBLNIPkP^TjjU$R0R~flij6Dl?6801sDC6^GvaJD2 zdm1?BFwZO2)rHkfbzg~%9?NsU_@+>9Td9Rk9nVkbV@~n*-CJm>1I;S_P#R%7@0C)A zypj@2;85VUu{;_+efxO7j2=S1!nSvgCQ zJ&w1Mj;gD`vur$Uq=pUlc-TPJ+}yz(_QcTZu?T8kymit4?`GRl=QEi{M27X zm342U^ty9SdiL3HV#@+eC(?Wes;=NQ%knk$y?y&sHL-0dzwamy$}XsD zDR8O19MnZQE?j|dRCN>%l99A=Gq3CPAwTUY$F25|I+xJ>Zx6riH>Q-QcW#dU-$^ z66-8BuV$$WuM?hC)(56`q_hjvivZeb1f~`>F)=wNFh68DRD|=|w6ywU+FwCyqe<~0 zT3$zzFmeh%~zzJcdt9*L$+*vmnyd^CC>>2 z+s7aKLofD{67LhEiZ2No*9SQ)G+vDP&)4%>aEIx#*1yxBlxt|9{fUpiFLN1PR}i&K z2tho3jg}zYz0r29xhmmP$2OFS)s;VIwqks(CYq|Q)y9v?s;@)pOI;-h5Tre0*>)ICU&rmliuw%*8cd`iLl>U$guGgtHpi&#_{ya` zaIS{vgPsu+_Xz>@)@4`0g{Fs}X8hXcXv8_ea(pO7u)4ErXBk$+tGTo9_(JsI2aH+X zE!Qshevy*1@GdLNi{H^11bxQD!gt(W)n&=!rK<Q-3@Hd>E)u%-)uzr{VZ5Zn$Z8?PVb^yL@HA7$2AU;xDXzp0+J~Ly zKxHkQz@EUC0H`>fdVM_xa51a*!)S>*VqLXw zShc=1t6DUZF=`e2`U1;h`-UUKq&iY<3Or<7ASX- z5_<1c<{2zkyXa9F+>sNku)pPu5q7*d=!MOg@N^M=ePt#xCit7=pl@Snn}4H%8ucDd zbt2g$+2bu|icmdrVJGtZEYMy<|Ilig8|8WHOhI*lKb|s#Bf~MY_@-zz-vLkTp)}EZ zj6fhPlXIIeL<#9C+1{BNz}d-K|H3*V7HtUbtBuGMAeLy|HZ$Y>JX&kRt;ermgzC>D zgLf@FF)_-np%MH-to#U;Vp$uP)JhMP77^8|r`1+dgNRdklA~=Q4bd8+e{MxN+CNR|>CbJv-^7;$PzXkdb_Sid=FA#9G$lcb~fmNk4lx+VT>w5w^`yTfvk8*$||85ZSkHd#X_><_$GxI1cE zmkll}B;)<%@VsaB5!l&B!Q_d>#bB~feBT!|S7gYYX;H=$e}g>+B|_?Mz-5wj&?KWl zAIIQ|!eCLe(EEB-N;2rc$Mo)kY?#( zt?#JfPSb-l@-YG9i;Wi#{kZJ`2E^ zxu1rt%a`FL0iFBPJGdS#?)d!f2xUMzI6u(H9V0ybImUZw_LMmI4y&!Kws79`5dkP@ zZU>0@bU5zs0G?-TU{5=x*2GUVF%H#=UeE<~w+gN`U3T3aANth+gmC2|URtYDfj3$b zkEb}#zzNxEh{XrWHf`f=qb>dCOEtVw5E$pB6Y;22tj`)CnRek7r{==flCBLQm)2DO z3)0fFL9Ue_&N6S8fR7b9^T!AO`lKC(P+pQ) zk#;K+4W559SeHo~qsqn0L2k?aXGXy)msbe8%xsH6+bby^zFwg-7?ed+E2-ISK&~wF zl&Jzf+81rpBvOPNEQQmy^;g8zF14yhYOjTBPg1rGZv?7fXrkZN%Md}I2yM*6-lA!+ zZ=tx}DYbGD2)lH*V_~XK9YiK)aa0+3^vwKa*zoe@n^j(}aO9HWhD=_-ze%3{5s>7K zyutavSaf$jHHEBG$1bfLqHm~PGgWS1BotX&H$QJ-9$v0(KPaAtx41{x{s%THOG7?d z*k~%Y?aGIlmW(FlS8SCFPu6Wx^B=lJXH4*7an!eCpY;YFGJ0vZ53AyprfWW0pCXwi z=~?$n?Qfr}HL2s4M(C}sOTcN?0~OpY@w%;P4N2?g>N1bWjU~Aoiwou@F%8VEDs_c6ge0~w-6FP=rwGR+YEqCpK zDu~w7?rCFqjmLrLLlOV%D5(0EAnAQ9Xe!18)87MdB>zK@4>)~cc>QzfvhNcwn_N7d zZVKxNoqHd#@#Te)J*x@#H3w64;D3G@Ox?c`cl}#{sqC~r=yQwljyN6LzCGPLc&A4m zZ82D^HG%gYIMbwmvhAiNq_Opy&wsv7Lf##O#x;66R2Ghs3!p6Ar^_9Vj4;*WLfD^o zEcDO5>eoLkKSeSM;2gEcA%QeIDZ2pj&m1@``CkrXYXt09^-XRZ6z02?1J$n?ddZlv zbvEsnpW=0{TweA~09kol!17AUzr%;Zlo*d{1oj!B>IcA5_IhCs?qGwScU{u?>$qY9 zGlw?=Y2f(RKENN2S>WDT%4lX6P!h<`G$xqNY5r()60~87v*EnTfPUB+ulbR>fl&br zWT4fv<2sCG99UTD67&jutpq%=ZI8tJ-LR$t(0A+im;BoTlr$b#-_r?x9Nz<4L{zE$ z$Xy-5Fh387oURYTs{S{6;EH?!w$rcb#y~%k!K`|TL0x=|w}tHi+3qRZ-dLRj!?mN{ z|8&5RO-CI(NDxtGz)`IX_3@ylfAqo&JDInqaP}<7KSh3OF~i!(jUt7vV3BaMiYYs^ zqvm}E^p&1gpI<(72>>c$l9CMz@J(a?R|(($2y^1N|M;@TSx6&l&v{Up+;Hd9KcJ0y zKHuws%B3;ib#mlZy%`B_xmH`vdn%hxL2!O3;b_J5f64?Fwl^@W)c)_< zprD?=4dT)viTBsX3Z1-}f${E^=Scj?PPPMElT24-EKz$%o&CGiIzeDC1R-e|*Elek z;>J_Xe-B1r#9HScF2Hw#mVX5XcJ2@bBoh*RypX!+|GEADYy%YNJyG8nq{N@=XHo1; z?Y<12IFhLI_|y@Mvmn96Dvzc}t}V9s64+tSq>cTtG=EHog*8ymNOXScb_w~@VVP}E z=-5(dzCYO+VJ<>lv@1VXG5>fcf7-@mL}UzdYEE}Y)tD9jh!I5_j@Q(hRvV*}&lTZJ z(v&U)go`}s+i3JlzN9fziBbKq$8K(^8&~&yZDm6AypxLW*DVZ-4@=mxZO0X|jY7ws z^OpK7Yyb@|lHUG-N-L6^vVP%KPURj1r-Ol|pDqjHK8~(U7(FfwXcMn3?YT@aYH-Fc zce@pT!E=wztgR(b@EGqu7othY$BPygyn>U9-xU43J|e+P!%MbziNjdz_qN}G{0Xwv zf>_K-j2TO@C-eA#0{vyhOmx4M0Hn98ni{R{)3{1N-WWG%w171D>|=q6*dBm|-?9kB zHD5h=@yoHW6GQ5TvtM3@x16W+EJOaCp(|>{+<2=c*iR&j(_025yLQqz_66WCr+~ueKI#6gUk% zbvm!WGCibDE!bn%Z-NtTuO!|#ueu|RFmF849*V2(MXc3{DTX28kc>?IXr#UMM@sd0$e#2~z1x zaLas;VYjSO9Xxlhw~owJx^c(+u+-q>pL-l`y~kG(r-`0p358RcHjMOb{RuLs9N&_E zW0y!V+lamO5H{FXXM=(#Ru>3gC#lyJ%-+B>5tNwyll}g(0}j0X2naHo<`V6r;=2{~ z((yqK51csjA(0)7p8bCr)eICHNiHI@&Cf8aYBTS`U|bi_1CM6xD=l9@8>s zZS! zlxUXC+^UPva&`42E6+{edV{Z785&729xU>oDo(qo;egSLV@ILP3P~rFM=zJVE`pPY;IrtSEa@l-(+`{JVl=W!%<#B#~EF0#m4D;YglfVp2mj za&CB}oF`z!plZh`xFFvDLS^AJrTL{+EblH|+ip;S$4ZPP-r?;y!B{zBq|qpNM9Zz@ zeN?J6ZB@Tvh%$@gvTRbWydX5Swx)(0au2rQb~1UDtevDxhhvhgOvBuVVivicEplar zVoCko&SpLX9%q~Ex1u5f^m^hM7A-ir6Zn&k*`kgr@|NYmxlWr?nY}MDv>M4O@qw9g z4UevE!&Nh-IWwJW@S3dAt{I_vYJtsY#bU(v4vx;!tZAVta)exyf)AJ&FU+KQ-4>&g zT%5{F=T&qbeWvyPWW^oYDi_X2`;5?6j}60f$0^;w!N=s@(g9)TcAbWjSu|8&;P;QdN}P1jpKD4&xmU z%Sr9TPJoeCR>sDq$>MiOv)7rnc{RnqlorQ3TLm~_29C$>fy5SCzB15f#dGQ43-Er1 z%?$k0U+i~Ve$N#jZ0|DI zQhkDXI8^!bw3{0Ml0uA&la_=%$WEp!)j16MjVohc6>YE+O-BoA6&U#zm zl~tos2=B+a#M_#z-Y$QH1+W8C#|7G8bGQ}i*+2T0%dY>lJ=^#*qT3JcZgKl@ zRj<8}3MgT6cgI1nV(#xdSAHLy=t~x5>p zbkX@=#fSGl%@#%*hc3TML8-t;%buAFQ(FpIw9~yG{-g4Av<~<ymOc(TYYV6Z5O(Y z+>%-1ZB_NzwC+5=a(o%yGmChv&C_nu3THEzAR~hAp>_JOd#B5*Wob%u)=GMg<9caT7Z5^d$*93kji29AkZXUld0oRq zoU!j2=%$x(_-7-oUxVduL*?Ea z`jfq$Tzs=>k7ILAl=-DN6&boU{JDyFD*q?5+wJ5>pTo5xRS=D;(;vYkDBN0tDrzqJ zh?tYM4c{2HD*Nl$dMO51b|QbV_tOiND7xTzSlD%jo?qNQAqK^33m}f0NFbE*rw>@y zX~rctox<@qHj+k6wX`s*0{xPI8MR47qnn!G*i}vCHtXn&=}*N9k4}faD41Sb)_5J- z|2%K;h9~(#_Y|9DX!!LfMIPWQARy~Tq#u5N7Lx`PN?&t4;l;YnT0iETy?ERfZECqV zG1BOBO-sLIn%N(?luxc_aIQWIsE!qvuF@G5T+H97iL!NwsZ?+QBPx_Gm$^BxkyvSs zBu`kA!!yEfp?z@8rgmoB(@P398hnAtO7BPAHd@*T(!?);8WKNLD31Wyh&?@Le>zyY zWS35jcA1C_(^LKKf;TR;szys|J1ED--o!iN@5=RM-C&#F$2_dz-9mYs+LVMu1D0a{ zNF|p1rKdJ;5mF&2{M8YRH@l8t3(I7$Z<1$Q2VN3%!zKV?U^W?SC`+87ZQoqVn(c^r zH{HiiY4S*L)3ezl(-+zQnNP;!_JE);bOgSVJQT|0vF!p&QBfPa7OBO}BFVmEb&LCG z1^9XQ2AuN8yvWL!zCnDvuB^7CfAaqHpcSdE-rO|m`qQ!ouX}c?(`vanP(`a#xBK1| z8Gv^9t72`?3|s)PNjkWT`m&#Qu}rfbAP;2+nmGq>POJ+?VIm;^;8Xkm-St2W8XVRL zKAD81G&JxiZM?i7kASVu(J$LAq{&uP`44CD?ED@?H00j=$bVzJ*uIHkDif4!|4gic z#NB`-zk64;(pa?JEpslmNiIGGROSuI$&nU-bHh98iZofX0RyW?Zdw~e+iFebSm~C7 z1((d!*Zr|P;ufDVopJmqEN=T*^HTbZGQPvhDp2f(_V@iwkeyhYsn8LyD{CA>DDhzA z!jba#*1spnO?%}(@;X~KFF)4dFjxn8)mxRgD_ZMg*j9dUYvgC{guE1EbYDG()~)W5 zkn4A@be!Tr58o|ZV8lr(OZ4ixwZ3wq?9j%ekVtdUI&+!J=&}1v#pgiiX0pp_rFrOv zCIAH;z3X0j1`p1u){lj}AVky>-V%?3L;ELb<#H`oWZCNvSrfbB9I>X#u9MBWL>#TE zZl(C_GxsgMGoNxanPzotZvyCp^UC3S-;L71()P=q?k7pP{;;U+fLYOe&XHrYecajM z=naWzR?@>F?(x9a@<%!lWVkYimYY|PFaqF_&5>u~1g z-;iw!$jM^aEd}c74?J)LWe>m$Cjm%t;|A|8Lva4BsI2$z;Upsm9fIX^q9(X9LcxRI zU@+T>?*~!5jxhkI(X`9RXaPJYr*418&Abh;T6iIz!`HMyo2#Hr*8gQ24pa*B_i?7j zf^nL0C+RBd0FFLWcsl3zpZ{L?yG{Ve50-ce)*Zp)5U);i8BU>OR!x5mW9Jb z5WqED|ND_2zl5CzV#$rXn&xAIl>)1}v{!x8V%`iOF~MXQBk*WfOn|}`0Dw3ueE6pU z{?|JIOH%<@8esSQG;rHGKy%DjO@I4Z1wdSCOSZlZ;(4Itfm`R>+5Xeo=9dBs`2s}z zGxBf@6lTVt@f|hT{pUZP`Da-H#0sE3u^r7sfHQ%+Wd27R&&&N*39+!4!1*`qNN&b~ zPSXJo(xBf?221R2_)XEnDpD=Q9F3uocD2>6aEJAcyUCb0p# z6r4JEUR=2gga|1=NbOvgUe%=dq zRtb>DGQB?hTf0dB#|REa1t(!FiQrMUw+DY5oo}Aee?}?q1OkVbr(^X{I?`bG$=`J# z>bI-+4*yeqD0tFJ_K=e1vPV{SZrM;y#YTwUwqBQNfI-`8fLHm4MsH$Q|I^ElQ6(Od zFNW4=>|%$t78~Y#`L#TINoJ1LUaOIb*)L4Ng2)4=bveQe`Rg2JV58BvDnr?=*#>Z$)r_4n1MfU_P<>3it%~155o=1{BG4u5Z#c!xO z+r<9X$AAykZg$NZQRZ5Fs)Wa|Deqv@kn_eR%E&Q=r;@`_Xh{Pjbd7tF=DOfz|G=>W z@1FL>Lt)Q>uipBbSpiH~{-XT0P@lVE`8d$XDQD835sasrdIyA+<*tqJSfo>w)B?O!i#p=CEZbQM} z^Ic5iFwh4JU&eBbaR~kMlK9)6ml)kAzisX;GS?venKD6dbnbD0ut&+W{r)s}hu*Q4 zHkRlIif@P3{DS3D>B3=-rciL_n`$3>F0Aw?m6eT|vZo8eZwT4gd=Lh|nM!y^zCREe zE;#mW<#f=O*)ebH%4S7o6=bF-t#)zsa=&8RV}n7K#Dl;(MqW9B4eHlZCSRZ<4GJo$ z)^A^LH0a?tD`^pRE!NK7{nq>KuXR5F1RcBh@sM@YvBiuhUhjh~$KjVX-vuXN3y7Pcf6Y2qP1cjc(P+KX)`Z_!u7xG{77c~MX(_O zC}7#CcjBpy@Cm2H^GWuE#`{BxL4FSay=f~cXxu%Zf+E9Y6Kdoc@Nv46wuWSRw|&yA z1(Mb7Fo$ZMx~tV*2Rl@S&}h2AuSW>@(^pwDcR=RHk0ROT589l$?5J81)myW0PpH;O z$<+o-3hu^mAKHd|taFSy4I2(-^HM7VH8}%tzWoEvoRf;uJ==!Qx9-OBPRg`Dfz}w& zs{dDY*(s&vQ&QBxg=DI4;!Jx=IW2BP8?i_jSuBQYn5owVQ&Spd+Sca=j}0w+%G!xm z+jy9+%RseSR{kK^tb?eS%4HAgzw`Nh2k=iJ+hQtCZmh5)nQ;c6u>og6y%_m`3Nxe)pxzhi|7+tNP^9!NQZt7rC}=2ZRmX4#Nk`WxAD8-{MP5x|YJ5 z+PDfX!PH=b431`b0Y`X@MnK5JXv2^*Z3m(~)DX`vK^lX~H^0OirypYS*m6R0t#-Lj zU5)wZOhOKM(pUkKB@qsx$?xy+xqk-ngINC<Nh7D81{a>wp*oox;;!(jfG6f!%qsTuMi)H)Vy5fom?-Uar>wObU~l>}jo_Bs zCx#CiO+yTEwZ6#PDN+&SU^xX6;};vje@@rbb&?j3jO83X)Mj0fSgP6F6X$SN4^uZ! zl)NWJtT2oZc~B%Hr<#%``B<#~eCuXr=4SU(@4{j)2u%zM0eGs{qZuv8G`}(1Rg(-e zp{yKlVG+OTGV>{6xkq-wn5*`eyQ+>l3)mFO!|luR z`JuLMD_4d(vl3o9HM)yE9dFW!5C5t$tFLgHy;rK`Rf|Ji97Z`G(0*q7`7dSFO%&fS zss2(1SFkWi>zEzT2sXs$Zb2c)2Xnni5x4nz^XHQ_urq^zWhTnJX%Q`F} z7eO>F#!~;-tdIW;G^}Aeh`3rUrokc0DUN1!s9=ld3-Z{!T%CDpt!3#EuR$%U{a?DG z9UPoZfFs}_Ss%h!@JBj=hx&PDHq_yVAS24kr5$Q-af818)_$rJ8b{>VdumUv+?ZE$ zgskDT%IV66clTWb0Cj9fXLvL+pmKI2|G}r^s}*GF4+^w%oYO%YJG74kwB|z~1$V4L8Dsa;2M)fg3vio{nEvr{sgL zy&;x*h`6zd;mpw&`E7yI(XmV(sy!(niKU)p@(iYES*v14LW>jf%)12bmZxFk`S{(KW`~AM-)~KN=C0!2lYq6l*gO_m{H#g;kaZa?c2?YvAD_^IKi=JcqK%2c zV)%uxub%~}NwKoIBomB__o)N;OeN77_P=+8AHNi)gV=yo)M5}Mbr`_G5IXsbH-0yZ zBhNv!y#{e!czH|{#<4R6~MCjh- zFK2!k`hXYMo&jd{z}8nv$Mz@?Ch}->;D5Zr|DlaMfE}ny0&3S;(B=Ynwb6Hu($8Wt z1lW9y$&>*B{d!%4P4NF?S@nHk2p>3;Z#a49_qyGBun;R2bbmmaY5s#ZKyuPsV58t$ z^8=oGN!958PGkSaBGw6K_3gbD|IkVb5=&?e0~2FuyMt-I+sfTWWBPo|b%pS<-zXE< z@s2fe8xpPou0`JlCBMU;9|Fx!F`C8K^pZ`u5d0TKw~y<*fV=_eTS|~+>ry+z!?GVJ;(P>_}@gB z{9ZB{*6J}cv^ zPp6JyVj2`PReNvRYd0_rQvzhNiB&a~K5w3Gbczf+VKM zZacR~J@oCFw>aZ~ZW_Ah{q%?oqTK#S?sQfx0NJB>aNMI+^=BSoLEKm9&LDx0GRQ^9 z^3;ffw!@$)gE9?4NT`FrXOyTA{m0SAN`zq>ZxFinxHT+Sl)gQUJ@Q^tLr|p0yDgD- zD7a37B%23NN8c5rQtx7|7QHTko*MfaZexcK!MJK2>+W9)ST0VRaRe3S=>_~C3fJ(U znibXMz|YNmPhc}u_89si-(xopK11Bn5+v|tam*WTe|tg=)a&gW zg(KZQ7S~JRHUPd2voFiJK>&+#0r$cEC3rtS^iWtlf#`yM>0*6f2gmM!yv0}FPuc_L z6R~vbwMuoLmLK0lux7Niw1mx-;yS67U);WTB|h?PDDTw5<^9MgxAp}EDW@7yXApeO zCEc;QQcwlt22FS1=mmJ<&n*8h>Kd@NeDW=bE>pUby>+)6W!>NuSD4PV2y)XcA)m(WL#K@(aHVcJr`8 z;=pPxLn>)JzZ6Vza$M|5Pnu!{FbeiAHLE;)0l$bn(}?aE5i{)Q8+#}~0-G8n z9ru-S+;S6eeKsW3+?GT_TkO`-B0jTqZ_fj%!&#e`B>ia^yBQys;famw3Ea8_>JQ+5Wh0ybWb$cy+zV2=3opzHs;gc&v1279 z@`*m5SCfJvF)8wk-)Pmr2)L(x59~1q5Y>_=5%MtPXOMQKfWAuam%>`@wIEYCZH<1Z z7@Kg!0s%gS3h?VbG~ZVGrKtI@6+!$g!L-tEWb1-{caVM_J-j+z=4evrxi#N#t3(cK zbqvJ4g;P@uJwlAcKOqbJ^j^O%U_(BX-^Lut$&6r62v*N2*83CFR50$WN7YsdO-GwB z3A~LmfO@RW_#V$BtcMEEXH32i=44fpINCH`soqJ{q^rAp`N(J4DQRTR1oxA@dmYX6 zaAMUGa1m;~wg-YMmrv%%X;&m%QO0A-%9PP8%^sg>tb;TdDh`m1gMXD*{4^=B1+n08 z*lv5*0`&V3lUsnS@OiuQMqul*beJ5`%h7x07yEnYG0(zaFQ2Pw?8Le--!%P0O!R zO*(|8UQfoM4yS`wqRdAd*5=62y1)e*TQ|`W*AXgR%0HgZ7Y?{vxecI}CcEXimb~e< z8gj-7;GlW6d}I6W*Q2*lRZoJckRP^PE~PK-82Q|w8l|Sk%xNdjSfp1o4ezI z=P-6WwLS9tvFzV8{)3IVeSmyyhV+3+J|ir-3JINAzjq}TKV7X(CDAc%yGgo#*RAHY z^IkM)Q6}--t>YM8jp^_iM zL@qyB2pdHJof`V&Qta$?28lY}Mg-gYEa=oXF(-}Y3Jkk|4JE;-eA)6Pken^dwZn5z zyF%AU+%w>)JO|pW7F>PrAYv{O&gAQZ+79vRZ3YA?^mO0`zd4{J((QA=St9x4WMWWZ zFE5GUfhc{l7ggSkHVI|HOTeo73i3ghI@h+nmWtiD^nGTR$IK76bwCT_@wt8VevVT$ z82dY5Yf}7G%>j}|sw55e#46xczMypRt;~cs{JyCULS{8~wMW}H9KqiEbLkXbE7fl4 z(I7{hz{N%9=gh8?&@tU+4$(N%uh#gw7}vSBCe$lY(Hd{nK==6hWWN324-O?aIGpyM zG%?tdnnBHxp$@{&*=Ks=tzJ0@8?kRZ-FN;cZ$?6d&Xjr}siiOZ%^L;KssHGMy%@A4 zvREMPmN~82z1KivPwO5ttq(wu4QWkhI#xp}26D7|I7IHuXNcIh0OhrhhrD>fcl9~L zqUbrHmqT4)o7JMbN+YTnB6bFiVyWpDL6YL2=48+(So8Sy%WB`P1{{%&ZN=i}AC~64 zn2!c%f(*u%))Iz3JztcttEKzVm-C;>y$2|2Wt1i{IG4(h)B!gk8bH?`#J+lAYkAsTaDyWe01 z;$o>Y!{iV_OG@MNX)fQrma(A*MXM3^VO~3kXs|%mKQL4NCdV*1uLf`}mH@7W7#yaO z2oPAFoiE{cqE*ws_)Wr(1w1^-_)lK)UOxnQ>tPy!cVRy}~xoVkHI z26#eC4ANq!It!AjKw#Bk1y^1Rw`B0F6Q;aW}*^8B$g#{lVz3zxnyWq8dcX zThbYzsH7EhpvJYgJ-`OBJE5FE-7$@21?!#vY5|~zLI7z6p|7Y%B(WS!0`ArQr}GFt z>GTA~`imAFUPYt@j*51QMs--kyLXhQ*qaz6$cDsrr z+4^L`?jHxyeW;;9vEx6nU&`apT->JjSl^!<4L{Ga?Ylldncy%n~77%rU0ltRb?jG=BE)7aCUMowmd0h2IrmGV8c!~Z#&P( zPQ1Kb9&KZf{?=yuj)_;kR@rl0Br|QHo8xz>O4nx4`mJ0!QK3{oo05-C8rk3OUj9Ew z83DeYsh$e1uaBUJwnX<-? zGx69!lyPvqgOND@Ie`Lb929jiCi_bme|?Z9a*d_C zqn(m^5hF*RN8Cg0YrZ(uusiEpuwT>z&e1Tl8KhC+8-E?*kQS9;9u2@J?A}o|-hJrP zTo}eKy#)Bc36mP8I>&K(`W^Ua^cOKDfyCYm8X)oWVyU-$T;Ec8%GfiOp_yYs!w!QerVtGOz6Y}LB$T8c8w`&R& zoJ8XUx5G?hrv@+gHq;byoaqPWxwH%}-#hj~R`iY%LS(XhlS79=#ZC+`9_IIQL6yxZ z!UE`IDCyULkL(Il?Wl#5?lxFg+QOIF&-s9I0=vZWgRjLN_&%wUx0V?EZ1-YnSjrR+ z-qj6wd(q!aM}O>be&e$0YzhT1g)%)<3``Z#yRI?nN+*s zl1$A~E45&4(dxA2s*Uy@HeHZ<|8PnPYt+SF}vax`4)cYL>IAyJADmwd+jcsZ0ECGZA~q9%Givk~k-y2e$VDY-jUv;mF8QT`tbT{x?inQZ#885*)v20KvJz;=C3=Zmkk1bVQa<$U z9PA9TSY)L4cf7q{=<-v$HIf#5v$&1|at>zh2G0!qk9YvH$R#iZgx6t7BB*}^HrqUa z3qlU*Shi6;y|7~#6S(f|T7n*HCy-d_IBx)92WuWm`; zIwdQM6%|k2PYVRF(qmKUTfj=I0HTU`V--N$UCrZSe_7@40ZpeJFuIkE$_r;NM1MfO z$3u$PRc5)5v_MOD4>f8HbfI;6CTG)&#J5p)oHbiV2lqIwhXHt-!A?#yym}}9xTfr& zMv)OwiSkqSnS|F{L#Pf(l;)7Nv^ zFW05lu2)aOz368*uht-rKtoczR}%s;s|v6lkq2r4D{7+0jye>+$1yYwyt6KV7OXjh zrxrvYyMY%Jb$l5D;>-+e+jB70-Gg&FVii4T{o<#};>)l}3H$SMCgcvW39-*c^KB9@ z9xnO}xP~hG&0QIJpJyU~Uyw9JE8M6sAuSlS_T|830Wvo1BT|fSY`yunmUn%2_j@hIT%;$;;1} zlJMfy;UZPWeMPrnlV`(@>Xo|U=sn9cOSja)g}W_v5^Umb^*h1YcEbhlho#IQvfR+4 zo#mwx3G77*+w(q*SCj?N1)@G<3qk-xj>-e1G=KG5F`pm{fLI#UFM>eI@8m}37l=Cs zC9mpu)+Z<$9cNaXH?|xl+#;SHQ(OHRHLKqGBt(Pob`SelR%$%TxwWRAWcj#h8vRkw z8B_?}bL@lP+!5?w>OT91@iLurzcsBOxb++0(~OUgT@Y%XB|C0_>vuquuG*<-()jGI zZ=Gm*?}ReA>>F%VO+XvR5FUZH9gyv*AD9pSDK$($eiKVF*1?eMEC* zS+?J26lEEKog0caaXQ~S(whEhr1Us+LFCWGrS-x^01S7wM7F1P<(T%K>t&D9kf&iZxcJ!a~zgciG1M4goo_`{f=kbpLbFEcPq4u_zU4lYPlTJqZ5EQlWj^X8}ov7M_#`>Y8N=KPe zHGpMC)xP$Co@F)E{95{|z<%M<6r3}$7}Y-JPEm(0Tf2EdT*)K8kjAn$Kw?rho-9z9To{ z(){469ib>AWVw_BwIe~hW{)2$7boZr?hpwTSwrlwxN02@PC99L*Otwv5$gqOo)_`q z;;LnZC>=d$5e4N9#m_cwyl1?r?9*ZUh^`vQwsHq`9?eHmUu)Y!0Q@qrWF~SdkqOuf zfp7=n8w>#9R!*J+<+0T|9?pI1ot9zHk!IUhl6!&H@VVA&^wYNhlbgyy^r7SSeLMb^ zja55jkPa{0-cyqke$znN#Yx=L1~{S8z{Z6UwI*XZ?3Gv45iQ)rTIEI~ObxIcbnZP6 zIkno2TLSPMs8>>eNw%DcWPv2^JUk0ypu$8|9e1}*&Eh2Q0TG`L`;Gk4l}-#U#3J6k z|6A-Hps?#Mwjr2PyTGl}W5+QtdDpO{eh}-)VkW=(e~rV@$_q&}5u{PsN>hvrQp;Aq z^`2wH?hAl85?x`!T(^9h$)IKjF39SH1vRFL8-N0h+MLP#x3C8{7E{FBZDDZ^3p*De zhajxV_#;mrmVo^w=9mlP*p>mbO_AqMfm2J)T)mrFPfB0uVuC-1IY+fdu-#O)UTQA zsbEUL@mTZi(!qf))aib;jw7gOW_>hbEk)hU;!+zzg??St(f7(Gm!$2c4;&ypRN>|c^jtz%BPdJ z+r0!`8oWV_{o}yc?Qm+)Sz+HSR?qwMLH^A=0KC|a2!l>D7Q;-o9a|ydJLeFaqvYV! zt}lOFNPIX(-%@?;T4MD6-DG0Gg95ML3jAAE0e#6r1|m9lBe|v6L6tJz>~iBa&bF=| z20*rb=)$K38IAFNVn34;(aYjX&lZF~*%1cH>S0$HRHIF^{)9qJ7%b{*aT#9V@M{7J zlX)uR@@f3@!}L7G4k5vu9ZRn*F&uWZ7dvxRtZyrIOzqWLBlOe`N5)PR9cRU@t!}N~ zNH$To2VJZl(bQ54nKK3m;|BZm_O_H&P%ph8+9-%UfeCLXzdmeV}ME_)XCAs)Il z?t+py>uoJNd>+>fv~4BkB8LA|=D&Krex8_=%EjZv%@j6~>Ol@Z$~R%qD%m{9cO~zH^u_7nYI9DmvsoDs`aT-^c@tqN){c(d=Xr4H0GtjzM`vU z4~~`TB?m}~#XvU79|;^zdr4kzQ-GrQP8<4e=8LbXAc|= zX$0GkuGiJjc{b>eP%s=HnQx7m4?=_tmdmpyKo7LbRvP@v+a3z&61+WXZm3Q=q#^-$ z&(cjb&RcPCCljtv5KVPoW;1h3s}BbRXGx&VH+*(*}-O zJ$gmt{fan1IHi-nyK_z*q_<`9=jS=xc+GH=9KMW?rDg`)=}pi9EkBeBf* z!I~b|?24AVpwGOgr~`l*W59wpawaf^4KqXaKWZzUIM>=9%`3{^O&5r4q5IM#{^#Mk za_Xr{8Dr?#&X99L5*vsnz{QRc63T*RU5QRjZ8G%NXGTm;4r6LTknS1k@S-)H9$^R2 z^z3!Y_0XOhsYxbrGmwLel7=-vruO!;e?rjuhc;lZKz=@hWT;*As*g#kC|oJ4-by{V zobSCHPVQr~1>$Zz5b)6m-HbgokOV`K-#7dQs_Cd{^sY)8VgW;YPAH?|-~N~yqiH)0 z!KG2y!62ilf5_7>{V(Fjt?UObti$Zo?pm0y?qX33C!^qz3I?~cLsonkR5M)wAW)Dp z3<%V(((=a&lW%~vM-sg=1F+xalL4EKRp4~G zj|b)xod#YRThR<^oh9XfWqJ2+E5c0!rxJ;2c|~Au0GbK|`E~lBe3%&hf{q#(oEzs) zK&n&3LIG3$rKo2LoS$T{kFF2?b;KSpqOz(6W?w+*AV_zg{%SueOfunBE-N5OG}b>+ z%l@H%ep<;xVBJJ+{OgF8U_{V#Wdlb1t2^|RRRc_WTqNHYbxd=8>wlxoPb;|zvR(<7 zPUQ%&JS0CDv8Pu}0F3x6Fx=0}H}nULNM)RjDK_{E%j+MD{e5kIKds~)7*Xl$zwnKu zVJsNYa-J1afdq;!PZ{fXKK_}(`2OsiJ&iU$t>gh1G5sHy_&-ygTM@77$f3J%DTL}KfQ2Tjmf3SM%L%_1qHflh-B8mPR zZT?<~-&-&ui_|HE`9WC)Rl^jV2^zcVeD}7PD7QoL?S5$t{IY9oq*zPMLXF~&v^gTG zHc|e=;|DOLF4#LKBaOfDNB^l*K!E-7ClvU#&(B>spha^AL6~AYbM7$TZ~FC9>PL6h zUS`{IiLW-8lPkL~_Tvz*{|QB3c|d>EIu@iFswdc4SlFYoqH93wvTB#G-(nzp!5eh( z1v@DVe;fpjeE6I_p`d~kPE-sA(iiu4C!ZlC()-0f zqY~gcrPo$NBzHiGAqg!ufM2(!F$9gX=HL9p{_x7Z>c5_PpqH{b+HQ;tRk&bYE6XBI{ zc3lXjK#&X+2$?DFK-U7Rmagu6b?B(;&ib+VW5FNs`|cJ%K_2_!;`I3Bsn8vu77VZ9ms$l zDB*%%4K~r_0N$#rXyx}BGx7}~a55bN%1Y7E;`5*I84mY82Hdv0X5g|xA|eQzA`>)K zhN7VfzDa+ej%&=IE>?+eu!!`ElL|c>BXI5j_acbJX(wK!y=p_>d>#} zmPbmNE_s`aje{X!n+v~(!d`!V{|5&7W94BTP@_)7RRC%@^xi~aH#{VTNIYHsSa8_0 zau_lhH6RK+8QPHzSk$hNLBpQc=iCW`yvduNVZ02RxAf`KGv*Ca9)D)>9-f9*)5PboD5R$ zZDW0K)f)OxoKf)30Eq4KXgbr5u4RaUice6}bDjp01PXNR6BDYe(=$YSLnH;wcG9?o z;4?e1xq}H7E+Ot*!EA$SRxJNGSsnIhXrDXiYD$c1}O^dZ8~rQESfcHOwSC_ zuW}@V2K}2k6YFnV_KsP;(t)rn$`<(k8EiG}=8RD|v)(N8qWATy z5aHm!C?AveW+BKXobPV!6CDK(Y=_Sl{umi`*0YkQH)98W>j(8}AI;m?=5}E8{8|*lGbbrkH^`q)?MLUhHPdQM&cN=69 z;Pw-%`b(YFk@I=`t5P0A>-tN*b3cbj!sn*-#i6GjELCg)8J4wKR|HCnX|twHcg~$rosGuN@UVz^*5KXm>@Kzx zIO6(js!Fjs{yoRsE_CVjQC6a~u50r`4&kE~tko+5z-_<%mBaVSmC~bjuMUSQkYzEO(6j}`wo}S#q0qRw?-P#yVb7+gYLWjyV3<5VT-@1o z=DFe;7_f>#twT$Rvs`M3uQ`VhAR4Xpj!S{sVH?o>df6@=`W?%GzCc3^N2rviv|JZp z?9kgp)kYz>P8{wCBUHWc%Hb9$Wp<9^lOYk(-P|D06B29{*w^=q$;MV0$v4X<`naPM z9Lv)p-@lZ%dWOD}IxxC0U#t5dHBMyUM#ZD?OS+HbyPK~$)Lp00)x4{M>-&uG(Q(qs zHz>nQ3@YAfI-YN)HO5K2V*xD>?cg(?7Fp?N6`hIch@rXw0oTF(@iT&J2pM6D^@Vc7 zHp~}`a4C_Ta|7u%l*p~F;g4zDFvXjD5qNkG+4|*F$chLlD^(sb!QYrdJu1!HrN!N% z#u>w143qNOa$`J3%*LDdz9${B2%X#ghyy=g^yVZ|gH)B8mCNRw1?NJtUVy;H`_0D! z3FlfzR5qTJ#Uc#G&U8JKbUBNJ=;!BFLKxkg%9EgAz)NMhb9M-Fekv_C z-%;n<0vwh&dNa%*E7R5(5?3H+4awGVS`f-$>rvyAutM|q#nq_R4O2SF?XOC^$O`rn z;YvdO{6W5e5E+s_KtI62Dbw{F3}qt0asOT*K3S}@Lwu)tu4WG|eGf{135Kb;Y>% z^4EfdjYFNb5}UGSiWc*g?t`MhmWCWpJMJT&Z-pPelx@)4q=oUpSnLxW(tUg8$Ekd^ zC@GPfZxPV*$H()bnn%_jc`x}%I^t&8K^EFq`?_xNkjzyS1b8~*6;x5b%U9K?^-nO7 zpPqT6Sb?8yQ>Sl)$DK+tVyrD@5WOM519RJJWs(xTyiw#PPSAdo8j&+_Xa)_&0vGWR zvoW@2JPy(8aZaOdC=BF-)xlxv8dLK`h8`_58x3KE?#&~Djbi+1)W`~sY9k1RAoTt9 zzgX%*2DaaIyw!1$^W*`qheS(;xwvdeHIC*pSq)iS=-yHyr4L*wOyCP#70$~ab5%#? zOO2N|TE2WX&3>RaBYY+*0Ly#pqu7@k5#saQ=Oyg46CB>>UBxY;MhYgDMkUu@MAiD7 zr__K!h$aYMWjw~hb6|TjN@Q40DNMRs#zs#(UV+XL`|{POnyn8U6MwNj^w|Q#@QWOEfLT?g|9^ub(D@ zXlf+0w_{nf_xJOKF%m*$Iz*X zrMojqG4e<;{UBQ zFK}Nqw1Tv-5wM^li0hUbyb{Uqmn$+U#Y;4bGc@#lHN4m2V>o1rQ?Ao+r{Tfm=z96% z5xV0;A!olGNr>=A-^>ff5_JubGS-!52#>P*{1)plPNJ5b-pA8&V|^o(jziyemc|@A zE;iAU*sw-PAezK3M*#&57WX?#gi}^MDW?uuAQIu#PxM~PjSLV{7*^}%_lRLP!gJ^Y z`*IAvG<1kQ{Gec%1Ylhe0pIEZ5Z1hDI|TDDOO`}KTIvF}FINj5esn(=Bl&XplC6F$ zWF;cqKs(PiwpabQaxEEY8iJ4a*eR;PpN2ZSeNT#0z|)1qt#IyOO7%o>)1FpiKSG}V zzVPKz`J{otcee{(5g9@dpZ&1n-e{=+8Sn9JiE8h&FD@GIzuucu=*uX!G3|MzuR@!q+zbD@ zPL5KU(_|nOa9r}Ae23^(0;JztP=6A@^Nn{3P-3{~dCD1?XAlC|pFi$*kj_svZo!6T ziMz(ucs$m%J$pEqsJz5AC~*^+=Q5seHRn-Y8-yj3cLVewu1qwmbZgu`Sn^sCMs;ai_jc_(Ez%FL>7th)&; zg-Ru@?9MfGIfo?NwTPcXWm|LmH?hG21FNzFIF-u{zS_#^v*cKt@Y>e|OsqYu7Bpgv zJ75lx3ai~Ub28;c*?$=m{GMt#I{0R1h5@>pGCNxC^xn8XSBH6cc=*f2r-d-y`y0=& z;{B=ffcUQ_N=6VHk_Ut+YO%YZKL%nc47B*O#|3$F}>i{nD8Qs0{!s(V2O;-tNC#AfBt%`a<* zG7AWc9yGJHVp0!oPe}kpNqn*Vz&(sP?1P8*Lekc6w{t7@3b5s03gv~FCaR41dr3H? z{A~h&E$An>ehX%aUTJn4cy+@*mz-GuZv5nVAd_d)^>aE{3eznEB%@54GWQ#D08if| zqAB3NDo>is-z6VjBN_vK@%t%cd+8gj=?8aN8)r0!=f!i`QZggsLZSe(akcnhs9e%6u4UEX{w;E|>5|f~+vM<7p?*6T*iOt@WF;Y>jS@ssJt~-+r z{A%)x%i)Y{)7H*qZ%pg=lVIEsp6KKb9lFrpC$~eTXWsnzD*Wt@b%PM6s}6z9V3<3POgAv{85+AG|K$38+2E zByXPa4vlLmGM*@Ud}Vvp+wm3BpS%C9$!N^{sa{{xOylvfr=dUE5sy0`k~km~uv1Gj zvo^1fI%*DmreLUw6aBhfOPRycW~MxCY_Ixo=v*+$5^%X`*39AjdZ#UZ+uV2C3`Mw` zde2v1Rnhfw?Jjgh|T)#>-Mm{S|cJ9B#r zu!R)aKHmb{GfoPe?&=rnY)CfcLeE~-{?EKqeS_=deJ{yEpZ)E?LvX9Ezv+cAZCH4W zP#4;u4?fM)#jcJ)gF~KI^pJTVi@Op_tsQBYOR2g9`!kHQ3pLG7qQ;q^Y_b|?FwHvCNse|fXl z-c07BgoYJw4miy}`_tts6I8n!2@o-t*1QAe_P9QX?@ zY#e)@V}yo7uLh`)79|W&+mXB@6O*z56mRaxa{VvYf!LNxG z&#d?ThlCJfQ6eoa@nY#qu_lEP-8sIHoSR$tY=oiu0?Xfq`kkNTBb;axB~QEpQK|?2 zklf|>PR>J+X|)<*rmFR*jsvvQJ&zj&o*_2(nv&LB<_Yh4tVgze_{hW+K?)a+UMI>< zY7!{1I(iE<%~I==GX+%-qKi zng&-@qWN@O*kB&kuG*Ol{RWD}hGVQ69;rMrolHmXSjo*c)lGA_hxQ}|Lus9sHkj(3 zC-dp;rTFzRc;B3rN*23EM3m>_JZ|0Q+k@IH@UtmdATk^(>k08o%hv6p->j7VXiK6+ zY}kF07radojMAlh%`zX;RdTd(Tku$>69@OX;2hKW%8BEz+l?gQi~T~4x;s7$<`C6s zN0KXFv1ZF+O6seKCdvjUg}Kxrh)bUdC(6j5cSu2SS>+&j4mV6?Qh$~X%ro*8>>Q4! ze&6Srk*4sH!`pEU{7v#^my#G1*iN=j79XbQbje1j=cn)NQV%~6ZiYS5AbBfQ;xk3t z$Ib@ZQ+On9|1dO6F;5f$6R;#;0+QU$fo8GqYBl3bAgMY`AcU;MxkX!(Sn#6{sy1YKJ{0fI; z+5P-&)Jh)!?VWg7^m>P?9FO{dRFm@L#AiU8k3t&G?d2?I3dgy?K1{EyU?F3cB;$)%;DiZ8ZJiJSyGVfso_s{SbDLI#zc0$p%H91tLopu^-Ch>~V(M z{K4Gr4SVyfybI?>YE;fEjR~)TXc56D@0^X_Bx>9fwf;fK;!-3cMZpP=J4r1o+aM8` zd$^jq&OyM!Fa;{XS&)BJZDYeTjZs7 zD>?cjx*@cPGyHKi@0ja(T@R!_l{cuc1+dr-5*muDYEo2&%8Xi=)IrkJ+(AS^$Pv^k z!n-tkQtP>y8fmMEc5S9wbzOYw|5SKLGGrlNj>wReD<{4H+RSv(V5e8U<#~bSh{u?~ zLQN={sDBZY9R0Nv>$mY(v^$bmxr?JN?zM)&j>6X@^;MKiGYh-7Yo4_C$P2*cMEvyU zJu>HAD=LIPh~=CpwRO|mP$4hl*kbui!la2q6bF4i1~VydMxJ)OE&39 zwxEV8Hhkx_feyS)QqGZS>R36ogT}w?Y!WJ**M#oe-7Rf+ZY4l$SYcn#)o29q%@I|H zG>-X9IDvh601`dAa#|`Z|J*OE3*6U0AgF5gBQp_UZj`?>kVmQt-FV&qgoh9>@HIiS z9hPFuk(Wu_bS~b`>(-t85I!$+vGOk&HrJbzV8l2=CpT4|t>A*BNQo&Il_3+C_LfJF z&xYb#Jj-qy4V(Dem#9ezMmU9<#GW}C-Pa_*vcVb)qQY~y+IIdW2zTCvfGkK6%QN?1 zB^$K4MvroYmgc?%L&KZziq~HRE1+Evj(Yb6(jHDq1UNBvh8SlsK7xzI2vP^xPR+fh z1XfB5vT^MfIg9XqWzDz1?CL)CCQRJo=Z1_vEl`wy5>NX5%3BN=ocPf1VYb9uKkr3`Qu^Y4fyMTRaJ68fg3`~oX@cq10N;^oW&V* z!r}-Z!5QT3yz~SghZ4`>Z0yxLKr|c_A$SGWXC8|GZ99IC_R1I`ID>QtB{#r)LljvFjl};W)9>^GWO@RbLNoZ$i+S!+ z@Lv;P;jD5h+P*z(pVP$Oecn`%W__LoJ8XAq4VCV3vdZ%Ht(x*xRS|l0Rw0}Qh!YNUta^keIO0&ujNNcP`-lgas`4@ zcAoV^=&vI2Q||D`B0_t87Dr7FL(Oba~lceZsfhh#FK|EYz#bn)mng zgAlks0GcQL^HrN)RsS!5`BiIqyWRD*_Lg|_ zg|EH~-R|A}7nlGifW;Z|S3{y4yk+oQ86cIjIy>a1z~$+Q4dn1ZhX zfU4eQ*EIg;tG6&@b;-8Le6&74o+MEvsk_!<{=%EHU_a3YvY>v@JpHs6-ea>|#KRHA zVjyT1SJT$_$vZ@s!c+M;ZlNx%(B}S!t3adf$^fz(cwW{1A8%X@0c7W{i`2m0@Ur>t zpId@QA;{R{j2$(I`_Uz| zq%=q)9l4f~yE7xAZ$v;A)D~M4%O>vTI?jJc(=S}~=B&FlWP?@Pr7v$^oCc|q#zIph zj1#SB%9_4%FNvs~w%?Xi@u9~{yHUc4jP=j4=~j3qx44CQ33h>xUyxLB)#`uI>m>{U zvY^8n0&aa9ZsNrJMh#En>r#=_?&@AISZ9^C4-2tJput#?81IsO)_wN3XJ< zo#zn{&7Za5yJwK)Dfz27pwtROfj0!3D<}yHdY~Zg-gQgNvpMFy)u#}l(b+%+l4mBj z>_H4`+C1PuG@qr{hZO%q{JXA|SY56=Y)fUhqI%)xYrylLAAY#P!r5u-2F$R+RyrS-C(b>80ySJ2;V5!-lJms%1{OgeaZ&LsNq*Ooa0jQUHg&6mgC!!bC zjAMopX-eCQeGpp8p|IeQE@2Di<}fE4$V*NzodC@auH;7K@nj`zlx6jk$q6#iXUxwm z5#reu3R#$6H2b6_Rr$4)+IY$yL)7{IGPBU!^UvuJBy#ID3K0 zJYqP8c&X@V{-qA=%7lUxJ^i)e?%n{e_xwaHIeM}CgEdTw2Q2gYbi+gHmA53q#qHnT zqcGJUz7fK#c+ehIaY1h3jhm>|v08WD>;0KbbNyj7l~ZI@`1TD<{?Nx=(`O+~k9^FL z11wS)vq;A}wI7QNf_1RLEK?U<2J{AUcJ^kHxG-p0(?$>e)PrW9p{ggE1F09whiCQWhs6CBqLYC=H&8um`qHpZ3#A+4li_` z>yGR@0FYx3I|G!(_r50^EbI#)7-OUoMig~*?sw;XE>U&)#@i?NTUnttU4V-}%+8o8 zutv?wT%d$8cM=>mI!~<_(si_O)rwkRJ61${hkYqEFpxl`Cde`Hd}BxW-BdIkuQ*`h zY>5KYU2258u2*O7AJuEqdd{YNs#Do~e=x!rD)io?1 z^g}0`TQ~F*T;M5s)Z>m*DY>G15+{kg<#~1(s~Ban)1nBdP~G% zsK_+MNn+kdWzbD6rr~+X#zPhA;qLa230H{02Kt-@?Y|W4nlO&!g^}flP8Tw6`5D#u zr{>jWlOb)+XZW>9z|ah3Plb5{EZ**g2##AQy=Y2mVY1Pre@ea8FmhdBOZG~XfjZ7^ z9f<@H+{bJq3ht|4Xe97NEr1k zR(Hu447d-8Wx{LpW?V@J&cB6cX9V1NY!caMMo*&HFwc+Y@W{s{+)W(LH!`fE^Q};z z^+LZ-qrakm-0YiAn z1D5bYO^szNeA)|pKCN4wA!ji_Uk41t*Er$b_ z-QI*aeu{JzX0mE^+)^5;>4VbuGfi$X_6)wT)Qvl5%>WPM&Wd$aD-Yn`J1$Pu(@hGp z3a;RJJuD!Bn_9_*#%KEs6=@#$vXxpkXd8lWIi2#JzXY(3h!jwPex9TbW{@eO2~R=M zUV7a52gpV;WY%ruaMu&2>RtSs%63I8t>M>In5?4%uh6u_`y*l_@_7Ok6LVBFq~CQx z(ipG>$DCCSce~*o2_kOfg5&P0NYCz%VH)Z!K3|`lanRO#3|%K-S0nWtPSD>pQ8vwn zN3n)tS(dQz1zgvWbQ1Y?mZxv=VIzJPVia+(y`(b&=#ST3!bZB}?n0<6p2ep9y=+oF zu^~o>$)q$?da(J4!ElW2(tGDO8fk0I`VpDUJ&&XKQ7ev16^ltD{hWDW7f49kjl#oJ zM%Dsi-iQOWYRT+jN#SD8njd7Ws(hTt*e|z|?woz__{as_;KR_Opa}oMKB=EzQk1Fp zXq;&$-*V$))t-ok8$*JcY-!Tq6!E0(V-sJ z=H1XYcpw}U2eJHstaa~Y@QjP=%@5ndccT<{31;(g~IGSf?o{)hsc-JNIzU zZ2Y>wewU<9SF^H}s@~f~8r8cSDO_k8`>MkF!|J)TxcV%$Z0Zr_1l9_dg~(kZL$g?Q ziiFGy0#x@+xmU`zAK`XfYq_7T_ZtrrN6VMH?-cQezNZUZ%h&GNvfXR44+=r}4AiqA zP#?EeZ~F|plBLq^Sn~2&(D*`y4H|`Pa+E5t2cP8h$Iw+Y=@<-a(GSN^uZ>Rkt%yaW zXL8Eb$a*i^(|XYl-{66LsL3x@vM8GVL4J7|%k(_m$tL^0R|AT!0lBkj`}6y;hvIxH z2v?1k5Nc-AJQX~x-*)EtkHH3p9cYZV_dc#GKwU{&YJ4o)|2REHE=f?1w2#5oI*LEB z03Hi=V2dcY?yf|*@c+l&SB6E|?R!&#NQ<<9iiFZ#5{iIycXu}o9V(qF-AFT}bjg5( z(k;y(4HD7~?;4-y*=L{q?)~nw&*%5L{4fqW+;gvWul4``Y9;w$gha7gb-g-Dfm%x* z9iCB*ywsVQ?lucPDypa@osh_BQ7F{iRM~WpjQ*O-n%t4$_AHCz!+=wb}7@jeiPhCcj(%PcP)w$J$A>Xf&?lzj}Q*|ZY<{(Nt z=mey#Cv8zPC09`LI8vE$Q&=pkOjGzs^ih_}BTpGKPYywQSw(tLQ{QnSj%V^6a?ZgU z#i=EGAJbRz^wN;~?7~O);G5PCt9DSC*%NPFo#Tyz=4zEFAw3b!A3zJ(%)L^Y?n6yv zj#Pv5bZS@+s7PvZ}CC2K3gyRwU6#k`%Vi2E%Iqyp#3V{M0mN&Vb2cw*{Wg6Y@$ z-iP?PgD|!Ip@Ce5pc?VH3%avpAC2V0yvJsHLKWTIoArquNVpevu^|xQISU$fP;~Jk z@XH_3%HUR8OSeh_VVpOG+L!t;nG7bCx<~mwV??c5bpZ(`v30wP&U^`#w#ZlI{#P=y zAiwkVnfJ6+?8^fA^bQ=}*-72AnU7)^pPW~u*)4}2*bR0YBYoZY;EE#0YoxWZlcCnc zQ6&YgdZuOcY-sDC^y>D?k7e!KA4N^l5h8H4@wpN% zmf~}>0+#ShX&^9Nw%FG*8%dPy=@FnRg!#)}l$TiPPbXJXgMCX+B#`l{+{A zQR_H;hSSH%eTD+4^^!4Ei^T>)>J;Y0sC@E?xv_fH<4Qn+J2n*z;aU2Wo(R-1W}CHM zpp}=)cN`;CPJ|E^#704gEPz7c$-S6o_FtngH_<{j+ylc}j8+p^x0xKav#|}&BDrd! zfIh@5gRU`&H1_vWzE+yfJV59Bc;`8CtY%MH;(dep=^`Bs=c)Y@-N{^!1fo_YN$Wx# zQAxWWtY66{{Ep%NH$zLL`}G>s&paHL7~c50G++!YU31H2*a{T-O3w!i^(-tMljP@g zyVoMt6Pn$gLy!S(`a7o!#JePDj z9F{CdIoR81!TAIL;(H2UVcP3cdIV~uD9lr9q*&8UwBSoI=@w6*pBPVd*B%yS)t<|; zr;#fjK7FP*{z}=QSP{wa z8XF^iGC2s|=jrN-!rDA#Nlh_xun@N-vDn&>HT3+#7fo-Iym}#IGvn^*OE9f;wRj#H zHf%p4xi~GQwF@eu*N>_>&#rsgk<_URN9TAY$wC@;O=6E}Qh7b+i~SLa`!n`Udbww* zD^z?@S`_ZoA9xhpCU88t8!pp}IZtI>BS-tH2Yc}Z*IT~El9EvhLhc%zj~EsC!;(7g zYdFlg>(6pG!jrWQBTUFARu`uwN1Uoc*{hhQJLe8gk9G2HZ!exp-bI~UK6yF0OQ0tb z`BTQ}(+nxzNT1kn{Tb}$0%lw{*A*)4dya;8sWPL}=vstGFn)`1ZQ$`EXaPy|9|;cN??-;5ql?!W7VEL}SkcjlQ4_e=_;13UX0#bupissx;kIrRPE;BvksWDMa#K zWP*&stgI*35K#k-asO)wJ5=%Z75ob@2_8CcV7j zvckq`h634b?CB}RF*&NC0UURVJmRACa=3w6RMV?%+iLC!&p0XY1sb_?S*fRe`^scb z-qD4t>osviInjANmQr!s{!k%`z-a5xn%M*DCXFM8;uY)(vR%PjGid7)R&8%?p`bf@ zS4NPq;tnWhyBNhb%c5UEDbS@nR+1B@PpYk8_^wpYfy-?m_N%y?)CUK9Ovggg?)gs# zd_+BUx}O*`7L2~Vue!C=d@xj&^ldc$L#|%;%+he}>x-=_1(}a(*G`$y_AT2_!ysBq zto!GcHC4~L0-@F#rh@EGu%?q0pIW43*BoqLFxscN7FiEZHXfGq2kgj`t}T5Q5Sl}Pd$_mq~n^%x@EPikI1!;ynmL~-I@{h-&D!G zTmJbt#be<$MyE#0{>s9xhJmlz ze}3&Zkoahwk>Y(zjUkqzI~yZnO|G*&jsT2#duPKq0J2dZ|Kq8p20GD5C(`za6JxvD zP#N~q+z909ye0ME;w(KfRZ(ovn9H_OpeEIR&JA;H1{D`n!LUDtdl57`Ql@}2*glYN zofWoXT;h8oO4=%Kx}UA+B^{@J5&St@IAm%`eUWLpA?jJ9Yc*rtrm2<25bksX?SjL` zy8F<80m`*Rv>(RyC3s``zus6YhlJio^PvMgt;G?(;BD17fIvDLeY)i;PT|{S-L}e7x#DvwHfBlyS zbojpz1d)jAi?|1hi~xx-LYjcK=@c>nNG~9iX&QX~ew~u2pye7XvOkR^>@DQ_?k`^F z!~gpY{~EF72Ma0S!zS)z`GD>ef~XZa1BUPaKRCG_u`K_a>lIA&_u#ql0Gww9uku4h z{6ajiD6<9p9GzBDK|p=~^v`X2a5G9#(L^8MfPZaO_yf@r>tX_ZT+IFNl4%~TJjO>D z)Ztbz|L4!HM)o_78huC9jZc65=$aU=Wo{3~;gm0@({1+nv_6~@vJRSq>}Rs*-nLI- zZ(9}J6>C!NR!TNRVCHxKgOQSbhRiL|n2)GFsGjk;ol>fo>tDU!7zfKV35{g*JDF{S zEDGsAxbUZTKvg*N+53dJ{bWt#rh$~rFo2Vg6f8@0G5fxNfacSsEkQc|c#DLZ#t-}6 zU^6alw%%DWNA4PB4U%X^p zV6$>P;FM>@I%*j7mACzT^u0~TmI3zb3sxIklF}`1(y<-q?FqjEM;e~Mde(wVxYbum z_j@rS*B+cQEnRLVqGt~jiNXABj|ZBQ1a<8)zF#I;x?ZZZV0<{{? zm%x|&gsm~J(~u{)yuk$qh5Tn1xZ843mc(PHjb-9l!(6(P4(ibePnodp3Q$wo8d8n= z@5|^tXG(2~ldt=dG+&^}z{(M@Leycjp~s6Ihlj#~xom|5ci-Uqq;>P%uk`y-`~;lH z;F(1}0SalWMAAD33&i@uxsYN`{k_Z{j77@bCk8cj^XHt#iFy!w64GkMOm*v*QZ#|80 z1AY#FQtY(_t9i&l4#gM1JcP=p3(&r?<(O=LDH~X=8un4IXt_|9&B+{{&V5!o-OL$d z`m7**CRC{r^L0HtVJwvH-hoW4xpKVR%gE%j4dV|k3A=)af`nhr@}9$bW9;VnEjHXq zIS;Q83EdO|Fx(R36|)8KBpNiUK`A0m59FoM8JK= z)=TPLbf5bCPBLq*UFM1!%oKfesu_dQRqJR6Tg)t-}qn=cjG!A+|ehwRg_R*O%fpy>};JX5iV*znhUm&B)zL@$x>^On0v zgM{ugmzpG)Yq}DDJBI6B5=tN+<*STPI@Pkoo_rFPT%JM0d*E)o3t7h+L343Lor7?9v9`Upkr4(W%WnO*B^~ zLa)&2uRmmhyMs~WehG8w6_MG{I;Y&>ta>--XGgrvW^TTgNgKjtVxF+?h~QC#Zi5w; z4%4D9>0ttk-n42J0JpXW)@a)ku(kc(p9wlHv@R%cI3QY~RSVNg`BWacUu11SDR8&f zvxklgz{svlV;mH(v#}R!mC9h`=oL8O$NQ73mn)0oD>t%nKUOK+?+xmX(GPQ*$pF7& z%pb&CA=x=N2ZL$-bGE+fcYuz+^Gd3R<4J(;>hfG(vC&^mh zEMPnl5K_*ngTW7CDeRmwp7q24f~7)x>VPyMCNXvw4GNSXj`bOnC<2Y8?y2=mY8IM8 zc@EH@JQ&+y)P63+E1f-QhvA>;nD*3Nv^c&R4W zRy6qu<)uFCx#fWgm|wGIrRf!a#J){Ix$^ zpO&iWaQOR6v|xB#nBJe%rCc*OR>++Og*deEK73Q$43)4kLs5X zM`L&!55J1&!xQ8MHW(!~dQ%we`#N%=Ix8cx&|tDwsjq!4z85@HZ$|xh_xQegLYMSY zKJi9ZZ}3@htU7Bovg=+6$3!r09dMZdm#VzX%#It+1*N!zo%5H#rOx+~wKpvb7vc?b zAP2=iw83SKi;)&SGh}gffoIt;;dwj-i|CFWv~(Yo@)S8;KwS)`__FJ}^}!`mC&7;d zl1awhvUgRm?X8sj*s2BGpV|wdkI@GAP@`sAS}H9=you_d1!SCa5|JaIIP?MK#Uw^N zKF#ehgnq)Y%?L@-9i0%h-a8R@(SZc}-i`JBmlfL$GHJa5R^JW+$?Dvk(@c*=OsBJz#0lGbH7av_oHTt%R3g`!rAkfh zxH&1Ywp_0ZI9=V|kG^!fxxRWEV@jBOoj*9X|AlUMOYw;U3z*-s*oM%eXUKG^`1`q< zlNYX^iw5H4eP0=VFA3?y^Y^fl5oGUHn4qgK{bo0m_ra>#h0I~3(g-N;-x9=E-&%p zdHxnXf^&ecc;&gsri_N3oA@vMM-;6BZxg45;aEeyU6k&#-;Fmbhhx>tw8v1OI|!t zEK#jZm0WW&@9j|aY(7Jq=VL5xka&rJJbA3bh8=n9=Ht|j+{$PC1B|LGn7=BdZ0B+_ z6t?7y`#Bm+fZ-ag_!)9aBC>2T%Q|g2&+2(GqrL2O6rSCqD8LP5Gg$$L=~DuWm+6pc zt2faP&cBefC=z2bl1ZjWjXy?roJ}I*@!LxhZ&DuuIsD+D7I(KXQv2eEd1Rb!SJ68* zh2`DlAH_n#n|2zD^$G#FyX>Xob|OTbdKImyD3Yz#oN8Ms)%(=YKBPMKHidhf`nH0P zfs~c&3AZUamD|{~v1W@NXWBxcrt9gd*vT^X%H#B448CNyBSKW6~{NR`@qi+%4c^(9!F2bg*On&~A_ea?X>w(_4=QaTB{cj1$EdON5?;24`8nOLIwQIC#z?_Nb1Q(`)#KF3SXXRq^3 zU6FjMf?j!*6;iQ9ZBRNRLuP-zaD2I-KeM&C#E6ttqJV+d#!2Vp*nnliEq zA7PP+6gR*EZut6v&=dhTX#MfDO(#GCzfV@WN;w9is3Wb-D38iQ>9_-Ox@3WLPbVtD z3~N0XJ}&juQMta5U1ef-{YSe}jzrLLO}!tPyKf8gXP`id7W3n%kwab;k}<2){SC zYfIj$wJUCxKIZ*$#B;v6;4Ox1f&A5}&l*SamADN(MXQrZwt{bKqULC1a?2Qw69Cfx z5bS%$VWT|2e*tEX$7lc;D!WM}VULiqMPB$O<7#uW`j+R0GJCZGJ^RU**V#Htm+;;B zh8LH=THLicpipGn##`0ExHP|`RRG07P1>)CSD?h$szzr^hvm1Jnk3TyS_EMYI0kb( zc53Va8s+-T1J4dpvjI%BC@IqTwDn}$A@kw9_pXrBO1wsd{aj;>iFP2eEMakn2i*6> zChh0tnW49GDr11#Dl)7fwSrp@*>(io?r0;sx{Anw;H(wNKJUIcl0p*O!&e@YMj>rT zELleR$*OYJNRm;>MtBv4O-%P{ZdG^lk@2o}Mg0&U%=;h0CW)^ZA!`N2V3MPcOUT1{jz%Ur$KmNBbhaI} z@a=7@u0CU$msX&^5k|z8 zr-I?sn^WAe#|s;0iG`B4swz$6CaVknN^aEk zMcoU{Ih2&1RAFB)#oC?tv3l;QuEs^Nf}_nm?tqo58q1N$0TUIu_IfEZC^pcv$SG== zVOc_1<#;ljx%Q8^r*Uu z%wgWM4auJNzB@W-%9?eS&o9A~kk1~_-X$Bm$GFp{oUEFVgFCi6zyu$+g3K@&_l+Gj z4d+NkNX61|%js(m3wj^hZUb*7*bvT*wcXBSK7r+_c6Od;-Xk{uxy*KQq&AOdPNd*m zdtmc6=gPrbYTfT_uP@LIH+B&_v=b{t{Fgt+BVRwFsa;i6&F}K7q!2pJyu`tmgU+l^ zZHQ}8H0S7=Z7qaJiu5LbuUh#hpje6s!_EUB*{Li5$p$wcLhuV2zz*@_%NL|*`@>4) z*@hf^e?ISk$?Z|SHxX3cPEn_`W-^^2H@2CQ!1K-{VRn#k`<;>Z`o|C+b;=Afq=)Tp ztpUhU2g0m)*DYXY?gU_Z>e}Il_s>A1kZ>45%xs;~<%C{g{jzw)DXlrm6}T>cR*cFE za+|3BR2+WDS!X@P7Vv~mK++EQEBcww)<4&WIeKP?&@ZkFcs9v;iP*l8sMB+`&tfva z>|tc(r6YsU3P5Hb@Oise_4DBMe+HWZckWGWG>-<7O2+~Iu8wEw0&T1zfqD+}9L4D)<}e!NeN+rr{{~Qv^3+)*Aktg(rY6m3KJ0&F z4xsk=^*X^NXhZ*le)WrLrsC&SwF%kh=>woTf-kd2Z9W0&?4_p%Y?OH8r0XZaUKy^F znrZRA-+xAo;DW%Byh^=H&{C^EDg(mzLR2s=Zi-}XXvl*=gNsXojqd1bl7M3E7R&|o38@;`E>xxr zy=y;#2H9t47X*LLawV_qGZ>s<|KI|4Yyvfm!QdBbKc+bXiXL$p(K|Gd@Dj-9FZ?WL z9nYwv%Ty{%l{G%loRb*kS8PYJ9CraiKyo}??C|F7SE!o8l7qF#B{tND8D)L-5U~ky zpy{uBF2;YCwpXR;$W~Gc#+C z^*~NadbzIILUvuh02va=3=?x**pkPW^Gqukm)x2!hO`zksF`NS;qX26&px@KjVPL* zPjY{{`9{KLj6#&!l3|yN7v0Ufl*-w1zFGuV@*v$U%E1ZUaoSsnEY5ywDM#KTl6i)B z$oW#-5(AabZKBfI2ml1qZQsy9-!}rvBMohRRb1c#dDn#m(HaHeB@`qI!95j5?UAF! zn4q1=QNb}(8FB;JR9X)xZ?ho-E4xDWo>r@o#Y5#O06+PeV3ixar}|3^&=Mg&N!DhH zD{{6>*!DE4!Y*4awlW+_Y=v}?`=s;@5GI6t(!lY`aEu)-wtE1bbM!On3Z6#Ss|^D* zUnH*;crbLrI?0sS-hHU8aNR&GFx&xdCiz9lJ-|W9eCDlE>PCg`_+i&NmVNd+v>V_^ z)4Lg7n@^m+VA6;3yR24cap@ta9iF?ER(okoZMnac)Cc}{;+z?j6!(utm2c5;?6p>8 zb|r=Q7(`q(h1{}j;_~1dz%I#b?Gpjcn4FL3sljfNRGkSc{nV?L+MP{_ZKwe)W##Qp z+Tbyc!v*yvVwMUQ29iF{GDibmXyG3qi=|v!C;cKpvr-w>!&|c4&%48r(NL(+@_HrB zJ4q?g<gR{Rv%%;rZ|n*czv; z^7vzi+-~^?{kc#FbT$Vw3UQgaMt;GmOP6o^z9D{zFkvOyv5)Wu+BAbd;G=`l&c|yA zl#T0Qnn4PHkNk!oSRj5SKpu68XqE854P^!E*6|Cv-8X^ATj{3yX!rj>a3cSP;E?8} z;)fze*7^lIjLV8n&6hLaAZLwd?GL;PAf*2jyb2f;LIw)KDdM71;1{xl;S*t@qC0k? zF-y7q0i6*&{o9!2xDulLM#tnBRuk#^bDv@_Tpqsq14(RpoV#5h4yzihF1%lLC^&0D zocEz6?VlitYyrNCnCuAeUN8U}dR}Qk!@=*3zaNiD*V9MJY3@GU`v zjKEE+-qrfs-35T)^jap}S1_U}&W;FO?q`GpByqkFAr>$J9S$Xy;_#vol7_10*YOuk z&P<}giy!sSJ)&8IAknwJDL%tq!2Wfo{$4EfmMBCK?K~ZI9WxwY3`o5>x%C=*ub606 z!4-VRH8F2EdhYsQff0O-mZu^00KsW~3=kZdDQRjhzraNON35tXoA#A!A6Q!cNvKFTA7HRH^nHb|9vGC@A8}5q0+@IUisW;M32zhQ$NfNAc3} zX>Xr`a=(IA`XRz*ERC3;m}D{v}{`-4y> z(SLE_q=ou{JzJ;D8ZVTv#oj=Iv!s)-r{fjxwZF?se^_{z?k$A&UMJgQ zON+n$%kx(c7BCT}*L1q;{9A4lEa@E&O?ZgtcVKy+2z>Sxt{<;HyHV%NeCtl}l!eb+ z^%rk)-qL`#qOSk>j&T7qZ!KMMsZTlVgx_gS=mwv}*G-b$KJnqFJxW(_J~K$t43EW~ z6yUM@fTp!6MxNobU{THPbhRqapG$im`qicvK58xD0CH>G9_YIYeTtCIF@e_dx9CT) zV~R-2oK4$XNSTP9Un01(OeabiKwSzzGyKzs%l0kOG%$x)SS!!gu(toxzkDMBT9Q`p zKhiJf85ujP%FFO!=Sz&nfV>l}`RLmeQ7k{DW&7Qs{S{I7CFNv+&FHVZ4pWxsdF!Qw z6I)qdyxRwy7x0_0b(|+Xyhfo#qPYdTbRE$NKJIIfP+3ct2vZp3*h5 zhZ^miBU~ zZ=SGGn&l+ON^9fDuF{m>&l~?zEgd&9Dx)vdC-LJ}o$x%i3OC0JQRY5W{VC&s>@r{X zWNy9c+t{eBCTbnhI1%FmedGCF#_3Kn^)lPqu5k_S>T#laB}SbvLZ=+NqLuh=Q|L&< zqJ_Qb;fS>D+#PfI!Qwiy#;^vP55Wfj6LU`e==#+AJDs#i1GDq9!v`o77fKVs@oQcI z&(F5OXiF4-dyC|Uz5JZW6Y%{r=>LJ*28?Uc0MfN;VzhA|k8fw-RV{X(zBZB1ERp{` zti;kg>L_sM@30_yjDAMTcJ)D!6w0$Qd8l$@UKLY!$Nb=f?C|gO(k7@8v`ipjG?@FY z=TYSVX&yKPhoXBEcv+p*2sxlFs<;mEayRCv>DNLBGf3r0GRtM;UdeOENiQ1y70 z+ST`=bWARs?Cx?SpiT$zGD)k73K@!kh#Mayaa_x4j%0ZO+&NdZCeUrypMf;OFt&=M@k)pg2q5 zUY_o(Ir^SS0Kj6GCNHt3ecqs4peB(B#lI@Mv@-Xa< zcV8KPWc7I6T`DY|UZ|QehFFS5O2C}1pLzrAew&hrx$rpkY$7P?hByKybYh;hpoLSF zC~G*4dyYuZv%Mv>wCMXn1G#FeSvmfCRqe9?swPk961Jh+PZRwj@1ZiW6!c%SBniBA zaq6jAUf-Gg%g9?AIfJ_IJy!XkkvCFPsZ?k`%9JR#QYmGpY%tE0P{)W{jGFiryPGfn zz^@xEfBciF?MQJXdWAN<`4fjDrYbznaUb0*v<9&Pk%Pp0M$M&1gMZxIKv zBD|fKp(N%K4Q|CAPP)$5>qX%hXYcT~;j9)(XyAPQr27tF#Om*btg2Wld-5s8pp zK|Jvb*gMd^a;K<;o)JnJs-oi{cc9n0G!wd_y9F4A3Kn)9`EY((Af zI6Z?(&&^^-JMd`_K41&EH7&9M{5qH?EN0{zda+NG5BeuyN>D4aSF=s}QL4i%>-7G8 zuLXXH-5isHudI&b=pBRb^lMfJYRWok4PnCM0m4;{S+}@>$2e;RI#Y6)-MhtGAb!d| zr;>$k=5;#~&o=+gC?I#rpA*r5!b)6iZsN&6AKz95%^Zf-((UhMzO045`ngi>XBG|Q=ee6Tx%6?ZbMQ-fpFn>ONC(S=>iXA-ufj{ z&osLXjO?OcB!r@)N$kfODDj-6r+irnY< ziC@}(lv}AdQm#)gmg{~MBBppFxU?mKJ7EUZ=BwAwzRSX6WYo!!9}wS2kn%mgxkEn@ z8evgJe2`ei`PA|>Kz=d%ZBrPkB;>bj;m@U{Gnp)D)~VP5utJt=nGky#dG&J{R_41d zt9^uw8ntA4lT{XY>|Ter0hffIb7&@akJsE-dA!saG>}F}P2-U=gNUAWOKcFb7+@Msq z2Zn_G?}Mr*g)RYRsG54)0JSc84^5uc8;>8OTP>3!XA$#T7iCGraqwd8dl#?OyZw5m zw1j`+{Xvv9HCwl@Y@NZEA1FFa6>E0r+A`=3* zBZg;7=wz0&S|H}x{;OYPE1xWfvmqP#vdNFu)5zy+_LsYjZ>~=8nCon@2^73h{t(sF zrZB|{4h@KG&q}0~9Bz#65;Cec$F67Vf9AO>d4I3-Gr#auVXo+we#z4awhe-8ly z3jz}PW-n>D>O}lXb_x0~pqHbz8rzgz_B>b(3nQezGgo7JJ&+-!bD^b`^f1~3e5+u4 z=e3^(z`Ctfd7UPHRx>J}(@C3nX>m}BiaW{572v(=o3&CUxO*9tByeQDm%f`u(-l2e zyi!%M&jP!A`UxD>(xox7bPqrhs@n<7I&^fheEDr>#{svmE?QCXtPl4_Qv#Q{s?4v1 zhaPWrYSRvT_QctA2%Yp-)}cINQJDte`NQ|4(IrVz}#;wgCS0dDuOEEsUvcRd^k3#wZ(XcL)8MTqOD$4J2b4 zOwyq{p0H4Mz*$HcuE$S_r;lf8pNp~u#8R|&Y<~=)x(lSK5eWM{O7!6k5K+i)0n;=> zwECVg=D-f~+Z_7q-wKKEa+;$rk8uSft>r6+(J}^x#yjOEjzN;f=_{W18xC`5o|DVz zICN$`G`-8wz+>bVPv5HQ@|XtB2kf(Dn?dd|OSyT~DS$SJ;)gEv6h7oOp_mOE}AWxCW+F+53~i{47*nA9_yh zxR1fmambkl_?Ai%Fs=$k^xejZ+QdR_k-i=gG!BCAHKQ%7$K$opqSCT9wi2HaPOV|S z;a-bvNO6)an@WwY=tO8x3ctma4wtU^GQl?Qfodm4!i1S^J6>*YwZ z1-Jx8lss=$0U*l(5z7G5&Je@(j>8e*667?_S4Y@ zCd>KJPZAL0rk$kkq@%DlbN5{n4ho2qbNkTW@hwN-7n-2lyMsGwXJMCYRSLXC7H_4J z_rLvj=>y&E&&%UoeOh`>CL{JfmW05Yt1=T2aSM>{ANgoDt4HMtm%5?|4Nkw1EDkLm zV50$bkOasa{Jzz+>$eTEb>KROzT&H2fPAy2_>EO$D(~(_tEIFx(x^vaS^iR`FAt0B zUBEuIpU(lAbgDQurGV-zFy}LiEBpIwefs+51TtgC>(tNv6P7bJp`su}E6?`>jUBA` zt76u15(76tF-u~R=?e)~|9O*FdqF8;_^F#NwfgW$OJY{~%la!Y9CN-nM-w^GwZ#)+}x1$j$?6J$T7Q`?cX6Zxf`Yg>Z^sGNgOV*U( z765N7z^(UH$NL1zEDr=?*7BkAUq~hJ73Xja)1LydL?PcnALrYc>^@xqF->=3KnMEF zco8%twt>oAcb#syoo+c>J&(AJ#ft0%?w^S`HL;_@NT*u&d_)GT<6uw(&Zp3HHC6bB z?k5F12U9WQUT-hbce$b9J;oel-8hKUOkD3FAOkie$y#lBt`;yvz=Uzhk>e~PH%ChK z``VF*HFG^?ie))ZDK9w^`wWVL4rn{+>^cB~Yqaz| zH>U99eH@sVePxJ74sI8#$0W(t?1@}L4@}E_Z^z9-N`*I zhaOUndH$0KaRl*8q1f>H8Tf!Y$6 zk#TFfZMqV*vYz1i4(AT4IlC;^`1O{E>?4>Z7G+jVf^ z)}Gy>VxOtWs})xNDXsvwGZiY+dpCy#B6eD|X)Y?PYR5o8rxv-poiEo!qgf<#6?{JR z-vkmVhXkG^cLzcsk3V`3@WOpKC({GZFLwP-44X_|N#7EnOUk}TmqX?I`MEGsf>Ohi z1bsTsXmc!P(48fA%Aguji5%%2zv%6m!d`XCfN&KCH~{$aBA;{-U|hd|^J2kg#RTgwP zK05hR3NcoNC#UWV4KBA&t%Z`d7HgE-m(<_nuTR$$pAN^A-TCEvF=G)56k7_qo-5MXsu{Xfkz8dJSy2qr(9(WcD3!$ z*|3(u`0XApr=yixx$Pa5#t4>11~#{DHggxv0U0{wlWV&wIDrNT{G2zLs^onWpZ=F9 zf@gzfzx}=|e5%etgdMV_-v))d41%*B%w*4sb>!)7j&@W?{-#Vh2a?!GI3{7VL)l$` z6!aRSkd&rdBlKC5*Pzp3;&~B=4)`+~1b+q%PC~%n;Q8P)*jQ%HauBg1WcRDH2a4IB zFK?m*!dcPqrD1_InhZk--W-q1&%q7&^WInZ)Dp|3413ycLLci$ z=&RKR&%Mx8>&SsKp`QcgJ-hM%B#d%fl2t%3HOY z2GX~zeqq%>VCL-?WF>7a4P1&WY@~SUStmIl0>oCybphX<4pyG^KI-bL_mjLV+(o3I zv=M_ILf?JPZF>Ms{er%HJ@2O(h@zvb@)*gL>SxaPJkm|C^8f;@W$$2++>vWFH1hcY zS-Uf%<+ z*BIa0BDwD{bWjgaJ%C)eCT0zN)z_sFcArw-`yn#(6^udyLf+flRclFDvvzaWh_v;r z_UMswoe`2snrrklqF&S4-+Mgd-r^!((evWu1HG5Wqv(;nWh#muBSNmm?d%A{gqlbV zea{B=?o;OBPfO@+Q%yj?>uH%FPS#rT@G8?)wg0jNh~=)bwY4bF9W^QXpz&V5^V3t& zyn~lOaX1pinax&|VqtU1hmb6Q19V~-tL+#vnY(HC>O0|1`&!4=a-J7T9MofbEIk3C z({EDbiYrsqJY$mSuA&d?L8*nJ1$3kwt{dWvi>@2_W z6F419Bskc2=Jwu9bcCOL&%`Kcf!ZUnYF8KPr31D1P**~g#T|im-Ysskp17{SZ=tPy z<12s@b{#Htl>6ZF0rNRm{HOuHANdxCzTaP(ewXYLU zDs;5Ie*373c?2n8aJb42oZ5l$xqy+gY;MR+$pUHZGq-id^pvfM=h`i>rc{Ix1TkkF z*vG%fO;(NK2smq!@J$NqdNSvEys3116PHX1Xh)nz>q0X3?{nsyQn9K&B)fN|#B1BZ>3r)>~eERNwkH1Q(qw}9a>N2BnU z-R+9@!i7EqKPT$Ji}{b1o#E^50J-{_5kvM7!)g(Pxq``VFej9KAGPj%Wy&=|zfiwU zHKncp_XdamPD}dasp1%pjzDdZQaMBg@D(v9xdJ@zM$xxgDYI<3?KG_M)-E(@2A1OI zOC8W>`aIIiBY?~oTPv$8%{>Ac6)%{IkneZtbFX_o(vUCbRA1c30%mib^-8(i;Q_N| zsa|m6lr)f}j1b2uoP!ApQtc&+{4%>OqXo-f3(#OZbtNJ3y&rW$I8uL?7|Fmy|-(odqV8??n77{_t56zEt}xo zpgGrxw8yfH6~244kaaoqQ83(I8lWPs=xpO}sC|BrZ%`$CypZ*hOLCO0ponfxMTRrd zHIT$_1kKSvw>wUV;9AunUoHc7flOQQy=!3yyC- z>!R%BBsuEltw?jhZ#Or{At2SFjof013`3(z2bn_dW@`flkD@;&%G>7vY=XNmVX@b z=8JCb#V=&Voi63&e*!FvVvS*_5+x$^lM^Hep(>;M>>psjX5!ye0I~7cBQg;kTT=>Q zwY6#zB*$A*Vv$rrFR&?iIv9Ml2s@*alT_V`bpd+}$W890kt!d!6D;SzyIuX)yz8i( z@x^u>UO3I@$)~SWSl6ZYgv_IC{HXOitE_u3V2qN~(uCr_VFRv?ZM|5824iycp`1LB z1#+z{{7xW3L`1WGR?-2z=U1>o3le8#cY?5s!iwl(qCZ3fqW>rwXs1(?+m}e$LbM`Z zkOl_kByhD_c87Lt8Quxw9X1_q=^7*>fS=J)uYZD^fr2ONt}z;*)Um+^9RI#jl?Y^) zJ>`E&D4Ul2x|_02*&=!NHRRfA4d`6#Up)A2iooo=90AKh5OP{3m6Y?qZ(&4W^;Pw{ z`*AXHyvgscn5{aJ2)-id?P_E=%^Rag5vKZ6QNTarJ$(pNCa-%C{4?1T88rgZ*1Qin z9Bm!H;VwqEzrkG+8+2%kU9z&!6vaMPx!?EvY~wvpTOgo8saG=!5q=h#R!aP!(FAm~ zG%XkssTo$G{v<1rJIja}%?)OBaX!N)DtK)TUdu4Y)U|=|Z1qNE3@S78NV2LXfI@2& zEtShS0x^j)A6I8xv&l16810k%7v5A3o1-r!dpA;cJPi4Ca> z$}U-ovF+ves)A36O!6s@tz4uy&GVVDCO|Oe7$UCq+%hT!vGOAhO1m4X*oF_3Rf=PG zRiBjTeLh`8NrKT1g^0c4Xh7YTeymFq_jo#<(fMT#FeTT|Za)H=jIKUss}$3|KxAFq zZD67MD3-wR;Sk(XtyeQJo-n|=ZyzYcnt%;nj=vs}prnu3;AI@ffPLrB-0womJ+=VG zrzK0)ANBZ&ABgP@v7kQtn)pKSD~c%tkW8U_+|mt~8b^5`$bfP+fP9E1o(-oBSW!}* zE%tbva2Ig}HX-a)v*!;4{!ZYHgrbkoujbk2;gO4ckzswGhz#hwCp!3CfBIMV3#GPx5V8ve1NA*jOL4 z;93EiqQvX&w?tVgZUfoM?HOmltT3bYKLIz5|FwAS14RU;VDt1D6daJT05)Vp-q~XP zr+$GNdPclQVolENa}q^E1L)$so}z-hvvzTJwrv$%V=<~-{_PKzkx`C-Y@!QK6L(p0lI~Tu-cHV-h0uo1Zf%zWRHj}7p+^uRCwD}jGh6YexN@|G;{@WkCB>qyajA%e$)BTsg=3j@;0^Z~wz5m*XeSxt7tC-0zkR-TK{nkglGe+Kj zYZebd-uj*Vpo<9H*G2|Tr~=WaDQZ4)nF2Wca!TosLr*5cJM`M|&1>yvoTg2QN~`aG{o%^M4)X-oa}k9g3_rC#-^qTXcBWZow2tM`D9X@PSiqHsy9!HOwS z1>_MRZm00kARp&aMSC>b;}A5EzJ=9z>tq#QwRaZPOw&6Q^yccwnS|v(-FQ>=qs!cy)D`c(8i(f>=yR_GR zy{dasU-hA+rpjqwjRKR2o8sejv`=Lp2CHh|@oGOJeb@>cJ{;z-3&byo-2PNkCXJ(4y3#jgIH9QH9;m?Be!Tn%X7P0w`2A}3ir|pEqtkABj|M+6CFo^6Whapxt$W~6@l*7Ogr&64q7AXcl#j=;`sTs0*o1X9(i`1$08Q@ryYe;ZG;zO7xO zBxDbe2)A_A3)-vVbD>}W2|ieEdigXPh&YAcaD zxuCn}Qdm8^MPftED(G(mE`|DJw@@?k=10QMA1tb9Plp~Ut}26~(i}GL%+<`qEK1^} zoMM>bLQ$~NC6ix#_gI3L&X4e1?NpHccpko2HhDd}fb%-eT7JPz6ONqMk1Tds=k8KD zE*uMM&{`pYZ!|VT9@}aC?npv=J4t}sYehKI_Z9v!W8LMJXj8?8xLI`F$6$RZPW49p zTnI1koys}2slRf$Sf^%uY7Kie56^#_Q$9T0#FvL9%;l>S#0^Xwn+l{xRvVsl5? ze<|JtGz`OrvYZI##c%rtc=YQ_^G zPey`pc^|C^KTDxN-K6PQl#FjZ_tEO1g3C^9uRF($Z>7a?3JO)>3Xe_%DH`?#Kjpn1 zoxS@KXRhLem~XaN^I0fR<);q?p@BGpSPdblP(M?AzqWlY44_X zm*d^lukX9RS$pUc+q+q_M`pPCBdHnW?ZU|sPKB|(jUClzyZKE5V-`tiWf!+VMesk? z*3&LeVNyGT)(tzQOyvKew*INepSAVMUR8BeDV`@g_u?*&TGz(D=VntIp*Gp?sIE$t z)9Nw*C)meuAz~&o#2O5H(tw)|JbrE5!4Evgw7iiBm9p8BzY#Hv(^Nvo~Kc2)F zJMylWdA049%AVZeZ27ySK6i3xWmDX8Dm2e%5!4}$S!t_oN#4e|8R+3*+>dw2YNZ;1 zIwh(HF+ccu7oxKoK)h$26ee4xuU6Pn&#R||4nr3#&EaSr;qa>WKGRCNXi&-b5kRxUl=s9ke;Ih6aPH#hGQCQg$jCJd{= z$tJ8MQU==mtWI_?yI!}>9yrkO z9J8TH5#7P?UNZFYSy5KNI;g+;NjmZZrhIETZ#KK?th0cH{)y%w++}<=MbRQezw@~* zb1lZGp zf|?sk#mw!I*n(qdp4pY@ir$+yvt{UFBi#g6&?pKqDa%T0fAS@>O3wdu-T(+eA) z82^?Rho5ZlKPfnrP&GV_ZIUCxzm3PK-EvG~84ABW(eJh!1nZ~ziqv&=Pk|I1=iNfv zJxdW^GTE`Se_))HpD~(=i!VN#Y-Xi_DUvs1mk6NiQ@im>eo273keeO9qNrirYxZI* zm{;VT{UOTLzIeTH0`I+VvFvN;)0|Ys?<)2o0nfI{^-oA~1GK{B@mws}-6Tli+-0^Y z7@%qDd~65$Z;S+>$4XLghE1I)^wW}F{|OXJHWG>D@`JRlK?!HxJuvSm^z80uLxH1~3x)X>`+^rdA+R|B{XvZU$^>9;>Y z3Ulc-N#Un>niY>!l8n2;I;%m++K~1&@;kJN-$L*g=0Zr=GU7mQn|4yp^|P>yz{T3= z{8@&v7i!|t<+ybr8#Qy{MJPR@j?zvgdJ1FXX+5Xh)4iJ=L%col*Eis#do1nYXVdMG zH}xZtW$5}8_9}I}$(}Fn3$b53iaGQtPN96>sFMtZRfZ&88+x5U;61SoaY>|EV4-tC zp{;ubb?4E`cb7*FKN*~El#sb?zKR--@cJB}c>1$9L+7h_or^Y=S9g<&%5v0}Ey-H& zY`(iYpU@maJ&>l#D+TMJz>1YNXO|tf%JrMa^~WmT&aj@_V%|BP_B_@p-xnP0--uTn z@YIB2WtU7gW{^-Q+%}S`A>V6Hmob^R&=ApV6fY|^7w%1p+-TV_A+4m^Kcqi z737CgxQ*`ZtChINM0$a<@`GDT(4bEwZBUp~q^N4aXUzcOCcDF44&?vn@8* z0<8^AfI@(U;_mjeu>IQ4+IHa7cY;nU4{@y&NRg3P4W;DwaMIjW*tuXDUnD33%?PjP ztB;Q?n-*9|Km~GDU=25CfVL@8P*0`bDyixKR)f5_k;B4lxVWMnI-fX|v>3qsth?ZMv*z!s(~k*0uJ0G$Z$U`nF(is|Y(zldS% zDd#LnXfeZVytcR)i-kIdJ)}}Q`NL3wkogOTp-(K2?7lu)kQ4LN{Ky;^6I!H- zl+h&ORE?-X2r8bc(q|1@aT>OMX?>1agDv@lDQ+(kt*HD$2Q!Hn55{>M&6UPqymmI!lW&Ot0XO2*gY4GKW!E ze?9YfRRD+E!nec(Fx8ry(BgD6b_3(h0qIuhIc#EB61>RWRBK$PAkT=m63VUe`ZN+A z#@Co({mQCh#`U0uqOb(Cto8d+S}HTMKK$8F$F4nKefwL4zPj$QH7;Ehfwx(I6ir0D zDx_x6>7rDv#UWoGyhhx;iOV-LMS^7Ft}4I*R^2v+;LG!NqB0=mdl5*7t%SNz14_1+ z8wB=%&^sywL%!v%n918d#&-_sW43Lr&k4&2Ha|J=n{>DwcCZx|0T>DiZ4YLgxQ zx@zRkY_kOjdI&$BeKGEgm1Q=3(|~YTeq>z0l$&Z##`WGM$wdx#-o6^F&^x2K4_%~P z4$k((_2sCK5BmoRwR03B8D?)Yj^m}=m$L5x;80LF#eetwbV^Sb$>>1$)ru&3t)}EQ zl++_Dt1)jIliDbe%?Fsqspk@X@OeQc@fH0p)p64*t1f?N{T;D0I^0--))`iDjd6Yg zgXoRmC6MS|R9v`J`+~-R=zLfbP)~WN4a~Xmjn(?jL#>g#axs(CS_58+B0cr8lf=4@ zZms9_Q_jy3)jKQVKd-=H!<&SCj8`MbxqT-yz9>Cn7f-RYfnB_+*m zRjL6sQke5nPs)06C#M0p4aR8dY|$61uF%UvcXib5J7pG(io9~iV~7S90V}jD&fT5$DA^wG2pnke3z^B zRFMH z0&c5=n@9A_i=5BwBTrV|u*#W%NeQxn#V=9=O+>JhQ)JM?SuW8GD49{NiN?OKrsT^n zNWgV}DO0B&Tt*Y-bR){+xNW6x*fs?za7BNhGN&!(0mL+e+?}_7S?z!PwqKUeN5`HS zry)MSqT6XA9ve2yL9>m4-r);ZfV+yO>(dXXhrkmp~RP;9H==A5J9w!S__Mek7F7p>} zH%nE!@Nw=bk$TT9y3IyBe>z7eex>a>Cu;^#IS5}L=po^L=94;hWJt_Ai>y`}|8N#c zK%5krFF-vkJm4M#x2f9?f^Sc)w-4i+9vCo)*Q(DuG+T=srY4mqoUio0=9YkzxS;xz z)%>tJ+K|J`?>$pEoE6?Fjz2YziE!7H2#V;SCut55qu^eimvXy1vT1Au6+ENH>8?!y z)O7@M3rDlmWYKe^FP^r_B4FKp?LZi$)=EG3!J=36Flck~{6{uk$d}~@&?4pc%V0Up zE>TN381YtdoK{B!&8;0t>a9dqYMFp99FQ9 z^E*UFanZfK$t!Kr3}qO#vj9O!d(uTThyx*m*KoEG$)dM{+J!?%GJ`Q~UBawYNw z#i5OD+~%I@NSZ9~#Vvm)G_N(SsmF;#va{}P(8n>EhFC~}yWcm(nf-$mGjp)-R!xbf z%T%IsT>eX+SD~%$L*9xC+QS)hq16s6jVA||)~h`qAoj^jQ!PmC7rv|F!V`XFp1)}U zo(x&%=$0V7_rz}UD{pG=i)x9XR(pa>P$OYqnX6t66&UPiuz0VZZQ>>wwhtUrYu!nF z-KFl`gx$3ozqZk;>=K^Py&Ep0RpsRdq{J?1&8a zAXK15xnH}K(MYJ%URg>mhT-fB2ukiDFLnc$oG0xuhdx%eA!4A9jqmh$rNrO&V>f6n zWzg5<31yI@Z86A_oa@+tQFgrd^K<}pyr1u)ZAs8R1tS~SK{<;7m!Q3m8s&#c>=5%W zH51s~+ZZgE=+DtDt~R(6zUJ~C$j~0=HUBwCCAY29IqQTqka66}RT%7K)--X*8X9f< zdGM z6jG{Fc5%j^-v^o8eNy7GhsrEQGDw`01`Ag+YBy@YVRc+eK1kRnZ})x#AG4W;s%q=l zQxpV151_1{+cY4252$G zs_WybX|SH!G!>SA1TeDOLNYks5CIkzh$@dG9k;tUEase=Z}cjTA`)Y^J1=_sd* z*-Gi;Y)FnbOVEZw+F@<^gaPfdO5=^%{BQQAI>0bQ2)m%;iU?M(PR<%BCg;cfVYJ;biD(;qMi$V;On!cOTTEwUJovQ8R_@#~V^@{~9afRkaD){W;%FKc+(Gu`4ajq4 z*wkb$Vi@lAK8VH!6mn2kgHKKr=DxAD-WWPu&d>7ug& zeuu9Nc>Si7MC=7tLqIl58{}w+L5e*4{<63NZL@K%$GU0z9Xf0x{ziFDVv|5eJVTn+ z(*VdK+*X%VL2T;{(&ckx7w0bL4JBE2<49z@>51_Ve?VP5EC0=Y!IamU@p}bnJBRpQ zd&F#_Z`;cCi76B@%_*{ZcJJDjJVD><1dXSPzJ{L0zXxLP+vJa8Fc7;v*F8#3+7P^F z?mq?E5na3ff8>}uOrJEF+tK``}&m| zX@AVfv%k*>`D7Gr8U^p?oJ92IvyNp_RXS)Xur}8?suwYza{I*O*IT5?(eX#i-#_g+ zD%jueuK70x*UhJPUx^NiduPanYr$j^cGFR0Z7@GOu41~B+UMubpBVQWbjWKNaghe4 zIio645U0RpmF(bM7umPhfr%8MgDs&L6V)$IDJSUIHo7;pmbO1E4M4vXa39Mnmz-Ll<-wqzj zbbqWc=@oc!u+wX(f_iL^FY79Bm>?Lr2ZRM)OcQ`jjrXP;h+z9S%RJia^C56z$!CVM@bJ7qlB;;gkU%& z5@{J=4HmHMybu5$kSF*V>zIedZq0Gq#k}j;9?R;UHsv!U<0BIN5x6!>m`DoUuPM0K z&xax8zkMU7;v1em#r;MMf*fkpncph(>>4=p<-m}+q1QJR?8p{0&AVFMJc*Ip#?|pd zNJFA(m`Licf)2Qw*I@e^RO2q_Q+@muyy$&Kjy6k#?$SfkJp>XFgI`ln|ARCnfKD*z zBN2dFUSRokrhs6w!9AMRv zz5VZhn6V3N^8r$LTIkdSx&Xf==Q>zeY_jDgEwi28yg6(OSYRtu{cS7!lP~kPZ>Li+ zPG?6uO#w_p-3@Oq@EchJzz%!Rzwz<&5zq9s)dxaS^;hGpZ2t9^`Pb%ul3*+EGHd_3Px5v!oHLotd9sVNe5V-!C;?pa#vC(VQ_zA zIKtK*XzZa2bWa4gv*H-ugV%&SWyC?shR}S@A#8}(Tz@BtlLuG~Eode<@IH*Q6NIuA z<`}B3()b#>G&F6w{>QF5aF3@qG7MqD>(80Hqf(4)DK-y>h@)CHR5K)5d+* z{{XCmtEiycmq4ZX4zTQDeZG8hf1Lg*|Kjv7X3w)DL;>p>#?KbJE`c=ME6D#>Y-dn@W^_?ZwRpM=)eJW7d@7M0lfYoiHbR&itX&mt&bWbMktcR z|8&@ru_s0It*=>Z~R(%3cndTeOBB z602I6jRfM-hy~$N4vVWCXOMnJIV!(8wPR&fu^K#u<|Y+UK9Q%8%;a(NR8uv|1vB%l zanT{(ykn9$XKhH=8E-a=?}*x681N5--bnXtLbszp>(8cYmWFHPo&=u-)4pIL%$yOY z9ZPtI9HNc7okX(>sHs{Y^@2;`$uuLPSrN2P{qx#Ir&^nD%;%#MPgDcz;0whDxQM|mc$nV zmHUr;(K`dCB2j{=Xnc?yPXz@ zXv5$>k-%cy)sw2$E9H;!ODQim$y1MhkOki!RM(?oBX~lgO22DfSlhx`wM@_S6QsB? z*2c=M756{5f^PDDSlZFykvw=Q@#)XTk4J}k43Y#KCrenwz|J}p4b&p*ls#`3T@PU^c%CWeRkvAt*K2QyOJ9!C_IU?spz8Q@Te(H6wV$6X0HZ|M zc+$dsE<~-y+o^=azF>rCEC!Hy64(+Q+7x`>c0b*~8HrNn{KR{EFTP3lyV!En#vkF} zR`uqI)l=iqQhOrR+J)GjItKtxlXKiva8_Cr*z-<|IXg3662Ua6?Ln*-nBwVbq*u3^ z=Vc6vkn((Jy*NXREX>W>7^&kpPQwn$LgYRVg1EJ0i%}vS3=Aqx^-tl2Ps=ky&eiStcE&KHK9qS9ecuq zX9EY?PpNs8?;0q4t6=T@%~qv76n;llYk%FN1T_$QNIi4Ja&Ol8z+3+GxXJ1Taj*8+ z3k&HdgwDUL%RcW}9b+f$amkhJv~GyGhWS6^tQ)=lAPHoqFAgROwNj=ZHtugrANDGu zq1Q9b%(WEpWU`<<3x|9 z{VY0TIjE}3>$<2t_Enr3V3;x$-`C84el!60%=E@NYxG`$rNk35L;0j1&FI|P-lTt# z6?oS01iLEl)uV~Bva)3k6`8DhRh)U-P-La|e18rIS&3lriA2ohZ=tZxS!0%8Zw_X%quIYt)!CTR>pXA*0-*?U|C~}$megIaoxsntP37lP z3YKE0VKBCh#ldq=1`&ULQ$GD`djZWZ9uxX43!XOX#K@R*#uCZ7am3JV5!<}@PpjHG%kSC5y-t59fd`Q{>H z@o%=ZWxnZko5;sZkZWT#hK5K(nVLJTY%H$6H(L^sObAfA9jO|@VL0`3e4i{P3?%*mS-b|Zhz$yLb#0pOykx`$h85y zX&^(shX~s75A;@qY3M$GNIy?#2ofKpZO3@3J7mYUhN&-AxI{1#*oIg`KG+komfCtT>$u4N8VKfvuqBdBx=>Vhz$?yt>>#wq}_ zDj0RgbL&|QZ?Jh<^)HbG!_}!r_>dkV-ev@*#$c*QRts{JP zaJ`C7+!J?BN#@|~i^5LA!J1dQzruK#WUIZKMIID0h*wCe5Esc$ju3fUcF7+1*qo%( zEfgI|t4?BeIN80yM%u#fwD1Yu0Q=m5_(lzIKM8o?UvU~P`Ib)m`+KJ@>zN0scG#~r zloB8LTZ<5Hz%P17n16t#dKyG7r~9jSzJaBo2fX(z*N6_ZwkV&iBi373nzNK0P#Qy&cJhrO* z29G44r&^jp@`gIW1gy{`phv-h-Ca_8XRN}n1Sy@|$Ydi!o|#25q#du2@3xZ*eS2Xs zIT)YYQ4N|i6#oy=qk!8wVs2MvHrB!b1Ky z@_GaGtCakg%-Y01+NAtRpNYJWKcDeT(Vgl4;0MWJa-+l@IXy!(&6cjF78L^E9e2K+#@ zrmwu0;9QTw}RBNlYn%Kb}J6=93p}Jw_ zFFU0%W%KRV`fEX5Q_vL@)7;D~xN+pO5oYy#B+kf8AkEi;n%$|JQVw*`KnAloHFrKp z=*I3PJC#3+^duf)PMn~4(OA#6sbJ`!Lk71Ion@ta*&cbzqCZ2nA5WSn8FUSSgLw`I z+Zi>_tT!2N%pC!C9_9Q!z^avwCQ5c#s-pb+VEpZ+3AVzT#vai_ZQv7by2UpS9c@lF zhmw_i^~01a+8qKNG)Pl|B;h-K>C#5_BrX&2O{h8EtDKO=7bV~L@u4PN#O>mkridZp z>~wh*i}MFlJK@fCBC9|p#&n^j>a9A86eX$Si}Nim>xx&5OLU!iE<-M+PauJm&=84^ zIacuiA0;zzgUaD~k1WwC09#iZ$Ok@V8PFSnMIiG^1q&4-F+386#rrE=1i>wV5=U59 zbC5wM-C>VL>}g1gyE@09H4|$n_ay(u(fv|YQTHXz+SUletckkkTEA?#6I$seO%)K) zD+wNpeameYF9kPvl)iK3#Wh)f;KhE83CBkHp#(W$%@vS{!F|DlqYs}f2DNBPdMAq# zaEA-ov^*5`e%8)iOj(N*r%W8})2xXAvbluy0$w??ITOa0naF@%e6_*hGV!bpNy9YK zejBGQ&uFxR9@-kOjM8x$x%Cl{zxAXkZGx|dzY3L2tDQCsL76wj+GMR8S{5i~eWtO{ znjB7j9?@Y`p|}aD1v8xSfBvfdbv!FCvap z+)QFoxwgB(MGrY1Jm$=Y*g?Vk0pMs{kB%|C=K75f-QV7t?c&yTTJOtJLzTi_xW7TN7pCvWL6f-E_)bH zb3^Ak;V?h47z*R=w!8qcrHOl3)*xNrA0)92w;3nwqrXuW;ax@t?NtXgXC}=FzhU`a zaMA7N*eaU8nuD&tL;hmtoDXgjsUfWZZ@PxAO^7N|H03K%F7RU{SIgd>veFHMwNJnxp^Qyj0 z5Fq3WPYH{YrJVxm01J>*sKC4{zr>+`g93hsKXg+?tJYO@iD}9U zDrP%gFsD1m)s8>*JYxyQ-*p~R@P6Th&QJC!gi~!n)P$)WG3ysvE|0FSs!W2!3f*ET zMD!P>AZLG3M{6-B-^p?kDPe)K+X;)MD{I`3?Hv!VKJol6jgSc~rugAd>hM2>r=~Y} zyF~yxh2W|vbw<3?;X983uaaL{;z2UgW|t0(<}3Y`!^&F|yQ%eIO;fN>qQkXum(m-e zZ?!qCIu3Ut^@R=Qy_bidtFSB_uA{;dhcF&dho;@UFJmu}dmV?{-%lMPIAh4J=-2Va z;pFdAi*F{h-iMc0oW@#&*14RW-Cem0i#K#OY(5b_&2vf-F_cieMmG2J_>)v)+G~l1 z>tO1$umlRZt~NX^HZ2z&erSJkFDCrmxxiRm{+^ir@$G7;#^BqlR|2UZrhohBA;Mt} z`1FxQ`NccSnGwZkc*`~F3F3w$7w4zaXWiwUOD`t?%$5B98|ErOOe$b|39xNx5pUV4 za`f5k#BbefBY965Hn7vIQ{`abaatz$W%Dsay47F80p*`y)@JSIt_eOZ9HDA(p?RIi zj1+SCGOi#6notV_69lCARywvO&aj8(b))NFXnqUO-3)5EJ?L?;tBSRYeZvfWy26&X zltz3($V8wML1ejdu>l$m|2&ZcUX^MspVD#wG#(6M8vrCdpK|p|x?mQG9KLscD%7Y) z!Snou!xER5bNG@dvdwEh|8Saq>nXhGs+(sw*7=)z%#bNKB|oWm6E>4O)7;Km-tq;} zOaX84q+Trd003EdAoqZUl4cRNWnd|I(M)Fsnpyp{d$`4qcy9AXKWn zK&P0TqfGvQLMl)$Ork*$WZw3SB}l!aT-i#XL&P*%Wvw^D(w!@up(Q>Z;goaapMYwMj;dvWb9(Yu<;u4-!MH^IaGxTmcl5Pcy9CPtUvwq-PTa1{3M{y zFL5ttaI6znTY30;-HQWk(|EQZ+b39lpp6w~xLrMkGO)1~Gez{bWv2x@Ef#AwO$x_{V zr{2Zm@3R5y03&|RS&b_L%NJOl`cHYU4gp4g0L5-?$Mk0+JOnLApN`!Saa?`+b8=Fb zIJ6nzm&;kJ98nP!Kh}gdt;F~SIkTAao4m#$LDElsr&H%2e&Ia`4`$JXg${DFz>Tt| zah_d>80LS7EY_>vlc$#pJY4B05dDClK;-PLdOxDUYDni%U$6Ls$?lr|oyo4$6l#_G ze9}I?>UMeFL$k2@E;iO+Qhc z_~#&bSm!rL9*3d-{w>XI>Fg@;^Hhrongr$Qt^SBE)%Be>&5vWbc|&P_zyNM|hQbY` zQ!hAx0ey$U5DDIqRe_N9V?$BFhkqn@CI4%3*A@(}MP`@~{CDy&Y0m1K?{Bz^fi_}E zyH#woRGsz52#TW8rY8#^)x9EU=nUuvEjox50~L3JKiC)BXLQnQOn&^WrwdX?#`j3lvPQGQN*FOdKgtm6DafdV`fDEP+z>?(LR43)Bnh#ru`(Wi+bpLsJi|H_}bI8Y3# zzcL*d_{PK*bDSioBK*;J8}*NEgs-oH6RLTW49w>L2qbfN#wRr6qcHL#4ltzZq1L6O zfQj^?n23Ue`~+Ykw?Ds23h-P=fY1)7dmxcs)vqb0@N46MNG8+PjZX88)%Ih@WGEbpVoCMJR;I{dUalkf8K$=DNy5!pkO)q4BI@Lw))0a zQR0(9Lowa+AKyTsVUiPv*o zmet>Rmrs+9YeM}|*fvYp&NxYB(r*})Pxyf*bWizZ;+?vh zv_ITs1T^=X?CAYBNHankgq5WQ#{h z8bAj|;H}svt3&%p2W3s-+)63IF2F}w6Ug<7HV8VPcIw0&V&0;PIiKraKl~ls{_$8Q zQq`!mc)c4yPKvrMFWLTo43qz}{BI~BunWwyug(O0h|6o!+8I9YiOT0i{$ zT5)<&%~UpI)JRVTrKR(3!J(4W%QNFLqt?^^q5KaZ_QEzq{ZW#$APTA~z7Z@mZv;JP z?9UY0mr>Klw4A|7ki&_x<(;C>K#=2&2?lEk=ft3-ta!@uA=Aa~eT;+6j>(F;9lUOL zhA-x|3D8+gp?iSGuY5gYqn0ogVJiNYPc80{f; zpLLX3UmE2-5Ov$^1f68({|b7+2 z1rw=*k;!*Qk|^>=WFW=4i&BBOCuhh4BXgY`tjFWXlA-8wUZJDqp1Oopk`Ix&kceqd zvW8FmXb#ca$_5JcxX=~=Vn!yX6!HzS^Qa(ruVTUAz5W#D)8Wo9)G7uU-SVfBSyw_QK}af2F)3Nxv!YdPZp0&r!Nq zmze+>ndBzXgZZe3YYH7AOrPUQ@fVdI5o2mr?A@?_HiaDTABo6PL@=ui zYFVwUKP1z2HbLo2-~SP&2!VC2_J29=iMSx&L0s_a=Syo>}; ztJa`LzATQ*E8JrVv13m|oE)Mt#JDxPn6O);#D7^TN*2@FMXW?VaHpWd{!xfe%giI1 zKZ2e=ieBPqfYY9i%0oU~BoG8POY(P4aunbf(Sy}S-Qo6=d`?8B&Cg@xzb^8sYyy!s<>-W2+QO!UQv)jW2 zqL+~#L`NZzU|XE*cdmIZ%NbJ2??G<03dH?F`Gt+3MaY+!tmHsxy|7t`X;5Ko1 zhsxTn5QX@2>w}-wsYO2O4x3N?p=3oUHbRYwUA`yC&nQ2#Zu| zTVqO+u5l|4;G~p}|G-IK1VS1r^guKW81{e$uSpjfh0|$Bs@A@X>}+G2q}*-fl>zd@ zQS-ukQcr;7zeU|?K$sjDB%CAG%9<}Jkp zhRGX6N4Q*sVa^A)Io1=OXblI_T*kbv*t9%YZ4sA+sp>##pQUCu!fx>YyXvR23`D1zRAV!58_`G&~Co-3|a^^ zbir=OyE1w=JcI?Ro-GJE7vN+9)dX#P#NL&|GUCZV7Gcdb^hbT2XUlR&GnH53Jk|?O z;aBcF_v%;@wUGQKdAs3@ABdS0mX9Py=5y$xz4mS1A}4EHs1WxB2QRV?$HvA+x)OLZ z?Rv#d*|kbc6gRd^Uc4#%wKgOTO%5L$X${&|X)Y$X_eg+R-nsbWGjAolnMTV<%C}2z zp9ikm)5RAM&$!&&#b?uA`m^2|UEhmog zP5`0LDl0>KGi8BQ|IS5 z-PRs!T3=F{hG8G2`zKE|Nf&3)HUBB4bjvX=arlNiR051j%7oJx)yEGXZt)Zwwce@;@q z1oTrX2oBC`77(tT)u$!@A@QodNn2$;x??d+cdE4_!k7_W|5B*LY~X?ZO$Pt&b_R^1 zy%uUUHX%S#id4 zA}oaQ3tAK=`q!@WZ!D+qo0BrAXxt)razmIWF|^TLoy+?3>XB)&w75wPxN;z4F2fex zK@8z-w)xp{E%t>eb8rRY#dn6Q4M1dY#*NvH(9*)!2Rb#e(O(GjpItBFxJTk5l9h(m z&f}c^R!J$~Rc%+AgvS^b-!xTs>X=XLp4;_@c&jHwXcgv@@mr>Muj$|ON~cTb06DbZ#IoAn z%wP?`e-roYf)IlVJR@CZrFfEvgrC6T9ma9#^=#IiZYJKvh27PpHUUL`)n8uphiw`~ zA#aTk?REgf#w`{48Z?9WzT+1-cSEsH&)xQxR?#%5K34fvfy$ZRNy2LQQDB1jVmu~) zsu(F2&yEurWA|03_XgHe-`kJrF3vm)5paiE#j!cJ&(R6)ZvtzqDL8;-A^tmfyinpLKIMcNOdq*SviO74-B3DMu^|jMXr1Ge|f-isbJ^YP^TRVy9<`?A^4C-VhFW6olIvQm# zq&BD2xyNyRQJHM+YPQ>H+b|KU)IVzq`K40hhqu~}_wuw_7uQlU2X6xVKx#^9tnJXwy*nkfTaFB$ir&V(s>+<8PjS)19jyY)kyJQxqgOdcDEpVyp_wQ{{}w= z23+h>mu+vL$hJDOjDZS&?_|YT8E_w8LtU*T!UEA#9POezwrfBf8smFA?~r58LJ*2z>ap!ROtEx?7aDfr~;~_nb1**v^=cndk_BLznE_D)or6 z0;!7iQXuv*(z$`-PcJhvCz^jtx3z=dcU)FSEb$M%C)d3l$TY3*F56nI!PoHY;DoGE zvgYp6X%P^_E;}z&1cp{KR^?grWoVAaz4?f8s8TQXv%kd68P05^`vO^~_3&#+%LU~~ zfu*r0--@grg5t)10z!$^{sf^|Xd4qM-~TTN#hv&sRjvO}$ttzl3JT*#9?;9oU@f1y zRs4<|y2Q;Z`Z~2F=Au`{+>Tk%kNv}daUZX^F&csDp`Elq1rz|62cV~^ITcqsVPBqZ zhgXB-A%>pwOu(08W&mPJEtXPPpuJ327rYLH_d+Feb7lwO#poM4=}d&z@i%*stxD;O zOubr6GM8*3Z`I*F^LxvIe8RB1YuZmOYF~!4v^1RFSCRE11A&B7%G+NT4u5S|^BB89 z#+Mz=Oz4%Xn+z#z?NAl&16`-ylk&N^p$|HF4(fNNVC>Yly7hZIP4UY`f-KPTvhI&HkPc|5_!UM3kPX<JLROG^;EL7s#6E_FG-#7Amb>Ox-B;@!4kGcG6J0C>beS&WDihZ`;B$BZ(|Uv^ zT+!(?Pb_`iJuv_w6UZ^0uJ>c`sgev6Y-Non%A%xnCu_7mn&9o)C*ZqLacYqo?o)ts z2yLso-Md7NLXt_1aXcx3@DltLTxu@6_*1vc2GD`bdSEZ%gadHRIF>3b6nrX4J?8rK zm8Hd*+uj(7QIWdaslfyid;vZN7~Wnkh`CH(R60`gosZc9T}4KAmqQ$5Z%3AA;Ao6d zDXlTTNA2=KK%qWfGwZZ}4m5@XnV!B3Ctmq5RY(SVs=wAL*Wr7CoIowJn!WH%>J+(` zYi$hsgAN6j#|?fLrDfY~dK5H;d}Aba+zxq$-yoPCRRi0TY=;nrnmK&3TsC)|y0vH} zhE|^1FYLUPDVK7zauaM+aw$D`4^g37Jh4#DUtgb^7x|cHn$DlpUZnj*rh&=sgc2evnID z4lH9;VB4darj9@Z%f!~*!`Gn{spv!WrO6j3)B`AxAwag=%2%u6iC+GCu;mXAD3?dV z)+8~VC@e!_p#hPb6aO^+bF$hoV0?$BNS+8t^?@9%3kA%>IiaE-r^P^?qH<@$U01QX z>`kyp8ZG=F?ZgN~Egm@6j%sTShg#7L)~N#XK@{+vkK1&!ewFbjLo_^$$;P}<>mKcZ zu{oR6rmcaYCY&t9X|%2|$%}cTlsT}7QE0^_^9OmTC;6lz0}MEnV>A3Kg~4F5E2_O^ z@Q|Q#xpu<1*3EclL4qd~l6B`5#{7ce%T}8g*^O7EC_MID>pOM*D`f?Y7jTH&h+DK8@i(CHJ|XiK0pf~<0^ z6aQY-tdsQ4X7g%~R+S@n3Pb!7of4uckgT_M&LDZ|7O^LwZO|TwTAll)?{>0jJw@l9 z@yA^zp<@~0Qr@eM#y8mG%s^ZcWymkF2}d+Fuaq z9uIQ<)9pS=>QiLYjno+Om~7*5@Z-$6SI6?9YdFtX?`$v9XcFHxF=iJr!PZ@qrg#o^ zSwUY9*R=Cjz3JlZ%~yVV0jPZv8jYzYs;Y~;qFds@HgqG#oAv_MZ%N^S!U;HT?Ex?L zo}7+WO9`T(SnH3nO(54Y-xlXLYUaqimLGg`9tWM|jWdXkIs+wnwY0Mt3xld;eIF6Y z#-J}8O7vV&XYJ3o!t-@EDN8kPyo3NvmrmTl`@{=O7P$YJ3AfyiH=jjlYP_ubsXa2+VJWSQOb$1?KX< z5SUY-Aa*?Mc3LDlbdzJN1e-zVB6{i1!Ea!3QWM40kd`cDcqbzn zPTSw5PE6TUknG61rpxq%k$iK!py0I(DhT{p!ub6mqhQK~^gE6;u)GF*hxSsvQFwjA z3M$A>>p(z%;qEz9Ff7PzkS9-x+w1>HP(^^f0U%xZ7yK>h* z#^Am?j5uI$&7OJfHh1k!^ZatFF#55bIai0jz!Cq715cE`SjDi628 zw~Sf!Ty2q~vp6UsOdyP0yysDQLrD7a+UI9V#VOt}P4it*yYxi$8PGa`P{e_5*PD#JwE>w$8qXY{w3NLW+ay#A#pqHP}>)^dT;x^7Z zrq@vv>P{X69T97CWhL;dzHoO64*C`dJsPG6lrYiT!m?+tuF`;0dmqYwJnUQfWV1`Wc5(k9{4R)* zYX6Rrf=~s(8xgwWNwRroV7}3#BmE9UU+QS_2|?KKd%O-FYABiBEZ6Qa4}$#G3U!~^ z2{Ty0F=D$f91AJnwBYl1P+yJIUT3O8UN|tJ-H)Ihvv53v;CrxTfHk&PKkln)ZHy%) z##fi{w_jjd%flKv`!){)JJS!m<7Jx=a^OLjA_Aw0rk*R`%;gOml=}2_oBP+?^?wx9 zCiJ+7A!&d0fgX6js?jdI)ZhZx0q4UZ)QL=ZCPTFi#{7sTQo+`zE|p)a+p`CPI{wCEW@ns-4dKdw}|PX8Dg)^Z!d!|1S)m zv*hRi+^B2B=l89_BFMb%JTTuXp_8;$eL5gyAlt6B{=^&S4WbE!1*&B9@A%<2MXS4H zUZ$6W8|mjfqstHvwFN^K5TxrT&lCOy|FAk$($R0;VZ1KX#?3puc(dHZ{2FG9eqI>3Z-0 zaF?FD$@5yw$ zlT*MkA1ebXX@#MA3%>T~wllilwI-0frJ+@uLA3!0kdqef!*<%N034VO-j>Nm3E)U< zq+NzQZ5N?ih?j8@F}T)W0;fwEC?sRQ0Nw&a(bdjgbQ)SV{EsE+pG5T-;E~jnY>bYf z<&t5KbD5w+y}cT*L-}3H4ZMwEV5u{j?^Jkx0R7UfKbs%{lEo8L4*~y*33?|Op;&cD zROv9Ru-!bbNGvE+rKrkhEP>!#%cv%f;4-Ddsgp9ihAca^_idQ{Vek88g4FnVc{G3a zNRsS{#%jGuZ zwz1g3@X-9>qO@4x1jCgpeCE$s5TGB3ry~9C&nnQQ2vlHB{ZP?;7WkA0*2CKlo1OfH zC;Pc4nOO`6fk8`v@N5VM6}kQLUq!WIpnWHo`(8Wp+apE8C@lx|PCj=L*(;AQWOVl(^NPb_5X*@Zn?qH{m7~wrChyA5s*S+7W``Nc>)g3G`Um+D@?H)HQB>ERX zvU^bHy^Y0!S21N+0)jP8kwpmzUIPDiZc!c5g*TnH-V;L+0t6*+OY`;smoTB4#4GSR{4BV+>^+S6cbs#w$5mK5g$FJ_u@S0zM|*q9i(r6A z);&z%ex)N|trl%Y(bz|uITvDDN3C&l74rH)ak#o399)0DIZ<7rCT=I>I{ zcHKjkp}))!V6;Z$MHo?XZtjsN2)OfL2&@%?4r3+%IfD=EUAFa}p@qQU5#gxv!KUk4 z5HL1#yKODxkw^|96`FW88N|JdQv_ebuNb#3vXGlanwnG)Qfl zn7so_8(LH|qhY|F`i_}b)fy?;%22b13FmmdNu4>vwK3Z$+MldllM?E@0*uwbrLLh% zMj^gQ>>-2wUV6-;qc zNF=5pY2pF(i;F|1FJ{(u$VSuIK#YahZE4bFkOx@E&j4VVk13Iepq?~zB!x9+<(CF`iXW#i_=CQ50Y_(^LLSB_if>}u;h2KEtYu7sv5mSu_6>&+|3lF>C?4h{~bIcm5=o-Aki zYihS$BIFmglTY>UAnL8i-nu`)w~`UZFBDbwzuk)a;Ch4l&U&hrjWL@xg#%zyreqT* zN3yGbCg;!~UA@6rAK+HzO zaZW(qbXw0I?SPw7Cyjz?P_JGEtuI%;6fPv4V8Az8YeREFrX+xif=H2W+F?X9N>0iH*Q9w&P_VQONTetGH<3P!DegTu6NuPU_*Z}S~$pfVk11M#@ zwM>=X+Je(g#O-Fx1a$xOM6rS;;j+s-_R^p!xhMrOkgfiPC7am);{|HUPAR>0N8=ZY z_TEMQzEz-J=HVQR1rG{`h!fT~X0S5A(c7g!Y$J1+DoyGU_T7Ki06!K{QbJP)*#jAc zK%AIo#87T~jv@VyK@0eFjbWGzQIM4b?S=7BA<;#_BI<_N%?cL!JhQb%>bflka_~tr z0ye!q3va+G_7L|6+k5;sw?M4dLp%?>2G!x~IE&}HRywZ*BfG$|lsVgCQe;?Lt1{2o z{SX7bkZ5u7Hu&GJ!NP_Pz|v7Fnd=C#kbq#t9az0FAFc%LJk`7bL7X&6R~5nH#7o;O}-h{I0d|#W!L@F1Uw*CZo{e%S*V?+&PT85u{WiU8 zL_niM)H-Jwyjg!(vXJO38Kj-G|Lu1ET}=?oy|XX2&Vomih6#w;$zy6)Fs(Id<+>F% zFaMX~v;#U1|Ibk40pMw+TxBHvZ@|XZ>wE#Q?B$O$_th}C{0Rqy;K2^e^woh zlwb;B3{U-Ro%S{sme&v*XIyW{+2CBd#Z9l63GZ!UNC`-12X`hOC(TsU zl?~Ug$~Dh0Z!~=m1kuejb)&~(fS5H;R1A)N1{B81s=GM??Hu*cJ4do)m|Wruhf%L; z-gK+)TZ_Y1g{zf9D6Gh&0=znC=k<)ImMseVE2InC?5y&Q?g7OqO-;EnU{0&iW{3E> zo{;>3-KEzs8EKJreg04qxCdhAozYHiV9Ud05Y9g{>115EQFCiuR4+n|lcs&=)f{|( zs8B)r8DikgwuA<937eV1+m(hjy@QSiK7~gLVqgjMDHanFS^Y z*qz>JE~~>7mOpiXhunn+_&BXNLn9b+4tw;MbztdIbL*;(+AsmjQVcgI|FD+~nN>q@}U(Ik{*gSF^!;BC3o%d_VaKepSR!PYG&*hgah^U59;|Bsb@ z^q-a58MiI^MC;o@M;i?1+y0$#{7jq2?aGu!LLX^ubEJMJXm@kq1*;& zb$ImS(2uK%E|a#s=hD4UM{HiM?u9@T0OEdT^IWn#$-8ED6v8Db^kvtp|8vMw92Ti2 zw6{EmT-|Z#*G{;(#)GWN_w%VU%)F#}Vsr(LicHD_mc@d~Po>A+pEN2DEIV)+&gBgo zdLG6vvO>T6N?@zCH?jd`Ivqp)h(y`=dvFbSRB_S*yk-kzmAKaXU!x zVD5@q*TAfIMf~_@mo}nSdRP?ITZvoUpjyXLFXzEUcAFdOWq7zD(zLFz5Ik9#ZUE*kUxr?RfOxV?@nqzC?RCr`sV9|P$-|Olc=QNd`m&wK7((3Dfnv$TYeztRL$fF&xd&>E#hO~SxyH^1% zXbq(sz)GI|i^Kf+@8YxT)D?`&IcoXztjx3|^0{wXE8ULvB~b*IZoG47vF3hlM|)-i z4Mjyu)g@}JM(6--fu3d7V{o}dS`9$~+A2t2)o~lVUt+m=(y~^4Nc&1smlzI_wDd~3 zDDFpT@%#Q<>gQO-o#E6YmXFegUwe^&GELQLK#1;TE#4vym3fdhUUFzPq7s+J-al*O zucbtqC6hsZ^iYu7Xg}`D55K56xW|%+6Mv3rl(pulASdG`vHavsyxwkF=9T4YgT>7%sk}Zd+!$_uJAC@ z+gSY_Q!QgrAZ8BB-5{GcT>@_FN)sB#QpKL=kkl=?z9_p|gIu^W zggnsBgd4?vdA%zPK3L!mKU{Jtx62AA!1t0T45(N)_9bYb)fJY?&^Pq(b5t658cx~W ze_CN;iP;N~r9d9bl9x*q=j+?PjT~c5jSIj=?+F=l8Kvy{vqPy;@G6o8*n#}T7 zldsZ1JSKUpyNq35Eww9JREvW&%xf?CIf6c*a1=w@V8(^iQO?7S^-*6=0W6DAPZ!drx0ktznGu`>RxRW1x z*|4NWE7k&~OE``Y3f36&{xS{7qXqmN%l=0!`b7xg8m=eEN8f^BtbJa*Vp4{eBGn&4 zjA@;}2lz6ev*(w(OCl{!;l=+;SG7Rvs-u?UMPqLep!Q7go*4%SC=Z=kB%uzhnuRY)zH#_zHIW5hQ;%Q;r43^y>@`Vu zVdSAPIog5AO@?=XKstPh<1Q##qVV!7kRlq)bvqd4r#mM1NAd#jd5(Caz4u$+N`0x2 zXUgCLyjet8ee zL`r*8J9rvON?+=`L(d#gdMIEhG~)>1p1tE`nF)=2As*L2w!)R`mVY`a0mWS~z!J6; z>WV4#La~q|2sdXF1v%{w3(5{2Tf$qAIVLTGYp`qYRfREQ&57qYp9p^L%Pke`7M+dH2^chStDX6$8x$6BeSR-OXQy=jFHpd|l zL$`j3d6D3V^}&qL=igcS{|A}=-^Swx_9r%}vzGx@`7fpH^C99-o;;~%kaPs6iWFMT zOFccqjRABljbCB$+@hhVay@ibJf{QL9IpJ&+Z?XKM#YKwJj8#3-I%6GSFb*J$_Ybm z7=~RYhhQ#SrfY)+eLcCtFRd0Yk5OVS<_nc=;?%r1vo^+g*Rnj-#jxv}Q=dTRL6hYL z51qPFaTehVdy$R5hW-Z3JUWjId~DWN;Bq@37Mcd;x>GdZ?^)x{eJSnoCJVEDZPedw zj^_Cjn)(C|#_>@M#2R<$9MRaY#Mf$S>xIAl0v&8rg4p5z+IK#)-!HN=Hp|UgMouJv zR?9xP__p3?>Azrh z-~P|~Hj>eD?74^7QUA)j`A3z>(f&^}>ny1IVrq`^q+Sk&2IlR1EjdLo^z@;GT*Z}!~Df6_tYcDxxi z972s^&K&w$KmcDWqeD)4onvIx`6dC5cu=NWOdkgt9i+&Eg4Tub+A4a~;f&SHIJA1_ zy**Kt1JQCi*ZK27e+q~WybG!je^&vnh8)hFXM(^=LxUdCEc$hhd~qw~h}mstpd6}X zbDrIAhVyO)f6Mu4g!x0YW`k@Sw3I{yQ}Wzhvip{ylwW_il`agx6)>-{j6)lf`3Xslb(Y6Y-?f(lCrUY1nfUODTH` zWizW_M4`o7OkVl-c=2ew>$t&2)12>@BuFb~L%Q5}Ek*QwkHM6T#`jphKar?WNOz5popf3NAnNFzkkRg= z9g7Hjt`PAFnc=O}_gh}2vN$$??H!z}Rxsn$99!5_+&lMCFK>V{72W7{^V44))2f{b z=WO?r;~0Z<+-aaUHdHvQ#(uf`wmz|DH-o(Pq2Pw58Z!*B(H}NoU5FJq&An^O|jNOQ7Nr?n?sL z+j1?G$vJHqHk@qozf%?Q#3N=x^VjI}aw8%&_abho+96R`+Cefz(!!wG!XlWUT z?^h&L%9j7|9l#rw{CvY3W(ZWAXjw+vZeJT~!i5?vWt7k@UKa^|U}Asq6(^P#x8&(} zIyu@2wtLA5N30=-oP8iaFof31!xGS`vB&&@e55gSE4?I-K5pwQQZKgW^c1{6c5QKuTnr(N)K(X_5VgUl}M3Y2Rc$B4gWq@}6iT8o1T zKr0f({xqdm2hCMYiS}IPW73D;`_X(ki!WTpS!KU6@ziWE$B;Q;E7dpeKPPQ3`hi~Y z&DFWnlUr`i&hR+F=SIqF!^TO50ObGih$H2Fp;d^sBf0rJb#Y=h<+IXUM=G8q z+MYH#%`#B%x*_})`M{MEyU(6pSn<8j3Yu8^Hu(#57tXmC}T*Rh%;*NSOS>S!Q)*bh}=MK7BT1B#tA&L3|7K zn}JO(*MDY;eP_w`hvaG4+^xeyPz5KHLW7Zl42Z`w$QS#{lIiNIr(W>HvOfn(DxbQX`k*NJIam! zRJzUcv1laO1AdsF^>Hud3ej!St*oNh{^#yFm4aO{&$W!_D~xjXY!Y^U5{xZ$xQHe> z)h_TDcU5(Fd}BzwCJ7vFuQ=2T7>D)lz3eM8=>r*vF(nm1j>Xp1>J>MBHETeQD?cMc zkxA|6B1f(lG(B-2aGK*0io)yI@T0B1;gMq6iBnm9!mdx=ywRTs7c~9?oIWFH{1q2A z{g&}fQ)QT|-1(f@gwcc&!`|2$Fm&B>SbjM1AQ9A?C=Owqb73tPdWlyo^v`kkqo0Fe zP~6@9a5e(O-Ou4U-qi&K&}lG8x}|&5qT+TQE8%ON`LN#(+>dd)avp@gxK(YEmNKF0 zKxc(1A{=E5uwqrwC9;54tZ06qEE$DI`YUApnpmmWlY_4Z$h>y`g7=kn#;Z~I`XX@D z$x-w8li>(4$1F}loVs~wagujH;8ok~WpmLj?s$e6DkvTK&z_(`Kjf>Cx)b8dUY z`V$42$I|hwy*DV)Z)l>nNlTH66l_hH(l5dNSTI{Ulm_`^QX{+$5VgCXf_@WYRUKFA zmEl6;e-O15qJNZsLld(ivZa37KA0fJyui9vXur+~8RPMc{@|B+P(C*?TWYd+!VfIyez8dV~4 zKY_>Cp`bk)*)FZn(){|566Tz*5KlW@LF5yfr%fG*gN%i%L+}WTk}N17X1V9VfAs+w z4&dZ;J z=b0dQ{*zq8JYH}!zKeRz?`G_~T=l|O4h=i4g2m`<5Ik2w2hV5pIXQl`g_=Jpom||y z9Y?wR5+1i6X@Ljq44+v+?%aApdTXa6hQh9^Dd+yNd|bM>pQD2$x)-<*-3$D+`HtK9 z*KL~0l8k2O@?64ema)$cR#krIT)~IDLwPxu!A_xa8bjMdydOI9x9;{rxsI1mXsG9PUHjOxJLHrkjeU2k^?-7jxd7&St`Xl+~R z65w>X3axD59;eS)ifA?-_l3!QN^|};GCDXA@_jZ)9AJ}_3fk#ci6~y|N>D}2203d! z=+by61LqVvdsf?RFSSdm`S~zD+=a2+83Fbe9T!F;U>$-V-2bH?xN!g7>hS|UM9C~i z9}NI>*r`a6lB={MgK0+|b7amFdF+)*wD@jRGLXP8=hMzV?PqeK@LdMTDg^L_l93 zt)zFID(Q1yr2kOTeF5e=Tu;?0>KZIP*o0mY(3Zo>GyG$yuv{l!qr%cQ-s9GhhOw<( zg~b`gsJr$<#n%^fzMaMV1dZ<=8`7*oUUxj`DdwX^>e2QniH26MHinR>Vb-cNWxm4}n3r^%Dnhp?B?O1CGYWxguR= z8rhE{Z8FJIX1Nw})mHLV?YAsW3xdVXTLDoTDj)|Aeap)gzjgEY0kOqm-lR;oJ3nK` zF*LV(GYoAh9*Kbob9ZD2p%25mcGPsHRDTubjg#y*?j4e|$|JvF(oR6sw&5wE6^r-> zOd6Ci3<@Q75%ri<^RAwwGT8>-uJ;0f!;`@SeR)oh1qF*-Nc4W70dO35L#QIg_S$I^ zXAQflHF*~3QD3pAc#(Uz7`E2P{Q+Xv1aw|c)=(;(7~8wxJsBNwb??e6NUWRT7gm_ zzn;~agOeGR(k9&JJ5IFpH3$Qyqt=iWhp%KQ8~4|r)em2u)+>3RLmT?ZW^WiL)iw9 zJD_YEcSP5pC7{tH37Uhu0;Ol>5=i+YG1?F3vzR@-%s?p1n9MHL)~Js(&3FMBz#~O@t(v zg8U>B%`?lVe}Idzdm_A#Y36=>v1F-p6&dsMXG`!Z|5IbWcUA;^FHl-TVl*|X*}~|` zVpga{Fp!W^jpr)t+}(RppOsF7Dn)-B$%aaNOt1s5E)2waqgb7*bNOhJITE@%mSA*ti#uv8z}outO*-oeB+oMmNh zcIrpVrM0f) zGgjgs<{_&B2GJnpeVVn;fmFR8Am9+v?Y)MwJPD{k_H8mrgc7xv#^_L=r|KC4g`qc& zZE|4030)qd$5OyI3Ko%452T>*Rx*W0Y4s+}LHEf-BaQ1!aT-{Qh$aUgtzuxQp|s%x z`8f=*zAkNI+otgb&9S-MRNT7n&zf=v3$M@|T37&>P8}m@pV=YNY8q~10aqsTnt;M+ zu-waatSlj7iiRCz!?yW>V}ggv?453hiMT2stryD~zSKR*76lDbmJvE1NWg^E6x?{S zxFrG(!P)2vr8LbT60dz|Kx&F>O~J~uTvnHGIpu*YGz5#uDN_#0G{LkU;*hY5A2ez~ z7@W(SbbAQ`V(#h_+^W~{hBsD0PENG>8jUgp2O+UjqQEKQ#O%eZOAPswbDVXgVPL-!L?$zo;JjjGnrs~jW2a^6 z41F`7%!QlZ?%uCN;@^gkTLH)~2t_Ap>)4B#4WSv42B|xaRVh0YsS2=2iy(NCirW+Z z;2v9hF1Oy_UVy9bK##nxYxaYOv_R4vY&p;L6a1xLTUd+UPI2{av}mk97uzsDr8mKL&K32Uu6GZ6#^Qzs$^Ah1C(FuaLCj`AlT8TEg zaB8Ml4RVO7m_{)4I==aSF}saZr#hU09U zdj>p5qv+FYsqL`mSqx8NXn~HIaU+Jx%s&OMm&lyK!_DxD5@Ne90iJE)jEN{AvNt9e zD{mMnVYW8@+b{UTkuV28eqjtxRyuHFL+;}|BYr;TZ1eHXcR|cpRO1}=by?UvDu~|V zVAJXwHD$s8WuHC~gx2V0fCWjbs9wkIA-_6B3=Sk`uO+q4F8!d8W~KS{{Rr8j)qPBa z!@8Zx#j$e9(Ht&oV+zHnfx3jh{lZI_IfbGc7Um~!aGTHj#PH5g>2XbE)QO1USkF_6 zPlr#zBH^e?U0OWs#0YM^N7Vg2D#WBqC^mMYJJ83akGmi6DFz3@TQ}b@0OSLU)W+LS zJjEg2IfWGd&saJSF55*~!>b-{DrYk-&0oU#1)`?Uj74~6UWuFPy4Ypth=DMCx7>WK z?77!-O6@u=%8ZJ9+_kYOO_@#w+Q{m0E3fo>~ z(x^6kkyY8+=tEg)o?KT;*;Rq1BI@P>f4Q2ot6#l(iMj$lbvb*=kj}dmVC!!Dtji3k zpzcV9#XGp)=zo9U-WK)6ii`vscsxtM;L7}p(hvjo4=MbkcNegGa=(c82g_S8oL#tC zzWRhK@$Ek_*U;YrcGuRv6jvWe z{kkTr4^>xqP~&7$s>Ju_q$jx9);^~eFn$k2;P#o>G4cj{K9pg*qo2K~NE%ZJXpa|o zYuUht9@N!c8;K09w45&u#C^$!fiVg_Xo6XgM3}quer^xWVlJxw{h|Boqm8Z0FVKKT zm_ZNS)zYNJRo^HV;er_e=#K}B8wx>5V6^{BSzUv`6ZlC7%y`i?>)gxqdgK3JbALPiXbM_22%X((xBqJpz!`y>KA1It&8>Vz1Eq z*g6r`MR^K8d!Nk-j!nfqA5{Q(ZwauJoKm3p_~VObf4eO8j6-a0)<*>Mgy+~Tj&UnPXLg9du%ZJ^jIF8KMXFPo<>dvambD?JSG=*gW) zB?3j;jzs?aPz8Aqg{LC}R0IAm|IqYro#d(DRxIAyhTpN1^-E;mg|3Ja@ zuTA2S5@5e3`$s8xq-}VAu4VPlfymEv-<#JeQOv{j=Rz$2yWOWlL)F}=9IsZ&pU{cI zjrNkLi@=pzrlidsKcM<=6jc8Wq1!)C(_4Xrd6mDUIzU+|!dU2GUhrDibR0k`_eD@+D;vzm7$<%-IBR%cVk$ya zyFOZ-xWq7y<0hzPyyT?H2b#AT{z4Ic@U(;Xv?s0TEV!he{7RUMgX@3_hlmUh3)8v@ z=i&#!(=AZIO=xAdj&4vHye)nUG)t?TYuflis;)doPv6|J;n;iHq0)D|tmZ8J%Cu{;(mEcB@VPftB4dJSp9zjw=_2^7 z?khTMdBRO22#N`@bq_ksM~VV2Ub<0NGwsiw*?56{ZI`LQB<})86{Iv0&{9*8E4fvb?um=2n>+c%yXHWva^lbMtCUB8> zqTen3cJ23z+Xwu|;q7gSm1}j!W)qy{%ifRGq+z0a-@}IYf3BFlrv<@FMC?F-0c?G9!j+WhUk~7=a=bp!mi2NF88U7ZtS9WNNrweM+J~Mp-Yt3iJg3! zGt_m`5LLc#&U|H{)Yhjry}JwPO>)esn$U9|%u69gS9U8X&C#umw?RoY%TZxap9Kcd z8;&f*J`iF^9oxp)9$oBALmXPun%Cs(n;5MnphJChMy*xWc1Lnl#%MWCOPPQ6ZdjRU-zc@7 zrY|`;KKFeor#Ir3`q-QD(JCjNIH8~63h`Eo*6&VeUAMRs#HON^8l>1ahYZAI1lnE* zs5&`nSJ-ho|EQm{zh+2dk6hZmo#agc;pLoMCmm;Z!dOA3D)w=|S!Hq4&DvyND`r1*MYp@A22XD+l(Xh! z?*zR9!-b$^i_*l-s+86YMTLYHmjPL>xf>6J#1F=sC{B3HtaP53g$tCv-x(P>JJ4yL z=(b-woUP7tWj_9?GZ+pIA!_49cJhPb-Oa#^=2o{kU(Nbn`YIR;GTOK`5|Lb~QEZ*1 zXcC`w$OctMz&Ggz=n@5ko~C z_$d*#mplRoPa@BX z;U4ldd)(V!S7`I}C>&Omvoiq}^~4DGZ9!cYLwq16H*PEAiw%ZELyRb7Z_0D*BG$+G z3)b}!c!Q+U&d$#A*aIehESKAV&N;Lm-!lh%Xg|~A-SuzDI9is92!ru77&}+N5+`d= z(5#DJW*IE8*gv5pW8v&Agf=kD+x-fqw-bAq44x60u`~!tuA04@KH1m<%`tO~W1OKd z;QRajvD^k{K(Ja(K_b3bvlj~t9@%SXx8l{*<=S@H9qBwsqu+|&;fJ=REghRd5EPz6?Dkzz zk-OLmzbml!_0A?OG*&TuLr2n8W?2^=0{M}l!LY_)w?4yc4M=`KSh`pW9#4qgdT1z; z4|PmDKJA-O02I?b${w^YaL}7> zgbp=QBggO)?nylF0t%^!V1oC?R*RVSu=Pb5IrFkEcpPTllBV)^nM4NSZm@89x`EYa z*e+T%Dae>Vc?)PX08@Ry4(_NGp~N&G^XY#PtYGuGeI23KQ1#W^*OoI=*BPAi4!T#n z2WqxN;mD0(^F_{a^@CI|weGG1_gb5s#}0D@6Pb7)GBNX()eQG6wIXhO@zK%9xYqlK z)B<#0sAR|ApalupvF92DzOX|&)}lO#o!qui7Uaem;eP76f~hzMxhE>vQ{XvNy2-ir zTn+TX4VBguvv{IbbduUitR}m1YW9T&z$fsm9AvV{yMIYB-tp-|byt#X2y<~cmVmtQ zRBkHA(DE8=V9BdQH27Zybl;*Cw18gNnry0#Q8pYM^An4FFZ_(EwD`)auuN{%TfXT5 zEIG{`MO7)9D~pR6_9aCOiA{<3;JynTF=76nO+YzyDnp8tQrTf5Rn)mSrC{bh|6&uu+zX+_7@08*!NMTpg;uQaQJP%ImY7_(~|Laz@v5FS42g3o87dN`F4(+#?G@57`rfcZz58u=Y(>xR?&P;6zc*EiVPE!dQvsuz5!s+% z9^=FYXtLdl?b;dJ59;4n-b%F;wM4+OEBwkkz!+$>;^=PGBu5s($RV$7eL|;Wd&wC< z=hp+*1kg#>-e_%u&lNe5M`5#E!n&-z@kjsgHkEUHVp&1)CDZyHa-h)G43uCXM~J$M z7#u<6vONM8bm@_02sNBfa3-cvSBU6t6<72ZdiS`6+|DWn#j4uX3bWc+aoM97Zw<~3 zK9aSsZgQSwv-djYj^br0_wIP7+Y6e=%&2d%{9S$ z<$>U4tPaS~2A}U#ZVodc)DbX)?B`)e;HJp`rXCO66uH3`TEJ+V5Ds4VLR)CfFOnF$ zRt~zz^ulumHc3O=HWkYVRDQR1{+pw9#b9n_b=dsO^~qvc_dd&UfR*6FkRaugVW;7J z_FzGwaWib^-jF7!3Z*ZxC5nhzaFDv9?6$SoTfFbma-)CHsmz}}uv9q|NdQvdvkm@vP@?68-_z|Z4*}3wIICZoIaV5GEI~m2Lxt{=- zJyiv7dPagk$3Nx8j7`keivdje5u08i*B(Snl#biS=Wo_EOB(QLW!5IfK`|B29YAJ( z1Z$)dX-w&)u6z1O*iFeY8=&4>xOQ%jYDRS?tU9(AodahRd|nN=`CLcA3NHw!PTe4F z`FZGas%x6z|3}+d22{E2-F{I5qNIdU3QC87grtawNQn~CNFyz=K-!{PIt2;oZV5>V zDd}#c7Ts~@v(SC^K4-^y?|bj3jV`yylXL#Z7{4(pZ~O%I?FzlEjycaeUftAXjwhjT z!QxEH%IkKWbr@P$H3wyMVTF-!J>{cXly;fl$jD6sP&j@U}^jSrzXOh}gRepS-FS?q5pn8Tv4U(uO!r)}TI;)$O7lyo8|#P7r6$@`>Vl zvrum$Co4ns&QRm`!@hcf^F2pa>raIZvPZg_;%xcD3V;JSR-}<^*TkGi4bSp}aBkAo1Qrz;|6|Udndle;4mxPE4&) zOM6jc)atQen;FkLACZZNK1prJlM`2XL@OV$I0{oOtN=v?z#db2_r zwF0~tGI`0z6~JjKOB+bfL@>S($>X-$U*tlTRW+!FkN@p1WjC_mt=T|WRV#1n=C2XQ z>^Y_UZI%z&dZ4-43f&vDo_btQn~P*w)njeL=&d=A`Q%MS#6;G`&)=##0v|+ z;~3WA$k_-qH0ov71qUMfc;c&tiE67O*ea}ekWR%`y_xX6tWhDfFRQihuYFm+oXfuM z-Nm8}1=qES+D|%GCLHfaRcACRg=+thOV0kgt#Jz`m1}@T`H{xXvdOQB(y5Qo;Kxag zUG%1dH$dwbu#TQ&rusy|jHl?McEbQH(AlSv$q-=>NQvn<^kL6NRKA$N-q{&O82wih zrI|`vg3_cUS`JpK&B~vPzVGM8f0`b@I$l2jyPxzAE@Thhl45MI3Ch~gazZk{tvp+5 z47A^WU+0zG3r`nL%vfF{~LV#$$4 z4)$i(gPP7VJ9ynYtu%;b-NlwfBx~C{*+%3i=rZWHruhqCh~obfbg2)XrV)9p;bH{IO&YG)dZO)`ckM-JE&f1)fD50q$Zod&Dc;5r{0fi4n$ON@HpAWur zCnW!%7vZvtT0aiko4hvj=c>58o;6%jqnp%>>1?#X(G)WsA83ovaiSes01c`~0dPk@f@? zYA%XBZaTPaQJSgLuObB9;_7Z}uwgzWAZ}2{&`z~K3G^zdL!l@NvFTLG}By?fU1tiX)xgq=eY|Do{QG1Dcw zjV6@U4PBCl7cEK86YWnoPh}@1p-ox1@JVI3i}!XXZ0nFY%wz0~$Ogg7uHlrU&M}Gh z^xWd}jkE$+CKqlT(40Ln+*@#JhQ}NNj)&_y3JzWO9U&#%d_sR~>+nfgIq-T6E_{Y_ zPX*PFeI?D&8|mW+&(!W95GG)83(9XY<;RbBg`OBQgwB zcgW*#^DYx1Zq*y*H_bIs?k>b+*KU77f#0qA-VmS-DjNEl zCB&moIGk=7^XyMtE7~23AOG^LbdJ=tL7ymVwT~D>d-yo8eq6L-D~-tM>v)8-9jgp_ z@#wh$pus}#RVD2~XYzIZ8lkzY34&uL&9K@($V;?eHAH@S0sd5b(x@D{_TuUUxqAzC zP5xRd%1MBfaMKRiniW8zpAWL6icN*74nE)gO&#zDS8?Zr3!DNU$*g<2+;fi_3x~5>U#oEbL28o6ZGuVaOZ~Jr z=sk6nA$76gaMKdH-gC^s&s*Q+Wv1yT_upCL^=>Q)U{6qEm4dBNu2i8~6KU0jLfn2f zHE)+$LbHmhnph1%4OKKaTUYTC&d6XxPcpaV{6Bv1>>^enA!;bteZ0}4;WF7}{~TV7 z7NJQBiW})yDu?@T=&*U!r$8hu%E@r2fDo$y~Xo23OSK@ z2v`FCUfu8g~`~h{VDLxEm3aW|RS(|<@c_BqNyn#0UQ)Q)C1obG3_g7$D@@i(H-XQ2O zZW7qEvqXtLnUmmXZBp{1Drt7}dQK zL;EH=`d_QgZg=>w3X6)~5?!DHtQe3W0Dh02Koap$g9_JA=6wX6Bia5yF$sR!g6K#d zE!pziJ@OVXwMAEu4+Jy1P5XP)D;?GH@Db}P=Eh*&aiMUpO7>_*OxS=ws_jm~orLS? zcS+sg!)7JHs<;LEG;1x)IX5kp>AqwclY_f(?2mWhpWS&afPb{U;nD2wCWp?%3d^uN zC0t`d;WJ6iVrlli&Qn3Z8zJ^CpNnoqt>kss;v&fNfG!#bj%=2osFrowxH7!;r$%Md zz#B!81gu`1gUM}6OTf?4IM|lcf$nB;bpo3CWD{6ibloEyyCPU&e&Zn2q<&=|4Zf3W zV}?Cac7G&J#L^H?sz0nI_HRD`TPr-Nr>Lk|@9rc6`~$cs&0FBG)>yYUUEr~#ZL`H8 zRM-Pwu~rM#{jg8abmXrsPnOI-g*#!~e?n7c0-BBXk1JG!?PF9>Z@R`)@3u{c!^c}z zCTKWIqQOKmwmtFKph?Zzcj2k&7wOrO-eBAnGpK^Hgy&Shh)Qdw9DXVIP}vW&L?A?qCeb@MF(=a zIuzBvF_blpqxD72!z7$ly!wS#v4+;fH?}yoEO&u$qv36g)#a%l-B(Jj|MmlXx0NYu zlRF8a_-P+uN0FPu}JzeglHTPg(}?5`vnT z`Y()lt4JNcy|E1#J}T!PQ9*IKnyauRBJf`rIt6sht_`rxfCvUo&`Rznd@hPt8a2eM z%gdj4>7SmS9A7iIRMTM?3N~uKq*dFXb^Vh^NY3NJgmN%O(QVrjcXJ1uBjB+^t6^0V zA5%f^$zz;BmT{oLNos9OA3`=zJ87&D6nAfE#Y%H8@iJIZ)k8>fK6`K0htNQjM52<3 zW4d%&);H-IvERn=ZV5drGg7~gP5d+c-fa(3?@Mp|rrvYjKEL@_rQ&J7m5LidCX~!7>jc{+E#QTWFh74RgjqLl8joIQqg0%2n(Y#7d;0*;Ws9CkQ zNeMU%!kT>i^^pK}+%K~r@E+=6Hh30zAN*I~9T=Q{)i^OjRup|)D?oj~zX85(O2k4bwVVZ6f&IB-s<4HeL^(ty}i*_YPO|_{Kt_qkd{1y zjLP2A=1B$wtEPLl`qOVo`3G`bkNJj+SIk($KRY7oafR)#51ZtC_?>!tyB8^ZAKlv2 z)N8B9ow&INAZL)(LK^Ha+Gsq7GXQaWj%ml9K}V9?ps_UWF*@dV@Qkj3YS@wY0`Ta# zr$9Pt$?IhSLoP=LpExK2-A3`-YK{%yu)F0uD3x5;QHns zUu`Fc2c1}+?9Ug7zCPD$Z~4`SNi#GesJL{qHz%%<$8@3GP~Pc&0974Z#j=(OyG)dg zUdo{d)yt2opDPe2!fM6K26mHgN%OFYZ~+azb^Oa)pMjG@>V)Sy-x1L)tIZ>3W0jFI zu`eIee=DJn=sX3?eKH>B1K%t6bt0Rn4kf=x_SKcO)NOVr`wYIuW6R-U+)UGzE5SRs zUX2A8o^D?{93Ed?l=z**uXQ-Y_{WRnxjfXro+2yc2e{fIw{GoB`J6^V1I*8Cu58}A zETb#3c5=e|-~ZUZ9t0%>e~ZEE{UHW_F*ABe@OaA={_U$F55$3Q2@S|axbQlz>b`p7 zX)CkAW)jEPvDE#G0}tu?zj5G~kXNOPit^tj6{7uNBPLDertKr5%N?%ImfdcX2fL}t z!!*lY+&C<8J><3P*MRpvAb=<0UgiV`d)U0fPs8$SnFgXTvBjLc!h~%xWUY@VYH2!)Z*(oA)Odw zq4-9$FZWm^_;S=rz74J}8(jWG$d!*iQHWup+Drw;bY?+*Bx~L1qlNZqY^V9m-pvX; zX6}L}>(G4hvn|-6Q=&xtMvw1X+NxsfP>>}N11xfRyV=n2{%s;kN0mgc5zJApoexdW zbC@^B0u0PNMLk=FU$-#ks4BFBn9YC0>T_T*beeCWSbbjeS*+d)8LKz>out2E^-I!! z8Vcy~|E}gU`9GxKmVwlKQ(d-}t~rr&fz_^^OIxwNK8H>xjHg$*ar?>>Z$Tx0S}7o) z0=zXxH3Ima#9*0|$LUcD$y|`lb+$W&(5=F@+;swwf;XB2^1?Mw-7Z$-nxxX8Yd6ls zre41Xkp~If^(WugPlN0{C)-D!45_`jLCI)3Z-ebCg9uP4IT*!l^88DYKaA!4=nLoD z=CO8fl zqrmXebYO+q#k^~t*b4^`9V5z_BN|In<6d$SL~Wd}xkc4d@uL(G@z$r%Us12EtwrEq zQbR&QVrmWql?;KvmTfJ$U;4Z^eWu82x-qZ8r$RW%Wv`Ap|F-qq$DKofNKK&hd0jG0#?|@|h{w?GiN#X{q<58xcW!dL_^kQ?%~iyq8^rUJdq=` zVxTkSKC9bFXWp3dVb292VSndI9M}Fwy?Ry>62H~IgP+3~r%;9OEmZ%`R__uGjK32v z^`fwA)J>;QA4>~1kz|~ONDnV3F@@V6eFD+BBby8RdcK_wR@??Dvy`*L6Sc2R64||K zb({RNj-4Bbm2Fn9jy@uCp55Rqe&Imq_2Uw$iUMwI2WP6JXfc=);gbout-9P zSgB=3$RAVoy8oH7_eZAer9ccrnbG=vW=R$@CpwK9=XM8JUSaAtc)Ccy+UpfmG*))W z3Z?W=f~;b*?PNJqtt6Kfadg}2<(50OZfgg5;E`)fQS^W}{mCPoltt7vV3s3yBMs0E z3xJd0Si36-9z4AyW4qMtk3|@*C>NH?+}}#*%_!?Kp9da_%brH^us$=xA?Ma~9v?(& zMaJg$B8@&^b{QWGvkf;Hf{=R}=63v!3hANIWEbY>q$6XE!eAo`c&xNo7L(JAp6DbU!My@Uw9SnhVep1n zN#E=xNCy#=@l^ep=gO}OL{ByDNqL58`IS=fEN4x8(Wa44*dVC$dYsLNA*<#lJ%VDg z)hrusgBFJ-FunM}zco`xVIF`!DW7!zTKHR8 zV=hE9OZ@Pt!#w5JGrqh8^)WW6rjfg$EMfUUiC&`q$%9f#{-8H=F*(&IFJJIu&mIQ2 zR_3ohSP1rDUYgUGkCj0g08zM~FD|9P(jz z;|&80tliH;iwM@=FCqY5o--e_;&kN1bVUkLP{%gj{BE^7wn&TLb9=e+be9}%p|5;0 zkyU;N6bJYuUZ=E{mgxGr`)y-7PVvI}fr7tjp!TQqXhY20Rf0}obnRHXsPi>%G8l9+ z_82yg6H#xDR?~@WjC$}3+}5w)o=zifpPF-H~6 zYw^&|F4$9Qid`rXmKj1j6>!^VY_R$i#`EmUdO{X_bPCD=(SeG3B_R-g z!P+Xq?y7Zl_)49O#eu zFj+NLcr>$%lIqm}5!-1Pdc*`?fx)t$fSW*Gf^Pe4YO^39h*hi(<A)%Sy+XSp2y!D4TmP=wSe7ODfUM&3Uk2xm zxKSeTudZ(fisAkk(Xh8g#qx@^VZU-3?Gs{ik8{Pl^yFaaGO1b_ertf7xl%abW!B!7 z>1)xouscJYttIq9&1ix+y zl;2qPCBXq|M_jU%t(x~=QHwmBdM!A{O>{MiQnXz>qq8ABzX`x(2uKqHqrtoK@Fw76 zXb`=O-d@Y3tbe8_zAv9v?<*)$Ik73hcK)$BrB!|X&^nZ$p_gdJo!tN{^6#U}()*Hl zEBF^7qP;Fs-z&>mDu%JWxy(OCPnHJ!%7e z2)!h3JyYg=-)I0^zc2G5KVPU~V;D?&y=(RS`qPKKva*C2T8?JAi_Ruf8rjA;x6}pa zaNg)oJ_*y{uPR0A`IA*#MUjC@y{s{+> z-xK5A!B*vK&GdRRkcFmwz~x9`4nkFoiP@iYCGwB{$lyoiU&)>@5Gw869JU)<2UQqo zm@W$J9ik4Hxq`dbtv0B-Enoo0R5=b$EOmk9eQ%-`+Ym{jL%eQ zPm3W4b-x?*=y%2E$ZX?Zt+?qRIX|5Rwxr|s;?AA>H7PJixku$=ZP6F9o>T93Kp%Gs zD-w$!X{UB|(#V&hU8+)6`It#l!3GL}L|MS@;q7OZ&ds;#c}`KeiTU9-V6D!e=7Hf~ z-r|Udp3iOF87xkjR5iiVM;SI})f{g)r4g)?d35W-NfZkcn1rSuw&_Q|#zZKUyv}1# z`q0bF3Eu6g)=lgyeHwW>7}Ge*>dVAhtwW5Nx+1sKHR^Q*5cfc*FDo5j`o{v^L7nKj zga_N&`L7<5W8km*&T~>nI`*v)KRh_v7Uy&A5JoR?iE~JD-GwMl?-w6~`X}2|p9r8T?x-_&<-6*s2g_|B~>F zCrV=ny1)g8947&sM_y06<)r|BTw;sZ()3OxbZsBYR9)Wpoa~jI zwMtnB7ab2*;DvV=K|I86t(JCB)A3?26ZP|Jy%ApGiq&nOplJNzY-;2#4e&RAb0jnd z5FA4IFC%lT389&CmTG7vkNHUHxpgJm(;Op_tp81F-(MW0_8*`>_4t|E$Nhhr+6M#O z-}!9$9uB?2yMk&739<=DNPw2=Uk(Np!4~(gE1z}S-Ut9{`rq*ukn*n>3^y*30Zrk| zE0FQ$UV(p%|Nlw)9*kWTBPA-pZhQ@}2DI68mB$#-Ct98?C%gYkxL+qEjp?K9tad#; z_n=0D;`4PpxK&{qR3}ZrbNVY6Ke-lV*wzMo)iHgA_dz&p&*2-S+}BMCvcoUkcDXej z{&zHy_k|eLx6mgh7`-`bGF`TZ$Axj$d9U6FmSDFEH_xRDH}K%k05ZHA?2#z!svohY z1H1+J%cpL2K*8n=px?Xy?GY&dL~paQLhhb9u32KD|713J89=*d2uwdc!C1_&enXI_amthQm)`u5G6ru|`|2W^d!Kj$ zA&`HowW=0HOupnu(_`0`sIQeo(yT!~jhw2y&mTyA2Mv|&>dHJ+e^Aa$|I$JWcvptB za*I05J{^O|`6Hg)_wq_dU++I~igQ|jXgBTPk>BNrQ1!+G297&-{O&BE=9XhHpr9i+ z%;4yPOB?oYzi?xQ8m!gJUQvUOn2@n{mJ?YrjzEp00NN|)lLj<5y$X8#Pp(Hhtp)Nw z|6xn$ZswVv50jokBxt<+K3M!C=dSZ585GpeyH{;c$cS3_D#*8)ElKI&*ChO0h&ct? zbs@_CUu0{4Q|#7XKvJ*;BvV@eXT@@(M_ksVeJe)%Gk}d~?Y6_{Sydx^IZH1E(_CNL z_FZO=7s*o+A7Pb7&EBJG5S`txgAaQPIPbHKcl97F2KsQqgoXZDYIOLO62AHpWe+ibT)Mh2PbFYyDAhp~&V<^-HgPJj>v^ut7FaGk*t{}; zjUvdiCf{CaY8@CZo)B5jf(0utc5}Obg!x>+6;VV_ow(5;J-b-qF7WYuB68Co)^TF0 zt`cB9LUWG*@(Bf(<7A^hJKE$6B5S<`<@J0_P&iPDRZo6<19zms=T2o1E#g0ZV`>&R z2n}T%>mEC-M^<$|NPL2bRIp{t{_yk1h|-EMFwk=Q%Hx$~e=6GaAXw4# z(2?2(JLAiG3x(5qscsOyi#pe5I%)(wy?a?%$Vh zD?gd3@R=X2V&jn8CE1*gHxADO+oh+h)Mo9v-RnygJzqrdJ)x>LjsjBii zcP_;2juU@C*N{%nw#|Aq|OV(c8`dY+LSXj_(W@ z?#{c%*9G<_@-7zFYA{-=aYuy8)TNta zGPmzqe^uEd%Gd_t&o>>qyv~pONVsGWS*dFfk#$D_eA743J%4jW?}k;F2zUrZ&YWne z93}4>@3O8$gvQ^xW;;|=t!)xN{CJq7E#L`>_%q_5L=AZuT@a56CR=C{ZE}cx&c1jo zRu&O&=%j=)@D=2ML9jx}0|7<831{$75eAR+n=i#KLy9J_1HFkLu%k|R8~b_p1bqqc zB*hXYvR{t89i_P^fdxu2Rxy9+-4~)$zAvmfkX|!(y?7bAzkcBjfUfFWQsfC9%_z#y zwQS)yFSIk8aS~!{>Ox;@`o+_I`SkFJe$n4KrQdiL!Ag3>x-@Fibj~z-6s0XdFXf?v zc_*6?8RaKwJW?qOK}6@b)9N74@*_`UdCO!+YtV}1x=+w~z1zF^Yg}b(X{3k?AQGbA z8k`ge6hC|+xZ$stF1CC6cv!(j!&Y_=1yvEsu@I|lkJDk*oZL>+K|d4NGj$4*jC-Jf zybdc;V7~?OzZUgtNa&T|CUDn+26joT%8eFgGA^kv#ij+oaax7;KMBYKyV1Q67Sz`7 z+(fRQOv7Mp7@F&B+WS@7gszgl$r6GGxAzZo;AlOk`=jNF46X3XoA#3Gn!v-RvDbd2 z-_Q=Oz+*tpu;BHo+G^IZ;i}FGx&rd#4AA;yc4BBz=^Cu$B_2cSF*0sHJCSVyGy=?# zABpO+Wi%t9MA(@__mHXkUb>-uGvc4A`y>0|OnE&3=`sy*pDGT7H{@+<0Aln_g9H7J zGiI2wUfUMvqK6cEG*mFB$2KB#M;!c+TAnN-e_r7(xp(~YbvWu#!<|unUtX4)=rp)xf(PSTzup4(;3pEcCqR@1BwC zA~#>v$IZX_k^jGj@|kEsDqjPc%FhE!rBd~CyMLa_FO7u4$@B%F<(T&kD5-r~Y&m(C zUgiTC9cYDL7#9qnILvFJYW*g1dL&5qBHS4$`k;xr2W0hk3e;_9pQg%0hgEzoqj>n% zM`xrh6}fT3)}6D3wob9PPv}UzEe)qSY)2he_fdw+x3kpE54Q#*V=cdo&!!WpK0Di4 z`ht`87SPnVRzaZKi?ZgKrAH-_1raerITtC8U!sh}qc5*Ns(<{~hF!}t^sShxvcT8y z@Evvq_V*8&Q1(F9k@N6qUPOzO4f|b^L;#z{qZ_FX4U$7&Uw*-+zo~LBmfM6x4fNHT zTk+t@IbdjOo&-y=eX85bt;5x2LpK>Kt|VL1P9)^&CV^KS^!5zAyQs0t;@z>(r8}S> zer&RmEE(e8c46|Lqx%cDxP~~9fO|0eHUPlEZm-Q1Y^tr(qyXWR%_e-V=X;*|Km(@7 zrdPq6XTs|Mk#qw*;nK=)AKQ}rg+_%JLiWzIUD(lHBO2ERJV!*gWmp*P_ARO!z;#C|Ehpu34%qQ|SLe=L%qakv_MU&QY z_vDKi1BP8d!4Ww4fU-$-LKg-k$ab{+7rq^&4Gww*6n`Js=cr|@FGmLU-_P3`Z^{i@ z%R96QPI-D=oK6?SOeQm;@ZSbyV%EgfnWTT0NBKkx+a1aySL1@?A8u-q321+NcRfMr zlAG&R5_O)MdD+`ht0qeB$MqVSP|(LQpk)+bVTY5| zows|vW$aA@T_K!O9=zj}AXT5e@w$zU)2EXtobVn@>0 zezZ;v8#&AH%bIK5FaSIyW1POiKp`->8=@g+ok+$mH$H2JKa1}R{6E$Awe;kRB4IJx zDq_>`8R|DU9+McBP1H0ER-#%)*%Np38HO|f1J=ejI0`m+a+pxjOjh4-eHBnc&Gjo|kcd7dyK@3! zO+9cbw$;u3)T7tm`JOI$cSE(1E|F}U1_!_r1!?*a2bv@I4QQFePrHEBjzNqWzGQP+ zQ-(G$6GW}c{`mxj-0oSwtTC@;Dvw<--o?= zYFP6ih`5E34%)mC^!E52PG4$SO6@x{e9OuLYlrH}s`e!>{F=cuOlgb~K4O&#(k)ijAfHqK z27mo!ADz^To-1w)m0C>?Of_i4%O4RerGD;c6$DT5SlFUzQz_^(D z=@y{XvZd~+zmg@KJk|=OHQv0^(jOwre|r#=$_Ig7>GUqcV0baQHo3KY6<3Ul(Svcb zdg}BI;YURwucdz``$H!GHaH0^P9y9)2H{l0(Z`d=)wyD9j-f*PEz}{9hh|RTp(Mj~ z`E76JY$JTMA3~~Rv>%>aass&|TjOv`Dil65!~7AGdwGSCmJh9tkehO4QRyDUD# z?JqNBGZjRZo*IwZ1zu!gUR4h>^Clafx{eMC<*b5=J>!ay(EYNcM;uFkumEta{mug5 z2TzJ(Sp`(#LbCff2~P5vEa01hP=5n5)K9#m;_@6+^)!8kLj5T}L;V#{sGrcyRzz1} zHs4>Q7vyE*{jbIQ%5(ZQ&S`)Uxr4+$kNw(2)Pj`G>Oh{ZiEEEK6r$qpQf8BL1-qPQ z`xXQgY?s7fs|R^zP?qIDHpqeQe`N&VI9cf7d8C(}XhwknZW|*N$co6aZNvvWXu@FD zpw6}kfcqx|jjMtMA_Aa++q6}{RW^pod7^1xW3#-zhOysVhdFLfj5XpX#Tce3=&vF? zroz%DF0sz{Oy2W*mVj~h$M3YUvo$vNdIi5QmUO^(HmZ$1*c(7WXt}Jr$um}8K{#wF zto=FBvlfJ5-yq7!a+(P+3Cvz!F*gbdpuw?Ld6ns8sMZHmlO_O0;{2KS$MTu=mwvt! zu5}`_)5axNu#|nsvjn=!A3p>3faMtLs>YpR3s<`?@zZYYdXV?`i952d2eC)hrQ012 z@Qfc@V9RL1&_U(AMZfHZCLF3xS^HKs_V?ZMKt=otbE537lnJQhhMrF#2hkHWC77*&k^z zocN!41MX6bpsEP!s0gmAG~nmR%{HI&iattP$SilTgJt+Dh9UZT31k`BRMqDzVpHYf z<0#fmA#nJt{T{xXEg#?zrX2RqNK_p@GNeys*-N49Q6fg!13;RU%Kih2z9b2}oh%F1 zhZBbf{f7A~!zBe7IaU7K%Yy|dPe@U3vSx1R%F;{ksV{Pj(7|D;UbIKtd9~`_JAd$A z%8{j3@UtyPR7}b8#^JYsd(iNj6fBP4_W9#LyYqKpY}NBW??TW_A0%6rh??t3R$UOR z8G?AiPCe*ErS2D*p49KKDig_>yjftzG%dlCqft?uEt$ggW&4H5Y zkPJObbUjnvPX64h~Avuz6Jj(0Z<{zo*Dtf`j4d3EIFLY!CVh7eEz= zUFM`a+z9H)%bVs$n4Ygm`2z%Cg>X*dz6T8|C^{g404UKb;4xW3@P!wMximyfFs`14`Kz!au|ClOr+w z6g)0RAAIQ+KwpS~4~a%N3xA3b5T1L5+UNjAC}U98Y_Qn8y6eYl{^=O=%cLVe8VT>- z26jT0G$?;-{?ZHtmIDLaWW`v+4p}sOBl#tA@F@8Uiye7QcynUnZKQ9lEGN$|7j($h z>#l#;xPH=2i{P{C>8ab$;X>5kuFJ02$-pkWMSA^1*eQNuq-A&*?a_c?et~u^aV(AH zDf+zw$GJ8f{&^kc8>hkemp7+55qcnEQAL09fNtf1(;0AohQ;JJ;Qn#V83G`C>fJU- zdqy`;U;r=j&v}z4CHQ&)`TW#RgdOn;+}!CIL>nxXTaMt<*sjd_%SdEyu6&Zr~Gju)JJ9{2zfK4;INPhmhUDhS0pIYxxF)Oe|zcrfFH&#__cb$6w z3AV#eIDnH?08Wbv&Mo66@r(lvECi?^mx}fAozJJV+k5b0cNOdjA}@zAqeP%y#r<)O zN}pp~0W`B}y(c#jgUzi2jh1Iz-`Y@MjB^FtlM=La3)Hl{esSr`v`0f4)bBT%zI*Nn3DNG1Y971PsBh?x8=K!)! zg}ZoHc)j+4=nWCnD1WJBk9(7aw5i*UCbkcUz6q>L=)PBzpy0@}6D(kW&3`4x7b~lL zF-vQ^d;W<_x0t{^vB8Vahq%;dHKJfKJSkp++(d2=>cQZ}g)L{XD!Hf@4}f8pMp6T! z^bNKFlEZ*Xo*bNBB@pJdWX|>F0ohOdv*qU9zeN0l4MLeEqtE*(=i0;x2C8G}y|1rQ z?Imu0X78JYcYD7okd>Pd2<>S}@hTV0-rt<>uYZ2qJRJ^pf8QI}8)Xv<80?nnCG}?n z-j&(2_K_Z60G?sGlgF3kV`NP{o?}{GX>8}SVuU?$G^&*q3Da4mv!79>aS8FdVLKB|6l|u>Jikvt=5kK3b;dv zF|H6;zWgX|GnH+IiwHKg#tB3OnD4Wcg0f^3zKf17?O4Zw_iw;RV|~0AKDHAykl9mX zD{jGSDFIn~U$4RjWP|3w> z@*Y9>Tr7w%*e>-!tCEke^0aGF?Y_%PgyJcC?DabkFvmoO^M&8@_MgFlOCPIpEqpoIFzV zuoxH7=%|B`Fcb?#L!uvF(yt+1=G1!})JLm;W7r znC=f-E>X;y1iSmlojRO@JdD`;T#h@-=zRNFh6j#d8Em>f)$sKYETptwW8!6p(!1{g z?{Y^bd%inmjfT-x#8kWd8T%dqB`T)E{~1R-M5lid$4&T4`>2yepy1gx&#Fz-i_TH`@BT@HoF&;4q>*-w65%%XJt>0XLD1>-fbVMxP+4 zq>ar1e!NGQA;I}wOTraY6g~!iCL-T6A4K|J_#nWp@ER<9w{yXU!Yq7WGQqx*qTYQhgM9zLv^uE(S{6aTU%VDq0SVP{*6S6!6B zfLrCp|0PoZkb*pVqWV119Y{q$HV4#?^2N;0`qMN87#wZSn<3_CDG{%9Az;dLUcew{lU0z3s7w5Qz3+3EuZ7hm?T*fN_ zh%Dd%Glj*yPJgOk3(LnOZ5F^wn78z*Y(-JJC(fbl<;lXR;2ZhO8YJ&cUGORYGjAc^ zP2$uE`0Rq>^5;BVh;NulcK%Y0c-0hQZ$3j^0*um1zl=vS4tDnx(*{G$&Tp{cJ`aLh zt$ifFF&BvhFY6lE$9xnA{pLU8{orEHyZM$68v3Avp%1gDuBBg1_}T=+r+asR+SiTs zQ|)t58nd;rxpQ>UQ;8-0+`V^i9|gim?$~IfI?TiLJlJk_*g)0`GA>p$)nI_Gzkz~N za3?_=9F&p7`Xs25dk&bxVHLcD6^oFAgJn22t~`PWRLTa)hi)xyyF(4HIk860ytM+a-ysX zqFB_jmVyp(dZLMM|M(lV zw3~ojjhZFSDvR5~SM<`&fBfJk3cBhgaDG`I3PwQ&PHONY9oBwc)LaL6a!{&G{eN4k z4V|Vp7q50kfjh@sW~}QuSSbiz!!L&|W0RC(pn{VPLjk`9ZV?#jAAfNb10c$ICQzZz znxSXINZn!r`~80Q}~=O<&LF#m87 z2*nMhU+E9lz>j>V6?zuUGQhjFov`7k)~&Zifyn;ipGEfH^1R^iRb6(2;=HQop+hNN zQqVXhRmzp7)d{LNBAJQMRk+ips|GA%);nE z=CnwtcE#E_!1HvUJY4yFx?SR!3&Q5zmsiQhN4}lgS($93ra%EJWgc*y*Ui!QEv(%T zRGRzZ4>ItkE>YtDtjUXkqjLr-2e^J zEpu_4=}J|{`>e~pCN8ye$33ZoGp{|qYtp*{M*-C1GVs1ymrdoX|7|@6TGw<#fCCxy zo2P8KkNBLCZnPmBkOfc_MJ-F0XfE^#mn19Mw3L3ZwO<(MWEK0eH{+u`_q+g!__+pA z-}LOJ{4Q#JnVw~vY3|CoYmn+-`s>m5C+32mf;jrbFXa3g3&AqKLfPqLI=Cb6$?0y# zz|OAlgNATBY>^lHq>E!}ke8!gPyYMtU3Tm`-WW%tET<@dj$xof;meY_bb5yS*csgi z&Wt^XGlcg&13?6yR2_K%BnI0V(H2#M5`1fsuWG6eU4kiJF6_MnZ;`#x8|?7O5-b85 z#1{k_U<(^!Qrh7EGjl!4FVf7+%%S}Qgk8VmCJtN@-&EE=#8#Jd#MOMOTn#sEFUT=` z%z}uS6?m+y&XZ@S$K{n+=ooH?;xj8rmaO{`bLaT!M%>=o=$9#TRV#YdUgvGU6-i=3 z<+5Dqm8;R$?`}%?zSSfeZfR|?vKqdw+A8pV_F#%_u8^|XxWcz#PoG--ri-?sME9FX z$DL=6#m<$ocj)9}mo$5KtpSe>*4|No5;7)|#j{8uaMve}$$B(sTFM==)upwQ4m2EF=GlZ+n#u=R365vQD z{~lclw4koHsWYVX>v!3Vtt^pw#jC#$1&joN=MB4G!x++nSqZJn?yw9`>0~cRjbuq} z|KKxZL-pBqAiw9jRaM!evKsN?XhVKr3s`dLSJLA^3(Vt&O<-kuOb_F&yFc4+h+4~w z-|Pb(O_iP>DsjQ>X8Y)FWF;0b+XJD6BS-RmiD%6r0)Cv3>j}HC%0eh#qd>5FzEqUB z2`jC!jjKbj$LgLXJFF7Ebw%%TO-5+C%b+}%B(R4A$vEY>Zlzur3N4W0Y4&tk< z`kK*7nh~LwA?4|(bA6Jxl08;YQZ&-N+y?hu3HiaVPkT%Xt;6hcgL7GgH~dxPZQ9EV z!k2?732hoG-Zg9(+lpIpxAKst@mB47v`uG~J#7_#mM1iYJEPaXYPNL6j`#^VHV$D^ zkAEeJ_zMnM;JDdfMC3z`8?Onb>a6H0BL`o|ZWC0rruz;?AuPdhKkW=prTFJ~D&Obw zwk4x>Kda?u*AsOIXEt#iQX$?}Abj?jTCqOZe?+K2$o^%`<#i^dr?Q=9-w0<%B+cQ>7C>3|+ln680w&+$?ks7Ed@D9{RQvB*)UF|p zHoQR_QneQxxl==T*enNowYFPLTL8j=#0m=o43-O@R!RraAa?Y0b{E zI{1TXP1EBg#B~YL9JGga>O*OrIq>jS9iDB4mj@fQz$;%&hWq=` ziIxuHPDG$<-=f z{$%69yX~cKar*|-lu@(ypZCA)OWXt{z>V3}CkN7on{(~DMD((S(JgCjefx zNohCXj;Xr6J`*CxdGO*TD4yhW!p=W$7Rv!0Kad#g&ohNM2{!m_Ino5HEk2D^v%ehs z;gkOa517JQ_v=p92nfh6^xz>^Q0uy9z z;1_T!ySnu77V8t(Nq2ZveP50i9!lv9F1XeH)~n!q^3Ps{_r8HzoB!@rkW5-Qm7sRM z0J<9PX9fKOf}+=NfB*3-|FlDqr$e~ZBl!^N_L;kW`q6vh@zrj1cCxk&G1J8!IKLg zEKMS3H2MUe#Puh)iGaUhv_DoP{l-b~MZ%YoN6AS6KR~X>@>(#pS6hRoO6SLoBW^aj z&FREhffqmQ_4wl={SD0NU?DQ;%#HPMYM&;Vo}k{N2*do(0Dx9RS&?s%E;qaHuXzw% z;#U%>TiY6Vu?w^5jorgd0XNA7;s7@~wM(sN8Ra);*S%0JhmLD$c$lj5=%}a6Wx$&_ zytU#_!3cnatHU&TQ?D5x$wdgd<#Mz)G;SDcOQM#iBd!sdxeG45Q1;j{(TXTuv!VB% z)!Fr?ATRRtKGOLBhUL%G9|`>4`oPys!+Qoc2s`U7Q1qic%i6CIlGb#;xxf^%&Hp*| zZ%PXcU4IuVB72jDtSkVT0~$cQ-jtxC?m?%&Qc$1AxWwh#C?e0&N4aFvDC1x1w_bT+ z2M`#WD>x&XEqd(69 z&BquQZzK^YUkv%#kN)EOegMi0f_jVJ*r31;TsLim#c}w z$F-Qx$6q%HUXTjdD}M+}+0fCbN(uwZnZv}=)@dRHQ_8^xn;~JQxpMGJo+qnD(4z;f^mWNDoWOUqNnRnZkodMmvvN@&VYCGu{NzWMpg$At|Lsqv`*2TyV z1e#`l#3>BfiUyPpM z1WW|Z@JrM!O;8^wyB|5PKda`*_GNLrb~8rh28rSi`P3RyWamr;5PNvnKv-TmoYsj= zl-_Gi{qd|?AMWu_@5FgGm3;#&xz1jnHpRX9SXPvQM)miI3#rss9^?9mj7&NwJg3J5 z($x)!4o;_m414nm)_}IHE2yDFZns5AM@sqk5r7n!b;a;B=d-nYaT3F(GfJ0Ha4r7b z=GXVIU%e8eqI>0LbcyUTRvOFqjD-t$mAVQ&+NB&5Sy^xvyg-4R8b z5;*TQX~oWf>lK2pbCpalSQ~#mE=PCedv?#~Lq(0=&xa-bIziTUaA&RK6UCy#@2<+B zAqSp}%;$17gO)x%IuB?{kFm93sWeQsqERS<2s7H=WDDv~an7ski`(HM*;Mw+a`Kft zS85I@M&pl{4K>>I#dBhYnKMkG@jN_hhg)ViSt@+TY5bPk4L7oqokbmvxAWg(qxXHa z%QV}x9G=0#7nvf>vtOf_W|s!KQrl0w7gf`4%;H<+_KN+q5yxH*ia>f@4p&m?2ZszOD;v-n!(Vv5<*6eyBRy{Y@UIKm18Q%|U^B=ng z59jmLrV*$*Ta%;9b?Cm$15kG}tiS}j2-}_7@P{G|YsX}${Egjip#tX5E@>g_Oln5wR_bSJ1p{GH;bBz8)qT|j zhc8Tues)Y&kgeh$j=pM_gaiV~HurBH-@XvkBoatc&Mk8fl~lq^pRapCw+?1ym7QyW zpxX+Uw6T!OW#yV;0ZtLbekQS^$W-HyFiDRtl@TNk&q5~s)^L1MJ$3kkQ}q)4>^&N2 zU`Qu1=#1}G;=2k}7np0W2)nxXQ518n8SSn&SgMWYLw^F$UW)3B0xIiFv70!Two51{ zzpIEKcc9j%gu0eIsu!8#iEbPpY8&&&$o-lvj5o5Q!<;9PdSP~vyJWw{`}gB)OS z-rJX9_0T2f;o_p&5&z3V*H?9uEGCEda#>m$+qQ}~_gIDS{+xZ;1)%AHev@zeUiae0 z_R91n$A+hB=@KGEQ3vU3x;Nt1&CY6M%1Bq0uCo;oWTU-uO$bykD zFaGYZn-f1HC-RZTbhEq$RUfzdWR>VIiK_Z-#$gnH%WTGo+pdlxX^g+rsMBAO@ja_` zg|@WVcVHq0okB<)v#%MVdu?PT-OkcN^t60ic|SI9>QR#(HVZL5_fK0emZ}(ft*huh z-Rz2iB{sL{49!?^o{W{Ie?gyI-&S67u{kW!SqrCaDb-h$RRSgot-5zYb+)_Ih0RX3 zv(&gmzF00+GhIdi0mAY#5r8t()^d>e44XIDp^vCaTppu(61?d4J z%CV7ZT=yP_7BJs=R&LoSu1}EkTvr(2GQTr3?ebrj$CTi zle<}I8+B~k(=*4rpD?O>q&~8J&F8-RA-&rd!FLLrc}^+k-clL5hff;$18Z~B)L(|$)X!%BOwJsCc_aTB`iLy7PedF9EK;f%bjZXBiKvaNJ7 ztHtFK29LVKX2DP#tA6Peirq#3*xd?+!q6hOj|$illDNECJe`d>h9_iH#G!`HBY`KR zIAZVnX9(e51zCMU6aXA<35W6lQW(y!$Q%bLlaW`x}_#9Zgth=gF4fh(moy)__Bt1-`UU$ zoR;1*lhoc_@poRE+0f{tFD347HRw{M1?&8>gE6<9hoPT>szMffa$!F2NCG}WG+R}2_Gq%K6{Hc*1-E0jJ&i$r$H_teA0cSd- zfvH>fTuf@qZM@?A?P)q5t_IfKW5qIHsPA~$(Vv5PGpiC%U1C|o^S9P8o!5!>mzs#M zG%7YROSl9aK@#N2L z_*cv9G>B~RU}{dVHa>1KvX~9l-@9Gr_e)(8pW7Cl*au&-3bITHc&U|EAvmcp&@nn6J$eT5%Z!^hs??+cj z(_4(tt5tt1))sGs(G+xzp=GDM;A|M_Ro1~27%!M36hKhfZ7s@V_vOar%(Sw!IIj@| zZj>c>rcfDf>kZFe5_3oqUlP@X4$TC6Ft;@MJojv<5V$~duUO_`u$&giyu`G{H$g`& zR%HlHjsExxntOH?qRcINdfRml%Y%629Xwve zyEomZvxU(&sqp4&-Jb8HbpsaU;3F&tR`d?}=@wIG0o4ojkOh&zxR5d0#*7Y;l4v2h z!7dd+g*DM7jl$0{Vb)B7GYy|8;nx&`v%f!Lm?>JQ{|yo)={U)DV~$R{@i7$R^5soq zoeulT%tU6~B1?jc8kp#f!6Btj7qGP0%sGm5-2vUoDEX9U^4bg6AEBIz6EYM00uBq| zQQog$#{A6_rKYbX@D)SZTd#VPYN_ub_ltfH*BWBTXyL$K`yh*n#TwqM^6hFPV>aPt zH(e{V_PkC$#gwr*GKumyJO9F4y%0Vkk8PPUs~Fy6aGPPq0(dMcTg-xAh;nkH(XrgX zPuYQ=+Ry_Q?TFO*76^)QM~2D%Nwj^~_*|{hSf>x&(=!3SBs~o^zgsNs7ArZ`)}noQ zk?J?T5x#Aax7x+^ZD|ITQkY5uCYw|ZXs=l@@1blo6dGk zdHBG+`+TCh-8H88)GrCapV1?9vAMQJH1}TEV;O)rg2f6lVf7n(aY1zk2twR-XfyqG z#s{9>!SYn~Z71w5{~r}nWcQfm0}zFbudhLBw$5T`s++LfnPM0vIX=(b>{XWb01 zUfDxl!NGeQI_yD;>^Ic{%0ToQqzuV0E?*zme3*hMWsd^7fsC$1Lx<* zCvxE|s_W0fWGjCP#z|Tyg;fup3bTgVJh-_2Mh=?{7cN}6dGBrR`A4bGS|RER$uEPZ zA7GkVMnsE%1fv3p3CAQ#Zk^4VS@@t`V)vKLZT0?>&BZjUu$+-phCZRJaFaiV)79%% zUC)ATRh&u{7$`sch~faf4?fk|4RUA;1R~6htLA}mw(HBbyQegox!d{Yr!0u%O$ZOl0opPi^V?Vv_^Sr15U_H_Ve6hlytBGOt1H(aO@ z0}J3+18%%wDEnVonH3oMyolguBg-}b>g6j&Vv#X~mFnDf(9H1TV`~gu!j?5Ag0)go zg>Ke+6`T?&&mmi0&?_)7j)A#_&>!g!J;UDhJf?aEG`RhM-yX7iq6{Yc*h z+(49o(3OcI6xf_#MXqbqo?UVTo<&CTSAxkwwu<1OwS2X$EWzC3cl~*9(f#@&_*L=2 z`}J(4wjOt|BdYJ&mQ5hIK!(}D3gwY|H236E-t;I3`X^mT#&s`yW(4`1Y%dSv>}Pmm z+EWZE`g(n+O_k0hxb)6RYToOCl=ms*I&$@F23Xpc^h5!ggX0@Y+FvoD9t=jWvstoW zPhGxm$k+d5z1W+D$z1`e-{FvRH^LZu{Z5~l*E_dxmq$VSVW25n>4Vi7TPX+E*b##0%iaYgSb2d4F;OdGL2Ffb5sl zkNRZSeAtL_PA=WRX?%)GRxO;9P!B*5(}U4RIuRdPL%&~TAg0rVTn@{c@d{iMIMN5d zY$|!WHF=rYTA|ex0zHywcCB9%7?77C!xpquk&SR zr=JQl?UJj%I|+NJAjx#`YkZK0X-$1dmV z(uC>e9U5x<4PZ5y-a-LjwfEqay!p9x z1^0=&vv_N!v;Lj^*3k1NEfWKLSNCH-44`hd1Xkz3k8`zEy?R=6q*28dhZGHVeb*0`|TLzjNEtSj`~0GdJh za3L!_U=ejaJDofBp!>e$VGm5<8^l8)*5zuy3@`|OD2){ugbEza$KK4ef7p{pMYq!H zieR-V&yWLC4y1Bast^3B@=mcn7D6)}@*_>=etT>Y7! zY@od(4ETOj?U9sJaq{2XY-r-G#jqb>t|x@WT#4*hkt8`+p@Nxz`9cILDHtqg4c6cT!&R9hSNplZM`Y}TfyJJA z%cT{aquDSKs6&N({o;9RhsABl3Ol}_MN9SOfBC`=guk|_CT>=fYWo|9|-cV~Foyqy7La6|55oN+{$I zV4GAwc5qBsh^BJQM*sL6ex(?@Gr4ICJ!Fl!Mn)aj&$iH< zc{Ws_VbxRI{Oq-0kEG>hvF4SSWlzGubw`fv`i5^SuF}{MrSJy$JiE|VVjmFY%8@9K zt>J1*M|J$j%|I%)v;J3t+aT-a&NMpoLN~7N(|xcovzqZUE>w(UeG88Xf~ND`$%dtG zawff`j(`&!SOh;1H zzSO=T#KTmG!l zSw2K%h~IA{srevcZoI3KA2?}Sd$4OTQuFjH*X`PuG44HuFYRl})qvYf?(Ic;j&)|8XJbo<@HT6hvyl7)maPu^Km*U44R!l7s{ZL!pieSKcy zPRa0oz)NI`-_M6v3f;_ZF3gLZcy&MPD%g^*W(B8rkff@@Zik8N%SMO3`I0+V#2)s_ z`qxN!JT7m(`GzV@*@3T1`D$;Ei3=y^llG(}_~d=bcC&dNREUST{E<}bJ;Z!xQ-+FT=hrN%>v=a1yd)J!`sy5^<92cI3RQ1m2X|)%I&q%tzzc$%@ zgi-!igt_sQ#dFl}UPX6ef&WU+?3x&jZgS*|AE{_o0e5+^5@`Spw`PT(zQGFbvLS2OBhX%suK>U_E$SH#?6Dl#+x$`>dpRTL$q3VZ%Ef96-3-kX|w zpDt^Vc1W^^#Xke$(DT7QAnJRZvu>c`K|GNaD`nMgW;AxHNfGpl4>MrkLFl$FRT=}# z%g}X#e^e1+=-9aS5zV`3YbqeuyK9-Y*V}P7W4G1V17+;|bs{?eAbZLd>A#jU6&F_; zcGWiGZ#2j4FYK1Z>aJX??OgpW&!Mnb$vjH5+M2FN>n+RnHuis3u~7ca@SvmZzJ;x; zAu7&ro4^4z{a~zlfRr_k3pbxm!;aV&+Q)$%4Mj}<6w17P(WIN+{NxlgDYdK^GD=Ia zNcPU8YhRa^r#)oG3zxnETB<+6Wd`^!)Lt-=1o`g`2NzuC!Sb_8hp8P`#`=s?mOalv zDPc*vF}rKe%q_D6v}Y5BFb!=cUa{?r<^LG%zinHE9Yk?LkY zJ7`Q*lwMaimR4Rg>N@sqkC@|HpWnJ{wgFmlV_3D?e?@CzVsN?Ou;icbNDT02cngTt z-o8M4uYh@#teuhXuR|Sf9iEMr(sq6FJJ>-dXJ*kf0mbfj699Cg4l8}SNprP!d4HB2 zrF~l`W7VG%KfZoSLTD0yW|N6Vif%esGm>q;x_`gmL=$zOv^YUY$B zUA*yZroL;tJ{PA-s^weX8zPi{RMr)i{SlHwOO`g3ef{{fcMq!MK_@(6APS(LVW5KG ztEH+Nh;}EAusTAT%@1HO1KBf|BpyyVjb8i2QCduWKy0`{yBzx*VmG97Da~c7hpgxs zp(l``X0DZ*f!!9FsirrnFWxgYVu2&gZioNk;V84Y9A3-4vFvj5jGh;wSC@p75>HjE zf(HkN8Q9yg4sSY+b4*NL$2KV8?AkiM2so;%ExnjOPPr2p+DmqrL86)K;_5u7UlP6; z$9wlqx<7qjFB+&Jv3#@A1CI@npA5r_HT{ZYA3)!mqa&nm_!iiW*bkDNX`S?ojgWIG zcBrRX`KpC4T3sr6%i(zia293SpURw#vZEirzzMe?Xfnt#5?pb zF>^s$(r9oVCZzocUH2E$bUpQgiL>H6!?e^2|%&TiqEDQpY;+HIJAcVcH4Kw$2USK?Rk%2dwy=;U6w=D z@_T==72jYHIPH%hF6Pc?e|UHx2-}sk>AS$Ombchbo3$G5Kj?^R+*w&t3Bf|tR~C>!V%y`dfZyY+G5s$P8P^1FVayRW#HCvqcie4Og4{VxjUw=iR~9r`(gAK zj9BGR)jMy5{3;y1AW;>7s^V8(=A$?9iRE2=Q;~6;>4s*>6OrbaOkt|aVues?f#!2v zs_V}M0xe#Rq(P8fkVI{!O+n}-yV#wuR33c(3H$624}Sw_tu?@E_Xi_BmiNgR^kzsK zG!j5%>#>Y_pYyjtgu*})kMw}`oQxOfF`_Dv#Z`=7H6MGbM22B(jqhOgrQ-WO|3z%P zwtGz_<+|9TE(sU5i6w$Ms?iaLTvO;G*b_al{- zy(vqvpdtBFnA?B?avhE$r5{}X2J)DJ5vA?&H)}VuNt*frD*7J|Gj`K1BB@2`TXGLZ z`+hKb=_s=biL5qoQ@F*IgzuXQ@_Q3)`#;n*jnpue5gy7E-pOBI0hC;6SUvrv{_3#@wUHCKAR}m;~Jzk1YO4%K&=*% z6Sd+buhv#agUeiH3cv}srbRVj#GROxaoj<+QNZ5ZN>Ka3#aqLQG`~L|yTW$Y5dBP+ zI1pX;FovPg#i4|`1~fQb*T>tXRF&OwE!kD0(WN$YAJKk|US-gNaEpYekrdt3TWg=O{T&nA$KzLOg!)aM6}d%gl_{pD<=7AOX_f zQ~tR1%x%SApb{ux{M-qUHgW~EU218p3Iyqrpn=>BajWt*`ctI>(~VJ?Gu0mfX*bx# zWztA4|JH2>kjss>g<>dcw~vh_!YiXxFELG?2X{LBbE+kz9$i?N9^EkU2dbW`q>_4W zmFI9U%S`yd@9^xBSo7JV(ti=s_Ohg%e-P4eARch0MM2KJCd6y0htiqA=k-fX?gz&u zw_!UNglaIPd@3HRT|WJa+dBIye6_hhtI*hDwAs}^6q;KSZKxSu(uXbMhHMp!WXq1Qc(#;J=J3E03xTyT@JNUyBBg;J3P%>bSyOvB~4S zJ2e9>@#>vXR8q3e5k)qiFn47-4~trRbiFSPOx1Z_AsM>eUB9j`vBVt9VKWaj2f~5f zGT|u_<8%2-`?IglJT$%wD|_C)hjtev`Pl(FLkjVGV*$9xq2Bp(z(rUoE>f2AOjU`j z@B8`tz+Q9J9`}Y4!Y0~}a5XX(_)aw+18HHJd5BJ63f5E*~$ zT|%#G`^N=Drj}!aOJhm}>1^eX!C$t&TlSg{_ea!LE>s_W;66t;%YLs&FmUU|Zdzr+ zl3}#eW=Ci_dU4}-wFUhPd%3ZHbEgcH~C53p^^apvq zWvn*fN)_+nU{0|g2pe2^Y zb`7I4hU5eq`;q~qfIc1R*` zPWk*~_lptkYEiBP)&$ROE%B z-6x#vf`;T>tvk1C;$(XNYWIj5z!@7_AI zv^(t+UAKc>%~o!&N#duuhi6+Xdw0Ji0qcyj+7XO@8#l!fi_KCI@w3JW&J=Zj0mnj` zu4VHc)m6_}M6E)3 z^5-&xNWXu>uyg)m`!4+Y9(M_cF%X}?5v!H=x&7`(=#%rpjM`w6Nhb(ZeVS+nsG*1n zb#&@E8# zwC_$KY>_}se%I~#|Oqy&A|RN9~69#2<-nIg4<8(c_C0f}UcC?Ov)ijXCHIi0o_ z4t)EnIE!7(!O$wziew1;lkhF4)pHy0X{6oz)tXglZleW7UqYMBc9AI^ zT6AxD`QMy<%Vfk%o|(+9!;X$L4FV$nf!aTa{5=@BG^Ejjf?ZggR2(-C}i82N?ZC6Yd?lwN!n^xx^FDG;aq96y0aCChZ@kEe81YZ zf~~Z>aWlUb!4kTRFfLQbYfNw*BvnzpXphY-PidBDg0F%!=gpphy=NG@DNbl(4H|R8 z8D2VMVEEX}hPE{MRWoUdIJPy~Q*JoNVO`<%qD1f`b5i*a3(}8t53F+J71<9~a2a}& zEjDQkZK=Zc(JF&Ejn)6|$b6+8SbZYKhBWey0p1 zZHwfFa@l|%P2bF-<#(78-B@-UjtL&X+wVMQUoDGBO=;4g(KXW%x7=CrG{bi7O)QQ# z=v4(q+2z?7&pz^LCMI4H{TC^~`;dPp1(^TeN&!H_ud#^G(?Dz#Bsas{;vR^{f@?}; z`I(H5&$)5=4L{H)s;b{OJce~#pwVv z{CV1kBIxppzIt*g6jLNm_93|rO66#xIweL4#D>cD@4__q?Dvt1;&}k;btbE4*je^v zAl0RQJ#-&XV4{Bvjrb1IAmrA9m|x?*dehiTtWALe?r181BekwSW|ds1RiN{>U~~Zp zUh=74Y%pG^KI)cuFuEH4dNJv=9ev%ad4PJ{qtVqIZg*L7>*cQmN)3XTPgtF+-l5UoBLbFQ{|*_RN%N}x zscl{GH&KBv5EU3k*3_Rq5(XBvqn=kh9zLm@l5BUXzMsI84O>dv`qsRVI5Cp17SQ1u zjGrf@%B8c@dMT+vh$$duDeHm%+PhtZ;p9v@To}h`o z6AmkglQg=z9q^W!-)&+Ny3fNO3j`6k@njyU%9zPjY=ePbCt(8aNxTM(Fe}Fkyv-NlJbP2{#vU3z0fV{9=|b;T z?+*qrZvP?fc!oA!qTTWyd~%@xsgDH~QR`fSmUUrj;=m~m&$mFz^$8#g$%5g;*gLZz&e-Pa9 zlt_y10Q(Q!LHS4oqU(ItOu{YZ^#cl?-Q!fJJpZq&0>b8nXV;YgDCbBKh(^X&79FQ` zLe4LxKL2CGFOOmWP;7)|yaken&Rko@uo0Nnb4>=C8VTvmc*Di5DF3A33XJM#R>i&{v3d@mFuH{)4F9Iy#+WOGKF!UxtIr<)yW~j?!)M3 zv~dJeP3kV&roZGDn(LQ8qm`qG*IC`4h@Av2H)*vQ@F^esFXL05=6F~ELAN6r96DiC zJvf-3Td$C1*-PDJv=rT{L>v-Jlmr53R?LFYLbb0wM9w>0O_0KlaJ!a; z0!rF&!{h05%>;pRqm)G!pd?uRz)nV8mWc1XPLUe$$YaTkUKQp&Zhg&z-AnDmy%SbltC}Y;cmlfPp{6CS_OuB*R!JnwKY&mhq z68i-_I%p|6pnnn-}1mBLO!z z`DolWQ#jxa#wc5n<59hB?u(~`e`hLv)QZq4BEh_Y3V+uEs6;XgWY;FF=Jae8hpgn- z?%HcFdG@{s5+u6xGRsa^OC3!@eUw1Cf66zDZ^`3y=^f{()c`m;UFsB{z%2CMb{m2Tg&1rOy8&O#v6SHtP|~S!+(p zBCMz*!6L{}79nV3t8`zWA4h$x=rW$`?8{@O18Aymatc|nt3OYF$p-3&pfI_5xmor% z3X;dp(l7*h1hq&W5BE5Im6nSdPaWiWmJ!b;mwWtpMLgIyDsKz0z?GSSK}>6QeV!dK zFL}QGIvnl6@UA}mqc!f8S+Zb1ADt)D(*g9+*1Hy2u>Yiw(4;+rrGP5wby{{n33L`b zzT7NHiYI_>yS62$NU8qhk?H%o6|NA0C+Do0jyJq6wZ=irvaa{@{ik=iLru+l3oN4M z_d-!1uXqO@pLv~pIYE||2>X7QkOQMgF(_tZ&Znz5^>s?&S%vF;0aX@jrvLOV@l-(` z;M8;|SRV$XMvgzsTBmio%JT-0ssERd;BWE*v*Qu$l8k(m0OJD4ZFFSBCCXpC$oa&R z=4DCa4wsSmI-TMy=n<`D%|sV4Lz@r$OaJfw_1{wXeB{$KHMK+vWe%R^v~uPcSejJ| ziLLI!&#)Nn#Gh=y^agP6o&TA8r*(3zyy1HM4UiwR=~Mjx+YCt&^l;TSYA4EmY5d@z zeHE+ix}f;q%L)FbFJNxz9f|6>b~Xi=+xln-katytfscs!9UZ-cy>r>L`u0Uyr|@q(y4pQ-(WR%}#D=E( z?fT`h3R%)wDpL7ha|FtQ4&Tu9NQk+msQL#~?1_=2=KX~T_=h96&sBp4-&BUwHD3*u zJx`l@^M(22SZcmHS>w*;{&Hf&R#AZ{+>OhaU>zwAp^ES@y`*ps|HV>uo9D=2ThAH54eEt`PYF97A`<~; z_>8O>18s;z1D8D+!s9fh{#$JUrQpNx9pCPQtVVDIO(3L2Ks66F$l*^z8joHR2sF6r z63CTL(KH@8+j?B@-^cbi(ZV_m7@l) z2&j!1s^1sH3Ru4TAM}(cohnDveoo46uhsC^)y%$&)`!mW!|gMl5Gm4xTYqvckgaOx zk9*}&9_tMNxaLn|MKtP5S#aS8OF4GK{Ql0F-o#}q!Kr&L^Qe{C*9C=sJMj2rVx7?+ zI-gaiwnAB(Znl)T9cDyHMwoPu=?J zKvGZ*^|1x_pd(j7;N{(h_WC^_dzg!EL9GP6qOYxdk3J(KUyfCsO3V;m-p}LrQ}){_ z&s3um4LI<12c?0vYKtX#$_BFE-&`1OCQmdM-qFgx7fR{EMyM?DLuw`Nr^>!c%ZlW^ zNf9g*NbKl6=A(psz2i_%wR8BQ?l!+pu^C?kwqp5A?a66MKEB(4t1;Xi#{c+B{2KOu z#IK-dwt*Z*UV{jecDo&`0QYZqwLJG@ef^I{VcqSvrY6YECY8<=P0~;Sj~k+;oO3Th zz&7Mv`(Pzybi1WWVeZu5Y4CT&{6oW)RK8&RI|9gs3rl<#xXcpB~@a1?O%7T54-e z{n1v+mHk;#42Lp5Qu}hcW6gJO0^V^3tDTE9Puwg6yk}(2U%V$tD06%|>YvH*VA=hq ze+% z^})CSZwX{}$OoS`4JquXhjBlAx$1?C($0$G=JeR7xw;JZ%ic?eg{Sz_gqGl1T@dSU`)4$Eopv(iok09dJp?=ra!)gvcJ~mc3=7s z?D3G)A1ssW0NM+o>|&>*g#w4nZdIPfSh`dqO9LKj2nof~&Bm#F2NXY*w8w6vZ>Flw zwzAYYZ$FPUIQ(Rn(&2(^uxeLHX;{5tQH9Ce_{;zCwI{8)*SRDsKsD|PAh* z5^kFCM~(Y+Mc(bWZ~_JE&~Tj2Z`%AivJ$nhI-J5Os^qQ8D)fL|+Vz$9Zt9K>K%ec4 z6m7{H)kV%Z??glo>o`x()Nv0R?*SwhVU?6t&T-!4d~0}TIuC8BYH7-a zENzySvXuu$i?-&-gvK8nD)lxGQg3I&;;{U*PSyH0io@epne2X}O@LCikL`)<7O~eH zc}vCflGMawV-aI# ziw@H6OhEIWQVXjoQH`cqa6 zCN+2UgDk=k;ui?x)^0o^U{Ju{Uc2?Uk?-eA=hbE>{6FdRl78^#OiYs!{e}H&{qfrw4VT>Yo=%tP|pfm)jeT z0!ES4qlGO=I9rkyJDrJZ>)U-&3rztXmRiW6)wx7@&9;z%n+&EPKuP%O%oHiFOcb>a z()*e8X2*?{rJO_mC!c}htBkotkcHzymbYdxsLFJBB^qkRc;g1*j;3niXV1Msw04tB z*Jl7sP6E)`GR{}g4Af~#{8i$rY>;9*G-{-0Ju1;>1^uf)$@Qlxgv2T|M@;vP`2|{O zUitlCyz^;7-eIRoY6BGJuI)A%a-cVzdDrw+-BNaV_G%MpYD2Lvhln%c)iDFr`?NH_ zKjDq5A}7?VJ6!YqE#HqcEqe6SrFWyREhgRZCWv)*uPbRrP4f4pnH}kNzFuc6?4|H= z<8K@K-!RLSeVmrdHho;oEe91>&mSR%%FWT6OzfwNxTn?qZqz!)@}*IAmLdzXk=XDX zs;@x4-b=E4Qs)psc7RMY4E`SdKwmSOy!i#>>ZrtK(ZJxf;^E#aY&kO9t&z5Ki%i*B z?do2Ib%X}#oPaBb%k(Q%q)hzHAw`;dHrmMKvMaw^j%7PO>b{8)!59vGznT9@)TQ!H z>UNV2q?;>*GD_yt4=^Gkz$CBxsr03H-(pD?r)>2idHBhas44uhyMD-Orr zQW^g8_EZkTJF|P~&TT9JkQAE+SrU}C^qG9XLB!=oCCoa5H=78;)}b=9J)%Qm)PhCK zUB-sisRVF{zD;ea^)t&1wcSY@_X5WE(~YKl<|4(405+;PGSEDPc-eY2k^e@%pPoFi z8n7>idzs)DSXw|fqt%|3U=>=wanR)5Yj+?jA@Sf+r43n4Sk&{{z(PmV&CQ-Y&<01b zKJHO-!zwBdX7Ique#5;M?b+;V14;4&q*7_S+Q1%AXoNJG)IINv+Dc!2zC#)Xbz5FK zzh+(!WoQFQz1@R{$G2%H+){WGnVV3%v0s!ZaDJuW|3OKl*lo0jWh`n(dJCJYso5@UvX z+!o44F8Jz1WM~*;;+MzmqrVmpzuM)b#TwNaZuxCxR7lOs)G9U$pYb_b>J&X^*A^)h z=u;U~Ggf`zs|J-^4i0)Pagh_8HEFO!NsycESD3D(;-a2*LuCu5UoLoy*z8`jZOxk- z`5CkoaJYv^9p-d6l!rPqw@5lY1M0u2b#Zmvy>dO&P;EX-haUDchK}ROFeGscvzBDD z*5#w8b94Nit)AmsgHg(?tq(3B(HxT@g4vhHVkceEUYe zy{<5$@lZw8@AqEoqGEV+D(@6S2`hDN_J=$R9Z8pDx8QvbCltz$x`}WH<{@Q%eS2qZ zQIK2%Dm=S|1BZyI4UYcH4>Ba%BgVBT>8JI`#$+v%0wN;M*Qa~A7~jZ;`9G93?f*bo z-^1%2r5P)^{P4A0Gey3(AGPP{Zcmnav2@n`t6uQ8l$NrSzgM@Sm~+!>smFx(0VjGX z4Jb-zo~HU#u@qG&Fb)muS071YHVX^$np~Bs9X0xZ%ymT#=C*#I}v6W29dyCUbw}eD%xBKdQVwYk0ZBS)q#_x#j9$7N3op@ zi`_~S$9F|CoY-L^w->^+5K0E9z9TR?loXS^`o2wxalW6E4H2ZarqTbw7cL zwv^=mKh%h8Th-g{d7;xz(Pp%wq7L{KpT`-?kkaiTt5%0bR$1+l=|rL+=$>Gy%pJIJ z>Ru!26teyw<>B0qd~`lTc5-N*UhQ|JC{+L*BiMDRUZj5Ypb?^15ODHYI9qKtE~+wA z^)hj{bvvPMjN5&SwZtqCt5|OTa)Qw7qERCCqf3k>Nt{O4WyI=4s@JM-E`3LrosafC z?m&|L7!ULc-K@+0;JPUNEE7I^_zXX5!D+9B{-r95!%DTrdW}(W`TR?_ZC&Uri029Q;6q~ znoxG~Gh~^_`fW*&nO>6XXyDUm}LxRF-e;ZXS30%KM#xur+f$tSK z?1+>{Oo2VZ=t1>)Sm3ZWW!7Q4104@v85LKNZyGiG^C=;a6`S_K|pO123~_or{nnRk%}G{w3NU_vRdi&q$K5rbnaaTj_$?|!m z+00Z0y(6wu;0t@ZyYwcZ6%(cDBmB7N=vPf1({muT!{ewXN`Tn)%l(LvN;{0=BUM+Z z(D@-~^E{oA4>vA%*Pdo9>XxjPNPzo3XwP9x2Giy?=D+SWkL+-QWa0Up3m)F#DrDCZ z;O8d~);(9v!BX^Hh)T^GSp3x3m8Gx0{x}IA?uoVG6!G7Glkt`a$X(ZM!%HpBczJ&& zCLw${%^#k;S9D4J6Zfqdr7XHKZs0-?j7e z7j}={C)e8yh8s`hjm#pe044OaG!J=q0o{U`2R*nfSs)07?+=^eDbgTPo_Grz+5_CNx@HlKy(1 z%`EfWAXdO>>y+`&f0rZpJO4`$Q5TKSbB8Ef~)f?qwDV`l8z!mIJPRZO6_sL@V>&P z4J7q~nHT-+&FfY7OE_J6SLf*7S8T?ro~x%PYS}vF{#A7Ff^OEqjJd_j;E4zZoZvuu zI)}a_*4}YXUb|#)q%!TUX$eX@n7F%x%k@&sGXx=hmEdI;{S_pT*xv?`E{_>lC^raE z3k|7X->fIBNVnQby(~*?emIPk-UqS@n*p!Siz+1$qgt0d{Te4zo>$zcngUOjr>(iifFE3UOUq<~0GiDWCO=*6DfC>0;t=Nh=fE<@7_l)aFh93Zh3# zNQJRpbzmYsz$ZP^E{S^)S$kb46=62K;`(L|o9&g^c+{OFV!3=&gl%l+|bk{79m`h4(UCQ)boJc{(QOspw3^*y0}VEq2Kkg*X3-AQCpJ97&lw*nr8i?yV>4 zi_8leZsG^^n~ec5!jLEwL>RZ;EPp|T?4v<%`ZHQ%AFaFFPb0I-zb&M=QU58dTc$%a zfYmvT)h<-^9#^PP;jff|N)eY>D_@NBj|la>I3)4lMgAG0_OLAWFAblwf`66yEMnRoyKt;?P%iO=C zI(IVHE5^7Z|IE=wSVW)8;8urz>_T5Xl2&FLlHxUb;l?9xkX~@T*;wIX3aUe%?ySP` ze1k6J`o)9tyr+XsJPNk=9fYD3>_zpn?Du0`YPWr*OOR|dar?t1vDcZO{FS`mV`*t| z?3J&H%-XN)6poqc3EzqlS8Ctk-#my$QANHZ2JF> zTmcF*+Nu3nYy~IQ&Xwp;q~>1*@sc^4%&%f8<`nbe2%eM}ER-MGuPZNZz}9O&LXJbV zK!BC!Vy~+#pu7c7GagikPOA$7SL4=Xy84;8e-a!3m7~N|Tp|CdrygX|$wYv*aJ!yc z3aU0ikyTd)RHuJ#T1b&O8Q^I;u6g+JpY!B**nDmiCk9gs3jj`6NmT_KL9DKLc90Zf7e@V>3K}-p~S+CAYGSjgj9~wBS zHwLO0lfh*Qe@8GN1^}#6SxuifH{qQ{wIePzNp8$eM&9<8-?m2!kTo2!W+|3KpOJ5b zaYTs+ky0Q2CS2R+51_ulg_*&jDuWI4wxD~_S&zJgLq9YUzvS5-s71i^f=0I&Xa zaG~E}dF@I)M&7iU_JF>{-H-jvcyRVE&QAF^i9z3xyi!SJRpM+dBat`;XNOOP^@F4nR+ z!vzf85?G^A!s%_Y{gD%*S@7k%PKfFDef!n_%4h?`1UbtXLQHV&&eF6wtQ~x12zLLb z@UYKLL4USqo|#%55$e+RiW|&MgSY}$P=?7G=mXaA{{{L$tSgVPgGHzI*M;AMn@g0r z4_T8P5$h5cti{g2OA=x5P+~Sa2?V_Q<5@3ORgwy@2Fvx7Ezv6dU1|Btif{4j5*Mt+ z&LE9JMnBlWS^!lT&C5Nk0m)rekWyy&FzfEP6g3J}tA~4Yt;Z0tCOZRz#a6*0^|WfR zedZF%#z3Vn0Jy@;n=*Dz!0*5=Hc!|+R=XZU#G333OdVW0wLz;Z>;d@Uupr-Y05yQ} zmB@vhzuBM73STN?M3GJ`2eVfBB19M*S?!?xd`8H!_^nEvy| zNkEO9jQyoN{M|^JE?9Zvw;3pCdw59&KMKy@Km4``5GB?OE7lPD+JxaG|No$IZg6Ci znSUXhE4nZS&EsPv?I1ZO!7|x@T#VJC{hj^i`c?2X={M`H)&KozSywim3yHy=pU=sP zv21x11B5vK;(mT;vj?Z4I&;wHYY2>dz!TC&OrZza*shFPkjmpw#u z0$pi>8w~i8*o+0ii5>d)9s3W6HxAeh7o6`9Os}A7@VqoM)Yt2^tFY zwPW`0p3n4ABU}T-xt}t2ZDD5YW^L_+CA_-?9U_dX0;ANGFQH`5H^&mkZ1B*A{j)vJ zYM7xv&0eW~J2uu^c$K_SB1b`(P730d7^eCjtb>C5XwW%Ts!U9SOW1IZg-b#`o+pH3cEu6v~&IC#mmJINf0hN+;5bL6o7?9DZV51(>+->wBu!^W>JBrGmpj#bG z8Fn~KI9qPjI(bn#&d%R?QCH^m_6>q7tmQh|bWsP2U=R+Zp=m|++)aRl3~8EGbR6ZV&oPhcGI>Omv!`*GSwO^vyJdp`Gu%z(9!2wp|)H()z>Gi@%^9(n3lcdk6y z7>=VJxIf)ilNtTE0p3aXo!iZyPR^nG_?ZtqnD5_N0>|cp_?-g`>>UWrw%O-M8hAwW zc9pf6BSznWFv}4=lODpITQD8X(uM{+!BK>*@G*+7{|r8bQ@m-WM8X))o@9vptHz5X8T10GFyOz3%l-_C^C&_JaRM3K0rx_ER5Oww;u-5Xe} zRB)U8EUWgIV?DKwEN=N~HSDg^}UM9)r5Tf2{b*k6R*u=X7}H1aSY& zw9^{E87+HrZ1yg_C3Q(odyc1kSc6&(Frep|pI({^8xZaxCVn_8m73Ru7oP_Aq?IlG z)BbY^^75tx?VrUDQR+l*CN`V#5_XL_o21#O8X$sevhgvG>NF2s(?Wsf`Ua0 ziHl!uv7`{uXTghN&p!Q>uh*54H$D_1f{U&;lHjX5r5e@(2(z`29g4)Xm;N?DqQ%45ki~wo$F@6P<;rQhtCGuZH zO#8wtDm?~t3$34BJs~-G`vai0(wu#zhb^Vo>{=Ywx>oy0I8}nNX2fo^UzgB;J*0(u zo*__E{pXj+z--OPojEf-fy-~l4(h!x*|4VYszMBVIAOgKNV;uU3mRYvIsOAGR{fyRtmLfmkw3p>EhK(z4tIKU~-c z-WPC<3hMBTW@@`3b|dNyepkbdJ1?c_%3_d%XEmit5cQ_M;e7JC0`66u&Q-TKks5Ohh6XHpat<0W8zWj4vpf{I^l9BOK*71xJ`rUhXQGb?$}O)cpSU6!07jL)+rc^=uVuiYHBrC9`&!cu-HyA zoqYZFLv>u?^xIh{PdGl>xYz9p4VzAj3Z-)K=)H`Rv12K&x-`|SMFt)2L~B^e!4pb7 z+1F4QAXbqD91etj(j;{4=Vk7)hmCq7y^ zR^u{BA_?2oUpDgN5Z8$8*3y=hU&7rky86yjdhm@Z%L{nn{Nx&)_TYn<3`SF0L|;6} z@6H!&T8Qu|+ik`vNhtHn0B@PdOd{F7j0g|2Kf+XeoA^wXbxor~0(D;2Ru4h|!dulE zqe}VuR)vcxU+AEi?J;;&j;=mdK|f%5z6XI-Kzk4wJ0hmRHlGm3Omnxqh4q12T3ool ze7|t!qX2`111SwV@-3|FSuP|@(!5=z?Z%`w4$IV&OY+$ZvK!xfwIh{;`k&bWB+wlM z>SeVIV*5Ce;z~W><{Mf%UNPS~+?@WD%{mdiTWU9cO+74V2-Pl~_IS4u3^@&0rR}7v zT5y+&iRZsN52g4-I65)?Iq_n1Bz$OT>Y<7;4nc_MZW+w3u!P$U`gZ2^cRv6kd_ON{ z(gTo8cb;hk%)pAc;A#>w&!##J4G`HLi^cAJtyfuozi-vqo+yn8?T^(cI$YkbjBfl4 zU@O$z7aXC)AW2-JfVkw1y9_8-hOtug`E$?Z*EVw&z;<}6Maw|S@%)}91tyb|a-9*T z*b+LMwKQfx#9`s~{>#8ZU1aM;Q-~VkM+=?qa-z@6Ve_T}+@+`dZP;qtp8ML04DBvLrQ=mvZyit-}YuyxbMpXhm*k7f_U=aaR)6 zlBS*!uPo9X^vDaTEKy|fFHO&9I{yu0B+5Z}OTh;jg2Vht3oRN-T9K*sg Z!=!4MQOLPkMi}_h(KvMif86@&e*The emergence of an Internet of Thing (IoT) service gateway model running modern software stacks, operating on the edge of an IoT deployment as an aggregator and controller, has opened up the possibility of enabling enterprise level technologies to IoT gateways.

Advanced software frameworks, which abstract and isolate the developer from the complexity of the hardware and the networking sub-systems, re-define the development and re-usability of integrated hardware and software solutions.

Eclipse Kura is an Eclipse IoT project that provides a platform for building IoT gateways. It is a smart application container that enables remote management of such gateways and provides a wide range of APIs for allowing you to write and deploy your own IoT application.

Kura runs on top of the Java Virtual Machine (JVM) and leverages OSGi, a dynamic component system for Java, to simplify the process of writing reusable software building blocks. Kura APIs offer easy access to the underlying hardware including serial ports, GPS, watchdog, USB, GPIOs, I2C, etc. It also offer OSGI bundle to simplify the management of network configurations, the communication with IoT servers, and the remote management of the gateway.

Kura components are designed as configurable OSGi Declarative Service exposing service API and raising events. While several Kura components are in pure Java, others are invoked through JNI and have a dependency on the Linux operating system.

Kura comes with the following services:

  • I/O Services
    • Serial port access through javax.comm 2.0 API or OSGi I/O connection
    • USB access and events through javax.usb, HID API, custom extensions
    • Bluetooth access through javax.bluetooth or OSGi I/O connection
    • Position Service for GPS information from an NMEA stream
    • Clock Service for the synchronization of the system clock
    • Kura API for GPIO/PWM/I2C/SPI access
  • Data Services
    • Store and forward functionality for the telemetry data collected by the gateway and published to remote servers.
    • Policy-driven publishing system, which abstracts the application developer from the complexity of the network layer and the publishing protocol used. Eclipse Paho and its MQTT client provide the default messaging library used.
  • Cloud Services
    • Easy to use API layer for IoT application to communicate with a remote server. In addition to simple publish/subscribe, the Cloud Service API simplifies the implementation of more complex interaction flows like request/response or remote resource management. Allow for a single connection to a remote server to be shared across more than one application in the gateway providing the necessary topic partitioning.
  • Configuration Service
    • Leverage the OSGi specifications ConfigurationAdmin and MetaType to provide a snapshot service to import/export the configuration of all registered services in the container.
  • Remote Management
    • Allow for remote management of the IoT applications installed in Kura including their deployment, upgrade and configuration management. The Remote Management service relies on the Configuration Service and the Cloud Service.
  • Networking
    • Provide API for introspects and configure the network interfaces available in the gateway like Ethernet, Wifi, and Cellular modems.
  • Watchdog Service
    • Register critical components to the Watchdog Service, which will force a system reset through the hardware watchdog when a problem is detected.
  • Web administration interface
    • Offer a web-based management console running within the Kura container to manage the gateway.
  • Drivers and Assets
    • A unified model is introduced to simplify the communication with the devices attached to the gateway. The Driver encapsulates the communication protocol and its configuration parameters, while the Asset, which is generic across Drivers, models the information data channels towards the device. When an Asset is created, a Mirror of the device is automatically available for on-demand read and writes via Java APIs or via Cloud through remote messages.
  • Wires
    • Offers modular and visual data flow programming tool to define data collection and processing pipelines at the edge by simply selecting components from a palette and wiring them together. This way users can, for example, configure an Asset, periodically acquire data from its channels, store them in the gateway, filter or aggregate them using powerful SQL queries, and send the results to the Cloud. The Eclipse Kura Marketplace is a repository from which additional Wires components can be installed into your Kura runtime with a simple drag-and-drop.

"},{"location":"administration/application-management/","title":"Application Management","text":""},{"location":"administration/application-management/#package-installation","title":"Package Installation","text":"

After developing your application and generating a deployment package that contains the bundles to be deployed (refer to the Development section for more information), you may install it on the gateway using the Packages option in the System area of the Kura Gateway Administration Console as shown below.

Upon a successful installation, the new component appears in the Services list (shown as the Heater example in these screen captures). Its configuration may be modified according to the defined parameters as shown the Heater display that follows.

"},{"location":"administration/application-management/#eclipse-kura-marketplace","title":"Eclipse Kura Marketplace","text":"

Kura allows the installation and update of running applications via the Eclipse Kura Marketplace. The Packages page has, in the top part of the page a section dedicated to the Eclipse Kura Marketplace.

Dragging an application reference taken from the Eclipse Kura Marketplace to the specific area of the Kura Web Administrative Console will instruct Kura to download and install the corresponding package, as seen below:

Warning

If the installation from the Eclipse Marketplace fails, it can be for the lack of the correct certificates. In this case, import the certificate in the SSLKeystore from the Certificate List tab under the Security section. For more details about the procedure see here.

If the bundle is an official add-on for Eclipse Kura, the following certificate has to be imported:

-----BEGIN CERTIFICATE-----\nMIIHxzCCBq+gAwIBAgIQCCxCSNb4iszmNPNCflUcGTANBgkqhkiG9w0BAQsFADBP\nMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE\naWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzA5MTEwMDAwMDBa\nFw0yNDEwMTEyMzU5NTlaMG8xCzAJBgNVBAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlv\nMQ8wDQYDVQQHEwZPdHRhd2ExJTAjBgNVBAoTHEVjbGlwc2Uub3JnIEZvdW5kYXRp\nb24sIEluYy4xFjAUBgNVBAMMDSouZWNsaXBzZS5vcmcwggIiMA0GCSqGSIb3DQEB\nAQUAA4ICDwAwggIKAoICAQC5hXH2cQoOQlXs5cQ5itZ1Dzct9R+bqr2HaF+imlgo\nxJ+Vw1ukfQPpSbmSO17A0hLgpSJyVgoPlpOKkg6LGTz8/2qB7DWHdQbg2p0IGQhr\ndm4oJN2qknnGNl/YYkjz2QJswr1M98raydmq0hqJi0M3q9JSO64O3wOMNduvNG+O\nrCBol7cbxLr7NNoFxZncZ9giP7QF0XYS6nA8dtIyXU3SARRSPn6y9OX1ttltveck\n41ocaU8ORiTF7i89t649XAbtsvxUWM+qVnvlMxpaXqbhnrXMQ/pV2yfdU/qiFQth\n+RqFgBYoX5roxvmjB14+2qlymn236N4KOGhvfr+Fp8C8Fv6N6wFyKZctXewQ6IsA\n3zDvJmF3QaCz6h88lg+IqbRjX5MOjhSkE7XDNKb+xAw5pYzkn9LP+QJLf0iYJw2D\nZ/X+InVPiZ5UdXyXWypN3q0W5vlz/TmWuVZv76/azZ3anoSPiKh+F3si1xZVEMZQ\nIkqsgUfq69M4KvHrdi4nGEOfdBHxjos9ul1AsJR57hrhIchsESthUK04e7d2LYOB\nhHAr0uJNdwFsFD2EBR25ogN83bZ8NaDrrdK2P6sV+hWWK+MY1qRuRub7/fYuR4AU\n82toms9p1usjuyMmuIGEpLwk7jZe6XITcbXQEXDA8JKSZrZ/mOA4yTfIGR/gXXB7\nwQIDAQABo4IDfTCCA3kwHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQw\nHQYDVR0OBBYEFO8gL5LNWmSgCqbujR1qH0bUfrIrMCUGA1UdEQQeMByCDSouZWNs\naXBzZS5vcmeCC2VjbGlwc2Uub3JnMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYI\nKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8E\nBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMIGPBgNVHR8EgYcw\ngYQwQKA+oDyGOmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JT\nQVNIQTI1NjIwMjBDQTEtNC5jcmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0\nLmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwfwYIKwYBBQUH\nAQEEczBxMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSQYI\nKwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRM\nU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB\n1nkCBAIEggFuBIIBagFoAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xa\nOnQAAAGKhcgXYgAABAMARzBFAiEApQsk19PxbsLa452EPaPCXe7SAtpbm5RHnrwj\nyKAjWx0CICli5A3XAGwmg7IEy4lVA5YBt+mhvlegWkXrKt+oc/CoAHUASLDja9qm\nRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGKhcgXWQAABAMARjBEAiAvx7lc\nMyKS6bbnsjbzYOLzJbcS2aAjCzQz4mFiuFA59AIgbt+rpE40/RO0JnFyLP9fsbUf\npUj16ZYinOLorqDk9r0AdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7\nqwAAAYqFyBc3AAAEAwBIMEYCIQDCrdQYGYA7BlsT5gXZmkutN15gDQDjlfJBxIRb\nZ0FAAgIhAIr0eNFvkpec6VJ5pPrNklFt78XP0NjEOJxjrCFTLKVdMA0GCSqGSIb3\nDQEBCwUAA4IBAQCvENXlAGP311/gV5rMD2frsK+hlcs/4wjRKUS+nwp3RLTRd3w4\ncZLHcsw9qCxeniuHsc/Wa6myr0kKdRc4V6movLq9vMdSjT9dDOZWtZgFaadB0+z2\nA/Jsq1/AFFWqWisF64627j/Wf7RwuasxM0dnkAl3m9Hli5xKPgjbovXiH/dCeMvS\nMTxD1p3ewIYITzV+1Q5FoFuGyIyuh1Kzo7A41xKPe+XfWHqt+hKL8MWkJ9ACD2b0\nZDlD2OaX7K+vI8aWprmwVdpp3deuUoHgBqa1PkHPRmP0bFbamBdB4H6goRX5+DEy\ncTW2rRm8jFiLm1kf0/iOL7/ddw0yZQAUMthU\n-----END CERTIFICATE-----\n

that has the following description:

Common Name: *.eclipse.org\nSubject Alternative Names: *.eclipse.org, eclipse.org\nOrganization: Eclipse.org Foundation, Inc.\nLocality: Ottawa\nState: Ontario\nCountry: CA\nValid From: September 10, 2023\nValid To: October 11, 2024\nIssuer: DigiCert TLS RSA SHA256 2020 CA1, DigiCert Inc Write review of DigiCert\nKey Size: 4096 bit\nSerial Number: 082c4248d6f88acce634f3427e551c19\n

If the bundle is not an official one and it is not hosted by Eclipse, retrieve the certificate with this command: 

openssl s_client -showcerts -connect <download_link>:443\n

and import it in the SSLKeystore.

"},{"location":"administration/application-management/#package-signature","title":"Package Signature","text":"

Once the selected application deployment package (dp) file is installed, it will be listed in the Packages page and detailed with the name of the deployment package, the version and the signature status. The value of the signature field can be true if all the bundles contained in the deployment package are digitally signed, or false if at least one of the bundles is not signed.

"},{"location":"administration/directory-layout/","title":"Directory Layout","text":"

This section describes the default Kura directory layout that is created upon installation. The default installation directory is as follows:

/opt/eclipse\n

The kura sub-directory is a logical link on the actual Kura release directory:

kura -> /opt/eclipse/kura_3.0.0_raspberry-pi-2\nkura_3.0.0_raspberry-pi-2\n
"},{"location":"administration/directory-layout/#kura-file-structure","title":"Kura File Structure","text":"

The idea behind the Kura file and folder structure is to separate user and framework configuration files, that is files that can be modified by the user to customize Kura behavior and files that are used by Kura to persist configurations. Moreover, some files are generated at runtime by Kura (i.e. database) and they are kept in specific folders.

The user, console, log4j and packages directories contain files that can be modified by the user (i.e. the configuration for the logging or custom Kura properties). The framework folder keeps the configuration files used by Kura and that shouldn't be modified by the user. The data directory is used to persist files that are generated by Kura. Finally, the plugins folder contains all the jar files needed by Kura. All of the Kura files are located within /opt/eclipse/kura folder using the structure shown in the following table:

Directory Description bin Scripts that start Kura. console This folder contains files that are used to customise the Kura Web UI appearance. data Data files generated by the Kura runtime. data/persistance Embedded Database files. packages Deployment package files that are not part of the standard Kura framework, but are installed at a later time. framework Configuration data for Kura framework. The user shouldn't directly modify these files. log Log file from the latest Kura installation. log4j Logger framework configuration plugins All of the libraries and Kura specific jar files needed for the framework execution. user Configuration files generated by the user or by Kura at runtime. These files can be modified by the user to customise the Kura behavior. user/snapshots XML snapshot files; up to 10 successive configurations including the original. user/security Files used by Kura to configure security. .data Backup files needed to restore factory configuration"},{"location":"administration/directory-layout/#log-files","title":"Log Files","text":"

Kura regularly updates two log files in the /var/log directory:

  • /var/log/kura-console.log - stores the standard console output of the application. This log file contains the eventual errors that are thrown upon Kura startup.

  • /var/log/kura.log - stores all of the logging information from Kura bundles. The logger levels are defined in the log4j.xml configuration file as shown below:

/opt/eclpse/kura/user/log4j.xml\n

The default logger level in this file is set to INFO. This level may be modified for the whole application or for a specific package as shown in the following example:

<Loggers>\n    <Logger name=\"org.eclipse\" level=\"info\" additivity=\"false\">\n        <AppenderRef ref=\"RollingFile\"/>\n    </Logger>\n\n    <Logger name=\"org.eclipse.kura.net.admin\" level=\"debug\" additivity=\"false\">\n        <AppenderRef ref=\"RollingFile\"/>\n    </Logger>\n\n    <Root level=\"info\">\n        <AppenderRef ref=\"RollingFile\"/>\n    </Root>\n</Loggers>\n

In this example, the logger level is set to DEBUG only for the net.admin bundle. Additionally, more specific, properties may be defined as required for your particular logging needs. The logger levels are hierarchical, so that those in a deeper level of the hierarchy will apply; otherwise, the more general logger level will override them.

Once the logger levels are modified as needed and the log4j.xml configuration file is saved, Kura automatically loads the new configuration. By default Kura checks the file every 30 seconds.

"},{"location":"administration/remote-management-kapua/","title":"Remote Management with Eclipse Kapua","text":""},{"location":"administration/remote-management-kapua/#built-in-services-management","title":"Built-in Services Management","text":"

This section describes the remote management of devices running Kura via Eclipse Kapua Console. The Eclipse Kapua Web Console provides the administration tools used for the management of the built-in services exposed by Kura.

To remotely manage a device running Kura through the Eclipse Kapua Web Console, select the desired device from the Devices Table of the console and open the Configuration tab as shown in the screen capture below. Please refer to the Built-in Services section for a description of the available Services and their configuration parameters.

"},{"location":"administration/remote-management-kapua/#installation-of-a-new-application","title":"Installation of a New Application","text":"

As described in Application Management, a new application embedded in a deployment package can be deployed and configured using Eclipse Kapua Console.

To do so, select a connected device and click on the Packages tab. Then, click on Install/Upgrade. The Install New Package window opens allowing the deployment package to be installed from an URL as shown in the screen capture below. Once installed, the new application parameters may be modified in the same way as the Built-in Services. Click on the Configuration tab to see the service that corresponds to your application.

"},{"location":"administration/remote-management-kapua/#snapshots","title":"Snapshots","text":"

As described in Snapshot Management, the overall Kura configuration, including the new installed applications, is stored in a snapshot xml file. The Eclipse Kapua Console also provides options to Download, Upload and Apply, or Rollback snapshots as shown in the screen capture below.

"},{"location":"administration/remote-management-kapua/#remote-command-execution-from-eclipse-kapua-web-console","title":"Remote Command Execution from Eclipse Kapua Web Console","text":"

The Eclipse Kapua Console provides the ability to run system commands directly on the device. Refer to Command Service for details on how to configure this service in Kura.

It is also possible to send a script to execute using the File option of the Command tab in Eclipse Kapua Console as shown in the screen capture below. This script must be compressed into a zip file with the eventual associated resource files. Once the file is selected, click Execute.

The zip file is sent embedded in an MQTT message on the device. The Command Service in the device stores the file in /tmp, unzips it, and tries to execute a shell script if one is present. Note that in this case, the Execute parameter cannot be empty; a simple command, such as \"ls -l /tmp\", may be entered.

"},{"location":"administration/snapshot-management/","title":"Snapshot Management","text":"

The overall configuration of Kura is stored in an XML file called a snapshot. This file includes all of the parameters for every service running in Kura. The original configuration file is named snapshot_0.xml. This section describes how snapshots may be used.

Each time a configuration change is made to one of the Kura components, a new XML file is created using the naming convention snapshot_[time as a long integer].xml. The nine most recent snapshots are saved, as well as the original snapshot 0.

"},{"location":"administration/snapshot-management/#how-to-access-snapshots","title":"How to Access Snapshots","text":"

To display snapshots using the Gateway Administration Console, select Settings from the System area, and then click on the Snapshots tab. The following three operations are available: Download, Upload and Apply, and Rollback.

"},{"location":"administration/snapshot-management/#how-to-use-snapshots","title":"How to Use Snapshots","text":""},{"location":"administration/snapshot-management/#download","title":"Download","text":"

The Download option provides the ability to save a snapshot file onto your computer. This file may then be edited, uploaded back to the device, or transferred to another equivalent device.

Starting from Kura 5.1, the snapshot can be downloaded in two formats:

  • XML: The original XML snapshot format.
  • JSON: The JSON format used by the Configuration v2 REST APIs and CONF-V2 request handler. For example the downloaded snapshot can be used as is as a body for the PUT/configurableComponents/configurations/_update request. The takeSnapshot parameter specified by the CONF-V2 request is missing from the downloaded JSON file, if that parameter is not specified, a new snapshot will be created by default.

Pressing the Download button will trigger a dialog that allows choosing the desired format.

"},{"location":"administration/snapshot-management/#upload-and-apply","title":"Upload and Apply","text":"

The Upload and Apply option provides the ability to import an XML file from your computer and upload it onto the device. This function updates every service in Kura with the parameters defined in the XML file.

Warning

Carefully select the file to be uploaded. An incorrect file may crash Kura and make it unresponsive.

"},{"location":"administration/snapshot-management/#rollback","title":"Rollback","text":"

The Rollback option provides the ability to restore the system to a previous configuration.

"},{"location":"administration/system-component-inventory/","title":"System Component Inventory","text":"

The Framework has the capability to report locally and to the associated cloud platform the list of currently installed components and their associated properties.

This feature allows, locally and remotely, the system administrator to know which components are installed into the target device and the associated versions. The feature is particularly important for a system administrator because allows to identify vulnerable components and allows immediate actions in response.

From the local Kura Web UI, the list of system components is available in the System Packages tab of the Device section. Once selected, the user will get the list of all the system installed components.

The component's inventory list is available also via REST APIs and, with the same contract, from the cloud. The Mqtt contract defined for this component is available here

"},{"location":"cloud-api/app-dev-guide/","title":"Application developer guide","text":"

This guide will provide information on how an application developer can leverage the new Generic Cloud Services APIs, in order to be able to properly use the CloudPublisher/CloudSubscriber API, publish a message, being notified of message delivery and of connection status changes.

The Kura ExamplePublisher will be used as a reference.

The application should bind itself to a CloudPublisher or CloudSubscriber instance, this can be done in different ways, such as using OSGi ServiceTrackers or by leveraging the Declarative Service layer.

The recommended way to perform this operation is choosing the latter and allowing the user to customize the service references through component configuration.

If the component metatype and definition are structured as described below, the Kura Web UI will show a dedicated widget in component configuration that helps the user to pick compatible CloudPublisher or CloudSubscriber instances.

  1. Write component definition

    The first step involves declaring the Publisher or Subscriber references in component definition:

      <scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\"\n    name=\"org.eclipse.kura.example.publisher.ExamplePublisher\"\n    activate=\"activate\"\n    deactivate=\"deactivate\"\n    modified=\"updated\"\n    enabled=\"true\"\n    immediate=\"true\"\n    configuration-policy=\"require\">\n  <implementation class=\"org.eclipse.kura.example.publisher.ExamplePublisher\"/>\n\n   <!-- If the component is configurable through the Kura ConfigurationService, it must expose a Service. -->\n   <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.example.publisher.ExamplePublisher\"/>\n   <service>\n       <provide interface=\"org.eclipse.kura.configuration.ConfigurableComponent\"/>\n   </service>\n\n   <reference name=\"CloudPublisher\"\n           policy=\"static\"\n           bind=\"setCloudPublisher\"\n           unbind=\"unsetCloudPublisher\"\n           cardinality=\"0..1\"\n           interface=\"org.eclipse.kura.cloudconnection.publisher.CloudPublisher\"/>\n   <reference name=\"CloudSubscriber\"\n           policy=\"static\"\n           bind=\"setCloudSubscriber\"\n           unbind=\"unsetCloudSubscriber\"\n           cardinality=\"0..1\"\n           interface=\"org.eclipse.kura.cloudconnection.subscriber.CloudSubscriber\"/>\n  </scr:component>\n

    The snipped above shows the definition of Kura ExamplePublisher, this component is capable of sending and receiving messages, and therefore defines two references, the first to a CloudPublisher and the second to a CloudSubscriber.

    In order to allow the user to customize the bindings at runtime, the target attribute of the references should not be specified at this point in component definition, as it will be set by the Web UI.

    Reference cardinality should be use the 0..1 or 0..n form, as it is not guaranteed that the references will point to a valid service instance during all the lifetime of the application component. For example, references can not be bound if the application has not been configured by the user yet or if the target service is missing.

  2. Create component metatype

    Application metatype should declare an AD for each Publisher/Subscriber reference declared in component definition:

      <MetaData xmlns=\"http://www.osgi.org/xmlns/metatype/v1.2.0\" localization=\"en_us\">\n      <OCD id=\"org.eclipse.kura.example.publisher.ExamplePublisher\"\n           name=\"ExamplePublisher\"\n           description=\"Example of a Configuring Kura Application.\">\n\n       <!-- ... -->\n\n        <AD id=\"CloudPublisher.target\"\n            name=\"CloudPublisher Target Filter\"\n            type=\"String\"\n            cardinality=\"0\"\n            required=\"true\"\n            default=\"(kura.service.pid=changeme)\"\n            description=\"Specifies, as an OSGi target filter, the pid of the Cloud Publisher used to publish messages to the cloud platform.\">\n        </AD>\n\n        <AD id=\"CloudSubscriber.target\"\n            name=\"CloudSubscriber Target Filter\"\n            type=\"String\"\n            cardinality=\"0\"\n            required=\"true\"\n            default=\"(kura.service.pid=changeme)\"\n            description=\"Specifies, as an OSGi target filter, the pid of the Cloud Subscriber used to receive messages from the cloud platform.\">\n        </AD>\n\n        <!-- ... -->\n\n        </OCD>\n    <Designate pid=\"org.eclipse.kura.example.publisher.ExamplePublisher\" factoryPid=\"org.eclipse.kura.example.publisher.ExamplePublisher\">\n        <Object ocdref=\"org.eclipse.kura.example.publisher.ExamplePublisher\"/>\n    </Designate>\n  </MetaData>\n

    It is important to respect the following rules for some of the AD attributes:

    • id

    This attribute must have the following form:

    <reference name>.target\n

    where <reference name> should match the value of the name attribute of the corresponding reference in component definition.

    • required must be set to true

    • default must not be empty and must be a valid OSGi filter.

    The Web UI will renderer a dedicated widget for picking CloudPublisher and CloudSubscriber instances:

  3. Write the bind/unbind methods in applicaiton code

    The last step involves defining some bind...()/unbind...() methods with a name that matches the values of the bind/unbind attributes of the references in component definition.

    public void setCloudPublisher(CloudPublisher cloudPublisher) {\n...\n}\n\npublic void unsetCloudPublisher(CloudPublisher cloudPublisher) {\n...\n}\n\npublic void setCloudSubscriber(CloudSubscriber cloudSubscriber) {\n...\n}\n\npublic void unsetCloudSubscriber(CloudSubscriber cloudSubscriber) {\n...\n}\n

    As stated above, since reference cardinality is declared as 0.., the application must be prepared to handle the cases where references are not satisfied, and therefore CloudPublisher and CloudSubscriber instances are not available.

  4. Publish a message

    If a CloudPublisher instance is bound, the application can publish messages using its publish() method:

      if (nonNull(this.cloudPublisher)) {\n    KuraMessage message = new KuraMessage(payload);\n    String messageId = this.cloudPublisher.publish(message);\n  }\n

  5. Receiving messages using a CloudSubscriber

    In order to receive messages from a CloudSubscriber, the application must implement and attach a CloudSubscriberListener to it.

    This can be done for example during CloudSubscriber binding:

      public class ExamplePublisher implements CloudSubscriberListener, ... {\n\n  ...\n\n   public void setCloudSubscriber(CloudSubscriber cloudSubscriber) {\n    this.cloudSubscriber = cloudSubscriber;\n    this.cloudSubscriber.registerCloudSubscriberListener(ExamplePublisher.this);\n    ...\n  }\n\n  public void unsetCloudSubscriber(CloudSubscriber cloudSubscriber) {\n    this.cloudSubscriber.unregisterCloudSubscriberListener(ExamplePublisher.this);\n    ...\n    this.cloudSubscriber = null;\n  }\n\n  ...\n\n  @Override\n  public void onMessageArrived(KuraMessage message) {\n    logReceivedMessage(message);\n  }\n\n  ...\n\n  }\n

    The CloudSubscriber will invoke the onMessageArrived() method when new messages are received.

  6. Receiving connection state notifications

    If an application is interested in cloud connection status change events (connected, disconnected, etc), it can implement and attach a CloudConnectionListener to a CloudPublisher or CloudSubscriber instance.

      public class ExamplePublisher implements CloudConnectionListener, ... {\n\n  ...\n\n  public void setCloudPublisher(CloudPublisher cloudPublisher) {\n    this.cloudPublisher = cloudPublisher;\n    this.cloudPublisher.registerCloudConnectionListener(ExamplePublisher.this);\n    ...\n  }\n\n  public void unsetCloudPublisher(CloudPublisher cloudPublisher) {\n    this.cloudPublisher.unregisterCloudConnectionListener(ExamplePublisher.this);\n    ...\n    this.cloudPublisher = null;\n  }\n\n  public void setCloudSubscriber(CloudSubscriber cloudSubscriber) {\n    this.cloudSubscriber = cloudSubscriber;\n    ...\n    this.cloudSubscriber.registerCloudConnectionListener(ExamplePublisher.this);\n  }\n\n  public void unsetCloudSubscriber(CloudSubscriber cloudSubscriber) {\n    ...\n    this.cloudSubscriber.unregisterCloudConnectionListener(ExamplePublisher.this);\n    this.cloudSubscriber = null;\n  }\n\n  ...\n\n  @Override\n  public void onConnectionEstablished() {\n    logger.info(\"Connection established\");\n  }\n\n  @Override\n  public void onConnectionLost() {\n    logger.warn(\"Connection lost!\");\n  }\n\n  @Override\n  public void onDisconnected() {\n    logger.warn(\"On disconnected\");\n  }\n\n  ...\n\n  }\n

  7. Receiving message delivery notifications

    If an application is interested in message confirmation events and the underlying cloud connection supports it, it can implement and attach a CloudDeliveryListener to a CloudPublisher instance.

      public class ExamplePublisher implements CloudDeliveryListener, ... {\n\n  ...\n\n  public void setCloudPublisher(CloudPublisher cloudPublisher) {\n    this.cloudPublisher = cloudPublisher;\n    ...\n    this.cloudPublisher.registerCloudDeliveryListener(ExamplePublisher.this);\n  }\n\n  public void unsetCloudPublisher(CloudPublisher cloudPublisher) {\n    ...\n    this.cloudPublisher.registerCloudDeliveryListener(ExamplePublisher.this);\n    this.cloudPublisher = null;\n  }\n\n  ...\n\n  @Override\n  public void onMessageConfirmed(String messageId) {\n    logger.info(\"Confirmed message with id: {}\", messageId);\n  }\n\n  ...\n\n  }\n

    The CloudSubscriber will invoke the onMessageConfirmed() method when a published message is confirmed.

    In order to determine which message has been confirmed, the provided messageId can be compared with the id returned by the publish() call that published the message.

    Please note that if the underlying cloud connection is not able to provide message confirmation for the published message, the id returned by publish() will be null.

"},{"location":"cloud-api/built-in-cloud/","title":"Built-in Cloud Services","text":"

Eclipse Kura provides by default a set of services used to connect to a cloud platform. The following sections describe the services and how to configure them.

The CloudService API is deprecated since Kura 4.0. The functionalities provided by CloudService are now provided by the CloudEndpoint and CloudConnectionManager service interfaces. See the section describing the Kura 4.0 cloud connection model for more details.

The DataService and MqttDataTrasport APIs are not deprecated in Kura 4.0.

"},{"location":"cloud-api/built-in-cloud/#cloudservice","title":"CloudService","text":"

The CloudService provides an easy-to-use API layer for the M2M application to communicate with a remote server. It operates as a decorator for the DataService, providing add-on features over the management of the transport layer.

In addition to simple publish/subscribe, the CloudService API simplifies the implementation of more complex interaction flows like request/response or remote resource management. The CloudService abstracts the developers from the complexity of the transport protocol and payload format used in the communication.

The CloudService allows a single connection to a remote server to be shared across more than one application in the gateway providing the necessary topic partitioning. Its functions include:

  • Adds application topic prefixes to allow for a single remote server connection to be shared across applications.

  • Defines a payload data model and provides default encoding/decoding serializers.

  • Publishes life-cycle messages when the device and applications start and stop.

To use this service, select the CloudServices option located in the System area and select the CloudService tab as shown in the screen capture below.

The CloudService provides the following configuration parameters:

  • device.display-name - defines the device display name given by the system. (Required field.)
  • device.custom-name - defines the custom device display name if the device.display-name parameter is set to \"Custom\".
  • topic.control-prefix - defines the topic prefix for system messages.
  • encode.gzip - defines if the message payloads are sent compressed.
  • republish.mqtt.birth.cert.on.gps.lock - when set to true, forces a republish of the MQTT Birth Certificate when a GPS correct position lock is received. The device is then registered with its real coordinates. (Required field.)
  • republish.mqtt.birth.cert.on.modem.detect - when set to true, forces a republish of the MQTT Birth Certificate when the service receives a modem detection event. (Required field.)
  • enable.default.subscriptions - when set to true, the gateway will not be remotely manageable.
  • payload.encoding - Specify the message payload encoding. The possible options are Kura Protobuf and Simple JSON.

The default CloudService implementations publishes the following lifecycle messages:

  1. BIRTH message: sent immediately when device is connected to the cloud platform. The BIRTH message is published with priority 0 and QoS 1;
  2. DISCONNECT message: sent immediately before device is disconnected from the cloud platform. The DISCONNECT message is published with priority 0 and QoS 0;
  3. delayed BIRTH message: sent when new cloud application handler becomes available, a DP is installed or removed, GPS position is locked (can be disabled), or when modem status changes (can be disabled). These messages are cached for 30 seconds before sending. If no other message of such type arrives the message is sent; otherwise the BIRTH is cached and the timeout restarts. This is to avoid sending multiple messages when the framework starts. The message is published with priority 0 and QoS 1;
"},{"location":"cloud-api/built-in-cloud/#mqttdatatransport","title":"MqttDataTransport","text":"

The MqttDataTransport service provides the ability to connect to a remote broker, publish messages, subscribe to topics, receive messages on the subscribed topics, and disconnect from the remote message broker. To use this service, select the MqttDataTransport option located in the System area and select the CloudService tab as shown in the screen capture below.

The MqttDataTransport service provides the following configuration parameters:

  • broker-url - defines the URL of the MQTT broker to connect to. (Required field.)
  • topic.context.account-name - defines the name of the account to which the device belongs.
  • username and password - define the username and password that have been assigned to the device by the account administrator (generally username is account-name_broker). (Required field.)
  • client-id - defines the identifier of the MQTT client representing the device when connecting to the MQTT broker. If left empty, it is automatically determined by the client software as the MAC address of the main network interface (in general numbers and uppercase letters without ':'). This identifier has to be unique within your account.
  • keep-alive - defines the \"keep alive\" interval measured in seconds. It specifies the maximum amount of time that should pass without communication between the client and the server. The client will ensure that at least one message travels across the network within each keep alive period. In the absence of a data-related message during this time period, the client will send a very small MQTT \"ping\" message that the server will acknowledge. The keep alive interval enables the client to detect when the server is no longer available without having to wait for the long TCP/IP timeout. (Required field.)
  • timeout - sets the timeout used for all interactions with the MQTT broker. (Required field.)
  • clean-session - controls the behavior of both the client and the server at the time of connect and disconnect. When this parameter is set to true, the state information is discarded at connect and disconnect; when set to false, the state information is maintained. (Required field.)
  • lwt parameters - define the MQTT \"Last Will and Testament\" (LWT) settings for the client. In the event that the client unexpectedly loses its connection to the server, the server publishes the LWT message (lwt.payload) to the LWT topic on behalf of the client. This allows other clients (subscribed to the LWT topic) to be made aware that the client has disconnected. LWT parameters that may be configured include:
  • lwt.topic
  • lwt.payload
  • lwt.qos
  • lwt.retain
  • in-flight.persistence - defines the storage type where in-flight messages are persisted across reconnections. They may be stored in memory, or in a file on the disk. (Required field.)
  • protocol-version - defines the MQTT Protocol version to be used. This value may be 3.1 or 3.1.1.
  • ssl parameters - defines the SSL configuration. SSL parameters that may be configured include:
  • ssl.hostname.verification
  • ssl.default.cipherSuites
  • ssl.certificate.alias
"},{"location":"cloud-api/cloud-conn-dev-guide/","title":"Cloud connection developer guide","text":"

This guide will provide information on how a cloud connection developer can leverage the new Generic Cloud Services APIs.

As reference, this guide will use the Eclipse IoT WG namespace implementation bundle available here

"},{"location":"cloud-api/cloud-conn-dev-guide/#implement-cloudendpoint-and-cloudconnectionmanager","title":"Implement CloudEndpoint and CloudConnectionManager","text":"

In order to leverage the new APIs, and be managed by the Kura Web UI, the Cloud Connection implementation bundle must implement CloudEndpont and, if log-lived connections are supported, the CloudConnectionManager interface must be implemented as well.

The ending class should be something as follows:

public class CloudConnectionManagerImpl\n        implements CloudConnectionManager, CloudEndpoint, ... {\n\n    @Override\n    public boolean isConnected() {\n        ...\n    }\n\n    @Override\n    public void connect() throws KuraConnectException {\n        ...\n    }\n\n    @Override\n    public void disconnect() {\n        ...\n    }\n\n    @Override\n    public Map<String, String> getInfo() {\n        ...\n    }\n\n    @Override\n    public void registerCloudConnectionListener(CloudConnectionListener cloudConnectionListener) {\n        ...\n    }\n\n    @Override\n    public void unregisterCloudConnectionListener(CloudConnectionListener cloudConnectionListener) {\n        ...\n    }\n}\n

A corresponding component definition should be provided in the OSGI-INF folder exposing the implementation of CloudEndpoint and CloudConnectionManager interfaces.

<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\" activate=\"activate\" configuration-policy=\"require\" deactivate=\"deactivate\" enabled=\"true\" immediate=\"true\" modified=\"updated\" name=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\">\n   <implementation class=\"org.eclipse.kura.internal.cloudconnection.eclipseiot.mqtt.cloud.CloudConnectionManagerImpl\"/>\n   <service>\n      <provide interface=\"org.eclipse.kura.configuration.ConfigurableComponent\"/>\n      <provide interface=\"org.eclipse.kura.cloudconnection.CloudConnectionManager\"/>\n      <provide interface=\"org.eclipse.kura.cloudconnection.CloudEndpoint\"/>\n      <!-- ... -->\n   </service>\n\n   <!-- ... -->\n\n   <property name=\"kura.ui.service.hide\" type=\"Boolean\" value=\"true\"/>\n   <property name=\"kura.ui.factory.hide\" type=\"String\" value=\"true\"/>\n</scr:component>\n

In order to be fully compliant with the Web UI requirements, the CloudConnection component definition should provide two properties kura.ui.service.hide and kura.ui.factory.hide to hide the component from the left side part of the UI dedicated to display the services list.

"},{"location":"cloud-api/cloud-conn-dev-guide/#implement-the-cloudconnectionfactory-interface","title":"Implement the CloudConnectionFactory interface","text":"

The CloudConnectionFactory is responsible to manage the cloud connection instance lifecycle by creating the CloudEndpoint instance and all the required services needed to publish or receive messages from the cloud platform.

As a reference, please have a look at the CloudConnectionFactory defined for the Eclipse IoT WG namespace implementation.

In particular, the getFactoryPid() method returns the PID of the CloudEndpoint factory. The createConfiguration() method receives a PID that will be used for the instantiation of the CloudEndpoint and for all the related services required to communicate with the cloud platform. In the example above, the factory creates the CloudEnpoint, and a DataService and MqttDataTransport instances internally needed to communicate with a remote cloud platform. As can be seen here, the CloudEndpoint instance configuration is enriched with the reference to the CloudConnectionFactory that generated it. This step is required by the Web UI in order to properly relate the instances with the corresponding factories.

The deleteConfiguration() method deletes from the framework the CloudEndpoint instance identified by the PID passed as argument and all the related services. In the Eclipse IOT WG example, it not only deletes the CloudEndpoint instance but also the corresponding DataService and MqttDataTransport instances.

The getStackComponentsPids() method return a List of String that represent the kura.service.pid of the configurable components that are part of a Cloud Connection instance. This method is used by the Web UI to get the list of configurable components that need to be displayed to the end user.

The getManagedCloudConnectionPids() method will return the list of kura.service.pid of all the CloudEndpoints managed by the factory.

The factory component definition should be defined as follows: 

<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\" name=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.DefaultCloudConnectionFactory\">\n   <implementation class=\"org.eclipse.kura.internal.cloudconnection.eclipseiot.mqtt.cloud.factory.DefaultCloudConnectionFactory\"/>\n   <reference bind=\"setConfigurationService\" cardinality=\"1..1\" interface=\"org.eclipse.kura.configuration.ConfigurationService\" name=\"ConfigurationService\" policy=\"static\" unbind=\"unsetConfigurationService\"/>\n   <service>\n      <provide interface=\"org.eclipse.kura.cloudconnection.factory.CloudConnectionFactory\"/>\n   </service>\n   <property name=\"osgi.command.scope\" type=\"String\" value=\"kura.cloud\"/>\n   <property name=\"osgi.command.function\" type=\"String\">\n      createConfiguration\n   </property>\n   <property name=\"kura.ui.csf.pid.default\" type=\"String\" value=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\"/>\n   <property name=\"kura.ui.csf.pid.regex\" type=\"String\" value=\"^org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager(\\-[a-zA-Z0-9]+)?$\"/>\n   <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.DefaultCloudConnectionFactory\"/>\n</scr:component>\n

In particular, it should expose in the service section the fact that the factory implements org.eclipse.kura.cloudconnection.factory.CloudConnectionFactory 

   <service>\n      <provide interface=\"org.eclipse.kura.cloudconnection.factory.CloudConnectionFactory\"/>\n   </service>\n

Important properties that need to be specified to have a better Web UI experience are the following: 

<property name=\"kura.ui.csf.pid.default\" type=\"String\" value=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\"/>\n<property name=\"kura.ui.csf.pid.regex\" type=\"String\" value=\"^org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager(\\-[a-zA-Z0-9]+)?$\"/>\n
those allow to specify the form of the expected PID that the end user should provide when creating a new cloud connection.

"},{"location":"cloud-api/cloud-conn-dev-guide/#provide-a-cloudpublisher-implementation","title":"Provide a CloudPublisher implementation","text":"

To provide a CloudPublisher implementation, other than implementing CloudPublisher API in a java class, the developer must provide a component definition in the OSGI-INF folder that should be like the following:

<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\" activate=\"activate\" configuration-policy=\"require\" deactivate=\"deactivate\" enabled=\"true\" immediate=\"true\" modified=\"updated\" name=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher\">\n   <implementation class=\"org.eclipse.kura.internal.cloudconnection.eclipseiot.mqtt.cloud.publisher.CloudPublisherImpl\"/>\n   <service>\n      <provide interface=\"org.eclipse.kura.cloudconnection.publisher.CloudPublisher\"/>\n      <provide interface=\"org.eclipse.kura.configuration.ConfigurableComponent\"/>\n   </service>\n   <property name=\"cloud.connection.factory.pid\" type=\"String\" value=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\"/>\n   <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher\"/>\n   <property name=\"kura.ui.service.hide\" type=\"Boolean\" value=\"true\"/>\n   <property name=\"kura.ui.factory.hide\" type=\"String\" value=\"true\"/>\n   <property name=\"kura.ui.csf.pid.default\" type=\"String\" value=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher\"/>\n   <property name=\"kura.ui.csf.pid.regex\" type=\"String\" value=\"^org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher(\\-[a-zA-Z0-9]+)?$\"/>\n</scr:component>\n

As can be seen in the previous snippet, the Publisher exposes itself in the framework as a ConfigurableComponent and as a CloudPublisher.

The component definition must contain the following well-known properties:

  • cloud.connection.factory.pid: this property must be set to the kura.service.pid of the factory that created the cloud connection which the publisher belongs. It is used by the Web UI to enforce that the correct cloud publisher implementation is used in a specific cloud endpoint.
  • kura.ui.service.hide: as specified before for the Cloud Endpoint
  • kura.ui.factory.hide: as specified before for the Cloud Endpoint
  • kura.ui.csf.pid.default: as specified before for the Cloud Factory. It is an optional property.
  • kura.ui.csf.pid.regex: as specified before for the Cloud Factory. It is an optional property.

The relation between the CloudPublisher instance and the CloudEndpoint is defined by a configuration property set by the Web UI at CloudPublisher creation.

"},{"location":"cloud-api/cloud-conn-dev-guide/#provide-a-cloudsubscriber-implementation","title":"Provide a CloudSubscriber implementation","text":"

The CloudSubscriber implementation and component definition is similar to the one described for the CloudPublisher.

"},{"location":"cloud-api/cloud-conn-dev-guide/#implement-requesthandler-support","title":"Implement RequestHandler support","text":"

In order to support Command and Control, the cloud connection bundle should provide a service that registers itself as RequestHandlerRegistry. In this way all the RequestHandler instances could be able to discover the different Registry and subscribe for command and control messages received from the cloud platform. As an example, for the Eclipse IoT WG bundle, the CloudEndpoint registers itself also as RequestHandlerRegistry.

"},{"location":"cloud-api/overview/","title":"Overview","text":"

This section describes the new cloud related concepts and APIs introduced in Kura 4.0.

"},{"location":"cloud-api/overview/#motivations","title":"Motivations","text":"

Before Kura 4.0, Cloud APIs were quite tied to Kapua messaging conventions and to the MQTT protocol. Defining custom stacks that support other cloud platforms was possible, but the resulting implementations were affected by the following limitations:

  • The legacy APIs assume that the underlying messaging protocol is MQTT. This assumption spans across all API layers, from the low level MQTTDataTrasport to the high level CloudClient. This makes quite difficult to implement cloud stacks that use other protocols like AMQP or HTTP.

  • The CloudClient API, which was the recommended way for applications to interface with a cloud stack, enforce the following MQTT topic structure: 

    #account-name/#device-id/#app-id/<app-topic>\n
    This topic hierarchy, which is Kapua related, might be too restrictive or too loose for other cloud platforms, for example:

    • The Eclipse IoT working group namespace allows authenticated devices to omit the accont-name and device-id parameters in the topic. Moreover, telemetry, alert and event message topics must start respectively the t/, a/ and e/ prefixes. Adhering to this specification is not possible for a cloud stack that implements the legacy APIs.
    • The AWS cloud platform allows publishing on virtually any topic, using a CloudClient would be quite restrictive in this case. A way for overcoming this limitation for an application might be using the DataService layer directly, adversely affecting portability.
    • The Cumulocity cloud platform allows publishing only on a limited set of topics, and most of the application generated information is placed in the payload encoded in CSV. Using CloudClient in this case makes difficult for the cloud stack to enforce that the messages are published on the correct topics. Moreover, the cloud stack in this case must also convert from KuraPayload to CSV, this can be currently achieved only by introducing rigid conversion rules, that might not be enough to support all message formats.

  • Applications that use the current APIs are not portable across cloud platforms. For example if an appliaction intends to publish on Cumulocity or AWS, it should be probably aware of the underlying cloud platform.

"},{"location":"cloud-api/overview/#concepts","title":"Concepts","text":"

The main interfaces of the new set of APIs and their interactions are depicted in the diagram below:

As shown in the above diagram new APIs introduce the concept of Cloud Connection, a set of related services that allow to manage the communication to/from a remote cloud platform.

The services that compose a Cloud Connection can implement the following cloud-specific interfaces:

  • CloudEndpoint (required): Each Cloud Connection is identified by a single instance of CloudEndpoint that implements low level specificities for the communication with the remote cloud platform.

  • CloudConnectionManager (optional): Exposes methods that allow to manage long-lived connections. The implementor of CloudEndpoint can implement this interface as well if the cloud platform support long-lived connections (for example by using the MQTT protocol).

  • RequestHandlerRegistry (optional): Manages the command and control functionalities if supported by the cloud platform.

  • CloudPublisher (optional): Allows applications to publish messages to the cloud platform in a portable way.

  • CloudSubscriber (optional): Allows applications to receive messages from the cloud platform in a portable way.

  • CloudConnectionFactory (required): Manages the lifecycle of Cloud Connections.

A Cloud Connection can also include services that do not provide any of the interfaces above but compose the internal implementation.

"},{"location":"cloud-api/overview/#cloudendpoint","title":"CloudEndpoint","text":"

Every Cloud Connection must contain a single CloudEndpoint instance. The kura.service.pid of the CloudEndpoint identifies the whole Cloud Connection.

The CloudEndpoint provides some low level methods that can be used to interact with the remote cloud platform.

For example the interface provides the publish() and subscribe() methods that allow to publish or receive messages from the cloud platform in form of KuraMessages. Those methods are designed for internal use and are not intended to be used by end-user applications.

The format of the KuraMessage provided to/received from a CloudEndpoint is implementation specific: the CloudEndpoint expects some properties to be set in the KuraMessage to be able to correctly publish a message (e.g. MQTT topic). These properties are specified by the particular CloudEndpoint, and should be documented by the implementor.

The recommended way for applications to publish and receive messages involves using the Publisher and Subscriber APIs described below. If an application directly uses the methods above, it will lose portability and will be tied to the specific Cloud Connection implementation.

"},{"location":"cloud-api/overview/#cloudconnectionmanager","title":"CloudConnectionManager","text":"

If the messaging protocol implemented by a Cloud Connection supports long-lived connection, then its CloudEndpoint can also implement and provide the CloudConnectionManager interface.

This interface exposes some methods that can be used to manage the connection like connect(), disconnect() and isConnected(); it also supports monitoring connection state using the CloudConnectionListener interface.

"},{"location":"cloud-api/overview/#publishers-and-subscribers","title":"Publishers and Subscribers","text":"

The limitations of the current model described above are addressed by the introduction of the CloudPublisher and CloudSubscriber APIs, that replace the CloudClient as the recommended interface between applications and cloud stacks. CloudPublisher and CloudSubscriber are service interfaces defined as follows:

public interface CloudPublisher {\n\n    public String publish(KuraMessage message) throws KuraException;\n\n    public void registerCloudConnectionListener(CloudConnectionListener cloudConnectionListener);\n\n    public void unregisterCloudConnectionListener(CloudConnectionListener cloudConnectionListener);\n\n    public void registerCloudDeliveryListener(CloudDeliveryListener cloudDeliveryListener);\n\n    public void unregisterCloudDeliveryListener(CloudDeliveryListener cloudDeliveryListener);\n\n}\n
public interface CloudSubscriber {\n\n    public void registerCloudSubscriberListener(CloudSubscriberListener listener);\n\n    public void unregisterCloudSubscriberListener(CloudSubscriberListener listener);\n\n    public void registerCloudConnectionListener(CloudConnectionListener cloudConnectionListener);\n\n    public void unregisterCloudConnectionListener(CloudConnectionListener cloudConnectionListener);\n\n}\n
"},{"location":"cloud-api/overview/#cloudpublisher","title":"CloudPublisher","text":"

The CloudPublisher interface should be used by applications for publishing messages using the single publish() method. This method accepts a KuraMessage which is basically a KuraPayload that can be enriched with metadata.

The main difference with the CloudClient APIs is that the publish() method does not require the application to specify any information related to message destinations. This allows to write portable applications that are unaware of the low level details of the destination cloud platform, such as the message format and the transport protocol.

"},{"location":"cloud-api/overview/#cloudsubscriber","title":"CloudSubscriber","text":"

An application designed to receive messages from the cloud must now attach a listener (CloudSubscriberListener) to a CloudSubscriber instance.

In this case, the message source cannot be specified by the application but is defined by the subscriber instance, in the same way as the CloudPublisher defines destination for published messages.

The low level details necessary for message delivery and reception (e.g. the MQTT topic and the conversion between KuraMessage and the message format used on the wire) are managed by the publisher/subscriber, typically these details are stored in the service configuration.

While in the previous model an application was responsible to actively obtain a CloudClient instance from a CloudService, now the relation between the application and a CloudPublisher or CloudSubscriber instance is represented as an OSGi service reference. Applications should allow the user to modify this reference in configuration, making it easy to switch between different cloud publisher/subscriber instances and different cloud platforms.

Publisher/subscriber instances are now typically instantiated and configured by the end user using the Web UI.

Publisher/subscriber instances are related to a CloudEnpoint instance using an OSGi service reference encoded in well known configuration property specified in the APIs (CloudConnectionConstants.CLOUD_ENDPOINT_SERVICE_PID_PROP_NAME). This allows the user to create those instances in a dedicated section of the Web UI.

"},{"location":"cloud-api/overview/#command-and-control","title":"Command and control","text":"

Another field in which the current Kura cloud related APIs can be generalized is related to command and control. In the previous model this aspect was covered by the Cloudlet APIs that are now replaced by RequestHandler APIs

Legacy Cloudlet implementations are defined by extending a base class, Cloudlet, which takes care of handling the invocation of the doGet(), doPut(), doPost() ... methods, and of correlating request and response messages. Messages were sent and received through a CloudClient.

More explicitly, Cloudlet only works with control topics whose structure is 

$EDC/<account-name>/<device-id>/<app-id>/<method>/<resource-path>\n
and also expects the identifier of the sender and the correlation identifier in the KuraPayload.

In the previous model, there is no way for a cloud stack implementor to customize the aspects above, which are hardcoded in the Cloudlet base class.

The new model delegates these aspects to some component of the cloud stack, and requires applications that want to support command and control to register themselves as RequestHandler to a RequestHandlerRegistry instance.

In order to ease porting old applications to the new model, some of the concepts of the old Cloudlet APIs are still present, this can be seen by looking at the RequestHandler interface definition:

public interface RequestHandler {\n\n    public KuraMessage doGet(RequestHandlerContext context, KuraMessage reqMessage) throws KuraException;\n\n    public KuraMessage doPut(RequestHandlerContext context, KuraMessage reqMessage) throws KuraException;\n\n    public KuraMessage doPost(RequestHandlerContext context, KuraMessage reqMessage) throws KuraException;\n\n    public KuraMessage doDel(RequestHandlerContext context, KuraMessage reqMessage) throws KuraException;\n\n    public KuraMessage doExec(RequestHandlerContext context, KuraMessage reqMessage) throws KuraException;\n}\n

A RequestHandler invocation involves the following parameters:

Request parameters:

  • method: (GET, PUT, POST, DEL, EXEC) that identifies the RequestHandler method to be called
  • request message: A set of key-value pairs and/or binary body contained in the KuraPayload wrapped inside the KuraMessage.
  • resources: A List<String> of positional parameters available under the well known args key in the provided KuraMessage properties.

Response parameters:

  • response message: A set of key-value pairs and/or binary body contained in the KuraPayload wrapped inside the returned KuraMessage.
  • status: A numeric code reporting operation completion state, determined as follows:
  • 200, if RequestHandler methods returns without throwing exceptions.
  • 400, if RequestHandler methods throws a KuraException with KuraErrorCode == BAD_REQUEST
  • 404, if RequestHandler methods throws a KuraException with KuraErrorCode == NOT_FOUND
  • 500, if RequestHandler methods throws a KuraException with other error codes.
  • exception message: The message of the KuraException thrown by the RequestHandler methods, if any.
  • exception stack trace: The stack trace of the KuraException thrown by the RequestHandler methods, if any.

The parameters above are the same involved in current Cloudlet calls. The request id and requester client id parameters are no longer part of the API, because are related to the to the way Kapua correlates requests and response. In the new API, request and response identifiers are not specified and not forwarded to the Cloudlet, this allows the CloudletService implementation to adopt the platform specific conventions for message correlation.

The Cloudlet parameters must be present in the request and response messages encoded in some format. A user that intends to call a Kura Cloudlet, for example through platform-specific REST APIs must be aware of these parameters. The user must supply request parameters in request message and must be able to extract response data from received message. The actual encoding of these parameters inside the messages depends on the particular platform.

The fact that set of Cloudlet parameters are roughly the same involved in current Cloudlet calls allows existing Cloudlet based applications to continue to work without changes to the protocol.

"},{"location":"cloud-api/overview/#cloud-connection-lifecycle","title":"Cloud Connection lifecycle","text":"

CloudEndpoint instance lifecycle is managed by a CloudConnectionFactory instance. A cloud connection implementor must register a CloudConnectionFactory instance in the framework that is responsible of creating and destroying the CloudEndpoint instances.

The CloudConnectionFactory will be typically invoked by the Web UI, and is defined as follows:

public interface CloudConnectionFactory {\n\n    public static final String KURA_CLOUD_CONNECTION_FACTORY_PID = \"kura.cloud.connection.factory.pid\";\n\n    public String getFactoryPid();\n\n    public void createConfiguration(String pid) throws KuraException;\n\n    public List<String> getStackComponentsPids(String pid) throws KuraException;\n\n    public void deleteConfiguration(String pid) throws KuraException;\n\n    public Set<String> getManagedCloudConnectionPids() throws KuraException;\n\n}\n

The createConfiguration() and deleteConfiguration() methods are responsible of creating/destroying a CloudEndpoint instance, specified by the provided kura.service.pid, and all the related services.

The getManagedCloudConnectionPids() returns the set of kura.service.pid managed by the factory.

The getStackComponentsPids(String pid) returns the list of the kura.service.pids of the ConfigurableComponents that are associated with the CloudEndpoint with the specified pid. The Web Ui will render the configuration of those components in separated tabs, in the dedicated CloudConnections section.

"},{"location":"cloud-api/overview/#backwards-compatibility","title":"Backwards compatibility","text":"

In order to ease the transition to the new model, legacy APIs like CloudService and CloudClient are still supported in Kura 4.0.0, even if deprecated.

The default Kapua oriented CloudService implementation is still available and can be used by legacy applications without changes. The default CloudService instance in Kura 4.0 also implements the new CloudEndpoint and CloudConnectionManager interfaces.

"},{"location":"cloud-api/user-guide/","title":"User guide","text":"

This guide will illustrate the steps required for configuring an application that uses the new Cloud Connection APIs to publish messages to the Kapua platform.

The involved steps are the following

  1. Instantiation and configuration of the Cloud Connection.
  2. Instantiation and configuration of a Publisher.
  3. Binding an application to the Publisher.
"},{"location":"cloud-api/user-guide/#creating-a-new-cloud-connection","title":"Creating a new Cloud Connection","text":"

  1. Open the Cloud Connections section of the Web UI:

  2. Create a new Cloud Connection

    1. Click on the New Connection button

    2. Enter a new unique identifier in the Cloud Connection Service PID field. The identifier must be a valid kura.service.pid and, in case of a Kapua Cloud Connection, it must start with the org.eclipse.kura.cloud.CloudService- prefix. A valid identifier can be org.eclipse.kura.cloud.CloudService-KAPUA. As an alternative it is possible to reconfigure the existing org.eclipse.kura.cloud.CloudService Cloud Connection.

    3. Configure the MQTTDataTrasport service.

      Click on the MQTTDataTrasport-KAPUA tab and fill the parameters required for establishing the MQTT connection:

      • Broker-url
      • Topic Context Account-Name
      • Username
      • Password

    4. Configure the DataService-KAPUA service.

      In order to enable automatic connection, set the Connect Auto-on-startup parameter to true

"},{"location":"cloud-api/user-guide/#creating-and-configuring-a-new-publisher","title":"Creating and configuring a new Publisher","text":"

  1. Select to the connection to be used from the list.

  2. Click on the New Pub/Sub button.

  3. Select the type of component to be created, from the Available Publisher/Subscriber factories drop down list, in order to create a Publisher select the org.eclipse.kura.cloud.publisher.CloudPublisher entry.

  4. Enter an unique kura.service.pid identifier in the New Publisher/Subscriber PID field.

  5. Click Apply, you should see the publisher configuration

  6. Select and configure the newly created publisher instance, and then click Apply

"},{"location":"cloud-api/user-guide/#binding-an-application-to-a-publisher","title":"Binding an application to a publisher","text":"

  1. Select the application instance configuration

  2. Find the configuration entry that represents a Publisher reference.

  3. Click on the Select available targets link and select the desired Publisher instance to bind to.

  4. Click on Apply

"},{"location":"cloud-platform/kura-aws-cloud/","title":"Amazon AWS IoT\u2122 platform","text":""},{"location":"cloud-platform/kura-aws-cloud/#overview","title":"Overview","text":"

This section provides a guide on connecting an Eclipse Kura\u2122 device to the Amazon AWS IoT platform.

"},{"location":"cloud-platform/kura-aws-cloud/#prerequisites","title":"Prerequisites","text":"
  • In order to connect a device to Amazon AWS IoT Kura version 1.3 or greater is required.
  • An Amazon AWS account is also needed.
"},{"location":"cloud-platform/kura-aws-cloud/#device-registration","title":"Device registration","text":"

The first step involves the registration of the new device on AWS, this operation can be done using the AWS Web Console or with the AWS CLI command line tool, in this guide the Web based console will be used.

"},{"location":"cloud-platform/kura-aws-cloud/#1-access-the-aws-iot-management-console","title":"1. Access the AWS IoT management console.","text":"

This can be done by logging in the AWS console and selecting IoT Core from the services list, in the Internet of Things section.

"},{"location":"cloud-platform/kura-aws-cloud/#2-create-a-default-policy-for-the-device","title":"2. Create a default policy for the device.","text":"

This step involves creating a default policy for the new device, skip if an existing policy is already available.

Access the main screen of the console and select Secure -> Policies from the left side menu and then press the Create button, in the top right area of the screen.

Fill the form as follows and then press the Create button:

  • Action -> iot:Connect, iot:Publish, iot:Subscribe, iot:Receive, iot:UpdateThingShadow, iot:GetThingShadow, iot:DeleteThingShadow
  • Resource ARN -> *
  • Effect -> Allow

This will create a policy that allows a device to connect to the platform, publish/subscribe on any topic and manage its thing shadow.

"},{"location":"cloud-platform/kura-aws-cloud/#3-register-a-new-device","title":"3. Register a new device.","text":"

Devices on the AWS IoT platform are called things, in order to register a new thing select Manage -> Things from the left side menu and then press the Create button, in the top right section of the screen. Select Create a single thing.

Enter a name for the new device and then press the Next button, from now on kura-gateway will be used as the device name.

"},{"location":"cloud-platform/kura-aws-cloud/#4-create-a-new-certificate-for-the-device","title":"4. Create a new certificate for the device.","text":"

The AWS IoT platform uses SSL mutual authentication, for this reason it is necessary to download a public/private key pair for the device and a server certificate. Click on Create certificate to quickly generate a new certificate for the new device.

Certificates can be managed later on by clicking on Secure -> Certificates, in the left part of the console.

"},{"location":"cloud-platform/kura-aws-cloud/#5-download-the-device-ssl-keys","title":"5. Download the device SSL keys.","text":"

You should see a screen like the following:

Download the 3 files listed in the table and store them in a safe place, they will be needed later, also copy the link to the root CA for AWS IoT in order to be able to retrieve it later from the device.

Press the Activate button, and then on Attach a policy.

"},{"location":"cloud-platform/kura-aws-cloud/#6-assign-the-default-policy-to-the-device","title":"6. Assign the default policy to the device.","text":"

Select the desired policy and then click on Register thing.

A policy can also be attached to a certificate later on perforiming the following steps:

Enter the device configuration section, by clicking on Manage -> Things and then clicking on the newly created device. Click on Security on the left panel and then click on the certificate entry (it is identified by an hex code), select Policies in the left menu, you should see this screen:

Click on Actions in the top left section of the page and then click on Attach policy, select the default policy previously created and then press the Attach button.

"},{"location":"cloud-platform/kura-aws-cloud/#device-configuration","title":"Device configuration","text":"

The following steps should be performed on the device, this guide is based on Kura 3.1.0 version and has been tested on a Raspberry PI 3.

"},{"location":"cloud-platform/kura-aws-cloud/#7-create-a-java-keystore-on-the-device","title":"7. Create a Java keystore on the device.","text":"

The first step for using the device keys obtained at the previous step is to create a new Java keystore containing the Root Certificate used by the Amazon IoT platform, this can be done executing the following commands on the device:

sudo mkdir /opt/eclipse/kura/security\n
cd /opt/eclipse/kura/security\n
curl https://www.amazontrust.com/repository/AmazonRootCA1.pem > /tmp/root-CA.pem\n
sudo keytool -import -trustcacerts -alias aws -file /tmp/root-CA.pem -keystore cacerts.ks -storepass changeit\n

If the last command reports that the certificate already exist in the system-wide store type yes to proceed. The code above will generate a new keystore with changeit as password, change it if needed.

"},{"location":"cloud-platform/kura-aws-cloud/#8-configure-the-ssl-parameters-using-the-kura-web-ui","title":"8. Configure the SSL parameters using the Kura Web UI.","text":"

  1. Open the Kura Web Console and enter select the Settings entry in the left side menu and then click on SSL Configuration, you should see this screen:

    Change the Keystore path parameter to /opt/eclipse/kura/security/cacerts.ks if needed.

    Change the settings in the form to match the screen above, set Default protocol to TLSv1.2, enter changeit as Keystore Password (or the password defined at step 7).

    Warning

    Steps from 8.2 to 8.6 will not work on Kura 3.2.0 due to a known issue. On this version, private key and device certificate need to be manually added to the keystore using the command line. If you are running Kura 3.2.0, proceed with step 8.7.

  2. Open the Kura Web Console and enter select the Settings entry in the left side menu and then click on Device SSL Certificate, you should see this screen:

    Enter aws-ssl in the Storage Alias field.

  3. The private key needs to be converted to the PKCS8 format, this step can be performed executing the following command on a Linux or OSX based machine:

    openssl pkcs8 -topk8 -inform PEM -outform PEM -in xxxxxxxxxx-private.pem.key -out outKey.pem -nocrypt\n

    where xxxxxxxxxx-private.pem.key is the file containing the private key downloaded at step 4.

  4. Paste the contents of the obtained outKey.pem in the \"Private Key\" field.

  5. Paste the contents of xxxxxxxxxx-certificate.pem.crt in the Certificate field.

    You should see a screen like this

  6. Click the Apply button to confirm.

  7. Kura 3.2.0 only - manually import device certificate and private key into keystore.

    On the host machine, open a terminal window in the folder containing the files downloaded at step 5 and execute the following command:

    openssl pkcs12 -export -in xxxxxxxxxx-certificate.pem.crt -inkey xxxxxxxxxx-private.pem.key -name aws-ssl -out aws-ssl.p12\n

    where xxxxxxxxxx-certificate.pem.crt is the original certificate downloaded from AWS and xxxxxxxxxx-private.pem.key is the private key.

    The command will ask for a password, define a new password.

    Copy the obtained aws-ssl.p12 file to the device into the /tmp folder using scp:

    scp ./aws-ssl.p12 pi@<device-address>:/tmp\n

    Replacing <device-address> with the hostname or ip address of the device.

    Open a ssh connection to the device and enter the following command:

    sudo keytool -importkeystore -deststorepass changeit -destkeystore /opt/eclipse/kura/security/cacerts.ks -srckeystore /tmp/aws-ssl.p12 -srcstoretype PKCS12\n

    The command will ask for a password, enter the password defined when creating the aws-ssl.p12 file.

    Restart Kura to reload the keystore.

"},{"location":"cloud-platform/kura-aws-cloud/#9-setup-a-new-cloud-connection","title":"9. Setup a new cloud connection","text":"

  1. Click on Cloud Connections in the left panel, and setup a new cloud connection

  2. Click on the New Connection button at the top of the page and set the following parameters in the dialog:

    • Cloud Connection Factory PID -> org.eclipse.kura.cloud.CloudService
    • Cloud Connection Service PID -> org.eclipse.kura.cloud.CloudService-AWS

    Press the Create button to confirm and then select the newly created CloudService instance from the list.

  3. Set the broker URL in the MqttDataTransport-AWS tab, it can be obtained from the AWS IoT Web Console clicking on the Settings entry in the bottom left section of the page, the URL will look like the following:

    a1rm1xxxxxxxxx.iot.us-east-1.amazonaws.com\n

    The mqtts protocol must be used, the value for the broker-url field derived from the URL above is the following: 

    mqtts://a1rm1xxxxxxxxx.iot.us-east-1.amazonaws.com:8883/\n

  4. Clear the value of the username and password fields.

  5. Set a value for the topic.context.account-name and client-id.

    • Assign an arbitrary account name to topic.context.account-name (for example aws-test), this will be used by the CloudClient instances for building the topic structure.

    • Enter the thing name in the client-id field (in this example kura-gateway).

  6. In order for the previously added keys to be used for the SSL connection with the broker enter the Storage Alias defined in step 8.2 (e.g aws-ssl) as value for the ssl.certificate.alias field.

  7. The setting lwt.topic under MqttDataTransport-AWS needs to be updated as well by entering a value not containing the $ character. This is required because of the fact that AWS IoT does not support topic names starting with $ (except for the $aws/ hierarchy).

  8. Press the Apply button in the top left section to commit the changes to the MqttDataTransport-AWS.

  9. Enter a name without the $ character for the topic.control-prefix setting in the CloudService-AWS tab, for example aws-control.

  10. The Kura CloudService uses some well-known topics to allow remote device management and to report device state information, this features are not supported by default by AWS IoT, the following settings can be applied in the CloudService-AWS tab in order to avoid sending unnecessary messages:

    • republish.mqtt.birth.cert.on.gps.lock -> false
    • republish.mqtt.birth.cert.on.modem.detect -> false
    • enable.default.subscriptions -> false

  11. Click the Apply button to save the changes.

"},{"location":"cloud-platform/kura-aws-cloud/#10-connect-to-the-cloud-platform","title":"10. Connect to the cloud platform","text":"

Make sure the AWS CloudService instance is selected from the list in the top section of the page and click on the Connect button, if the connection to AWS IoT platform succeeds the Status of the instance will be reported as Connected.

"},{"location":"cloud-platform/kura-azure/","title":"Azure IoT Hub\u2122 platform","text":"

Starting from release 3.0, Eclipse Kura can connect to the Azure IoT Hub using the MQTT protocol. When doing so, Kura applications can send device-to-cloud messages. More information on the Azure IoT Hub and its support for the MQTT protocol can be found here. This document outlines how to configure and connect a Kura application to the Azure IoT Hub.

"},{"location":"cloud-platform/kura-azure/#get-azure-iot-hub-information","title":"Get Azure IoT Hub information","text":"

In order to properly configure Kura to connect to IoT Hub, some information are needed. You will need the hostname of the Azure IoT Hub, referred below as {iothubhostname}, the Id and the SAS Token of the device, referred as {device_id} and {device_SAS_token}. The hostname is listed on the \"Overview\" tab on the IoT Hub main page, while the device ID is shown on the \"Device Explorer\" tab. Finally, the SAS token can be generated using the iothub-explorer application that can be found here. To install the application, type on a shell:

npm install -g iothub-explorer\n

Then start a new session on your IoT Hub instance (it will expire in 1 hour):

iothub-explorer login \"{your-connection-string}\"\n

where {your-connection-string} is the connection string of your IoT Hub instance. It can be found on the \"Shared access policies\" tab under \"Settings\". Select the \"iothubowner\" policy and a tab will appear with the \"Connection string\u2014primary key\" option. Then list your devices:

iothub-explorer list\n

and get the SAS token for the {device-name} device:

iothub-explorer sas-token {device-name}\n

Be aware that the SAS token will expire in 1 hour by default, but using \"-d\" option it is possible to set a custom expiration time.

"},{"location":"cloud-platform/kura-azure/#ssl-certificates","title":"SSL certificates","text":"

In order to connect to your IoT Hub instance, Kura should trust the remote broker through a SSL certificate. The simpler way to get the IotHub certificate is to run the following command on a shell:

openssl s_client -showcerts -tls1 -connect {iothubhostname}:8883\n

The result is the SSL certificate chain. Copy all the certificates in the format:

-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----\n

and paste them in to the \"Server SSL Certificate\" tab under \"Settings\" in Kura. Then click the Apply button and restart Kura to update the keystore.

"},{"location":"cloud-platform/kura-azure/#configuring-a-kura-cloud-stack-for-azure-iot-hub","title":"Configuring a Kura Cloud Stack for Azure IoT Hub","text":"

The Kura Gateway Administrative Console exposes all services necessary to configure a connection to the Azure IoT Hub. You can follow the steps outlined below to configure the connection to the Azure IoT Hub.

The first step is to create a new Kura Cloud stack. From the Kura Gateway Administrative Console:

  • Select Cloud Connections in the navigation on the left and click New Connection to create a new Cloud connection
  • In the dialog, select org.eclipse.kura.cloud.CloudService as the Cloud Connection Factory PID
  • Enter a Cloud Connection Service PID name like org.eclipse.kura.cloud.CloudService-Azure
  • Press the Create button to create the new Cloud stack

Now review and update the configuration of each Kura Cloud stack component as outline below.

  • MqttDataTransport
  • DataService
  • CloudService
"},{"location":"cloud-platform/kura-azure/#mqttdatatransport","title":"MqttDataTransport","text":"

Modify the service configuration parameters as follows:

  • broker-url - defines the URL of the Azure IoT MQTT broker. The URL value should be set as mqtts://{iothubhostname}:8883/

    Note

    An SSL connection (mqtts on port 8883) is required to connect to Azure IoT Hub\u2122.

  • topic.context.account-name - insert devices as the MQTT topic prefix for the device-to-cloud and cloud-to-device messages

  • username - insert {iothubhostname}/{device_id} as username for the MQTT connection

  • password - insert {device_SAS_token} as password for the MQTT connection

    Note

    The format of the SAS Token is like: 

    SharedAccessSignature sig={signature-string}&se={expiry}&sr={URL-encoded-resourceURI}\n

  • client-id - insert {device_id} as Client ID for the MQTT connection

  • clean-session - make sure it is set to true
  • lwt.topic - set the Will Topic to something #account-name/#client-id/messages/events/LWT

You can keep the default values of the remaining parameters, so save your changes by clicking the Apply button. A screen capture of the MqttDataTransport configuration is shown below.

"},{"location":"cloud-platform/kura-azure/#dataservice","title":"DataService","text":"

The majority of default settings in the DataService can be left unchanged. A screen capture of the DataService configuration is shown below.

In order for Kura to connect to Azure IoT Hub on startup, the connect.auto-on-startup option must be set to true. If this value is changed from false to true, Kura will immediately begin the connection process. It is recommended that the CloudService and MqttDataTransport are configured before setting the connect.auto-on-startup option to true.

Note

Changing the value of connect.auto-on-startup from true to false will not disconnect the client from the broker. This setting simply implies that Kura will not automatically connect on the next start of Kura.

"},{"location":"cloud-platform/kura-azure/#cloudservice","title":"CloudService","text":"

The default settings for the CloudService should be modified as follow to allow a connection to Azure IoT Hub .

  • topic.control-prefix - insert devices as the MQTT topic prefix for the device-to-cloud and cloud-to-device messages
  • encode.gzip - should be set false to avoid compression of the message payloads
  • republish.mqtt.birth.cert.on.gps.lock - should be set false to avoid sending additional messages on GPS position lock
  • republish.mqtt.birth.cert.on.modem.detect - should be set false to avoid sending additional messages on cellular modem update
  • enable.default.subscriptions - should be set false to avoid subscriptions on Kura control topics for cloud-to-device
  • payload.encoding - should be set to Simple JSON

The screen capture shown below displays the default settings for the CloudService.

"},{"location":"cloud-platform/kura-azure/#how-to-connect-and-disconnect-from-the-cloud-platform","title":"How to connect and disconnect from the cloud platform","text":"

The status panel can be used to manually connect or disconnect the client while Kura is running. The main button toolbar has a connect and disconnect button that may be used to control connectivity.

Note

Connecting or disconnecting the client via the status panel has no impact on Kura automatically connecting at startup. This capability is only controlled via the connect.auto-on-startup DataService setting.

"},{"location":"cloud-platform/kura-azure/#kura-application-connecting-to-azure-iot-hub","title":"Kura Application Connecting to Azure IoT Hub","text":"

The Kura example publisher can be used to publish to the IoT Hub. The example configuration should be modified as follows.

  • cloud.service.pid - insert the name of the new Kura Cloud stack, org.eclipse.kura.cloud.CloudService-Azure in this tutorial
  • app.id - insert messages as application id
  • publish.appTopic - insert events/ as publish topic

This configuration allows the publication on the default messages/events endpoint on the IoT Hub\u2122.

"},{"location":"cloud-platform/kura-ec-cloud/","title":"Eurotech Everyware Cloud\u2122 platform","text":"

Everyware Cloud provides an easy mechanism for connecting cloud-ready devices to IT systems and/or applications; therefore, connecting to Everyware Cloud is an important step in creating and maintaining a complete M2M application. Information on Everyware Cloud and its features can be found here. This document outlines how to connect to Everyware Cloud using the Kura Gateway Administrative Console.

"},{"location":"cloud-platform/kura-ec-cloud/#using-the-kura-gateway-administrative-console","title":"Using the Kura Gateway Administrative Console","text":"

The Kura Gateway Administrative Console exposes all services necessary for connecting to Everyware Cloud. The reference links listed below outline each service involved in the Everyware Cloud connection. It is recommended that each section be reviewed.

  • CloudService
  • DataService
  • MqttDataTransport
"},{"location":"cloud-platform/kura-ec-cloud/#cloudservice","title":"CloudService","text":"

The default settings for the CloudService are typically adequate for connecting to Everyware Cloud. The screen capture shown below displays the default settings for the CloudService. For details about each setting, please refer to CloudService.

Warning

The \"Simple JSON\" payload encoding is not supported by Everyware Cloud. Use the default \"Kura Protobuf\" encoding instead.

"},{"location":"cloud-platform/kura-ec-cloud/#dataservice","title":"DataService","text":"

The majority of default settings in the DataService can be left unchanged. A screen capture of the DataService configuration is shown below. For complete details about the DataService configuration parameters, please refer to DataService.

In order for Kura to connect to Everyware Cloud on startup, the connect.auto-on-startup option must be set to true. If this value is changed from false to true, Kura will immediately begin the connection process. It is recommended that the CloudService and MqttDataTransport are configured before setting the connect.auto-on-startup option to true.

Note

Changing the value of connect.auto-on-startup from true to false will not disconnect the client from the broker. This setting simply implies that Kura will not automatically connect on the next start of Kura.

"},{"location":"cloud-platform/kura-ec-cloud/#mqttdatatransport","title":"MqttDataTransport","text":"

While the majority of default settings in the MqttDataTransport can be left unchanged, the following parameters must be modified:

  • broker-url - defines the MQTT broker URL that was provided when the Eurotech Everyware Cloud account was established. Information on how to obtain the broker URL can be found here. In the MqttDataTransport configuration screen capture shown below, the broker-url is mqtt://broker-sbx.everyware.io:1883
  • topic.context.account-name - defines the account name of the account to which the device is attempting to connect. In the MqttDataTransport configuration screen capture shown below, the account name is account-name
  • username - identifies the user to be used when creating the connection. In the MqttDataTransport configuration screen capture shown below, the username is username.

Note

When connecting to Everyware Cloud, the username must have proper permissions. Information on users and permissions can be found here.

For complete details about the MqttDataTransport configuration parameters, please refer to MqttDataTransport.

"},{"location":"cloud-platform/kura-ec-cloud/#connectdisconnect","title":"Connect/Disconnect","text":"

The status panel can be used to manually connect or disconnect the client while Kura is running. The main button toolbar has a connect and disconnect button that may be used to control connectivity.

Note

Connecting or disconnecting the client via the status panel has no impact on Kura automatically connecting at startup. This capability is only controlled via the connect.auto-on-startup DataService setting.

"},{"location":"cloud-platform/kura-hono/","title":"Eclipse Hono\u2122 platform","text":"

Eclipse Hono\u2122 provides remote service interfaces for connecting large numbers of IoT devices to a back end and interacting with them in a uniform way regardless of the device communication protocol. More information can be found here. This document outlines how to connect to Eclipse Hono using the Kura Gateway Administrative Console.

"},{"location":"cloud-platform/kura-hono/#using-the-kura-gateway-administrative-console","title":"Using the Kura Gateway Administrative Console","text":"

The Kura Gateway Administrative Console exposes all services necessary for connecting to Eclipse Hono. First of all, in the Cloud Connections section, a new Hono-enabled connection needs to be setup.

From the Cloud Connections section,

the user needs to create a new connection:

by specifying a valid PID:

The result should be like the one depicted in the following image:

The reference links listed below outline each service involved in the cloud connection. It is recommended that each section be reviewed.

  • CloudService
  • DataService
  • MqttDataTransport
"},{"location":"cloud-platform/kura-hono/#cloudservice","title":"CloudService","text":"

The default settings for the CloudService are typically adequate for connecting to a Hono instance. The screen capture shown below displays the default settings for the CloudService. For details about each setting, please refer to CloudService.

"},{"location":"cloud-platform/kura-hono/#dataservice","title":"DataService","text":"

The majority of default settings in the DataService can be left unchanged. A screen capture of the DataService configuration is shown below. For complete details about the DataService configuration parameters, please refer to DataService.

In order for Kura to connect to Eclipse Hono on startup, the connect.auto-on-startup option must be set to true. If this value is changed from false to true, Kura will immediately begin the connection process. It is recommended that the CloudService and MqttDataTransport are configured before setting the connect.auto-on-startup option to true.

Note

Changing the value of connect.auto-on-startup from true to false will not disconnect the client from the broker. This setting simply implies that Kura will not automatically connect on the next start of Kura.

"},{"location":"cloud-platform/kura-hono/#mqttdatatransport","title":"MqttDataTransport","text":"

While the majority of default settings in the MqttDataTransport can be left unchanged, the following parameters must be modified:

  • broker-url - defines the MQTT broker URL that was provided when the Eurotech Everyware Cloud account was established. In the MqttDataTransport configuration screen capture shown below, the broker-url is mqtt://broker-url:1883
  • topic.context.account-name - defines the account name of the account to which the device is attempting to connect. In the MqttDataTransport configuration screen capture shown below, the account name is account-name
  • username - identifies the user to be used when creating the connection. In the MqttDataTransport configuration screen capture shown below, the username is username.

For complete details about the MqttDataTransport configuration parameters, please refer to MqttDataTransport.

"},{"location":"cloud-platform/kura-hono/#connectdisconnect","title":"Connect/Disconnect","text":"

The status panel can be used to manually connect or disconnect the client while Kura is running. The main button toolbar has a connect and disconnect button that may be used to control connectivity.

Note

Connecting or disconnecting the client via the status panel has no impact on Kura automatically connecting at startup. This capability is only controlled via the connect.auto-on-startup DataService setting.

"},{"location":"cloud-platform/kura-kapua/","title":"Eclipse Kapua\u2122 platform","text":"

Eclipse Kapua\u2122 is a modular platform providing the services required to manage IoT gateways and smart edge devices. Kapua provides a core integration framework and an initial set of core IoT services including a device registry, device management services, messaging services, data management, and application enablement. More information can be found here. This document outlines how to connect to Eclipse Kapua using the Kura Gateway Administrative Console.

"},{"location":"cloud-platform/kura-kapua/#using-the-kura-gateway-administrative-console","title":"Using the Kura Gateway Administrative Console","text":"

The Kura Gateway Administrative Console exposes all services necessary for connecting to Eclipse Kapua. The reference links listed below outline each service involved in the cloud connection. It is recommended that each section be reviewed.

  • CloudService
  • DataService
  • MqttDataTransport
"},{"location":"cloud-platform/kura-kapua/#cloudservice","title":"CloudService","text":"

The default settings for the CloudService are typically adequate for connecting to a Kapua instance. The screen capture shown below displays the default settings for the CloudService. For details about each setting, please refer to CloudService.

Warning

The \"Simple JSON\" payload encoding is not supported by Kapua. Use the default \"Kura Protobuf\" encoding instead.

"},{"location":"cloud-platform/kura-kapua/#dataservice","title":"DataService","text":"

The majority of default settings in the DataService can be left unchanged. A screen capture of the DataService configuration is shown below. For complete details about the DataService configuration parameters, please refer to DataService.

In order for Kura to connect to Eclipse Kapua on startup, the connect.auto-on-startup option must be set to true. If this value is changed from false to true, Kura will immediately begin the connection process. It is recommended that the CloudService and MqttDataTransport are configured before setting the connect.auto-on-startup option to true.

Note

Changing the value of connect.auto-on-startup from true to false will not disconnect the client from the broker. This setting simply implies that Kura will not automatically connect on the next start of Kura.

"},{"location":"cloud-platform/kura-kapua/#mqttdatatransport","title":"MqttDataTransport","text":"

While the majority of default settings in the MqttDataTransport can be left unchanged, the following parameters must be modified:

  • broker-url - defines the MQTT broker URL that was provided when the Kapua account was established.
  • topic.context.account-name - defines the account name of the account to which the device is attempting to connect. In the MqttDataTransport configuration screen capture shown below, the account name is account-name
  • username - identifies the user to be used when creating the connection. In the MqttDataTransport configuration screen capture shown below, the username is username.

For complete details about the MqttDataTransport configuration parameters, please refer to MqttDataTransport.

"},{"location":"cloud-platform/kura-kapua/#connectdisconnect","title":"Connect/Disconnect","text":"

The status panel can be used to manually connect or disconnect the client while Kura is running. The main button toolbar has a connect and disconnect button that may be used to control connectivity.

Note

Connecting or disconnecting the client via the status panel has no impact on Kura automatically connecting at startup. This capability is only controlled via the connect.auto-on-startup DataService setting.

"},{"location":"cloud-platform/kura-sparkplug/","title":"Eclipse Sparkplug\u00ae Cloud Connector","text":"

The org.eclipse.kura.cloudconnection.sparkplug.mqtt.provider package provides a Eclipse Kura Cloud Connection that implements the Eclipse Sparkplug\u00ae v3.0.0 specification.

Minimum requirements

This addon is compatible with Kura 5.2+.

"},{"location":"cloud-platform/kura-sparkplug/#introduction-to-eclipse-sparkplug","title":"Introduction to Eclipse Sparkplug","text":"

from Eclipse Sparkplug

Sparkplug is an open software specification that provides MQTT clients the framework to seamlessly integrate data from their applications, sensors, devices, and gateways within the MQTT Infrastructure. It is specifically designed for use in Industrial Internet of Things (IIoT) architectures to ensure a high level of reliability and interoperability.

The specification aims fulfill the following 3 goals:

  1. Define a common MQTT topic namespace.
  2. Define a common MQTT state management.
  3. Define a common MQTT payload.

To achieve that, the Eclipse Sparkplug specification defines an architecture (see picture below) and 4 main actors:

  • Device: a collection of related data points, which may represent a physical device (like a PLC, a set of sensors, etc.) and that notify the value or quality change of their data points. In this cloud connection, a Device is represented by the attached Cloud Publishers.
  • Edge Node: the gateway that is responsible of the interaction with the MQTT broker and that estabilished sessions with the data-consuming Host Applications. This Cloud Connection assumes the role of Edge Node.
  • MQTT Server: a MQTT server that supports the v3.1.1 (or v5.0) version of the protocol.
  • Host Application: the data-consuming application that subscribes to the MQTT messages generated by the Edge Nodes. A Primary Host Application is responsible of controlling and monitoring Edge Nodes, which can be configured to modify their behavior based on the state of the Primary Host Application (for example, the application goes offline). You can imagine the Primary Host Application for Eclipse Kura being Eclipse Kapua.

Image from https://sparkplug.eclipse.org/specification/version/3.0/documents/sparkplug-specification-3.0.0.pdf

The main principles upon which the Specification is based on can be summarized as follows:

  1. PubSub Protocol: this is the main topology upon which the architecture is developed.
  2. Report by Exception (RBE): messages need to be sent by the Edge Node only when values at the edge change, and the message should contain only the value/metrics that changed. There is no need for continuos polling; although it is higly discouraged, it is not mandatory to have Edge Nodes apply the RBE.
  3. Continuos Session Awareness: Host Applications are aware of the state of the Edge Nodes, and Edge Nodes are aware of the state of the Host Applications. This continuos session awareness is achieved by the means of birth and death certificates and state messages (continue the reading to find out more) and is the key to allow reporting by exception.
  4. Birth and Death certificates: these messages represent the state of Edge Nodes and Devices (online/offline + data that will be reported). The birth messages are always the first ones that are sent from the Edge Node, and the delivery of death certificates is ensured through the MQTT Will message, even if the connection is lost ungracefully. The birth messages always contain all the metrics that the Device or Edge Node will ever report on. If a new metric is added or a metric gets removed, then a new session needs to be estabilished.

  5. Connection Persistence: with the mechanisms above, the connection does not need to be persistent. For example, an Edge Node that disconnects gracefully with a MQTT DISCONNECT packet will not be seen as \"dead\" from the host application because no death certificate has been triggered (Will messages are sent only on failures). Hence, the Edge Node can implement a logic where it remains connected only during the timeframe needed for sending the new data.

    Warning

    This Cloud Connection maintains a persistent connection to the MQTT server.

"},{"location":"cloud-platform/kura-sparkplug/#eclipse-sparkplug-topic-namespace","title":"Eclipse Sparkplug Topic Namespace","text":"

All clients using the specification must adhere to the following topic namespace:

namespace/group_id/message_type/edge_node_id/[device_id]\n

where:

  • namespace: defines the structure of the remaining elements and the encoding for the payload. With Sparkplug v3.0.0 the namespace to utilize is spBv1.0.
  • group_id: some Edge Nodes can be related to each other identifying a group (for example, Edge Nodes in a given plant). This element is the identifier for the group.
  • message_type: defines how to interpret and handle the payload. It encapsulates the semantic of the message and can be one of the following elements:
    • NBIRTH/NDEATH: Edge Node birth and death certificates.
    • DBIRTH/DDEATH: Device birth and death certificates.
    • NDATA/DDATA: message containing data reported by the Edge Node or Device.
    • NCMD/DMCD: message containing commands for the Edge Node or Device.
    • STATE: message from the Primary Host Application indicating the state (offline/online) of the main consumer.
  • edge_node_id: the identifier for the Edge Node.
  • device_id (optional): the identifier for the Device. Must be unique under the same edge_node_id and must be always present on messages belonging to Devices (D- type messages).

The combination of group_id and edge_node_id must be unique and is called Edge Node Descriptor.

Tip

It is advised to have group_id, edge_node_id, and device_id as small but as descriptive as possible, for better efficiency.

"},{"location":"cloud-platform/kura-sparkplug/#operational-behavior","title":"Operational Behavior","text":"

This introduction will focus more on the Edge Node and Device, as they are of more interest for this Cloud Connection.

"},{"location":"cloud-platform/kura-sparkplug/#session-management","title":"Session Management","text":"

The session estabilishment procedure ensures the Edge Node to be subscribed to command-type messages for receiveing commands from the Host Application.

An Edge Node can (optionally, but incouraged) specify to be aware of a primary host application state and, in such case, it needs to subscribe to the relative STATE messages. The Edge Node will send the birth certificate (and thus completing the session init procedure) only after receiving the STATE message denoting the Primary Host Application is online. After connection, if the Edge Node receives a STATE message denoting the Primary Host Application is offline, it must restart the session estabilishment procedure.

On connection, the Edge Node sets a MQTT Will message containing a NDEATH certificate. Doing so, if the MQTT broker does not receive any communication within the Keep Alive period (client lost connection), it will send the Edge Node NDEATH certificate on all subscribers. A birth/death sequence number bdSeq is maintained in the Edge Node to match NBIRTH with NDEATH messages in the Host Application. Each bdSeq in the NDEATH message is matched with the corresponding bdSeq of the previous NBIRTH message. This allows the Host Application tracking the state of the Edge Nodes and mark not up-to-date metrics as STALE.

A Device can send a device DBIRTH message after a Edge Node NBIRTH has been sent. The DBIRTH message contains all the metrics that the device will ever report on. If a new metric is added or an existing one removed, then the Device session needs to be re-estabilished. If the Edge Node looses the connection to some of its Devices, then it needs to send a Device DDEATH certificate on his behalf. The data-consuming Host Application will then mark that particular Device as offline and mark its metrics as STALE. Once the session is estabilished, the Device can publish the changed metrics using the DDATA message type.

"},{"location":"cloud-platform/kura-sparkplug/#multiple-mqtt-server-topologies","title":"Multiple MQTT Server Topologies","text":"

A Primary Host Application must publish its STATE message every time it connects to the MQTT broker. This ensures the Edge Nodes to be aware of its status as long as they remain connected to the MQTT server.

At any point in time, an Edge Node can be connected to at most one MQTT server. If multiple MQTT servers are defined each time the Edge Node receives an offline STATE message from its Primary Host Application it needs to terminate the session and estabilish a new one with the next MQTT broker.

"},{"location":"cloud-platform/kura-sparkplug/#further-resources","title":"Further Resources","text":"
  • Eclipse Sparkplug v3.0.0 specification
  • HiveMQ Sparkplug guides collection
  • Eclipse Sparkplug FAQ
"},{"location":"cloud-platform/kura-sparkplug/#cloud-connection-configuration","title":"Cloud Connection Configuration","text":""},{"location":"cloud-platform/kura-sparkplug/#cloud-endpoint-layer-configuration","title":"Cloud Endpoint Layer Configuration","text":"

The cloud endpoint layer allows to attach CloudPublishers and CloudSubscribers to publish/subscribe messages on Sparkplug topics.

"},{"location":"cloud-platform/kura-sparkplug/#sparkplug-device","title":"Sparkplug Device","text":"

Each CloudPublisher attached to this cloud connection acts as a Sparkplug Device. The corresponding configuration is shown in the picture below.

The parameter specified as device.id will dictate the Sparkplug device identifier used to publish messages from this cloud publisher. A device DBIRTH message is immediately sent from this publisher when the first publish occurs or when a the set of published metrics is changed. The subsequent messages will be published as Sparkplug device data (DDATA message type).

The Sparkplug Device implemented by this publisher does not support the following features (optional in the Eclipse Sparkplug specification):

  • tck-id-operational-behavior-device-ddeath: Device death messages (DDEATH message type) since the usual way to publish data from the Wire Graph using a WireAsset attached to a CloudPublisher has no implementation for reporting error states (see WireAsset.onWireReceive)
  • tck-id-payloads-alias-uniqueness: Sparkplug aliases for metrics
  • tck-id-message-flow-device-dcmd-subscribe: writing to outputs, hence it will not subscribe to device command messages (DCMD message type)
"},{"location":"cloud-platform/kura-sparkplug/#sparkplug-device-payload","title":"Sparkplug Device Payload","text":"

The payload of DDATA message will be encoded using the Sparkplug B Protobuf definition converting the KuraPayload into Sparkplug payload as follows:

  • Metrics from KuraPayload.metric() become Sparkplug metrics. Only the name, timestamp, datatype and value components are added. The timestamp is set to the publishing instant. The datatype is inferred from the Java type as follows:

    Java Type Sparkplug DataType Boolean DataType.Boolean byte[] DataType.Bytes Double DataType.Double Float DataType.Float Byte DataType.Int8 Short DataType.Int16 Integer DataType.Int32 Long DataType.Int64 String DataType.String Date DataType.DateTime BigInteger DataType.UInt64

    All other Java types will cause the application to throw an Exception.

  • KuraPayload.getBody(), if non null, will be copied into the body of the Sparkplug payload

  • KuraPayload.getPosition(), if not null, will be used to create the following metrics from the KuraPosition object, if the value in there is not null (with the corresponding Sparkplug data types):

    • kura.position.altitude: DataType.Double
    • kura.position.heading: DataType.Double
    • kura.position.latitude: DataType.Double
    • kura.position.longitude: DataType.Double
    • kura.position.precision: DataType.Double
    • kura.position.satellites: DataType.Int32
    • kura.position.status DataType.Int32
    • kura.position.speed: DataType.Double
    • kura.position.timestamp: DataType.DateTime

  • KuraPayload.getTimestamp(), if not null, it will be used as the timestamp metric of the Sparkplug payload

"},{"location":"cloud-platform/kura-sparkplug/#sparkplug-subscriber","title":"Sparkplug Subscriber","text":"

This cloud connections allows creating a Cloud Subscriber that will subscribe to a generic set of topics. The configuration is shown in the picture below.

It is assumed that the payloads received by this Cloud Connection are encoded using the Sparkplug B Protobuf definition. Users of this Cloud Subscriber should expect to receive KuraMessages containing a KuraPayload such that:

  • If non null, the Sparkplug body is used to set KuraPayload.setBody()
  • If non null, the Sparkplug seq Metric is converted into a Kura metric with name seq
  • If non null, the Sparkplug timestamp is used as Eclipse Kura's payload timestamp

  • All Sparkplug Metrics are converted into Kura metrics with the same name and the following conversion rules:

    Sparkplug ValueCase Java Type Boolean boolean Bytes byte[] Dataset byte[] Double double Extension byte[] Float float Integer int Long long String String Template byte[] default null

    The metric timestamp is not supported in Eclipse Kura, therefore this information is lost at conversion.

"},{"location":"cloud-platform/kura-sparkplug/#data-service-layer-configuration","title":"Data Service Layer Configuration","text":"

The DataService layer used in this component is the org.eclipse.kura.data.DataService implementation. Please refer to the Data Service Configuraion page for further details.

"},{"location":"cloud-platform/kura-sparkplug/#data-transport-layer-configuration","title":"Data Transport Layer Configuration","text":"

The Sparkplug Data Transport layer bridges the incoming requests to the underlying Eclipse Paho MQTT v3.1.1 client following the Sparkplug specification. In particular, the Data Transport Layer ensures the following.

  • Edge Node Sparkplug Session Estabilishment: the Edge Node (this Cloud Connection) estabilishes a new Sparkplug session upon connection. An optional Primary Host Application ID can be specified (see picture below) to make the Cloud Connection wait until the Primary Host Application is online before publishing NBIRTH and DBIRTH messages.
  • Edge Node Sparkplug Session Termination: upon disconnection, the Edge Node follows the required specification statements. In particular, multiple space-separated Server URIs can be specified in the component's configuration (see picture below). When a Primary Host Application ID is defined and it receives a STATE message denoting that the configured primary application is offline, then reconnection attempts are made cycling through the Server URIs list. When the last server fails to connect, then the traversal is restarted from the start of the list.
  • Edge Node NCMD handler: upon reception of a valid NCMD message, the Transport layer checks if it contains a Node Control/Rebirth metric, and, if set to true, restarts the session estabilishment procedure without sending an MQTT CONNECT packet (client connection is not closed, only BIRTH messages are re-sent).

The Sparkplug Data Transport layer is configured to wait for a random period of time between 0sec and 5sec before each connection attempt. This is to ensure that, on large deployments, the target MQTT servers and Host Applications will dilute session estabilishment requests by some margin. This behavior is not part of the Sparkplug specification.

This cloud connection supports SSL connections to the connecting broker. The option SslManagerService.target allows, as an OSGi target filter, to specify the pid of the SslManagerService instance to use for creating SSL connections for broker URIs that use the ssl:// protocol. The default socket factory is used otherwise.

"},{"location":"cloud-platform/kura-sparkplug/#sparkplug-implementation-details","title":"Sparkplug Implementation Details","text":""},{"location":"cloud-platform/kura-sparkplug/#edge-node","title":"Edge Node","text":"
  • The NBIRTH message sent by this cloud connection will not contain any metrics, except for the mandatory ones required by the specification.
  • This cloud connection does not send any NDATA messages in its default implementation.
"},{"location":"cloud-platform/raw-cloud-connection/","title":"Raw MQTT Cloud Connector","text":""},{"location":"cloud-platform/raw-cloud-connection/#raw-mqtt-cloud-connection","title":"Raw MQTT Cloud Connection","text":"

The Raw MQTT cloud connector is a cloud stack that exposes a MQTT cloud connection without applying any restriction on topic structure or performing any particular message encoding.

The Raw MQTT cloud connector is composed by the following components:

"},{"location":"cloud-platform/raw-cloud-connection/#cloud-stack-components","title":"Cloud stack components","text":"

The cloud stack is composed by the default DataService and MqttDataTransport plus the following component:

"},{"location":"cloud-platform/raw-cloud-connection/#orgeclipsekuracloudconnectionrawmqttcloudrawmqttcloudendpoint","title":"org.eclipse.kura.cloudconnection.raw.mqtt.cloud.RawMqttCloudEndpoint","text":"

The CloudEndpoint implementation, this component does not have any configuration property.

"},{"location":"cloud-platform/raw-cloud-connection/#publishers-and-subscriber","title":"Publishers and subscriber","text":"

The following CloudPublisher and CloudSubscriber factories are available:

"},{"location":"cloud-platform/raw-cloud-connection/#orgeclipsekuracloudconnectionrawmqttpublisherrawmqttpublisher","title":"org.eclipse.kura.cloudconnection.raw.mqtt.publisher.RawMqttPublisher","text":"

A CloudPublisher implemetation that can be attached to a RawMqttCloudEndpoint.

The RawMqttPublisher provides the following configuration options:

  • Topic: The MQTT topic to publish messages on.

  • Qos: The desired quality of service for the messages that have to be published. If Qos is 0, the message is delivered at most once, or it is not delivered at all. If Qos is set to 1, the message is always delivered at least once. If set to 2, the message will be delivered exactly once.

  • Retain: The MQTT retain flag for the published messages.

  • Priority: The priority of the messages. 0 is highest priority. This parameter is related to the DataService component of the cloud stack.

The RawMqttPublisher will consider only the body field of the KuraPayloads submitted for publishing. All other KuraPayload fields like metrics or position information will be discarded.

The received KuraPayload body field will be used as the payload of the published messages without any modification.

"},{"location":"cloud-platform/raw-cloud-connection/#orgeclipsekuracloudconnectionrawmqttsubscriberrawmqttsubscriber","title":"org.eclipse.kura.cloudconnection.raw.mqtt.subscriber.RawMqttSubscriber","text":"

A CloudSubscriber implementation that can be attached to a RawMqttCloudEndpoint.

The RawMqttSubscriber provides the following configuration options:

  • Topic Filter: The MQTT subscription topic filter. For example foo/bar/baz, foo/+/bar, #, foo/#.

  • Qos: The desired quality of service for the subscription messages.

The RawMqttSubscriber will popolate the body field of the KuraPayload provided to consumers using the payload of received MQTT messages without any modification.

"},{"location":"cloud-platform/raw-cloud-connection/#using-the-raw-mqtt-cloud-connection-from-eclipse-kura-wires","title":"Using the Raw MQTT Cloud Connection from Eclipse Kura Wires","text":"

Using the Raw MQTT Cloud Connection from Eclipse Kura Wires is possible but requires a few extra configuration steps.

"},{"location":"cloud-platform/raw-cloud-connection/#publishig-messages","title":"Publishig messages","text":"

As said previously, the RawMqttPublisher component will only consider the body of received KuraPayloads. The default behaviour of the Wires CloudPublisher component is to populate KuraPayload metrics using the received wire record properties, without filling the body. It is possible to configure it to populate the body in the following way:

  • Create a CloudPublisher wire component and attach it to a RawMqttPublisher instance.

  • Set the value of the Set body from envelope property of the CloudPublisher instance to the name of an input wire record property of STRING or BYTE_ARRAY type that the component will receive.

In this way every time that the CloudPublisher will receive an envelope with a property whose name matches the configured one, it will use its value as the body of the produced KuraPayload.

The input property must be of STRING or BYTE_ARRAY type:

  • if the type is BYTE_ARRAY the value will be used as KuraPayload body without modifications.

  • if the type is STRING the value will be ecoded in UTF-8.

"},{"location":"cloud-platform/raw-cloud-connection/#receiveing-messages","title":"Receiveing messages","text":"

It is also possible to receive the messages originating form a RawMqttSubscriber using a Wires CloudSubscriber component with additional configuration. By default, the CloudSubscriber component will not emit KuraPayload body on the wires but it is possible to change this behaviour in the following way:

  • Create a CloudSubscriber wire component and attach it to a RawMqttSubscriber instance.

  • Set the value of the Set property from message body configuration property to the name of a wire record property that will be used to store the KuraPayload body

  • Set the value of the Body property type to STRING or BYTE_ARRAY:

    • If set to BYTE_ARRAY, the body will be emitted without modifications.

    • If set to STRING, the body will be decoded from UTF-8 and emitted as a string.

"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/","title":"Apache Camel\u2122 as a Kura application","text":"

As of 2.1.0 Kura provides a set of different ways to implement an application backed by Camel:

  • Simple XML route configuration
  • Custom XML route configuration
  • Custom Java DSL definition
"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#kura-cloud-endpoint","title":"Kura cloud endpoint","text":"

Kura provides a special \"Kura cloud endpoint\" which allows to publish or subscribe to the Kura Cloud API. The default component name for this component is kura-cloud but it may be overridden in the following use cases.

The default component will only be registered once the default Kura Cloud API is registered with OSGi. This instance is registered with the OSGi property kura.service.pid=org.eclipse.kura.cloud.CloudService.

If you want to publish to a different cloud service instance you can either manually register a new instance of this endpoint, or e.g. use a functionality like the Simple XML router provides: also see selecting a cloud service.

"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#endpoint-uri","title":"Endpoint URI","text":"

The URI syntax of the endpoint is (assuming the default component name): kura-cloud:appid/topic. Where appid is the application ID registered with the Cloud API and topic is the topic to use.

The following URI parameters are supported by the endpoint:

Name Type Default Description applicationId String From URI path The application ID used with the Cloud API topic String From URI path The default topic name to publish/subscribe to when no header value is specified qos Integer 0 The QoS value when publishing to MQTT retain Boolean false The default retain flag when publishing to MQTT priority Integer 5 The default priority value control Boolean false Whether to publish/subscribe on the control or data topic hierarchy deviceId String empty The default device ID when publishing/subscribing to control topics

The following header fields are supported. If a value is not set when publishing it is taken from the endpoint configuration:

Name Type Description CamelKuraCloudService.topic String The name of the topic to publish to or from which the message was received CamelKuraCloudService.qos Integer The QoS to use when publishing to MQTT CamelKuraCloudService.retain Boolean The value of the retain flag when publishing to MQTT CamelKuraCloudService.control Boolean Whether to publish/subscribe on the control or data topic hierarchy CamelKuraCloudService.deviceId String The device ID when publishing to control topics"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#cloud-to-cloud-messaging","title":"Cloud to cloud messaging","text":"

As already described, header values override the endpoint settings. This allows for a finer grained control with Camel messaging. However this can cause unexpected behavior when two Cloud API endpoints are bridged. Camel can received from a Cloud endpoint but also publish to it. Now it is possible to write Camel routes with exchange messages, receiving from one Cloud API, pushing to another.

-------------------             -------------------\n| Cloud Service A |    <--->    | Cloud Service B |\n-------------------             -------------------\n

Which could result in a Camel route XML like:

<route id=\"bridgeLocalToRemote\">\n  <from uri=\"local-cloud:sensor/sensor1\" />\n  <to   uri=\"upstream-cloud:gateway1/all-sensors\" />\n</route>\n

However the Consumer (from) would set the topic header value with the topic name it received the message from. And the Producer (to) would get its topic from the URI overriden by that header value.

In order to fix this behavior the header field has to be cleared before publishing:

<route id=\"bridgeLocalToRemote\">\n  <from uri=\"local-cloud:sensor/sensor1\" />\n  <removeHeaders pattern=\"CamelKuraCloudService.topic\"/>\n  <to   uri=\"upstream-cloud:gateway1/all-sensors\" />\n</route>\n
"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#simple-xml-routes","title":"Simple XML routes","text":"

Eclipse Kura 2.1.0 introduces a new \"out-of-the-box\" component which allows to configure a set of XML based routes. The component is called \"Camel XML router\" and can be configured with a simple set of XML routes.

The following example logs all messages received on the topic foo/bar to a logger named MESSAGE_FROM_CLOUD:

<routes xmlns=\"http://camel.apache.org/schema/spring\">\n  <route id=\"cloudConsumer\">\n    <from uri=\"kura-cloud:foo/bar\"/>\n    <to uri=\"log:MESSAGE_FROM_CLOUD\"/>\n  </route>\n</routes>\n

But it is also possible to generate data and push to upstream to the cloud service:

<route id=\"route1\">\n  <from uri=\"timer:foo\"/>\n  <setBody>\n    <method ref=\"payloadFactory\" method=\"create('random',${random(10)})\"/>\n  </setBody>\n  <bean ref=\"payloadFactory\" method=\"append('foo','bar')\"/>\n  <to uri=\"stream:out\"/>\n  <to uri=\"kura-cloud:myapp/test\"/>\n</route>\n

This example to run a timer named \"foo\" every second. It uses the \"Payload Factory\" bean, which is pre-registered, to create a new payload structure and then append a second element to it.

The output is first sent to a logger and then to the cloud source.

"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#defining-dependencies-on-components","title":"Defining dependencies on components","text":"

It is possible to use the Web UI to define a list of Camel components which must be present in order for this configuration to work. For example if the routes make use of the \"milo-server\" adapter for providing OPC UA support then \"milo-server\" can be added and the setup will wait for this component to be registered with OSGi before the Camel context gets started.

The field contains a list of comma separated component names: e.g. milo-server, timer, log

"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#selecting-a-cloud-service","title":"Selecting a cloud service","text":"

It is also possible to define a map of cloud services which will be available for upstream connectivity. This makes use of Kura's \"multi cloud client\" feature. CloudService instances will get mapped from either a Kura Service PID (kura.service.pid, as shown in the Web UI) or a full OSGi filter. The string is a comma seperated, key=value string, where the key is the name of the Camel cloud the instance will be registered as and the value is the Kura service PID or the OSGi filter string.

For example: cloud=org.eclipse.kura.cloud.CloudService, cloud-2=foobar

"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#custom-camel-routers","title":"Custom Camel routers","text":"

If a standard XML route configuration is not enough then it is possible to use XML routes in combination with a custom OSGi bundle or a Java DSL based Camel approach. For this to work a Kura development setup is required, please see Getting started for more information.

The implementation of such Camel components follow the standard Kura guides for developing components, like, for example, the ConfigurableComponent pattern. This section only describes the Camel specifics.

Of course it is also possible to follow a very simple approach and directly use the Camel OSGi functionalities like org.apache.camel.core.osgi.OsgiDefaultCamelContext.

Note

Kura currently doesn't support the OSGi Blueprint approach

Kura support for Camel is split up in two layers. There is a more basic support, which helps in running a raw Camel router. This is CamelRunner which is located in the package org.eclipse.kura.camel.router. And then there are a few abstract basic components in the package org.eclipse.kura.camel.component which help in creating Kura components based on Camel.

"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#camel-components","title":"Camel components","text":"

The base classes in org.eclipse.kura.camel.component are intended to help creating new OSGi DS components base on Camel.

"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#xml-based-component","title":"XML based component","text":"

For an XML based approach which can be configured through the Kura ConfigurationService the base class AbstractXmlCamelComponent can be used. The constructor expectes the name of a property which will contain the Camel XML router information when it gets configured through the configuration service. It will automatically parse and apply the Camel routes.

The method void beforeStart(CamelContext camelContext) may be used in order to configure the Camel context before it gets started.

Every time the routes get updated using the modified(Map<String, Object>) method, the route XML will be re-parsed and routes will be added, removed or updated according to the new XML.

"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#java-dsl-based-component","title":"Java DSL based component","text":"

In order to create a Java DSL based router setup the base class AbstractJavaCamelComponent may be used, which implements and RouteBuilder class, a simple setup might look like:

import org.eclipse.kura.camel.component.AbstractJavaCamelComponent;\n\nclass MyRouter extends AbstractJavaCamelComponent {\n   public void configure() throws Exception {\n      from(\"direct:test\")\n         .to(\"mock:test\");\n   }\n}\n
"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#using-the-camelrunner","title":"Using the CamelRunner","text":"

The CamelRunner class is not derived from any OSGi or Kura base class and can be used in scenarios where more flexibility is required. It allows to define a set of pre-requisites for the Camel context. It is for example possible to define a dependency on a Kura cloud service instance and a Camel component provider. Once the runner is started it will listen for OSGi services resolving those dependencies and then starting up the Camel context. The following example shows how to set up a Camel context using the CamelRunner:

// create a new camel Builder\n\nBuilder builder = new CamelRunner.Builder();\n\n// add service dependency\n\nbuilder.cloudService(\"kura.service.pid\", \"my.cloud.service.pid\");\n\n// add Camel component dependency to 'milo-server'\n\nbuilder.requireComponent(\"milo-server\");\n\nCamelRunner runner = builder.build();\n\n// set routes\n\nrunner.setRoutes ( new RouteBuilder() {\n  public void configure() throws Exception {\n    from(\"direct:test\")\n      .to(\"mock:test\");\n  }\n} );\n\n// set routes\n\nrunner.start ();\n

It is also possible to later update routes with a call to setRoutes:

// maybe update routes at a later time\n\nrunner.setRoutes ( /* different routes */ );\n
"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#examples","title":"Examples","text":"

The following examples can help in getting started.

"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#kura-camel-example-publisher","title":"Kura Camel example publisher","text":"

The Camel example publisher (org.eclipse.kura.example.camel.publisher) can be used as an reference for starting. The final OSGi bundle can be dropped into a Kura application an be started. It allows to configure dynamically during runtime and is capable of switching CloudService instances dynamically.

"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#kura-camel-quickstart","title":"Kura Camel quickstart","text":"

The Camel quickstart project (org.eclipse.kura.example.camel.quickstart) shows two components, Java and XML based, working together. The bundle can also be dropped into Kura for testing.

"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#kura-camel-aggregation","title":"Kura Camel aggregation","text":"

The Camel quickstart project (org.eclipse.kura.example.camel.aggregation) shows a simple data aggregation pattern with Camel by processing data and publishing the result.

"},{"location":"cloud-platform/apache-camel-integration/kura-camel-cloud/","title":"Apache Camel\u2122 as a Kura cloud service","text":"

The default way to create a new cloud service instance backed by Camel is to use the new Web UI for cloud services. A new cloud service instance of the type org.eclipse.kura.camel.cloud.factory.CamelFactory has to be created. In addition to that a set of Camel routes have to be provided.

The interface with the Kura application is the Camel vm component. Information set \"upstream\" from the Kura application can be received by the Camel cloud service instance of the following endpoint vm:camel:example. Where camel is the application id and example is the topic.

The following code snippet writes out all of the Kura payload structure received on this topic to the logger system:

<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<routes xmlns=\"http://camel.apache.org/schema/spring\">\n\n  <route id=\"camel-example-topic\">\n    <from uri=\"vm:camel:example\"/>\n    <split>\n      <simple>${body.metrics().entrySet()}</simple>\n      <setHeader headerName=\"item\">\n        <simple>${body.key()}</simple>\n      </setHeader>\n      <setBody>\n        <simple>${body.value()}</simple>\n      </setBody>\n      <toD uri=\"log:kura.data.${header.item}\"/>\n    </split>\n  </route>\n\n</routes>\n

The snippet splits up the incoming KuraPayload structure and creates a logger called kura.data.<metric> for each metric and writes out the actual value to it. The output in the log file should look like:

2016-11-14 16:14:34,539 [Camel (camel-10) thread #18 - vm://camel:example] INFO  k.d.intValue - Exchange[ExchangePattern: InOnly, BodyType: Long, Body: 19]\n2016-11-14 16:14:34,566 [Camel (camel-10) thread #18 - vm://camel:example] INFO  k.d.doubleValue - Exchange[ExchangePattern: InOnly, BodyType: Double, Body: 10.226808617581144]\n2016-11-14 16:14:35,575 [Camel (camel-10) thread #18 - vm://camel:example] INFO  k.d.intValue - Exchange[ExchangePattern: InOnly, BodyType: Long, Body: 19]\n2016-11-14 16:14:35,602 [Camel (camel-10) thread #18 - vm://camel:example] INFO  k.d.doubleValue - Exchange[ExchangePattern: InOnly, BodyType: Double, Body: 10.27218775669447]\n2016-11-14 16:14:36,539 [Camel (camel-10) thread #18 - vm://camel:example] INFO  k.d.intValue - Exchange[ExchangePattern: InOnly, BodyType: Long, Body: 19]\n2016-11-14 16:14:36,567 [Camel (camel-10) thread #18 - vm://camel:example] INFO  k.d.doubleValue - Exchange[ExchangePattern: InOnly, BodyType: Double, Body: 10.314456684208022]\n
"},{"location":"cloud-platform/apache-camel-integration/kura-camel/","title":"Apache Camel\u2122 integration overview","text":"

Note

This document describes the Camel integration for Kura 2.1.0

Kura provides two main integration points for Camel:

  • Camel as a Kura application
  • Camel as a Kura cloud service

The first allows one to configure Camel to provide data and receive commands from any CloudService instance which is configured in Kura. For example the default CloudService instance which is backed by MQTT.

The second approach allows one to create a custom CloudService implementation and route data coming from other Kura applications with the routes provided by this Camel context.

"},{"location":"cloud-platform/apache-camel-integration/kura-camel/#deploying-additional-camel-components","title":"Deploying additional Camel components","text":"

Kura comes with the following Camel components pre-installed:

  • camel-core
  • camel-core-osgi
  • camel-stream

If additional Camel components are required, they can be installed using deployment packages (DP), as common with Kura.

There are pre-packaged DPs available for e.g. AMQP, OPC UA, MQTT and other Camel components outside of the Kura project.

"},{"location":"connect-field-devices/IO-apis/","title":"I/O APIs","text":"

The full Eclipse Kura API reference is available here.

In this page, the developer can find a synthetic grouping of the I/O APIs added starting from Kura 3.1.0.

  • Drivers

    • ChannelDescriptor
    • ChannelListener
    • ChannelRecord
    • ConnectionException

  • Assets

    • AssetConfiguration
    • Channel
"},{"location":"connect-field-devices/asset-implemetation/","title":"Asset implementation","text":"

An Asset is a logical representation of a field device, described by a list of Channels. The Asset uses a specific Driver instance to communicate with the underlying device and it models a generic device resource as a Channel. A register in a PLC or a GATT Characteristic in a Bluetooth device are examples of Channels. In this way, each Asset has multiple Channels for reading and writing data from/to an Industrial Device.

Assets can be used as Wire Components to access the resources referenced by the defined channels inside a Wire Graph, see the Assets as Wire Components guide for more details.

"},{"location":"connect-field-devices/asset-implemetation/#channel-example","title":"Channel Example","text":"

To further describe the concept of Channel and Asset, the following table shows a set of PLC register addresses as provided in a typical PLC documentation.

Name Entity Address LED1 COILS 2049 LED2 COILS 2050 LED3 COILS 2051 LED4 RED COILS 2052 LED4 GREEN COILS 2053 LED4 BLUE COILS 2054 Counter 3 INPUT REGISTERS 515 Quad Counter INPUT REGISTERS 520 Toggle 4 DISCRETE INPUTS 2052 Toggle 5 DISCRETE INPUTS 2053 Toggle 6 DISCRETE INPUTS 2054 Reset Counter 3 COILS 3075 Reset Quad Counter COILS 3084

The corresponding Channels definition in the Asset is as follows:

As shown in the previous image, the Channel definition in an Asset results easily mappable to what available in a generic PLC documentation.

Once defined the Channels in an Asset, a simple Java application that leverages the Asset API can easily communicate with the Field device by simply referring to the specific Channel of interest.

"},{"location":"connect-field-devices/asset-implemetation/#channel-definition","title":"Channel Definition","text":"
  • enabled: each channel can be separately enabled using this flag.
  • name: unique user-friendly name for a channel
  • type: represents the type of operation supported. Possible values are: READ, WRITE, READ/WRITE
  • value.type: represents the data type that will be used when creating the Wire Envelope for the connected components and the output value for READ channel.
  • scale: an optional scaling factor to be applied only to the numeric values retrieved from the field. It is parsed as a double. See below for more details.
  • offset: an optional offset value that will be added only to the numeric values retrieved from the field. It is parsed as a double. See below for more details.
  • scaleoffset.type: Allows to customise the way scale and offset is applied. See below for more details.
  • unit: an optional string value that will be added to the asset channel read to represent the unit of measure associated to that specific channel.
  • listen: if supported by the associated driver, allows to receive notifications by the driver on events. This flag currently has effect only inside Kura Wires.

For the READ and READ/WRITE channels, the Asset typically asks the driver to provide a value based on the value.type. If the scaleoffset.type is LONG or DOUBLE, the type requested will be one of these and the final value (after the scale and offset operation) will be transformed into the data type expected by value.type.

"},{"location":"connect-field-devices/asset-implemetation/#arithmetic-with-scale-and-offset","title":"Arithmetic with scale and offset","text":"

The Asset supports applying a scale and offset to the values obtained by the attached Driver during read operations and to the values received in listen mode.

Warning

Application of scale and offset for write operations is not supported.

The following modes are implemented for computing scale and offset:

  • DOUBLE
  • INTEGER
  • LONG
  • FLOAT

The values of the scale and offset configuration parameters and the value obtained from the Driver are all converted to the mode type using the Java casting and then the following operation is performed: channel_value * scale + offset. The operation result is casted again to value.type to produce the final channel value.

The values of the scale and offset parameters are parsed from channel configuration as doubles.

The mode can be selected in the following way:

  • If the scaleoffset.type is set to DOUBLE or LONG the corrisponding mode will be used. The largest representable LONG is 2^53
  • If the scaleoffset.type value is DEFINED_BY_VALUE_TYPE the operation mode is determinated by value.type.

Example of DOUBLE mode: channel configured with:

  • value.type: INTEGER
  • scaleoffset.type: DOUBLE
  • scale: 3.25
  • offset: 1.5

Since scaleoffset.type is DOUBLE, the scale and offset mode is forced to DOUBLE.

If channel_value is 5 (INTEGER) the result is: (int) ((double) channel_value * (double) 3.25d + (double) 1.5d) = 17.

Example of INTEGER mode: channel configured with:

  • value.type: INTEGER
  • scaleoffset.type: DEFINED_BY_VALUE_TYPE
  • scale: 3.25
  • offset: 1.5

Since scaleoffset.type is DEFINED_BY_VALUE_TYPE, the mode determined by the value.type parameter (INTEGER) will be used.

If channel_value is 5 (INTEGER) the result is: (int) (channel_value * (int) 3.25d + (int) 1.5d) = 16.

Example of DOUBLE mode: channel configured with:

  • value.type: DOUBLE
  • scaleoffset.type: DEFINED_BY_VALUE_TYPE
  • scale: 3.25
  • offset: 1.5

If channel_value is 5 (DOUBLE) the result is: (double) (channel_value * (double) 3.25d + (double) 1.5d) = 17.75.

Warning

If the mode is LONG or INTEGER the decimal part of the scale and offset value will be discarded.

As the examples show the final result can be different depending on the used mode and value.type.

"},{"location":"connect-field-devices/asset-implemetation/#driver-specific-parameters","title":"Driver specific parameters","text":"

The parameters that are not included in list of driver independent parameters above are driver specific. These parameters are used to identify the resource addressed by the channel.

Driver specific parameters are described in the driver documentation.

"},{"location":"connect-field-devices/asset-implemetation/#other-asset-configurations","title":"Other Asset Configurations","text":"
  • asset.desc: a user friendly description of the asset
  • emit.all.channels: specifies whether the values of all READ or READ_WRITE channels should be emitted in case of a channel event. If set to true, the values for all channels will be read and emitted, if set to false, only the value for the channel related to the event will be emitted.
  • timestamp.mode: if set to PER_CHANNEL, the component will emit a driver-generated timestamp per channel property. If set to SINGLE_ASSET_GENERATED, the component will emit a single timestamp per request, generated by the Asset itself before emitting the envelope. If set to SINGLE_DRIVER_GENERATED_MAX or SINGLE_DRIVER_GENERATED_MIN, the component will emit a single driver generated timestamp being respectively the max (most recent) or min (oldest) among the timestamps of the channels.
  • emit.errors: Specifies whether errors should be included or not in the emitted envelope. Default is false.
  • emit.on.change: If set to true, this component will include a channel value in the output emitted in Kura Wires only if it is different than the one from the previous read operation or event. Channel errors will always be emitted if emit.errors is set to true.
  • emit.empty.envelopes: If set to false, this component will not emit empty envelopes. This property can be useful if combined with emit.on.change.
"},{"location":"connect-field-devices/asset-implemetation/#channels-download","title":"Channels download","text":"

The creation of the channels is a process that could be very time and effort consuming. For this reason, once the user has created the desired channels, it is possible to download the entire list from the web UI, by clicking the Download Channels button:

The list is downloaded in csv format and is represented in the form of a table, whose columns represent the entries for the options in the channel definition, while each row is equivalent to a specific channel. For example, the resulting csv file retrieved from downloading the list of channels in the image above is:

The resulting table is composed by some static, pre-defined options (the ones mentioned in Channel Definition section above, from enabled to listen) that are the same for each component and the ones introduced by the specific bundle under analisys. In this case, the modbus driver introduces these driver-specific options:

  • unit.id
  • primary.table
  • memory.address
  • data.order
  • data.type
  • array.data.length

The download tool is extremely useful in all those situations where the user wants to quickly load a long list of channels at once: for example, it can easily clone the same list in multiple assets, export it to another device, or simply save it locally to always have a copy of the channels ready.

"},{"location":"connect-field-devices/asset-implemetation/#csv-upload","title":"CSV upload","text":"

The Upload Channels button allows the user to load a local csv file to create the channel list in one shot: the uploading file must implement the same table-structure described in the \"Channels download\" section above, so with each rows representing a channels, and each column one entry of the channel's options.

Once the user clicks on the button, will be shown a pop-up in which there are a button to locate the file in the user's filesystem and two checkboxes to allow the uploading phase customization. After clicking on Upload, if the process is succesful, the new channels list will be shown, and the user is just asked to click on the Apply button to save the asset variation.

"},{"location":"connect-field-devices/asset-implemetation/#force-import-empty-string-policy","title":"Force import empty string policy","text":"

The Force import empty string policy checkbox forces the parsing of all empty values present in the csv as empty strings, for all those channel's options that are typed to String and \"not required\" by the metatype.

So, this box must be checked when the user wants that all empty values from the csv are considered as empty strings (\"\") when parsed to driver-specific channel option, defined by the metatype as String type and not required. So, those values that are null in the csv, will be set as \"\" in the channel options. The user must be cautious, because the framework supposes that it's consciously leaving empty values in the csv.

Otherwise, if the box is unchecked, all the csv empty values will be considered as null strings and parsed to the default value set in the metatype of the driver.

If, for example, the user downloads the channels list following the steps described in the precious section, it could upload the same csv file into an other asset, or another device, to get the exactly same asset configuration.

"},{"location":"connect-field-devices/asset-implemetation/#replace-current-channels","title":"Replace current channels","text":"

The Replace current channels must be checked when the user wants to replace all the channels currently present in the asset, with the ones that will be created by the csv uploading.

"},{"location":"connect-field-devices/asset-v1-mqtt-namespace/","title":"ASSET-V1 MQTT Namespace","text":"

The ASSET-V1 namespace allows to perform remote operations on the assets defined in an Kura-powered device. The requests and responses are represented as JSON arrays placed in the body of the MQTT payload.

The namespace includes the following topics.

"},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#getassets","title":"GET/assets","text":"

This topic is used to retrieve metadata describing the assets defined on a specific device and their channel configuration.

"},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#request-format","title":"Request format","text":"

The request can contain JSON array containing a list of asset names for which the metadata needs to be returned. The request JSON must have the following structure:

[\n  {\n    \"name\": \"asset1\"\n  },\n  {\n    \"name\": \"otherAsset\"\n  }\n]\n

The request JSON is an array with all elements of the type object. The array object has the following properties:

  • name (string, required): the name of the Asset for which the metadata needs to be returned.

If the provided array is empty or the request payload is empty, the metadata describing all assets present on the device will be returned.

"},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#response-format","title":"Response format","text":"

The response payload contains a JSON array with the following structure:

[\n  {\n    \"name\": \"asset1\",\n    \"channels\": [\n      {\n        \"name\": \"first_channel\",\n        \"type\": \"INTEGER\",\n        \"mode\": \"READ\"\n      },\n      {\n        \"name\": \"second_channel\",\n        \"type\": \"BOOLEAN\",\n        \"mode\": \"READ_WRITE\"\n      },\n      {\n        \"name\": \"other_channel\",\n        \"type\": \"STRING\",\n        \"mode\": \"WRITE\"\n      }\n    ]\n  },\n  {\n    \"name\": \"otherAsset\",\n    \"channels\": []\n  },\n  {\n    \"name\": \"nonExistingAsset\",\n    \"error\": \"Asset not found\"\n  }\n]\n

All elements of the array are of the type object. The array object has the following properties:

  • name (string, required): the name of the asset
  • error (string): this property is present only if the metadata for a not existing asset was explicitly requested, it contains an error message.
  • channels (array): the list of channels defined on the asset, it can be empty if no channels are defined. This property and the error property are mutually exclusive. This object is an array with all elements of the type object and they have the following properties:
    • name (string, required): the name of the channel.
    • mode (string, required): the mode of the channel. The possible values are READ, WRITE or READ_WRITE.
    • type (string, required): the value type of the channel. The possible values are BOOLEAN, BYTE_ARRAY, DOUBLE, INTEGER, LONG, FLOAT, STRING.
"},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#execread","title":"EXEC/read","text":"

This topic is used to perform a read operation on a specified set of assets and channels.

"},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#request-format_1","title":"Request format","text":"

The request can contain a JSON array with the following structure:

[\n  {\n    \"name\": \"asset1\",\n    \"channels\": [\n      {\n        \"name\": \"channel1\"\n      },\n      {\n        \"name\": \"channel2\"\n      },\n      {\n        \"name\": \"otherChannel\"\n      }\n    ]\n  },\n  {\n    \"name\": \"otherAsset\"\n  }\n]\n

The request JSON is an array with all elements of the type object. If the list is empty or if the request payload is empty all channels of all assets will be read. The array object has the following properties:

  • name (string, required): the name of the asset involved in the read operation
  • channels (array): the list of the names of the channels to be read, if this property is not present or if its value is an empty array, all channels for the specified asset will be read. The object is an array with all elements of the type object. The array object has the following properties:
  • name (string, required): the name of the channel to be read
"},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#response-format_1","title":"Response Format","text":"

The response is returned as a JSON array placed in the body of the response:

[\n  {\n    \"name\": \"asset1\",\n    \"channels\": [\n      {\n        \"name\": \"first_channel\",\n        \"type\": \"INTEGER\",\n        \"value\": \"432\",\n        \"timestamp\": 1234550\n      },\n      {\n        \"name\": \"second_channel\",\n        \"type\": \"BOOLEAN\",\n        \"value\": \"true\",\n        \"timestamp\": 1234550\n      },\n      {\n        \"name\": \"other_channel\",\n        \"error\": \"Read failed\",\n        \"timestamp\": 1234550\n      },\n      {\n        \"name\": \"binary_channel\",\n        \"type\": \"BYTE_ARRAY\",\n        \"value\": \"dGVzdCBzdHJpbmcK\",\n        \"timestamp\": 1234550\n      }\n    ]\n  },\n  {\n    \"name\": \"nonExistingAsset\",\n    \"error\": \"Asset not found\"\n  }\n]\n

The response JSON is an array with all elements of the type object. The array object has the following properties:

  • name (string, required): the name of the asset.
  • error (string): an error message. This property is present only if a read operation for a not existing asset was explicitly requested.
  • channels (array): the object is an array with all elements of the type object. The array object has the following properties:
  • name (string, required): the name of the channel.
  • timestamp (integer, required): the device timestamp associated with the result in milliseconds since the Unix Epoch.
  • type (string): the type of the result. This property is present only if the operation succeeded. The possible values are BOOLEAN, BYTE_ARRAY, DOUBLE, INTEGER, LONG, FLOAT, STRING.
  • value (string): the result value of the read request encoded as a String. This property is present only if the operation succeeded. If the channel type is BYTE_ARRAY, the result will be represented using the base64 encoding.
  • error (string): an error message. This property is present only if the operation failed.
"},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#execwrite","title":"EXEC/write","text":"

Performs a write operation on a specified set of channels and assets.

"},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#request-format_2","title":"Request format","text":"

The request must contain a JSON array with the following structure:

[\n  {\n    \"name\": \"asset1\",\n    \"channels\": [\n      {\n        \"name\": \"first_channel\",\n        \"type\": \"INTEGER\",\n        \"value\": \"432\",\n      },\n      {\n        \"name\": \"second_channel\",\n        \"type\": \"BOOLEAN\",\n        \"value\": \"true\",\n      },\n      {\n        \"name\": \"binary_channel\",\n        \"type\": \"BYTE_ARRAY\",\n        \"value\": \"dGVzdCBzdHJpbmcK\",\n      }\n    ]\n  }\n]\n

The array object has the following properties:

  • name (string, required): the name of the asset.
  • channels (array, required): the list of channel names and values to be written. The object is an array with all elements of the type object. The array object has the following properties:
    • name (string, required): the name of the channel.
    • type (string, required): the type of the value to be written. The allowed values are BOOLEAN, BYTE_ARRAY, DOUBLE, INTEGER, LONG, FLOAT, STRING.
    • value (string, required): the value to be written encoded as a String. If the channel type is BYTE_ARRAY, the base64 encoding must be used.
"},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#response-format_2","title":"Response format","text":"

The response uses the same format as the EXEC/read request, in case of success the type and value properties in the response will report the same values specified in the request.

"},{"location":"connect-field-devices/driver-and-assets/","title":"Drivers, Assets and Channels","text":"

Eclipse Kura introduces a model based on the concepts of Drivers and Assets to simplify the communication with the field devices attached to a gateway.

A Driver encapsulates the communication protocol and its configuration parameters, dealing with the low-level characteristics of the field protocol. It opens, closes and performs the communication with the end field device. It also exposes field protocol specific information that can be used by upper levels of abstraction to simplify the interaction with the end devices.

An Asset is a logical representation of a field device, described by a list of Channels. The Asset uses a specific Driver instance to communicate with the underlying device and it models a generic device resource as a Channel. A register in a PLC or a GATT Characteristic in a Bluetooth device are examples of Channels. In this way, each Asset has multiple Channels for reading and writing data from/to an Industrial Device.

"},{"location":"connect-field-devices/driver-and-assets/#channel-example","title":"Channel Example","text":"

To further describe the concept of Channel and Asset, the following table shows a set of PLC register addresses as provided in a typical PLC documentation.

Name Entity Address LED1 COILS 2049 LED2 COILS 2050 LED3 COILS 2051 LED4 RED COILS 2052 LED4 GREEN COILS 2053 LED4 BLUE COILS 2054 Counter 3 INPUT REGISTERS 515 Quad Counter INPUT REGISTERS 520 Toggle 4 DISCRETE INPUTS 2052 Toggle 5 DISCRETE INPUTS 2053 Toggle 6 DISCRETE INPUTS 2054 Reset Counter 3 COILS 3075 Reset Quad Counter COILS 3084

The corresponding Channels definition in the Asset is as follows:

As shown in the previous image, the Channel definition in an Asset results easily mappable to what available in a generic PLC documentation.

Once defined the Channels in an Asset, a simple Java application that leverages the Asset API can easily communicate with the Field device by simply referring to the specific Channel of interest.

"},{"location":"connect-field-devices/driver-and-assets/#drivers-and-assets-in-kura-administrative-ui","title":"Drivers and Assets in Kura Administrative UI","text":"

Kura provides a specific section of the UI to allow users to manage the different instances of Drivers and Assets. Using the Kura Web UI the user can instantiate and manage Drivers

but also can manage Assets instances based on existing drivers.

The user interface allows also to perform specific reads on the configured Assets' channels clicking on the Data tab for the selected Asset.

"},{"location":"connect-field-devices/driver-implemetation/","title":"Driver implementation","text":"

A Driver encapsulates the communication protocol and its configuration parameters.

The Driver API abstracts the specificities of the end Fieldbus protocols providing a clean and easy to use set of calls that can be used to develop end-applications.

Using the Driver APIs, an application can simply use the connect and disconnect methods to open or close the connection with the Field device. Furthermore, the read and write methods allow exchanging data with the Field device.

A Driver instance can be associated with an Asset to abstract even more the low-level specificities and allow an easy and portable development of the Java applications that need to interact with sensors, actuators, and PLCs.

The Asset will use the Driver's protocol-specific channel descriptor to compose the Asset Channel description.

"},{"location":"connect-field-devices/driver-implemetation/#driver-configuration","title":"Driver Configuration","text":"

Generally, a Driver instance is a configurable component which parameters can be updated in the Drivers and Assets section of the Kura Administrative User Interface.

"},{"location":"connect-field-devices/driver-implemetation/#supported-field-protocols-and-availability","title":"Supported Field Protocols and Availability","text":"

Drivers will be provided as add-ons available in the Eclipse IoT Marketplace. Please see here for a complete list.

"},{"location":"connect-field-devices/driver-implemetation/#driver-specific-optimizations","title":"Driver-Specific Optimizations","text":"

The Driver API provides a simple method to read a list of Channel Records:

public void read(List<ChannelRecord> records) throws ConnectionException;\n

Typically, since the records to read do not change until the Asset configuration is changed by the user, a Driver can perform some optimisations to efficiently read the requested records at once. For example, a Modbus driver can read a range of holding registers using a single request.

Since these operations are costly, the Kura API adds methods to ask the driver to prepare reading a given list of records and execute the prepared read:

public PreparedRead prepareRead(List<ChannelRecord> records);\n

Invocation of the preparedRead method will result in a PreparedRead instance returned.

On a PreparedRead, the execute method will perform the optimized read request.

"},{"location":"connect-field-devices/eddystone-driver/","title":"Eddystone\u2122 Driver","text":"

Eclipse Kura offers support for Eddystone\u2122 protocol via a specific driver. It can be used into the Wires framework, the Asset model or directly using the Driver itself.

"},{"location":"connect-field-devices/eddystone-driver/#features","title":"Features","text":"

The Eddystone\u2122 driver is designed to listen for incoming beacon packets and to recognise the specific protocol. Of course it's not possible to write data to the beacons, since this is outside the protocol specification. The frame format to be filtered can be chosen from the channel definition. For more information about Eddystone\u2122 frame format, see here.

"},{"location":"connect-field-devices/eddystone-driver/#installation","title":"Installation","text":"

As the others Drivers supported by Eclipse Kura, it is distributed as a deployment package on the Eclipse Marketplace here. It can be installed following the instructions provided here.

"},{"location":"connect-field-devices/eddystone-driver/#instance-creation","title":"Instance creation","text":"

A new Eddystone Driver instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.eddsytone factory must be selected and a unique name must be provided for the new instance. Once instantiated, the Driver has to be configured setting the Bluetooth interface name (i.e. hci0) that will be used to connect to the device.

"},{"location":"connect-field-devices/eddystone-driver/#channel-configuration","title":"Channel configuration","text":"

The Eddystone Driver channel can be configured with the following parameters:

  • enabled: it allows to enable/disable the channel. If it isn't selected the channel will be ignored.
  • name: the channel name.
  • type: the channel type, (READ, WRITE, or READ_WRITE).
  • value.type: the Java type of the channel value. The value read by the Driver will be converted to the value.type.
  • listen: when selected, a listener will be attached to this channel. Any event on the channel will be reported using a callback and the value will be emitted.
  • eddystone.type: the type of the frame. Currently only UID and URL typed are supported.
"},{"location":"connect-field-devices/field-protocols/","title":"Field Protocols","text":"

Eclipse Kura provides support for field protocol implementations as add-ons deployable directly from the Eclipse Marketplace for IoT site. Moreover, several devices are supported using the Kura Driver model.

Currently, the following field protocols and devices are supported and downloadable from the Eclipse Marketplace in form of Kura Drivers:

Protocol/Device Kura 3.x Kura 4.x Kura 5.x OPC-UA link link link S7 link link link iBeacon N.A. link link Eddystone N.A. link link TiSensorTag link link link GPIO link link link SenseHat link link link"},{"location":"connect-field-devices/gpio-driver/","title":"GPIO Driver","text":"

The GPIO Driver manages the General Purpose IOs on a gateway using the Driver model. Based on the GPIO Service, the driver can be used in the Wires framework, the Asset model or directly using the Driver itself.

"},{"location":"connect-field-devices/gpio-driver/#features","title":"Features","text":"

The GPIO Driver includes the following features:

  • support for digital input and output
  • support for unsolicited inputs
  • the trigger event can be configured directly through the Driver
"},{"location":"connect-field-devices/gpio-driver/#installation","title":"Installation","text":"

As the other Drivers supported by Eclipse Kura, it is distributed as a deployment package on the Eclipse Marketplace for Kura 3.x and 4.x/5.x. It can be installed following the instructions provided here.

"},{"location":"connect-field-devices/gpio-driver/#instance-creation","title":"Instance creation","text":"

A new GPIO Driver instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.gpio factory must be selected and a unique name must be provided for the new instance. Once instantiated, the GPIO Driver is ready to use and no configuration is needed.

"},{"location":"connect-field-devices/gpio-driver/#channel-configuration","title":"Channel configuration","text":"

The GPIO Driver channel can be configured with the following parameters:

  • enabled: it allows to enable/disable the channel. If it isn't selected the channel will be ignored.
  • name: the channel name.
  • type: the channel type, (READ, WRITE, or READ_WRITE).
  • value.type: the Java type of the channel value. The value read by the Driver will be converted to the value.type. Conversely, in write operations the Driver will accept value of this kind.
  • listen: when selected, a listener will be attached to this channel. Any event on the channel will be reported using a callback and the value will be emitted.
  • resource.name: the name of the GPIO resource as reported by the GPIO Service. The #select resource selection has no effect on the channel.
  • resource.direction: the direction of the GPIO. Possible values are INPUTand OUTPUT. The #select direction selection has no effect on the channel.

  • resource.trigger: the type of event that triggers the listener, if selected. Possible values are:

  • NONE: no event will trigger the listener.

  • RISING_EDGE, FALLING_EDGE, BOTH_EDGES: the listeners will be triggered respectively by a low-high transition, a high-low transition or both.
  • HIGH_LEVEL,LOW_LEVEL, BOTH_LEVELS: the listeners will be triggered respectively by the detection of a high, low or both levels. Please note that these options aren't supported by all the devices.
"},{"location":"connect-field-devices/gpio-driver/#drive-a-led-using-the-gpio-driver","title":"Drive a LED using the GPIO Driver","text":"

In this section a simple example on the GPIO Driver using a RaspberryPi will be presented. Before configuring the Driver, arrange a setup as shown in the following picture, using a breadboard, a led, a 120-ohm resistor and some wires. Connect the yellow wire to a ground pin on the RasperryPi connector (i.e. pin 6) and the red one to pin 40 (a.k.a. gpio21).

From the Drivers and Assets tab, create a new GPIO Driver, call it GPIODriver and add an Asset as shown in the following picture.

The asset is configured to manage a gpio, called LED, as an output and drives it writing a boolean value. The LED channel is attached to the gpio21 on the RaspberryPi. In the Data tab, fill the Value form with true and press Apply: the green led will switch on. Writing a false will switch off the led.

"},{"location":"connect-field-devices/ibeacon-driver/","title":"iBeacon\u2122 Driver","text":"

Eclipse Kura provides a driver specifically developed to manage iBeacon\u2122 protocol. They can be used into the Wires framework, the Asset model or directly using the Driver itself.

"},{"location":"connect-field-devices/ibeacon-driver/#features","title":"Features","text":"

The iBeacon\u2122 driver is designed to listen for incoming beacon packets and to recognise the specific protocol. Of course it's not possible to write data to the beacons, since this is outside the protocol specification.

"},{"location":"connect-field-devices/ibeacon-driver/#installation","title":"Installation","text":"

As the others Drivers supported by Eclipse Kura, it is distributed as a deployment package on the Eclipse Marketplace here. It can be installed following the instructions provided here.

"},{"location":"connect-field-devices/ibeacon-driver/#instance-creation","title":"Instance creation","text":"

A new iBeacon instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.ibeacon factory must be selected and a unique name must be provided for the new instance. Once instantiated, the Driver has to be configured setting the Bluetooth interface name (i.e. hci0) that will be used to connect to the device.

"},{"location":"connect-field-devices/ibeacon-driver/#channel-configuration","title":"Channel configuration","text":"

The iBeacon Driver channel can be configured with the following parameters:

  • enabled: it allows to enable/disable the channel. If it isn't selected the channel will be ignored.
  • name: the channel name.
  • type: the channel type, (READ, WRITE, or READ_WRITE).
  • value.type: the Java type of the channel value. The value read by the Driver will be converted to the value.type.
  • listen: when selected, a listener will be attached to this channel. Any event on the channel will be reported using a callback and the value will be emitted.
"},{"location":"connect-field-devices/opcua-driver/","title":"OPC UA Driver","text":"

This Driver implements the client side of the OPC UA protocol using the Driver model. The Driver can be used to interact as a client with OPC UA servers using different abstractions, such as the Wires framework, the Asset model or by directly using the Driver itself.

The Driver is distributed as a deployment package on Eclipse Marketplace for Kura 3.x and 4.x/5.x. It can be installed following the instructions provided here.

"},{"location":"connect-field-devices/opcua-driver/#features","title":"Features","text":"

The OPC UA Driver features include:

  • Support for the OPC UA protocol over TCP.
  • Support for reading and writing OPC UA variable nodes by node ID.
"},{"location":"connect-field-devices/opcua-driver/#instance-creation","title":"Instance creation","text":"

A new OPC UA instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.opcua factory must be selected and a unique name must be provided for the new instance.

"},{"location":"connect-field-devices/opcua-driver/#channel-configuration","title":"Channel configuration","text":"

The OPC UA Driver channel configuration is composed of the following parameters:

  • name: the channel name.
  • type: the channel type, (READ, WRITE, or READ_WRITE).
  • value type: the Java type of the channel value.
  • node.id: The node id of the variable node to be used, the format of the node id depends on the value of the node.id.type property.
  • node.namespace.index: The namespace index of the variable node to be used.

  • opcua.type: The OPC-UA built-in type of the attribute to be read/written. If set to DEFINED_BY_JAVA_TYPE (default), the driver will attempt to determine the OPC-UA type basing on the value type parameter value. If the read/write operation fails, it may be necessary to use one of the other values of this configuration parameter to explicitly select the type.

    This parameter also lists the OPC-UA types currently supported by the driver.

    Not all value type and opcua.type combinations are valid, the allowed ones are the following:

    opcua.type Allowed value.types Recommended value.type BOOLEAN BOOLEAN BOOLEAN SBYTE INTEGER, LONG, FLOAT, DOUBLE, STRING INTEGER INT16 INTEGER, LONG, FLOAT, DOUBLE, STRING INTEGER INT32 INTEGER, LONG, FLOAT, DOUBLE, STRING INTEGER INT64 INTEGER, LONG, FLOAT, DOUBLE, STRING LONG BYTE INTEGER, LONG, FLOAT, DOUBLE, STRING INTEGER UINT16 INTEGER, LONG, FLOAT, DOUBLE, STRING INTEGER UINT32 INTEGER, LONG, FLOAT, DOUBLE, STRING LONG UINT64 INTEGER, LONG, FLOAT, DOUBLE, STRING STRING FLOAT FLOAT, STRING FLOAT DOUBLE DOUBLE, STRING DOUBLE STRING STRING STRING BYTE_STRING BYTE_ARRAY BYTE_ARRAY BYTE_ARRAY BYTE_ARRAY BYTE_ARRAY SBYTE_ARRAY BYTE_ARRAY BYTE_ARRAY

    Using a non allowed value.type will result in read/write operation failures. It should be noted that there is not a one to one match between the opcua.type and Java value.type. It is recommended to compare the allowed ranges for numeric types specified in OPC-UA Reference and Java reference for selecting the best match.

  • node.id.type: The type of the node id (see the Node Id types section)

  • attribute: The attribute of the referenced variable node.

If the listen flag is enabled for an OPC-UA channel, the driver will request the server to send notifications if it detects changes in the referenced attribute value.

In order to enable this, the driver will create a global subscription (one per Driver instance), and a monitored item for each channel. See [1] for more details. The Subscription publish interval global configuration parameter can be used to tune the subscription publishing interval.

  • listen.sampling.interval: The sampling interval for the monitored item. See the Sampling interval section of [1] for more details.
  • listen.queue.size: The queue size for the monitored item. See the Queue parameters section of [1] for more details.
  • listen.discard.oldest: The value of the discardOldest flag for the monitored item. See the Queue parameters section of [1] for more details.

The listen.subscribe.to.children parameter can be used to enable the Subtree Subscription feature.

[1] MonitoredItem model

"},{"location":"connect-field-devices/opcua-driver/#node-id-types","title":"Node ID types","text":"

The Driver supports the following node id types:

Node ID Type Format of node.id NUMERIC node.id must be parseable into an integer STRING node.id can be any string OPAQUE Opaque node ids are represented by raw byte arrays. In this case node.id must be the base64 encoding of the node id. GUID node.id must be a string conforming to the format described in the documentation of the java.util.UUID.toString() method."},{"location":"connect-field-devices/opcua-driver/#certificate-setup","title":"Certificate setup","text":"

In order to use settings for Security Policy different than None, the OPCUA driver must be configured to trust the server certificate and a new client certificate - private key pair must be generated for the driver. These items can be placed in a Java keystore that can be referenced from driver configuration. The keystore does not exist by default and without it connections that use Security Policy different than None will fail.

The following steps can be used to generate the keystore:

  1. Download the certificate used by the server, usually this can be done from server management UI.
  2. Copy the downloaded certificate to the gateway using SSH.

  3. Copy the following example script to the device using SSH, it can be used to import the server certificate and generate the client key pair. It can be modified if needed:

    #!/bin/bash\n\n# the alias for the imported server certificate\nSERVER_ALIAS=\"server-cert\"\n\n# the file name of the generated keystore\nKEYSTORE_FILE_NAME=\"opcua-keystore.ks\"\n# the password of the generated keystore and private keys, it is recommended to change it\nKEYSTORE_PASSWORD=\"changeit\"\n\n# server certificate to be imported is expected as first argument\nSERVER_CERTIFICATE_FILE=\"$1\"\n\n# import existing certificate\nkeytool -import \\\n        -alias \"${SERVER_ALIAS}\" \\\n        -file \"${SERVER_CERTIFICATE_FILE}\" \\\n        -keystore \"${KEYSTORE_FILE_NAME}\" \\\n        -noprompt \\\n        -storepass \"${KEYSTORE_PASSWORD}\"\n\n# alias for client certificate\nCLIENT_ALIAS=\"client-cert\"\n# client certificate distinguished name, it is recommended to change it \nCLIENT_DN=\"CN=MyCn, OU=MyOu, O=MyOrganization, L=Amaro, S=UD, C=IT\"\n# the application id, must match the corresponding parameter in driver configuration\nAPPLICATION_ID=\"urn:kura:opcua:client\"\n\n# generate the client private key and certificate\nkeytool -genkey \\\n        -alias \"${CLIENT_ALIAS}\" \\\n        -keyalg RSA \\\n        -keysize 4096 \\\n        -keystore \"${KEYSTORE_FILE_NAME}\" \\\n        -dname \"${CLIENT_DN}\" \\\n        -ext ku=digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment \\\n        -ext eku=clientAuth \\\n        -ext \"san=uri:${APPLICATION_ID}\" \\\n        -validity 1000 \\\n        -noprompt \\\n        -storepass ${KEYSTORE_PASSWORD} \\\n        -keypass ${KEYSTORE_PASSWORD}\n

  4. Update the following parameters in driver configuration:

  5. Keystore Path : Set the absolute path of the opcua-keystore.ks file created at step 3.
  6. **Security Policy ** -> Set the desired option
  7. Client Certificate Alias -> Set the value of the CLIENT_ALIAS script variable (the default is client-cert)
  8. Enable Server Authentication -> true
  9. Keystore type -> JKS
  10. Keystore Password -> Set the value of the KEYSTORE_PASSWORD script variable (the default value is changeit)

  11. Application URI -> Set the value of the APPLICATION_ID script variable (default value should be already ok).

  12. Configurare the server to trust the client certificate generated at step 3. The steps required to do this vary depending on the server. Usually the following steps are needed:

  13. Make a connection attempt using OPC-UA driver, this will likely fail because the server does not trust client certificate.
  14. After the failed connection attempt, the server should display the certificate used by the driver in the administration UI. The server UI should allow to set it as trusted.
  15. Make another connection attempt once the certificate has been set to trusted, this connection attempt should succeed.
"},{"location":"connect-field-devices/opcua-driver/#substree-subscription","title":"Substree Subscription","text":"

The driver can be configured to recursively visit the children of a folder node and create a Monitored Item for the value of each discovered variable node with a single channel in Asset configuration.

Warning: This feature should be used with care since it can cause high load on both the gateway and the server if the referenced folder contains a large number of nodes and/or the notification rate is high.

"},{"location":"connect-field-devices/opcua-driver/#channel-configuration_1","title":"Channel configuration","text":"

In order to configure the driver to perform the discovery operation, a single channel can be defined with the following configuration:

  • type: READ
  • value.type: STRING (see below)
  • listen: true
  • node.id: the node id of the root of the subtree to visit
  • node.namespace.index: the namespace index of the root of the subtree to visit
  • node.id.type the node id type of the root of the subtree to visit
  • listen.subscribe.to.children (NEW): true

The rest of the configuration parameters can be specified in the same way as for the single node subscription use case.

The listen.sampling.interval, listen.queue.size and listen.discard.oldest parameters of the root will be used for all subscriptions on the subtree.

"},{"location":"connect-field-devices/opcua-driver/#discovery-procedure","title":"Discovery procedure","text":"

The driver will consider as folders to visit all nodes that whose type definition is FolderType, or more precisely all nodes with the following reference:

HasTypeDefinition: * namespace index: 0 * node id: 61 (numeric) * URN: http://opcfoundation.org/UA/

The driver will subscribe to all the variable nodes found.

"},{"location":"connect-field-devices/opcua-driver/#event-reporting","title":"Event reporting","text":"

If the Driver is used by a Wire Asset, it will emit on the wire a single message per received event.

All emitted events will contain a single property. Depending on the value of the Subtree subscription events channel name format global configuration parameter, the name of this property is the node id or the browsed path of the source OPCUA node relative to the root folder defined in the channel configuration.

"},{"location":"connect-field-devices/opcua-driver/#type-conversion","title":"Type conversion","text":"

The current version of the driver tries to convert the values received for all the events on a subtree to the type defined in the value.type configuration parameter.

Since the value types of the discovered nodes are heterogeneous, the conversion might fail if the types are not compatible (e.g. if value.type is set to INTEGER and the received value is a string).

Setting value.type to STRING should allow to perform safe conversions for most data types.

"},{"location":"connect-field-devices/s7-driver/","title":"S7comm Driver","text":"

This Driver implements the s7comm protocol and can be used to interact with Siemens S7 PLCs using different abstractions, such as the Wires framework, the Asset model or by directly using the Driver itself.

The Driver is distributed as a deployment package on the Eclipse Marketplace for Kura 3.x and 4.x/5.x. It can be installed following the instructions provided here.

"},{"location":"connect-field-devices/s7-driver/#features","title":"Features","text":"

The S7comm Plc Driver features include:

  • Support for the s7comm protocol over TCP.
  • Support for reading and writing data from the Data Blocks (DB) memory areas.
  • The driver is capable of automatically aggregating reads/writes for contiguous data in larger bulk requests in order to reduce IO times.
"},{"location":"connect-field-devices/s7-driver/#instance-creation","title":"Instance creation","text":"

A new S7comm driver instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.s7plc factory must be selected and a unique name must be provided for the new instance.

"},{"location":"connect-field-devices/s7-driver/#channel-configuration","title":"Channel configuration","text":"

The S7 Driver channel configuration is composed of the following parameters:

  • name: the channel name.
  • type: the channel type, (READ, WRITE, or READ_WRITE).
  • value type: the Java type of the channel value.
  • s7.data.type: the S7 data type involved in channel operation.
  • data.block.no: the data block number involved in channel operation.
  • offset: the start address of the data.
  • byte.count: the size in bytes of the transferred data. This parameter is required only if the value type parameter is set to STRING or BYTE_ARRAY. In the other cases, this parameter is ignored and the data size is automatically derived from the s7.data.type.
  • bit.index: the index of the bit involved in channel operation inside its containing byte, index 0 is the least significant bit. This parameter is required only if the value type parameter is set to BOOLEAN and s7.data.type is set to BOOL. In the other cases, this parameter is ignored.
"},{"location":"connect-field-devices/s7-driver/#data-types","title":"Data Types","text":"

When performing operations that deal with numeric data, two data types are involved:

  1. The Java primitive type that is used in the ChannelRecords exchanged between the driver and Java applications. (the Java type of the value received/supplied by external applications from/to the Driver in case of a read/write operation). This value type is specified by the value type configuration property.

  2. The S7 type of the data on the PLC. This value type is specified by the s7.data.type configuration property. The following S7 data types are supported:

    S7 Data Type Size Sign INT 16 bits signed DINT 32 bits signed WORD 16 bits unsigned DWORD 32 bits unsigned REAL 32 bits signed BOOL 1 bit n.d. BYTE 1 byte unsigned CHAR 1 byte (only supported as char arrays using the String Java data type) n.d.

The Driver automatically adapts the data type used by external applications and the S7 device depending on the value of the two configuration properties mentioned above.

The adaptation process involves the following steps:

  • Each device data type is internally converted by the driver from/to a Java type large enough to represent the value of the device data without losing precision. The type mappings are the following:

    S7 Data Type Java Type INT int DINT int WORD int DWORD long REAL float BOOL boolean BYTE int

  • If the value type of the channel does not match the Java type specified in mapping above, a conversion is performed by the Driver to convert it to/from the matching type, choosing appropriately between the Number.toInt(), Number.toLong(), Number.toFloat() or Number.toDouble() methods. Precision losses may occur if the Java type used by the external application is not suitable to represent all possible values of the device data type.

"},{"location":"connect-field-devices/s7-driver/#array-data","title":"Array Data","text":"

The driver supports transferring data as raw byte arrays or ASCII strings:

  • Byte arrays: For transferring data as byte arrays the channel value type property must be set to BYTE_ARRAY, the data.type configuration property must be set to BYTE and the byte.count property must be set to the data length in bytes.
  • Strings: For transferring data as ASCII strings the channel value type property must be set to STRING, the data.type configuration property must be set to CHAR and the array.data.length property must be set to the data length in bytes.
"},{"location":"connect-field-devices/s7-driver/#writing-single-bits","title":"Writing Single Bits","text":"

The Driver supports setting the value of single bits without overwriting the other bits of the same byte. This operation can be performed defining a channel having BOOLEAN as value type, BOOL as s7.data.type and the proper index set to the bit.index property.

The Driver will fetch the byte containing the bit to be written, update its contents and then write back the obtained value. If multiple bits on the same byte need to be modified, the driver will perform only one read and write for that byte. If bits that need to be changed are located in contiguous bytes, the driver will perform only one bulk read and one bulk write transferring all the required data in a single request.

"},{"location":"connect-field-devices/sensehat-driver/","title":"RaspberryPi SenseHat driver","text":"

The SenseHat driver allows to interact to a RaspberryPi SenseHat device using Kura Driver, Asset and Wires frameworks. The driver allows access to the following resources:

  • Sensors
  • Joystick
  • LED Matrix

The driver-specific channel configuration contains a single parameter, resource, which allows to select the specific device resource that the channel is addressing (a sensor, a joystick event, etc).

Note about running on OpenJDK

If some exceptions reporting Locked by other application are visible in the log and the driver fails to start, try switching to the Oracle JVM by installing the oracle-java8-jdk package. For more information on the problem, please see this GitHub issue.

"},{"location":"connect-field-devices/sensehat-driver/#installation","title":"Installation","text":"

As the others Drivers supported by Kura, it is distributed as a deployment package on the Eclipse Marketplace here. It can be installed following the instructions provided here.

In order to use the driver, the Sensehat Support Library Bundle for Eclipse Kura needs to be installed as a prerequisite dependency. It is available from Eclipse Marketplace here.

"},{"location":"connect-field-devices/sensehat-driver/#sensors","title":"Sensors","text":"

The following values of the resource parameters refer to device sensors:

Resource Unit Description ACCELERATION_X, ACCELERATION_Y, ACCELERATION_Z G The proper acceleration for each axis GYROSCOPE_X, GYROSCOPE_Y, GYROSCOPE_Z rad/S The angular acceleration for each axis MAGNETOMETER_X, MAGNETOMETER_Y, MAGNETOMETERE_Z uT The magnetometer value for each axis HUMIDITY %rH The relative humidity PRESSURE mbar The pressure value TEMPERATURE_FROM_HUMIDITY \u00b0C The temperature obtained from the humidity sensor TEMPERATURE_FROM_PRESSURE \u00b0C The temperature obtained from the pressure sensor

The channels referencing sensor resources can only be used for reads and only in polling mode. The driver will attempt to convert the value obtained from the sensor into the data type selected using the value.type parameter

Example sensors Asset configuration:

"},{"location":"connect-field-devices/sensehat-driver/#joystick","title":"Joystick","text":"

The SenseHat joystick provides four buttons:

  • UP
  • DOWN
  • LEFT
  • RIGHT
  • ENTER

For each button, the driver allows to listen to the following events:

  • PRESS: Fired once when a button is pressed
  • RELEASE: Fired once when a button is released
  • HOLD: Fired periodically every few seconds if the button is kept pressed

The values of the resource parameter related to joystick have the following structure:

JOYSTICK_{BUTTON}_{EVENT}

Channels referencing joystick events must use LONG as value.type. The channel value supplied by the driver is the Java timestamp in milliseconds of the Joystick event, a value of 0 signifies that no events have been observed yet.

Joystick related channels can be only used for reading and both in polling and event-driven mode.

Example joystick Asset configuration:

"},{"location":"connect-field-devices/sensehat-driver/#led-matrix","title":"LED Matrix","text":"

The driver allows accessing the SenseHat LED matrix in two ways:

  • Using a monochrome framebuffer
  • Using a RGB565 framebuffer
"},{"location":"connect-field-devices/sensehat-driver/#coordinates","title":"Coordinates","text":"

The coordinate system used by the driver defines the x coordinate as increasing along the direction identified by the joystick RIGHT button and the y coordinate increasing along the direction identified by the DOWN joystick button.

"},{"location":"connect-field-devices/sensehat-driver/#monochrome-framebuffer","title":"Monochrome framebuffer","text":"

In monochrome mode, only two colors will be used: the front color and the back color.

"},{"location":"connect-field-devices/sensehat-driver/#front-and-back-colors","title":"Front and back colors","text":"

Front and back colors can be configured using channels having the following values for the resource parameter:

  • LED_MATRIX_FRONT_COLOR_R
  • LED_MATRIX_FRONT_COLOR_G
  • LED_MATRIX_FRONT_COLOR_B
  • LED_MATRIX_BACK_COLOR_R
  • LED_MATRIX_BACK_COLOR_G
  • LED_MATRIX_BACK_COLOR_B

These channel types allow to set the rgb components of the front and back color and can only be used in write mode. The supplied value must be a floating point number between 0 (led turned off) and 1 (full brightness). Note: Front and back colors are internally represented using the RGB565 format. The available colors are only the ones that can be represented using RGB565 and are supported by the device. Front and back color are retained for successive draw operations, the initial value for both colors is black (led turned off).

"},{"location":"connect-field-devices/sensehat-driver/#drawing","title":"Drawing","text":"

The following resources can be used for modifying framebuffer contents:

  • LED_MATRIX_FB_MONOCHROME:

    A channel of this type allows to set the framebuffer contents in monochrome mode. It can only be used in write mode and its value.type must be BYTE_ARRAY.

    The supplied value must be a byte array of length 64 that represent the state of the 8x8 led matrix. The offset in the array of a pixel having coordinates (x, y) is y*8 + x. The back/front color will be used for a pixel if the corresponding byte in the array is zero/non-zero.

  • LED_MATRIX_CHARS:

    A channel of this type allows showing a text message using the LED matrix. It can only be used for writing and its value.type must be STRING. The characters of the message will be rendered using the front color and the background using the back color.

"},{"location":"connect-field-devices/sensehat-driver/#rgb565-framebuffer","title":"RGB565 framebuffer","text":"

The following resource allows writing the framebuffer using the RGB565 format:

  • LED_MATRIX_FB_RGB565:

    A channel of this type allows to set the framebuffer contents in RGB565 mode. It can only be used in write mode and its value.type must be BYTE_ARRAY.

    The supplied value must be a byte array of length 128 that represents the state of the 8x8 led matrix. Each pixel is represented by two consecutive bytes in the following way:

    |    MSB    |    LSB    |\n|  RRRRRGGG |  GGGBBBBB |\n|  15 ... 8 |  7 ... 0  |\n

    The LSB must be stored first in the array, the offset of the LSB and MSB for a pixel at coordinates (x, y) is the following:

    • LSB: 2*(y*8 + x)
    • MSB: 2*(y*8 + x) + 1
"},{"location":"connect-field-devices/sensehat-driver/#mode-independent-resources","title":"Mode independent resources","text":"

  • LED_MATRIX_CLEAR:

    Writing anything to a LED_MATRIX_CLEAR channel will clear the framebuffer turning off all leds.

  • LED_MATRIX_ROTATION:

    Allows to rotate the framebuffer of 0, 90, 180, and 170 degrees clockwise. Rotation setting will be retained for successive draw operations. The default value is 0. Writes to a LED_MATRIX_ROTATION channel can be performed using any numeric type as value.type.

Example framebuffer Asset configuration:

"},{"location":"connect-field-devices/sensehat-driver/#examples","title":"Examples","text":"

This section contains some examples describing how to use the driver using Kura Wires and the Wires Script filter.

"},{"location":"connect-field-devices/sensehat-driver/#moving-a-pixel-using-the-joystick","title":"Moving a pixel using the Joystick","text":"
  1. Open the Wires section of the Kura Web UI.
  2. Create an Asset that emits joystick events like the one described in the Joystick section. Only left_release, right_release, up_release and down_release channels will be used. Make sure to enable the listen flag for the channels.
  3. Create the Asset described in the LED Matrix section.
  4. Create a Script Filter and paste the code below in the script field.
  5. Connect the Joystick Asset to the input port of the Script Filter, and the output port of the Script filter to the framebuffer Asset.
  6. Open the Drivers and Assets section of the Kura Web UI, select the framebuffer Asset, click on the Data tab and select front and back colors. For example for using green as front color and red as back color, write 1 as Value for the front_g and back_r channels.
  7. You should now be able to move the green pixel with the joystick.
var FB_SIZE = 8\n\nif (typeof(state) === 'undefined') {\n  // framebuffer as byte array (0 -> back color, non zero -> front color)\n  var fb = newByteArray(FB_SIZE*FB_SIZE|0)\n  // record to be emitted for updating the fb\n  var outRecord = newWireRecord()\n  // property in emitted record containing fb data\n  // change the name if needed\n  // should match the name of a channel configured as LED_MATRIX_FB_MONOCHROME\n  outRecord['fb_mono'] = newByteArrayValue(fb)\n\n  state = {\n    fb: fb,\n    outRecord: outRecord,\n    x: 0, // current pixel position\n    y: 0,\n    dx: 0, // deltas to be added to pixel position\n    dy: 0,\n  }\n}\n\nif (typeof(actions) === 'undefined') {\n  // associations between input property names\n  // and position update actions,\n  // input can be supplied using an Asset\n  // with joystick event channels\n  actions = {\n    'up_release' : function () {\n      // decrease y coordinate\n      state.dy = -1\n    },\n    'down_release' : function () {\n      // increase y coordinate\n      state.dy = 1\n    },\n    'left_release' : function () {\n      // decrease x coordinate\n      state.dx = -1\n    },\n    'right_release' : function () {\n      // increase x coordinate\n      state.dx = 1\n    }\n  }\n}\n\nif (input.records.length) {\n  var input = input.records[0]\n  var update = false\n\n  for (var prop in input) {\n    var action = actions[prop]\n    // if there is an action associated with the received property, execute it\n    if (action) {\n      action()\n      // request framebuffer update\n      update = true\n    }\n  }\n\n  if (update) {\n    // framebuffer update requested\n    // clear old pixel\n    state.fb[state.y*FB_SIZE + state.x] = 0\n    // compute new pixel position\n    state.x = (state.x + state.dx + FB_SIZE) % FB_SIZE\n    state.y = (state.y + state.dy + FB_SIZE) % FB_SIZE\n    // set new pixel\n    state.fb[state.y*FB_SIZE + state.x] = 1\n    // clear deltas\n    state.dx=0\n    state.dy=0\n    // emit record\n    output.add(state.outRecord)\n  }\n}\n
"},{"location":"connect-field-devices/sensehat-driver/#using-rgb565-framebuffer","title":"Using RGB565 framebuffer","text":"
  1. Open the Wires section of the Kura Web UI.
  2. Create the Asset described in the LED Matrix section.
  3. Create a Script Filter and paste the code below in the script field.
  4. Create a Timer that ticks every 16 milliseconds.
  5. Connect the Timer to the input port of the Script Filter, and the output port of the Script filter to the framebuffer Asset.
  6. The framebuffer should now display an animation, the animation can be changed by modifying the wave parameters and setting script.context.drop to false.
var FB_SIZE = 8\nvar BYTES_PER_PIXEL = 2\n\nif (typeof(state) === 'undefined') {\n  // framebuffer as RGB565 byte array\n  var fb = newByteArray(FB_SIZE * FB_SIZE * BYTES_PER_PIXEL | 0)\n  // record to be emitted for updating the fb\n  var outRecord = newWireRecord()\n  // property in emitted record containing fb data\n  // change the name if needed\n  // must match the name of a channel configured as LED_MATRIX_FB_565\n  outRecord['fb_rgb565'] = newByteArrayValue(fb)\n\n  // framebuffer array and output record\n  state = {\n    fb: fb,\n    outRecord: outRecord,\n  }\n\n  RMASK = ((1 << 5) - 1)\n  GMASK =  ((1 << 6) - 1)\n  BMASK = RMASK\n\n  // converts the r, g, b values provided as a floating point\n  // number between 0 and 1 to RGB565 and stores the result\n  // inside the output array\n  function putPixel(off, r, g, b) {\n    var _r = Math.floor(r * RMASK) & 0xff\n    var _g = Math.floor(g * GMASK) & 0xff\n    var _b = Math.floor(b * BMASK) & 0xff\n\n    var b0 = (_r << 3 | _g >> 3)\n    var b1 = (_g << 5 | _b)\n\n    state.fb[off + 1] = b0\n    state.fb[off] = b1\n  }\n\n  // parameters for 3 sin waves, one per color component\n  RED_WAVE_PARAMS = {\n    a: 5,\n    b: 10,\n    c: 10,\n    d: 0\n  }\n\n  GREEN_WAVE_PARAMS = {\n    a: 5,\n    b: 10,\n    c: 10,\n    d: 1\n  }\n\n  BLUE_WAVE_PARAMS = {\n    a: 5,\n    b: 10,\n    c: 10,\n    d: 2\n  }\n\n  function wave(x, y, t, params) {\n    return Math.abs(Math.sin(2*Math.PI*(t + x/params.b + y/params.c + params.d)/params.a))\n  }\n}\n\nvar t = new Date().getTime() / 1000\n\nvar off = 0\nfor (var y = 0; y < FB_SIZE; y++)\n  for (var x = 0; x < FB_SIZE; x++) {\n    var r = wave(x, y, t, RED_WAVE_PARAMS)\n    var g = wave(x, y, t, GREEN_WAVE_PARAMS)\n    var b = wave(x, y, t, BLUE_WAVE_PARAMS)\n    putPixel(off, r, g, b)\n    off += 2\n  }\n\noutput.add(state.outRecord)\n
"},{"location":"connect-field-devices/sensortag-driver/","title":"TI SensorTag Driver","text":"

Eclipse Kura provides a specific driver that can be used to interact with Texas Instruments SensorTag devices. It can be used in the Wires framework, the Asset model or directly using the Driver itself.

Warning

The SensorTag driver can be used only with TI SensorTags with firmware version >1.20. If your device has an older firmware, please update it.

"},{"location":"connect-field-devices/sensortag-driver/#features","title":"Features","text":"

The SensorTag Driver can be used to get the values from all the sensor installed on the tag (both in polling mode and notification):

  • ambient and target temperature
  • humidity
  • pressure
  • three-axis acceleration
  • three-axis magnetic field
  • three-axis orientation
  • light
  • push buttons

Moreover, the following resources can be written by the driver: - read and green leds - buzzer

When a notification is enabled for a specific channel (sensor), the notification period can be set.

"},{"location":"connect-field-devices/sensortag-driver/#installation","title":"Installation","text":"

As the other Drivers supported by Kura, it is distributed as a deployment package on the Eclipse Marketplace here and here. It can be installed following the instructions provided here.

"},{"location":"connect-field-devices/sensortag-driver/#instance-creation","title":"Instance creation","text":"

A new TiSensorTag Driver instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.ble.sensortag factory must be selected and a unique name must be provided for the new instance. Once instantiated, the SensorTag Driver has to be configured setting the Bluetooth interface name (i.e. hci0) that will be used to connect to the device.

"},{"location":"connect-field-devices/sensortag-driver/#channel-configuration","title":"Channel configuration","text":"

The SensorTag Driver channel can be configured with the following parameters:

  • enabled: it allows to enable/disable the channel. If it isn't selected the channel will be ignored.
  • name: the channel name.
  • type: the channel type, (READ, WRITE, or READ_WRITE).
  • value.type: the Java type of the channel value. The value read by the Driver will be converted to the value.type. Conversely, in write operations the Driver will accept value of this kind.
  • listen: when selected, a listener will be attached to this channel. Any event on the channel will be reported using a callback and the value will be emitted.
  • sensortag.address: the address of the specific SensorTag (i.e. aa:bb:cc:dd:ee:ff)
  • sensor.name: the name of the sensor. It can be selected from a drop-down list
  • notification.period: the period in milliseconds used to receive notification for a specific sensor. The value will be ignored it the listen option is not checked.
"},{"location":"connect-field-devices/xdk-driver/","title":"Xdk Driver","text":"

Eclipse Kura provides a specific driver that can be used to interact with Bosch Xdk110 devices. The driver is available only for gateways that support the new Bluetooth LE APIs. It can be used in to the Wires framework, the Asset model or directly using the Driver itself.

Info

The Xdk driver can only be used with Xdk110 with VirtualXdkDemo installed and with firmware version > 3.5.0. If your device has an older firmware, please update it.

"},{"location":"connect-field-devices/xdk-driver/#features","title":"Features","text":"

The Xdk Driver can be used to get the values from all the sensor provider by the xdk110 (both in polling mode and notification):

  • three-axis acceleration (or four-axis quaternion rappresentation)
  • three-axis gyroscope (or four-axis quaternion rappresentation)
  • light
  • noise
  • pressure
  • ambient temperature
  • humidity
  • sd-card detect status
  • push buttons
  • three-axis magnetic field
  • magnetometer resistence
  • led status
  • rms voltage of LEM sensor
Resource Unit Description ACCELERATION_X, ACCELERATION_Y, ACCELERATION_Z G The proper acceleration for each axis* GYROSCOPE_X, GYROSCOPE_Y, GYROSCOPE_Z rad/S The angular acceleration for each axis* LIGHT lux The light value NOISE DpSpl The acustic pressure value PRESSURE Pa The pressure value TEMPERATURE C The temperature value HUMIDITY %rH The relative humidity SD_CARD_DETECTION_STATUS boolean SD-Card detect status PUSH_BUTTONS bit Button status, encoded as bit field: Bit 0, Button 1; Bit 1, Button 2 MAGNETOMETER_X, MAGNETOMETER_Y, MAGNETOMETERE_Z uT The magnetometer value for each axis MAGNETOMETER_RESISTENCE ohm The magnetometer resistence value LED_STATUS bit Led status, encoded as a bit field: Bit 0: yellow Led; Bit 1: orange Led; Bit 2: red Led VOLTAGE_LEM mV RMS voltage of LEM sensor

*If the Quaternion rappresentation is selected, then:

Resource Unit Description QUATERNION_M, QUATERNION_X, QUATERNION_Y, QUATERNION_Z number The rotation-quaternion for each axis

When a notification is enabled for a specific channel (sensor), the notification period can't be set. Use the Timer in Wire Graph to set polling.

"},{"location":"connect-field-devices/xdk-driver/#documentation","title":"Documentation","text":"

All the information regarding the Xdk110 is available in the Xdk Bosch Connectivity here website. The XDK-Workbench is the tool that can be used to develop software for the Xdk110. It can be downloaded from here. XDK-Workbench is required to install VirtualXdkDemo.

Warning

We found connection problems with Xdk, probably due to issues with XDK-Workbench version 3.6.0. We recommend installing version 3.5.0.

The Virtual XDK application user guide contains all the information regarding the XDK110 UUIDs and data formats here.

Info

To switch between quaternion and sensor representation, the XDK110 needs to be instructed using the 55b741d5-7ada-11e4-82f8-0800200c9a66 UUID. Set it to 0x01 to enable Quaternions.

If quaternion representation is enabled, the data format is as follows:

Bytes Data Type 0,1,2 & 3 Rotation Quaternion M float 4,5,6 & 7 Rotation Quaternion X float 8,9,10 & 11 Rotation Quaternion Y float 12,13,14 & 15 Rotation Quaternion Z float"},{"location":"connect-field-devices/xdk-driver/#installation","title":"Installation","text":"

As the others Drivers supported by Kura, it is distributed as a deployment package on the Eclipse Marketplace here. It can be installed following the instructions provided here.

"},{"location":"connect-field-devices/xdk-driver/#instance-creation","title":"Instance creation","text":"

A new Xdk Driver instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.ble.xdk factory must be selected and a unique name must be provided for the new instance. Once instantiated, the Xdk Driver has to be configured setting the Bluetooth interface name (i.e. hci0). Other options available are related to the quaternion/sensor representation and the sensor sampling rate (in Hz).

"},{"location":"connect-field-devices/xdk-driver/#channel-configuration","title":"Channel configuration","text":"

The Xdk Driver channel can be configured with the following parameters:

  • enabled: it allows to enable/disable the channel. If it isn't selected the channel will be ignored.
  • name: the channel name.

  • type: the channel type, (READ, WRITE, or READ_WRITE).

    Warning

    The Xdk driver can only be used with READ.

  • value.type: the Java type of the channel value. The value read by the Driver will be converted to the value.type.

  • listen: when selected, a listener will be attached to this channel. Any event on the channel will be reported using a callback and the value will be emitted.
  • xdk.address: the address of the specific xdk (i.e. aa:bb:cc:dd:ee:ff)
  • sensor.name: the name of the sensor. It can be selected from a drop-down list.
"},{"location":"core-services/active-mq-artemis-broker/","title":"ActiveMQ Artemis MQTT Broker","text":"

Apart from using the simple ActiveMQ-7 MQTT instance available in the Simple Artemis MQTT Broker Service, this service allows to configure, in a more detailed way, the characteristics of the ActiveMQ-7 broker instance running in Kura.

This service exposes the following configuration parameters:

  • Enabled - (Required) - Enables the broker instance
  • Broker XML - Broker XML configuration. An empty broker configuration will disable the broker.
  • Required protocols - A comma seperated list of all required protocol factories (e.g. AMQP or MQTT)
  • User configuration - (Required) - User configuration in the format: user=password|role1,role2,...
  • Default user name - The name of the default user

Please refer to the official documentation for more details on how to configure the ActiveMQ broker service.

"},{"location":"core-services/active-mq-artemis-broker/#service-usage-example","title":"Service Usage Example","text":"

Setting the Broker XML field as follows:

<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\n<configuration xmlns=\"urn:activemq\"\nxmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"\nxsi:schemaLocation=\"\nurn:activemq https://raw.githubusercontent.com/apache/activemq-artemis/master/artemis-server/src/main/resources/schema/artemis-server.xsd\nurn:activemq:core https://raw.githubusercontent.com/apache/activemq-artemis/master/artemis-server/src/main/resources/schema/artemis-configuration.xsd\nurn:activemq:jms https://raw.githubusercontent.com/apache/activemq-artemis/master/artemis-jms-server/src/main/resources/schema/artemis-jms.xsd\n\">\n\n    <core xmlns=\"urn:activemq:core\">\n        <persistence-enabled>false</persistence-enabled>\n\n        <acceptors>\n            <acceptor name=\"netty-acceptor\">tcp://localhost:61616</acceptor>\n            <acceptor name=\"amqp-acceptor\">tcp://localhost:5672?protocols=AMQP</acceptor>\n            <acceptor name=\"mqtt-acceptor\">tcp://localhost:1883?protocols=MQTT</acceptor>\n        </acceptors>\n\n        <resolve-protocols>false</resolve-protocols>\n\n        <security-settings>\n        <!-- WARNING: this is only for testing and completely insecure -->\n            <security-setting match=\"#\">\n                <permission type=\"createDurableQueue\" roles=\"guest\"/>\n                <permission type=\"deleteDurableQueue\" roles=\"guest\"/>\n                <permission type=\"createNonDurableQueue\" roles=\"guest\"/>\n                <permission type=\"deleteNonDurableQueue\" roles=\"guest\"/>\n                <permission type=\"consume\" roles=\"guest\"/>\n                <permission type=\"send\" roles=\"guest\"/>\n            </security-setting>\n        </security-settings>\n\n    </core>\n\n    <jms xmlns=\"urn:activemq:jms\">\n    <topic name=\"TEST.T.1\" />\n    </jms>\n\n</configuration>\n

the User configuration to:

guest=test12|guest\n

while setting the Default user name to:

guest\n

will determine that the TCP ports 1883, 5672 and 61616 are now open (you can verify that via netstat -antup).

Configuring the MqttDataTransport in System -> Cloud Services -> MqttDataTransport to use:

  • broker-url - mqtt://localhost:1883
  • username - guest
  • password - test12

Clicking on the Connect button will result in a successful connection of Kura cloud service to the ActiveMQ-7 MQTT broker.

Note

The XML configuration above only allows connections originating from the gateway itself. In order to allow external connection the bind URLs specified using the acceptor tag must be modified by specifying an external accessible address instead of localhost. If the bind address is set to 0.0.0.0, the broker will listen on all available addresses.

"},{"location":"core-services/clock-service/","title":"Clock Service","text":"

The ClockService handles the date and time management of the system. If enabled, it tries to update the system date and time using a Network Time Protocol (NTP) server. NTP can use NTS as authentication mechanism through chrony.

"},{"location":"core-services/clock-service/#service-configuration","title":"Service Configuration","text":"

To manage the system date and time, select the ClockService option located in the Services area as shown in the screen capture below.

The ClockService provides the following configuration parameters:

  • enabled: sets whether or not this service is enabled or disabled (Required field).

  • clock.set.hwclock: defines if the hardware clock of the gateway must be synced after the system time is set. If enabled, the service calls the Linux command hwclock --utc --systohc.

  • clock.provider: specifies one among Java NTP client (java-ntp), Linux chrony command (chrony-advanced), Linux ntpdate command (ntpd) (Required field). If chrony-advanced is used, Kura will not change system and/or hardware clock directly, delegating these operations to chrony.

  • clock.ntp.host: sets a valid NTP server host address.

  • clock.ntp.port: sets a valid NTP port number (not supported by ntpd, use the port 123 in that case).

  • clock.ntp.timeout: specifies the NTP timeout in milliseconds.

  • clock.ntp.max-retry: defines the number of retries when a sync fails (retry at every minute). Subsequently, the next retry occurs on the next refresh interval.

  • clock.ntp.retry.interval: defines the interval in seconds between each retry when a sync fails. If the clock.ntp.refresh-interval parameter is less than zero, there is no update. If the clock.ntp.refresh-interval parameter is equal to zero, there is only one try at startup (Required field).

  • clock.ntp.refresh-interval: defines the frequency (in seconds) at which the service tries to sync the clock. Note that at the start of Kura, when the ClockService is enabled, it tries to sync the clock every minute until it is successful. After a successful sync, this operation is performed at the frequency defined by this parameter. If the value is less than zero, there is no update. If the value is equal to zero, syncs only once at startup.

  • chrony.advanced.config: specifies the content of the chrony configuration file. If this field is left blank, the default system configuration will be used. All fields above will be ignored. To obtain the hardware clock synchronization the directive rtcsync could be used. The rtcsync directive provides the hardware clock synchronization made by the linux kernel every 11 minutes. For further information reference the chrony website.

Two example configuration are shown below.

"},{"location":"core-services/clock-service/#nts-secure-configuration-example","title":"NTS Secure configuration example","text":"
server time.cloudflare.com iburst nts\nserver nts.sth1.ntp.se iburst nts\nserver nts.sth2.ntp.se iburst nts\n\nsourcedir /etc/chrony/sources.d\n\ndriftfile /var/lib/chrony/chrony.drift\n\nlogdir /var/log/chrony\n\nmaxupdateskew 100.0\n\nrtcsync\n\nmakestep 1 -1\n\nleapsectz right/UTC\n

Note

If the system stays disconnected from the network for a long time or if the backup battery is not working properly or is depleted, there is the possibility of a synchronization failure due to the client inability to verify the server certificates.

If this happens and no counter action has been taken in the chrony configuration file, the risk is that the gateway will be unable to synchronise again its date and therefore will not be able to connect to the cloud and/or be fully operational.

A possible way to prevent this issue is to temporary disable the certificate verification using the directive nocerttimecheck. This directory will disable the security checks of the activation and expiration times of certificates for the specified number of clock updates and should be used with caution due to the important security implications.

As reported by the official Chrony documentation, disabling the time checks has important security implications and should be used only as a last resort, preferably with a minimal number of trusted certificates. The default value is 0, which means the time checks are always enabled.

An example of the directive is nocerttimecheck 1 This would disable the time checks until the clock is updated for the first time, assuming the first update corrects the clock and later checks can work with correct time.

"},{"location":"core-services/clock-service/#simple-configuration-example","title":"Simple configuration example","text":"
# Use public NTP servers from the pool.ntp.org project.\npool pool.ntp.org iburst\n\n# Record the rate at which the system clock gains/losses time.\ndriftfile /var/lib/chrony/drift\n\n# Allow the system clock to be stepped in the first three updates\n# if its offset is larger than 1 second.\nmakestep 1 -1\n\n# Enable kernel synchronization of the real-time clock (RTC).\nrtcsync\n
"},{"location":"core-services/command-service/","title":"Command Service","text":"

The Command Service provides methods for running system commands from the Kura web console or from Kapua. In the Kura web console, the service is available clicking on the Command tab under the Device section, while for the cloud platform please refer to the official documentation.

To run a command simply fill the Execute field with the command and click the Execute button. The service also provides the ability for a script to execute using the File option of the Command tab in the Kura web console or the Kapua Cloud Console. This script must be compressed into a zip file with the eventual, associated resource files.

Once the file is selected and Execute is clicked, the zip file is sent embedded in an MQTT message on the device. The Command Service in the device stores the file in /tmp, unzips it, and tries to execute a shell script if one is present in the file. Note that in this case, the Execute parameter cannot be empty; a simple command, such as ls -l /tmp, may be entered.

Warning

When decompressed, the script loses its executable attribute. To fix this problem, if you plan to execute a script, the command entered into the Execute line must trigger the execution: ** bash [name of the script] **.

The configuration of the service is in the CommandService tab located in the Services area as shown in the screen capture below.

The Command Service provides the following configuration parameters:

  • Command Enable: sets whether this service is enabled or disabled in the cloud platform (Required field).

  • Command Password Value: sets a password to protect this service.

  • Command Working Directory: specifies the working directory where the command execution is performed.

  • Command Timeout: sets the timeout (in seconds) for the command execution.

  • Command Environment: supplies a space-separated list of environment variables in the format key=value.

  • Privileged/Unprivileged Command Service Selection: sets the modality of the command service. When set to privileged, the commands are run using the (privileged) user that started Kura, tipically kurad or root. When set to unprivileged, a standard user will run the commands.

When a command execution is requested in the cloud platform, it sends an MQTT control message to the device requesting that the command be executed. On the device, the Command Service opens a temporary shell in the command.working.directory, sets the command.environment variables (if any), and waits command.timeout seconds to get command response.

"},{"location":"core-services/configuration-service/","title":"Configuration Service","text":"

The Configuration Service is responsible to manage the framework configuration by creating and persisting the framework snapshot. Built on top of the OSGi Configuration Admin and Metatype services, it is also responsible to track and manage the creation and deletion of service instances as well as OSGi component factories.

The ConfigurationService is accessible using the following REST APIs and cloud request handlers:

  • Configuration v1 REST APIs (deprecated) and CONF-V1 MQTT Request Handler (deprecated)
  • Configuration v2 REST APIs and CONF-V2 MQTT Request Handler
"},{"location":"core-services/container-orchestration-image-auth/","title":"Eclipse Eclipse Kura Container Image Authenticity and Allowlist Enforcement feature","text":"

Containerized applications are becoming increasingly popular in the software ecosystem as a way to deploy and distribute applications. As a result, ensuring the security of software supply chains has become a critical concern. Implementing best practices, such as signing and verifying images to mitigate man-in-the-middle (MITM) attacks and validating their authenticity and freshness, play a pivotal role in safeguarding the integrity of the software supply chain.

To ensure the authenticity and integrity of the code within the container images, binding the image to a specific entity or organization via signature verification is crucial and increasingly common.

The purpose of this document is to provide a high-level understanding of the Eclipse Kura container authenticity and allowlist enforcement feature introduced with Eclipse Kura version 5.5.0.

"},{"location":"core-services/container-orchestration-image-auth/#high-level-flow","title":"High-level flow","text":"

The Eclipse Kura container authenticity and allowlist enforcement feature is designed to address container authenticity concerns by providing a mechanism to perform the signature verification of container images and restricting which container images can be deployed on the Eclipse Kura instance.

This is achieved by implementing the following flow:

Description of the flow:

  • Monitoring: Eclipse Kura monitors the container engine events. When a \"container start\" event is triggered it intercepts the information regarding the image used to spin up the container and starts performing the container authenticity checks.
  • Allowlist: Firstly, it checks if the digest of the image used to run the container can be found in the Eclipse Kura allowlist. If so, the container is allowed to run. If not, Eclipse Kura proceeds with the image signature verification.
  • Signature verification: If no trust anchor (i.e. a public key or a X509 certificate depending on the signature mechanism) is available for the verification process to happen, the container is not allowed to run. If one is available, the image signature is verified and the allowlist is updated accordingly.

This flow applies to both containers managed by Eclipse Kura itself and containers ran directly by the user via CLI, allowing for a fine-grained control over the container images that can be deployed on the Eclipse Kura instance.

  • Unmanaged containers: Eclipse Kura allows the user to define a list of container images that can be deployed on the platform. This is done by adding the image digests to the allowlist. When a container is started, Eclipse Kura checks if the image digest is in the allowlist and, if so, allows the container to run. This is meant to be used by users who, for any reason, need to run a container outside the Eclipse Kura framework but still want the safety guarantees provided by pinning the images to a specific digest.
  • Managed containers: For containers ran by the framework, Eclipse Kura also allows the user to provide a trust anchor to be used for the signature verification process. This allows the user to use a mutable tag when specifying the container image, without giving up the required authenticity checks. Once the image is verified, its digest is stored within the Eclipse Kura allowlist, permitting it to be ran both from Eclipse Kura and the CLI without the need for an Internet connection. When a new image is published, the user can simply trigger the pull. The verification process will update the digest automatically.

Note that the user can still directly provide an image digest when running an Eclipse Kura-managed container. This will prevent the Eclipse Kura automatic signature verification process to run. This feature is meant to be used when:

  • the user already ensured the image authenticity and does not want to go through the verification process again
  • the image was not signed but the user still wants the enforcement trust guarantees provided by Eclipse Kura
"},{"location":"core-services/container-orchestration-image-auth/#unmanaged-containers","title":"Unmanaged containers","text":"

Regarding the containers not managed by Eclipse Kura, the Container Orchestration service provides a security feature which enforces the containers allowed to run on the system. This feature can be enabled or disabled through the Allowlist Enforcement Enabled option.

This mechanism leverages the concept of digest, which is a unique and immutable identifier for a container image: it is therefore an excellent mean to identify the image from which a container was created.

Given the above, Eclipse Kura allows the user to provide a list of container image digests in the Container Image Allowlist field, in the form of newline-separated strings: when a container is started on the host system (whether it is launched by Eclipse Kura or by a terminal CLI), Eclipse Kura retrieves the image from which the container was created, extracts the digest and verifies that it is present in the allowlist provided during service configuration.

If the image digest is present and matches the container's one, it is then allowed to run without interference. Otherwise, it is immediately stopped and deleted from the host system.

A similar behaviour is performed at Eclipse Kura startup or when the enforcement is enabled at runtime: if there are already containers on the device (whether they are started or stopped) and the enforcement is activated, Eclipse Kura extracts the digests from the containers and compares them with those in the allowlist. Containers that have been created from images whose digests are in the allowlist will be left running, otherwise they will be stopped and deleted from the descriptors list.

The verification is performed by intersecting the list of digests extracted by the containers and the one provided in the configuration: in this way, an empty intersection will result in a failing verification, while a non-empty one means that the image digests is equal to one of the allowlist entries.

"},{"location":"core-services/container-orchestration-image-auth/#example-scenarios","title":"Example scenarios","text":"

A user wants to leverage the container enforcement in order to let only docker containers started from an image named foo_image to be run on the device. To do this, they should enable the Container Enforcement by setting the Allowlist Enforcement Enabled to true, and fill the Container Image Allowlist field with the digest of the foo_image docker image (i.e.sha256:0000000000000000000000000000000000000000000000000000000000000000 in the example below).

"},{"location":"core-services/container-orchestration-image-auth/#startup-of-the-enforcement-feature","title":"Startup of the Enforcement Feature","text":"

Let's suppose that on the device there are already two containers running, one created from the foo_image an one from an image named unwanted_image with digest sha256:9999999999999999999999999999999999999999999999999999999999999999. Once the enforcement starts with the configuration previously described, it extracts the digests of both containers and checks if they're included in the provided allowlist: in this case, the container originating from the foo_image will be allowed to run, while the one created from the unwanted_image will be stopped and deleted, because its digest is not included in the allowlist.

The same happens also for already stopped containers: if the digests is verified, they'll be left in the descriptors list in the Stopped state, otherwise they'll be deleted.

"},{"location":"core-services/container-orchestration-image-auth/#running-container-after-enforcement-feature-startup","title":"Running Container After Enforcement Feature Startup","text":"

After the starting phase just described, Eclipse Kura will continuously monitor the activity of the docker engine. Whenever a container is started on the device, it will check the image digest from which the container was created, comparing it to the ones inside the allowlist: if the container is created from the foo_image docker image, it will be allowed to start, otherwise it will be stopped and deleted. If the user wants to add more than one allowed image, for example one named wanted_image with digest sha256:1111111111111111111111111111111111111111111111111111111111111111), it just needs to add it to the newline-separated list.

"},{"location":"core-services/container-orchestration-image-auth/#managed-containers","title":"Managed containers","text":"

As explained in the previous section, Managed Containers (i.e. org.eclipse.kura.container.provider.ContainerInstances) support Container Signature validation. To do so a new API has been introduced: the ContainerSignatureValidationService.

Currently, there are three main mechanism for container signature verification:

  • Docker Content Trust (DCT) a.k.a. Notary V1
  • Notation a.k.a. Notary V2
  • Sigstore's Cosign

This newly introduced service allows Eclipse Kura to have multiple different Services implementing this interface and, thus, support all major signature mechanisms. A reference implementation for the ContainerSignatureValidationService is the DummyContainerSignatureValidationService available in Kura examples folder for anyone wanting to implement an alternative ContainerSignatureValidationService.

When a ContainerSignatureValidationService is installed on Eclipse Kura, it gets automatically registered among the available validators and will be used to perform the signature validation. Under the hood, the ContainerInstance has a list of the available ContainerSignatureValidationService providers that, upon receiving a configuration update, it interrogates to check whether the requested container image is authentic using the provided Trust Anchor.

  • If even only one service reports the signature as valid, the image signature is considered valid.
  • If none of the available services reports the signature as valid, the image signature is considered not valid.

This means that Eclipse Kura doesn't need to prompt the user for selecting the correct ContainerSignatureValidationService when performing the check.

Once the image signature is validated, the image digest is stored in the Eclipse Kura snapshot and added to the ContainerOrchestratorService allowlist (see section above). A container whose image digest is available in the allowlist won't be validated again, therefore after the initial check, the internet connection is no longer required for it to work.

"},{"location":"core-services/container-orchestration-image-auth/#example-scenarios_1","title":"Example Scenarios","text":""},{"location":"core-services/container-orchestration-image-auth/#container-instance-digest","title":"Container Instance Digest","text":"

Let's suppose to have a device on which Eclipse Eclipse Kura is running with the Container Orchestration Service enabled, its Enforcement feature disabled and a Container Instance named test-container up and running on the system.

A user wants to activate the Enforcement feature, so it enables the Allowlist Enforcement Enabled option in the Container Orchestration Service, but leaves the Container Image Allowlist option blank because it wants that no containers are started outside the framework.

As the feature starts, it checks all the container running on the device, including the test-container, which will be stopped and deleted: this happens because the container digest is not included in the Container Orchestration Service Allowlist and the Container Instance is not providing any information through its Container Image Enforcement Digest option.

In order to allow the Container Instance, the user should provide the correct digest in the instance settings. Let's suppose that the digest of the image from which the container is created is sha256:0000000000000000000000000000000000000000000000000000000000000000 and that the user fills the corresponding option with it: once the Container Instance is updated, the provided digest is included in the Enforcement feature allowlist, so the container will be allowed to run without interference. This case can be summarised as:

Once the instance digest is added to the enforcement feature, it can be used also to authorise container run by the Command Line Interface, or other instances on Eclipse Eclipse Eclipse Kura without providing the digest option. But what happen if the Container Instance is disabled? The aim of the Container Instance Enforcement Digest is to be used as an authorization method of the instance itself: this means that its digest is added to the enforcement feature allowlist only if the instance is enabled.

As it can be seen from the image, the merged Enforcement Allowlist box doesn't contain the digest associated to the Container Instance, because, being it disabled, the corresponding digest is ignored. If the enforcement is enabled and a container with digest DIGEST Z is started, it will then be stopped and deleted, because its digest won't be included in the allowlist.

Finally, everytime a Container Image Enforcement Digest option is modified, or the ContainerInstance is disabled or deleted, the enforcement feature will perform a check on all the already running containers. This is done because, if the digest that was previously provided has changed after an instance update, or removed due to disabling or deleting the instance, those containers that were previously authorised by this digest are no longer allowed to run. So they must be stopped and deleted.

Warning

The digests provided through Container Instances allow running also container started by the CommandLineInterface or by other Container Instances in the framework, even without providing the digest.

It has to be considered that, if the ContainerInstance is disabled (or its digest option changes), the enforcement feature will stop and delete the containers that are no longer matching the provided digest.

The user needs to be careful, then, to rely only on the digests set in the ContainerInstances options. If the user will need to run containers from the CLI, it is preferable to use the allowlist of the Container Orchestration Service. For the Container Instances, is a good practise to provide a digest.

"},{"location":"core-services/container-orchestration-image-auth/#container-signature-verification","title":"Container Signature Verification","text":"

If the Container Image Enforcement Digest option is not provided, Eclipse Eclipse Kura will proceed with the Signature Verification: this process tries to extract the digest of the image from which the container was started.

Let's then suppose that we are back at the beginning of the previous example, with a blank Container Orchestration Service allowlist and a not given Container Instance Digest, but this time a Trust Anchor option is given: in this case Eclipse Eclipse Kura will start the Signature Verification Process, in order to extract the digest.

If, for whatever reason, the Signature Verification fails, no digests will be added to the allowlist: if the enforcement feature is enabled, the started container will be then stopped and deleted by the Enforcement Monitor, because no digests are included in the final Enforcement Allowlist.

While, if the procedure completes correctly, the extracted digest will be added to the Enforcement Allowlist and written in the snapshot: in this way the container will pass the enforcement feature check, and the obtained digest will be stored as part of the Container Instance's configuration just started.

If the user wants to check again the digest through the Signature Verification Service, it just needs to erase the Container Image Enforcement Digest option from the configuration of the Container Instance: in this way the Signature feature will be triggered again and the digest recalculated.

Warning

Even in this situation, the digest could be used to authenticate container started from the CommandLineInterface: also in this case keep in mind that if the Container Instance is disabled, stopped or updated with different digest, those CLI-based container could be stopped and deleted.

"},{"location":"core-services/container-orchestration-provider-apis/","title":"Container Orchestration Provider APIs","text":""},{"location":"core-services/container-orchestration-provider-apis/#java-api","title":"Java API","text":""},{"location":"core-services/container-orchestration-provider-apis/#containerorchestrationservice","title":"ContainerOrchestrationService","text":"

The ContainerOrchestrationService is used to directly communicate with the running container engine. It exposes methods for listing, creating, and stopping containers. This class utilizes an instantiated ContainerConfiguration object as a parameter for container creation.

"},{"location":"core-services/container-orchestration-provider-apis/#containerconfiguration","title":"ContainerConfiguration","text":"

The ContainerConfiguration class, allows you to define a container to create. Using the embedded builder class, one can define many container-related parameters such as name, image, ports and volume mounts.

"},{"location":"core-services/container-orchestration-provider-apis/#containerinstancedescriptor","title":"ContainerInstanceDescriptor","text":"

The ContainerInstanceDescriptor class is used to describe a container that has already been created. This class contains runtime information such as the ID of the container.

"},{"location":"core-services/container-orchestration-provider-apis/#containerstate","title":"ContainerState","text":"

The ContainerState is a class that exposes an enum of container states tracked by the framework.

"},{"location":"core-services/container-orchestration-provider-apis/#passwordregistrycredentials","title":"PasswordRegistryCredentials","text":"

The PasswordRegistryCredentials class stores password credentials when provisioning a container to pull from an alternative password-protected registry.

"},{"location":"core-services/container-orchestration-provider-apis/#passwordregistrycredentials_1","title":"PasswordRegistryCredentials","text":"

The PasswordRegistryCredentials class stores password credentials when provisioning a container to pull from an alternative password-protected registry.

Note

The Container Orchestration Provider exports an MQTT-Namespace API. This API can be used to manage containers via MQTT requests from external applications. Please visit the Remote Gateway Inventory via MQTT documentation for more information.

"},{"location":"core-services/container-orchestration-provider-authenticated-registries/","title":"Container Orchestration Provider Authenticated Registries","text":"

The Container Orchestrator provider allows the user to pull images from private and password-protected registries. The following document will provide examples of how to connect to some popular registries.

Note

These guides make the following two assumptions.

  1. That you have already configured the Container Orchestrator and have a container instance already created. Please see the usage doc, to learn the basics of the orchestrator.
  2. That the image you are trying to pull supports the architecture of the gateway.
"},{"location":"core-services/container-orchestration-provider-authenticated-registries/#private-docker-hub-registries","title":"Private Docker-Hub Registries","text":""},{"location":"core-services/container-orchestration-provider-authenticated-registries/#preparation","title":"Preparation:","text":"
  • have a Docker Hub account (its credentials), and a private image ready to pull.
"},{"location":"core-services/container-orchestration-provider-authenticated-registries/#procedure","title":"Procedure:","text":"
  1. Populate the image name field. The username containing the private image must be placed before the image name separated by a forward slash. This is demonstrated below:

  2. **Image Name: ** <Docker-Hub username>/<image name> for exampleeclipse/kura.

  3. Populate the credential fields:

  4. Authentication Registry URL: This field should be left blank.
  5. Authentication Username: Your Docker Hub username.
  6. Password: Your Docker Hub password.

"},{"location":"core-services/container-orchestration-provider-authenticated-registries/#amazon-web-services-elastic-container-registries-aws-ecr","title":"Amazon Web Services - Elastic Container Registries (AWS-ECR)","text":""},{"location":"core-services/container-orchestration-provider-authenticated-registries/#preparation_1","title":"Preparation:","text":"
  • Have access to an Amazon ECR instance.
  • Have the AWS-CLI tool installed and appropriately configured on your computer.
  • Have access to your AWS ECR web console.
"},{"location":"core-services/container-orchestration-provider-authenticated-registries/#procedure_1","title":"Procedure:","text":"

  1. Sign in to your amazon web console, navigate to ECR and identify which container you will like to pull onto the gateway. Copy the URI of the container. This URI will reveal the information required for the following steps. Here is how to decode the URI <identifier>.dkr.ecr.<ecr-region>.amazonaws.com/<directory>/<image name>:<image tag>.

  2. Generating an AWS-ECR access password. Open a terminal window on the machine with aws-cli installed and enter the following command aws ecr get-login-password --region <ecr-region>. Your ECR region can be found by inspecting the container URI string copied in the previous step. This command will return a long string which will be used as the repo password in the gateway.

  3. Populating information on the gateway.

  4. **Image Name: ** enter the full URI without the tag.<identifier>.dkr.ecr.<ecr-region>.amazonaws.com/<directory>/<image name>
  5. Image Tag: enter only the image tag found at the end of the URI <image tag>
  6. Authentication Registry URL: Paste only the part of the URI before the image name <identifier>.dkr.ecr.<ecr-region>.amazonaws.com/<directory>/
  7. Authentication Username: will be AWS
  8. Password: will be the string created in step two.

A fully configured container set to pull AWS will look like the following.

"},{"location":"core-services/container-orchestration-provider-usage/","title":"Container Orchestration Provider Usage","text":""},{"location":"core-services/container-orchestration-provider-usage/#before-starting","title":"Before Starting","text":"

For this bundle to function appropriately, the gateway must have a supported container engine installed and running. Currently, the only officially supported engine is Docker.

"},{"location":"core-services/container-orchestration-provider-usage/#starting-the-service","title":"Starting the Service","text":"

To use this service select the ContainerOrchestrationService option located in the Services area. The ContainerOrchestrationService provides the following parameters:

  • Enabled--activates the service when set to true
  • Container Engine Host URL--provides a string that tells the service where to find the container engine (best left to the default value).
  • Allowlist Enforcement Enabled--activates the container enforcement of the service, which let only the allowed containers to run
  • Container Image Allowlist Content--the comma-separated list of conainer's digests allowed to be run

"},{"location":"core-services/container-orchestration-provider-usage/#creating-your-first-container","title":"Creating your first container.","text":"

To create a container, select the + icon (Create a new component) under services. A popup dialogue box will appear. In the field Factory select org.eclipse.kura.container.provider.ContainerInstance from the drop-down. Then, use the Name field to specify a name for the container.

Note

The name specified in the 'Name' field will also be the name of the container when it is spun up by the orchestrator.

After pressing submit, a new component will be added under the services tab, with the name that was selected in the dialogue. Select this component to finish configuring the container.

"},{"location":"core-services/container-orchestration-provider-usage/#configuring-the-container","title":"Configuring the container","text":"

To begin configuring the container, look under Services and select the item which has the name set in the previous step. Containers may be configured using the following fields:

  • Enabled - When true, the service will create the defined container. When false the API will not create the container or will destroy the container if already running.

  • Image Name - Describes the image that will be used to create the container. Remember to ensure that the selected image supports the architecture of the host machine, or else the container will not be able to start.

  • Image Tag - Describes the version of the container image that will be used to create the container.

  • Trust Anchor - Trust anchor used to verify the container image Signature Verification

  • Verify in transparency log - Sets the transparency log verification, to be used when a container image signature has been uploaded to the transparency log.

  • Container Image Enforcement Digest - A string representing the digest for the image that will be allowed to run by this container instance (eg: sha256:0000000000000000000000000000000000000000000000000000000000000000). It is used in the Container Enforcement service provided by the Container Orchestration Service.

  • Authentication Registry URL - URL for an alternative registry to pull images from. (If the field is left blank, credentials will be applied to Docker-Hub). Please see the Authenticated Registries document for more information about connecting to different popular registries.

  • Authentication Username - Describes the username to access the container registry entered above.

  • Password - Describes the password to access the alternative container registry.

  • Image Download Retries - Describes the number of retries the framework will attempt to pull the image before giving up.

  • Image Download Retry Interval - Describes the amount of time the framework will wait before attempting to pull the image again.

  • Image Download Timeout - Describes the amount of time the framework will let the image download before timeout.

  • Internal Ports - This field accepts a comma-separated list of ports that will be internally exposed on the spun-up container. In this field, you can also specify which protocol to run at the port by appending a port with a colon and typing in the name of the network protocol. Example: 80, 443:tcp, 8080:udp.

  • External Ports - This field accepts a comma-separated list of ports that will be externally exposed on the host machine.

  • Privileged Mode - This flag if enabled will give the container root capabilities to all devices on the host system. Please be aware that setting this flag can be dangerous, and must only be used in exceptional situations.

  • Environment Variables (optional) - This field accepts a comma-separated list of environment variables, which will be set inside the container when spun up.

  • Entrypoint Override (optional) - This field accepts a comma-separated list which is used to override the command used to start a container. Example: ./test.sh,-v,-d,--human-readable.

  • Memory (optional) - This field allows the configuration of the maximum amount of memory the container can use in bytes. The value is a positive integer, optionally followed by a suffix of b, k, m, g, to indicate bytes, kilobytes, megabytes, or gigabytes. The minimum and default values depends by the native container orchestrator. If left empty, the memory assigned to the container will be set to a default value.

  • CPUs (optional) - This value specifies how many CPUs a container can use. Decimal values are allowed, so if set to 1.5, the container will use at most one and a half cpu resource.

  • GPUs (optional) - This field configures how many Nvidia GPUs a container can use. Allowed values are all or an integer number. If there's no Nvidia GPU installed, leave it empty. The Nvidia Container Toolkit must be installed on the system to correctly configure the service, otherwise the container will not start. If the Nvidia Container Runtime is used, leave the field empty.

  • Volume Mount (optional) - This field accepts a comma-separated list of system-to-container file mounts. This allows for the container to access files on the host machine.

  • Peripheral Device (optional) - This field accepts a comma-separated list of device paths. This parameter allows devices to be passed through from the host to the container.

  • Runtime (optional): Specifies the fully qualified name of an alternate OCI-compatible runtime, which is used to run commands specified by the 'run' instruction. Example: nvidia corresponds to --runtime=nvidia. Note: when using the Nvidia Container Runtime, leave the GPUs field empty. The GPUs available on the system will be accessible from the container by default.

  • Networking Mode (optional) - Use this field to specify what networking mode the container will use. Possible Drivers include: bridge, none, container:{container id}, host. Please note that this field is case-sensitive. This field can also be used to connect to any of the networks listed by the cli command docker network ls.

  • Logger Type - This field provides a drop-down selection of supported container logging drivers.

  • Logger Parameters (optional) - This field accepts a comma-separated list of logging parameters. More information can be found in the container-engine logger documentation, for instance here.

  • Restart Container On Failure - A boolean that tells the container engine to automatically restart the container when it has failed or shut down.

After specifying container parameters, ensure to set Enabled to true and press Apply. The container engine will then pull the respective image, spin up and start the container. If the gateway or the framework is power cycled, and the container and Container Orchestration Service are set to enabled, the framework will automatically start the container again upon startup.

"},{"location":"core-services/container-orchestration-provider-usage/#stopping-the-container","title":"Stopping the container","text":"

Warning

Stopping a container will delete it in an irreversible way. Please be sure to only use stateless containers and/or save their data in external volumes.

To stop the container without deleting the component, set the Enabled field to false, and then press Apply. This will delete the running container, but leave this component available for running the container again in the future. If you want to completely remove the container and component, press the Delete button to the top right of the screen, and press Yes on the confirmation dialogue.

"},{"location":"core-services/container-orchestration-provider-usage/#container-management-dashboard","title":"Container Management Dashboard","text":"

The Container Orchestration service also provides the user with an intuitive container dashboard. This dashboard shows all containers running on a gateway, including containers created with the framework and those created manually through the command-line interface. To utilize this dashboard the org.eclipse.container.orchestration.provider (ContainerOrchestrationService) must be enabled, and the dashboard can be opened by navigating to Device > Containers.

"},{"location":"core-services/container-orchestration-provider/","title":"Container Orchestration Provider","text":"

The Container Orchestration Provider allows Kura to manage Docker. With this tool, you can arbitrarily pull and deploy containerized software packages and run them on your gateway. This Service allows the user to create, configure, start, and stop containers all from the browser. The bundle will also restart containers if the gateway is restarted.

The feature is composed of two bundles, one that exposes APIs for container management and one that implements those APIs. This API is exposed so that you can leverage it to implement containerization in your own Kura plugins.

"},{"location":"core-services/deployment-service/","title":"Deployment Service","text":"

The Deployment Service allows to download files to the gateway and to perform actions on them. In the configuration tab it is possible to specify which is the directory that has to be used to store the downloaded files and the list of actions declared as deployment hooks that will be invoked when a corresponding metric is received with the download request.

The configuration requires to specify two parameters:

  • downloads.directory - The directory to be used to store the downloaded files;
  • deployment.hook.associations - The list of DeploymentHook associations in the form <request_type>=<hook_pid>, where <hook_pid> is the Kura Service Pid of a DeploymentHook instance and <request_type> is the value of the request.type metric received with the request.
"},{"location":"core-services/device-configuration-changes/","title":"Device Configuration Changes","text":"

Kura can detect changes to the components and publish them using a selected Cloud Publisher. There are two main components that enable this:

  • org.eclipse.kura.configuration.change.manager, and
  • org.eclipse.kura.event.publisher

The org.eclipse.kura.configuration.change.manager is responsible for detecting changes to any of the configurations currently running on the system and to publish a notification to a user-defined cloud publisher. By default, the org.eclipse.kura.event.publisher is used.

"},{"location":"core-services/device-configuration-changes/#configuration-change-manager","title":"Configuration Change Manager","text":"

The configuration change manager allows to collection of the PIDs of the components that have changed in the system. The configurable properties of this component are:

  • Enable: whether to enable or not this component.
  • CloudPublisher Target Filter: allows to specify the cloud publisher to use for sending the produced messages.
  • Notification send delay (sec): allows to stack the changed PIDs for a given time before sending. In other words, it allows to group together sequences of PIDs that are changed in that time frame. This is to prevent message flooding at reboot or rollback.

The collected PIDs are sent to the Cloud Publisher as a KuraMessage with a payload body in JSON format. The timestamp of the KuraMessage is set to the last detected configuration change event. An example of message body is:

[\n    {\n        \u201cpid\u201d: \u201corg.eclipse.kura.clock.ClockService\u201d\n    },\n    {\n        \u201cpid\u201d: \u201corg.eclipse.kura.log.filesystem.provider.FilesystemLogProvider\u201d\n    }\n]\n

In the example above, a ClockService update triggered the delay timer, which was then reset by a configuration update on the FilesystemLogProvider. Afterward, no configuration updates reset the timer so the message containing the two PIDs was sent after expiration.

"},{"location":"core-services/device-configuration-changes/#event-publisher","title":"Event Publisher","text":"

By default, the org.eclipse.kura.event.publisher used by the configuration change manager does the actual publishing on a user-defined topic of the form:

$EVT/#account_id/#client_id/CONF/V1/CHANGE

This topic is adjusted for integration with EC, but the $EVT and the CONF/V1/CHANGE parts can be customized according to user needs by tweaking the Topic prefix and Topic properties.

The #account_id and #client_id fields are substituted at runtime with the account name and client ID at the Data Transport Service layer of the associated Cloud Connection.

The Qos, Retain, and Priority properties are the usual ones defined in the standard Cloud Publisher.

"},{"location":"core-services/h2db-service/","title":"H2Db Service","text":"

Kura integrates a Java SQL database named H2. The main features of this SQL Database are:

  • Very fast, open source, JDBC API
  • Embedded and server modes; in-memory databases
  • Browser-based Console application
  • Small footprint
"},{"location":"core-services/h2db-service/#supported-features","title":"Supported Features","text":"

Kura supports the following H2 database features:

  • Persistence modes: The H2 implementation currently supports in-memory and file-based database instances. See the Persistence Modes section for more details.

  • Multiple database instances: It is possible to create and configure multiple database instances from the Kura Administration UI, these instances can be selectively consumed by applications. A default database instance is created automatically.

  • TCP Server: The current implementation allows external processes to access the database instances managed by Kura using TCP. This enables the integration of external applications that can share data with Kura components using the database.

  • Web-based console: It is possible to start the H2 Web console directly from the Kura Administration UI. The console can be used to inspect the database contents and perform arbitrary queries for debug purposes.

  • Basic credential management: The current implementation allows to change the password of the admin DB user from the Kura Administration UI. This allows the access restriction to the existing database instances.

By default, the DataService in Kura uses the H2 database to persist the messages.

"},{"location":"core-services/h2db-service/#limitations","title":"Limitations","text":"

  • Private in-memory instances: Only named in-memory instances are supported (e.g. jdbc:h2:mem:<dbname>, where <dbname> is not the empty string), private instances represented by the jdbc:h2:mem: URL are currently not supported.

  • Remote connections: The current implementation only supports embedded database instances. Connecting to remote instances using the jdbc:h2:tcp:* and jdbc:h2:ssl:* connector URLs is not supported.

Note

The new DbWireRecordFilter and DbWireRecordStore Wire components have been added. These components provide the same functionalities offered by the old H2DbWireRecordFilter and H2DbWireRecordStore components, but they can be used for connectiong to a generic relational database (i.e. H2DB, MySQL or MariaDB). The legacy components will continue to be available in order to keep backward compatibility, but will be deprecated since Kura 5.2.0 and should not be used for new installations.

"},{"location":"core-services/h2db-service/#usage","title":"Usage","text":""},{"location":"core-services/h2db-service/#creating-a-new-h2-database-instance","title":"Creating a new H2 database instance","text":"

To create a new H2 database instance, use the following procedure:

  1. Open the Administrative UI and press the + button in the side menu, under the Services section. A pop-up dialog should appear.
  2. Select org.eclipse.kura.core.db.H2DbService from the Factory drop-down list, enter an arbitrary name for the new instance and click Apply.
  3. An entry for the newly created instance should appear in the side menu under Services, click on it to review its configuration. It is not possible to create different DB instances that manage the same DB URL. When creating a new instance please make sure that the URL specified in the field db.connector.url is not managed by another instance.
"},{"location":"core-services/h2db-service/#configuration-parameters","title":"Configuration Parameters","text":"

The H2DbService provides the following configuration parameters:

  • Connector URL: JDBC connector URL of the database instance. Passing the USER and PASSWORD parameters in the connector URL is not supported, these paramters will be ignored if present. Please use the db.user and db.password fields to provide the credentials.

Warning

If the database is created in persisted mode, please make sure that the Linux user running Eclipse Kura has the permissions required to create the database file. If the permissions are not ok, Eclipse Kura may be able to create the database (by default it runs with the CAP_DAC_OVERRIDE capability) but it may not be able to perform the periodic defragmentation process, this may cause the database file size to grow expecially if the write rate is high.

Executing the following commands as root can be useful to detect potential issues, replace database_parent_directory with the parent directory of the database file and kura_linux_user with the Linux user that is executing Eclipse Kura (e.g. kurad): 

export TARGET=\"$(readlink -f database_parent_directory)\"\nexport KURA_USER=\"kura_linux_user\"\nsudo -u \"${KURA_USER}\" sh -c \"touch '${TARGET}/.testfile' && rm '${TARGET}/.testfile'\"\n

If command fails it may be necessary to change the database directory or adjust the permissions.

  • User: Specifies the user for the database connection. Furthermore

  • Password: Specifies the password. The default password is the empty string.

  • Checkpoint interval (seconds): H2DbService instances support running periodic checkpoints to ensure data consistency. This parameter specifies the interval in seconds between two successive checkpoints. This setting has no effect for in-memory database instances.

  • Defrag interval (minutes): H2DbService instances support running periodic defragmentation (compaction). This parameter specifies the interval in minutes between two successive checkpoints, set to zero to disable. This setting has no effect for in-memory database instances. Existing database connections will be closed during the defragmentation process and need to be reopened by the applications.

  • Connection pool max size: The H2DbService manages connections using a connection pool. This parameter defines the maximum number of connections for the pool

"},{"location":"core-services/h2db-service/#selecting-a-database-instance-for-existing-components","title":"Selecting a database instance for existing components","text":"

A database instance is identified by its Kura service PID. The PID for the default instance is org.eclipse.kura.db.H2DbService while the PID for instances created using the Web UI is the string entered in the Name field at step 2 of the previous section.

The built-in components that use database functionalities allow to specify which instance to use in their configuration. These components are the DataService component of the cloud stack, the DbWireRecordFilter and DbWireRecordStore wire components. The configuration of each component contains a property that allows to specify the service PID of the desired instance.

"},{"location":"core-services/h2db-service/#usage-through-wires","title":"Usage through Wires","text":"

It is possible to store and extract Wire Records into/from a H2 database instance using the Wire Record Store and Wire Record Query wire components.

When a Wire Record is received by a Wire Record Store attached to a H2 based database instance, the data will be stored in a table whose name is the current value of the Record Collection Name configuration parameter of the Wire Component.

Each property contained in a Wire Record will be appended to a column with the same name as the property key. A new column will be created if it doesn't already exists.

Note

Storing wire record properties with the FLOAT data type using the Wire Record Store is not recommended since the type information will be lost. Values inserted as FLOAT using the Wire Record Store will be retrieved as DOUBLE using the Wire Record Query component.

Warning

It is not recommended to store Wire Records having properties with the same key and different value type. If the value type changes, the target column will be dropped and recreated with the type derived from the last received record. All existing data in the target column will be lost. The purpose of this is to allow changing the type of a column with a Wire Graph configuration update.

"},{"location":"core-services/h2db-service/#enabling-the-tcp-server","title":"Enabling the TCP Server","text":"

Danger

This feature is intended to be used only for debugging/development purposes. The server created by H2 is not running on a secure protocol. Only enable the server for a limited time and make sure to properly secure the firewall ports on which it is running.

The TCP server can be used by creating a H2DbServer instance:

  1. Open the Web UI and press the + button in the side menu, under the Services section. A pop-up dialog should appear.
  2. Select org.eclipse.kura.core.db.H2DbServer from the Factory drop-down\u200b list, enter an arbitrary name for the new instance and click Apply.
  3. Clicking on the name of the new server instance on the left side of the Web UI\u200b. The configuration of the server component will appear.
  4. Set the db.server.type field to TCP.
  5. Review the server options under db.server.commandline, check the official documentation for more information about the available options.
  6. Set the db.server.enabled to true.

The server, with the default configuration, will be listening on port 9123.

Tip

Make sure to review the firewall configuration in order to ensure that the server is reachable from an external process.

"},{"location":"core-services/h2db-service/#enabling-the-web-console","title":"Enabling the Web Console","text":"

Danger

This feature is intended to be used only for debugging/development purposes. The server created by H2 is not running on a secure protocol. Only enable the server for a limited time and make sure to properly secure the firewall ports on which it is running.

In order to enable the H2 Web console, proceed as follows:

  1. Create a new H2DbServer instance.
  2. Set the db.server.type field to WEB.
  3. Enter appropriate parameters for the Web server in the db.server.commandline field. An example of valid settings can be: -webPort 9123 -webAllowOthers -ifExists -webExternalNames <device-ip>.
  4. Set the db.server.enabled to true.

The server is now listening on the specified port.

Tip

Make sure to review the firewall configuration in order to ensure that the server is reachable from an external process.

Use a browser to access the console. Open the http://: URL, where is the IP address of the gateway and is the port specified at step 3.

Enter the DB URL as specified in the Kura configuration in the JDBC URL field and the credentials. Click on Connect, you should be able to access the console.

"},{"location":"core-services/h2db-service/#change-the-database-password","title":"Change the Database Password","text":"

To change the database password the System Administrator needs to:

  1. Open the configuration of the desired database instance in the Web UI.
  2. Enter the new password in the db.password field.
  3. Click Apply.

Warn

If the H2DbServer instance fails to open a database, it will delete and recreate all database files. This behavior\u200b is aimed at preventing potential issues caused by incorrect credentials in the configuration snapshots. It is highly recommended to perform a backup of an existing database before trying to open it using a H2DbService instance and before changing the password.

"},{"location":"core-services/h2db-service/#persistence-modes","title":"Persistence Modes","text":"

The H2 database supports several persistence modes.

"},{"location":"core-services/h2db-service/#in-memory","title":"In Memory","text":"

An in-memory database instance can be created using the following URL structure: jdbc:h2:mem:, where is a non-empty string that represents the database name. This configuration is suggested for database instances that are frequently updated. Examples:

  • jdbc:h2:mem:kuradb
  • jdbc:h2:mem:mydb

The default database instance is in-memory by default and uses the jdbc:h2:mem:kuradb URL.

"},{"location":"core-services/h2db-service/#persistent","title":"Persistent","text":"

A persistent database instance can be created using the jdbc:h2:file:, where is a non-empty string that represents the database path.

If no URL parameters are supplied the database will enable the transaction log by default. The transaction log is used to restore the database to a consistent state after a crash or power failure. This provides good protection against data losses but causes a lot of writes to the storage device, reducing both performance and the lifetime of flash-based storage devices.

Examples: - jdbc:h2:file:/opt/db/mydb

Make sure to use absolute paths in the DB URL since H2 does not support DB paths relative to the working directory.

"},{"location":"core-services/introduction/","title":"Introduction","text":"

This section describes the administrative tools available using the Gateway Administration Console. This web interface provides the ability to configure all services and applications that are installed and running on the gateway.

"},{"location":"core-services/network-status-rest-v1/","title":"Network Status Service V1 REST APIs and MQTT Request Handler","text":"

The NET-STATUS-V1 cloud request handler and the corresponding REST APIs allow to retrieve the current status of the network interfaces available on the system.

This cloud request handler and rest API is available only on the systems that provide a NetworkStatusService implementation, at the moment this corresponds to the devices that include the NetworkManager integration.

Accessing the REST APIs requires to use an identity with the rest.network.status permission assigned.

  • Request definitions
    • GET/interfaceIds
    • GET/status
    • POST/status/byInterfaceId
  • JSON definitions
    • InterfaceIds
    • InterfaceStatusList
    • LoopbackInterfaceStatus
    • EthernetInterfaceStatus
    • WifiInterfaceStatus
    • ModemInterfaceStatus
    • NetworkInterfaceStatus
    • IPAddressString
    • HardwareAddress
    • NetworkInterfaceIpAddress
    • NetworkInterfaceIpAddressStatus
    • WifiChannel
    • WifiAccessPoint
    • ModemModePair
    • Sim
    • Bearer
    • ModemPorts
    • NetworkInterfaceType
    • NetworkInterfaceState
    • WifiCapability
    • WifiMode
    • WifiSecurity
    • ModemPortType
    • ModemCapability
    • ModemMode
    • ModemBand
    • SimType
    • ESimStatus
    • BearerIpType
    • ModemConnectionType
    • ModemConnectionStatus
    • AccessTechnology
    • RegistrationStatus
    • FailureReport
    • GenericFailureReport
"},{"location":"core-services/network-status-rest-v1/#request-definitions","title":"Request definitions","text":""},{"location":"core-services/network-status-rest-v1/#getinterfaceids","title":"GET/interfaceIds","text":"
  • REST API path : /services/networkStatus/v1/interfaceIds
  • description : Returns the identifiers of the network interfaces detected in the system. For Ethernet and WiFi interfaces, the identifier is typically the interface name. For the modems, instead, it is the usb or pci path.
  • responses :
    • 200
      • description : The list of the identifiers of the network interfaces detected in the system.
      • response body :
        • InterfaceIds
    • 500
      • description : If an unexpected failure occurs while retrieving the interface list.
      • response body :
        • GenericFailureReport
"},{"location":"core-services/network-status-rest-v1/#getstatus","title":"GET/status","text":"
  • REST API path : /services/networkStatus/v1/status
  • description : Returns the status for all interfaces currently available on the system. Failures in retrieving the status of specific interfaces will be reported using the failures field of the response.
  • responses :
    • 200
      • description : The status of the network interfaces in the system.
      • response body :
        • InterfaceStatusList
    • 500
      • description : If an unexpected failure occurs while retrieving the interface list.
      • response body :
        • GenericFailureReport
"},{"location":"core-services/network-status-rest-v1/#poststatusbyinterfaceid","title":"POST/status/byInterfaceId","text":"
  • REST API path : /services/networkStatus/v1/status/byInterfaceId
  • description : Returns the status for the network interfaces whose id is specified in the request. Failures in retrieving the status of specific interfaces, or the fact that an interface with the requested id cannot be found will be reported using the failures field of the responses.
  • request body :
    • InterfaceIds
  • responses :
    • 200
      • description : The status of the network interfaces in the system.
      • response body :
        • InterfaceStatusList
    • 400
      • description : If the request object does not contain the interfaceIds field, it is null or if it contains empty or null interface ids.
      • response body :
        • GenericFailureReport
    • 500
      • description : If an unexpected failure occurs while retrieving the interface list.
      • response body :
        • GenericFailureReport
"},{"location":"core-services/network-status-rest-v1/#json-definitions","title":"JSON definitions","text":""},{"location":"core-services/network-status-rest-v1/#interfaceids","title":"InterfaceIds","text":"

An object containing a list of network interface identifiers

Properties:

  • interfaceIds: array The list of network interface identifiers

    • array element type: string An interface identifier
{\n  \"interfaceIds\": [\n    \"lo\"\n  ]\n}\n
"},{"location":"core-services/network-status-rest-v1/#interfacestatuslist","title":"InterfaceStatusList","text":"

An object reporting a list of network interface status. If a failure occurs retrieving the status for a specific interface, the reason will be reported in the failures list.

Properties:

  • interfaces: array A list of network interface status

    • array element type: variant
      • Variants:
        • object
          • LoopbackInterfaceStatus
        • object
          • EthernetInterfaceStatus
        • object
          • WifiInterfaceStatus
        • object
          • ModemInterfaceStatus

  • failures: array

    • array element type: object
      • FailureReport

{\n  \"failures\": [],\n  \"interfaces\": [\n    {\n      \"autoConnect\": true,\n      \"driver\": \"unknown\",\n      \"driverVersion\": \"\",\n      \"firmwareVersion\": \"\",\n      \"hardwareAddress\": \"00:00:00:00:00:00\",\n      \"id\": \"lo\",\n      \"interfaceIp4Addresses\": {\n        \"addresses\": [\n          {\n            \"address\": \"127.0.0.1\",\n            \"prefix\": 8\n          }\n        ],\n        \"dnsServerAddresses\": []\n      },\n      \"interfaceName\": \"lo\",\n      \"mtu\": 65536,\n      \"state\": \"UNMANAGED\",\n      \"type\": \"LOOPBACK\",\n      \"virtual\": true\n    }\n  ]\n}\n
{\n  \"failures\": [\n    {\n      \"interfaceId\": \"foo\",\n      \"reason\": \"Not found.\"\n    }\n  ],\n  \"interfaces\": []\n}\n

"},{"location":"core-services/network-status-rest-v1/#loopbackinterfacestatus","title":"LoopbackInterfaceStatus","text":"

Object that contains specific properties to describe the status of an Loopback interface. It contains also all of the properties specified by NetworkInterfaceStatus.

Properties:

{\n  \"autoConnect\": true,\n  \"driver\": \"unknown\",\n  \"driverVersion\": \"\",\n  \"firmwareVersion\": \"\",\n  \"hardwareAddress\": \"00:00:00:00:00:00\",\n  \"id\": \"lo\",\n  \"interfaceIp4Addresses\": {\n    \"addresses\": [\n      {\n        \"address\": \"127.0.0.1\",\n        \"prefix\": 8\n      }\n    ],\n    \"dnsServerAddresses\": []\n  },\n  \"interfaceName\": \"lo\",\n  \"mtu\": 65536,\n  \"state\": \"UNMANAGED\",\n  \"type\": \"LOOPBACK\",\n  \"virtual\": true\n}\n
"},{"location":"core-services/network-status-rest-v1/#ethernetinterfacestatus","title":"EthernetInterfaceStatus","text":"

Object that contains specific properties to describe the status of an Ethernet interface. It contains also all of the properties specified by NetworkInterfaceStatus.

Properties:

  • linkUp: bool 
{\n  \"autoConnect\": true,\n  \"driver\": \"igb\",\n  \"driverVersion\": \"5.6.0-k\",\n  \"firmwareVersion\": \"3.25, 0x800005d0\",\n  \"hardwareAddress\": \"00:E0:C7:0A:5F:89\",\n  \"id\": \"eno1\",\n  \"interfaceIp4Addresses\": {\n    \"addresses\": [\n      {\n        \"address\": \"172.16.0.1\",\n        \"prefix\": 24\n      }\n    ],\n    \"dnsServerAddresses\": [],\n    \"gateway\": \"0.0.0.0\"\n  },\n  \"interfaceName\": \"eno1\",\n  \"linkUp\": true,\n  \"mtu\": 1500,\n  \"state\": \"ACTIVATED\",\n  \"type\": \"ETHERNET\",\n  \"virtual\": false\n}\n
"},{"location":"core-services/network-status-rest-v1/#wifiinterfacestatus","title":"WifiInterfaceStatus","text":"

Object that contains specific properties to describe the status of a WiFi interface. It contains also all of the properties specified by NetworkInterfaceStatus.

Properties:

  • capabilities: array

    • array element type: string (enumerated)
      • WifiCapability

  • channels: array

    • array element type: object
      • WifiChannel

  • countryCode: string

  • mode: string (enumerated)

    • WifiMode

  • activeWifiAccessPoint: object (optional)

    • WifiAccessPoint

  • availableWifiAccessPoints: array

    • array element type: object
      • WifiAccessPoint

{\n  \"activeWifiAccessPoint\": {\n    \"channel\": {\n      \"channel\": 11,\n      \"frequency\": 2462\n    },\n    \"hardwareAddress\": \"11:22:33:44:55:66\",\n    \"maxBitrate\": 130000,\n    \"mode\": \"INFRA\",\n    \"rsnSecurity\": [\n      \"GROUP_CCMP\",\n      \"KEY_MGMT_PSK\",\n      \"PAIR_CCMP\"\n    ],\n    \"signalQuality\": 100,\n    \"signalStrength\": -20,\n    \"ssid\": \"MyAccessPoint\",\n    \"wpaSecurity\": [\n      \"NONE\"\n    ],\n    \"flags\": [\n      \"PRIVACY\"\n    ]\n  },\n  \"autoConnect\": true,\n  \"availableWifiAccessPoints\": [\n    {\n      \"channel\": {\n        \"channel\": 11,\n        \"frequency\": 2462\n      },\n      \"hardwareAddress\": \"11:22:33:44:55:66\",\n      \"maxBitrate\": 130000,\n      \"mode\": \"INFRA\",\n      \"rsnSecurity\": [\n        \"GROUP_CCMP\",\n        \"KEY_MGMT_PSK\",\n        \"PAIR_CCMP\"\n      ],\n      \"signalQuality\": 100,\n      \"signalStrength\": -20,\n      \"ssid\": \"MyAccessPoint\",\n      \"wpaSecurity\": [\n        \"NONE\"\n      ],\n      \"flags\": [\n        \"PRIVACY\"\n      ]\n    },\n    {\n      \"channel\": {\n        \"channel\": 5,\n        \"frequency\": 2432\n      },\n      \"hardwareAddress\": \"22:33:44:55:66:77\",\n      \"maxBitrate\": 270000,\n      \"mode\": \"INFRA\",\n      \"rsnSecurity\": [\n        \"GROUP_CCMP\",\n        \"KEY_MGMT_PSK\",\n        \"PAIR_CCMP\"\n      ],\n      \"signalQuality\": 42,\n      \"signalStrength\": -69,\n      \"ssid\": \"OtherSSID\",\n      \"wpaSecurity\": [\n        \"NONE\"\n      ],\n      \"flags\": [\n        \"PRIVACY\"\n      ]\n    }\n  ],\n  \"capabilities\": [\n    \"CIPHER_WEP40\",\n    \"WPA\",\n    \"AP\",\n    \"FREQ_VALID\",\n    \"ADHOC\",\n    \"RSN\",\n    \"CIPHER_TKIP\",\n    \"CIPHER_WEP104\",\n    \"CIPHER_CCMP\",\n    \"FREQ_2GHZ\"\n  ],\n  \"channels\": [\n    {\n      \"attenuation\": 20.0,\n      \"channel\": 1,\n      \"disabled\": false,\n      \"frequency\": 2412,\n      \"noInitiatingRadiation\": false,\n      \"radarDetection\": false\n    },\n    {\n      \"attenuation\": 20.0,\n      \"channel\": 2,\n      \"disabled\": false,\n      \"frequency\": 2417,\n      \"noInitiatingRadiation\": false,\n      \"radarDetection\": false\n    }\n  ],\n  \"countryCode\": \"IT\",\n  \"driver\": \"brcmfmac\",\n  \"driverVersion\": \"7.45.98.94\",\n  \"firmwareVersion\": \"01-3b33decd\",\n  \"hardwareAddress\": \"44:55:66:77:88:99\",\n  \"id\": \"wlan0\",\n  \"interfaceIp4Addresses\": {\n    \"addresses\": [\n      {\n        \"address\": \"192.168.0.113\",\n        \"prefix\": 24\n      }\n    ],\n    \"dnsServerAddresses\": []\n  },\n  \"interfaceName\": \"wlan0\",\n  \"mode\": \"INFRA\",\n  \"mtu\": 1500,\n  \"state\": \"ACTIVATED\",\n  \"type\": \"WIFI\",\n  \"virtual\": false\n}\n
{\n  \"activeWifiAccessPoint\": {\n    \"channel\": {\n      \"channel\": 1,\n      \"frequency\": 2412\n    },\n    \"hardwareAddress\": \"44:55:66:77:88:99\",\n    \"maxBitrate\": 0,\n    \"mode\": \"INFRA\",\n    \"rsnSecurity\": [\n      \"GROUP_CCMP\",\n      \"KEY_MGMT_PSK\",\n      \"PAIR_CCMP\"\n    ],\n    \"signalQuality\": 0,\n    \"signalStrength\": -104,\n    \"ssid\": \"kura_gateway_raspberry_pi\",\n    \"wpaSecurity\": [\n      \"NONE\"\n    ],\n    \"flags\": [\n      \"PRIVACY\"\n    ]\n  },\n  \"autoConnect\": true,\n  \"availableWifiAccessPoints\": [\n    {\n      \"channel\": {\n        \"channel\": 1,\n        \"frequency\": 2412\n      },\n      \"hardwareAddress\": \"44:55:66:77:88:99\",\n      \"maxBitrate\": 0,\n      \"mode\": \"INFRA\",\n      \"rsnSecurity\": [\n        \"GROUP_CCMP\",\n        \"KEY_MGMT_PSK\",\n        \"PAIR_CCMP\"\n      ],\n      \"signalQuality\": 0,\n      \"signalStrength\": -104,\n      \"ssid\": \"kura_gateway_raspberry_pi\",\n      \"wpaSecurity\": [\n        \"NONE\"\n      ],\n      \"flags\": [\n        \"PRIVACY\",\n        \"WPS\"\n      ]\n    }\n  ],\n  \"capabilities\": [\n    \"CIPHER_WEP40\",\n    \"WPA\",\n    \"AP\",\n    \"FREQ_VALID\",\n    \"ADHOC\",\n    \"RSN\",\n    \"CIPHER_TKIP\",\n    \"CIPHER_WEP104\",\n    \"CIPHER_CCMP\",\n    \"FREQ_2GHZ\"\n  ],\n  \"channels\": [\n    {\n      \"attenuation\": 20.0,\n      \"channel\": 1,\n      \"disabled\": false,\n      \"frequency\": 2412,\n      \"noInitiatingRadiation\": false,\n      \"radarDetection\": false\n    },\n    {\n      \"attenuation\": 20.0,\n      \"channel\": 2,\n      \"disabled\": false,\n      \"frequency\": 2417,\n      \"noInitiatingRadiation\": false,\n      \"radarDetection\": false\n    }\n  ],\n  \"countryCode\": \"00\",\n  \"driver\": \"brcmfmac\",\n  \"driverVersion\": \"7.45.98.94\",\n  \"firmwareVersion\": \"01-3b33decd\",\n  \"hardwareAddress\": \"44:55:66:77:88:99\",\n  \"id\": \"wlan0\",\n  \"interfaceIp4Addresses\": {\n    \"addresses\": [\n      {\n        \"address\": \"172.16.1.1\",\n        \"prefix\": 24\n      }\n    ],\n    \"dnsServerAddresses\": []\n  },\n  \"interfaceName\": \"wlan0\",\n  \"mode\": \"MASTER\",\n  \"mtu\": 1500,\n  \"state\": \"ACTIVATED\",\n  \"type\": \"WIFI\",\n  \"virtual\": false\n}\n

"},{"location":"core-services/network-status-rest-v1/#modeminterfacestatus","title":"ModemInterfaceStatus","text":"

Object that contains specific properties to describe the status of a Modem interface. It contains also all of the properties specified by NetworkInterfaceStatus.

Properties:

  • model: string

  • manufacturer: string

  • serialNumber: string

  • softwareRevision: string

  • hardwareRevision: string

  • primaryPort: string

  • ports: object

    • ModemPorts

  • supportedModemCapabilities: array

    • array element type: string (enumerated)
      • ModemCapability

  • currentModemCapabilities: array

    • array element type: string (enumerated)
      • ModemCapability

  • powerState: string (enumerated)

    • ModemPowerState

  • supportedModes: array

    • array element type: object
      • ModemModePair

  • currentModes: object

    • ModemModePair

  • supportedBands: array

    • array element type: string (enumerated)
      • ModemBand

  • currentBands: array

    • array element type: string (enumerated)
      • ModemBand

  • gpsSupported: bool

  • availableSims: array

    • array element type: object
      • Sim

  • simLocked: bool

  • bearers: array

    • array element type: object
      • Bearer

  • connectionType: string (enumerated)

    • ModemConnectionType

  • connectionStatus: string (enumerated)

    • ModemConnectionStatus

  • accessTechnologies: array

    • array element type: string (enumerated)
      • AccessTechnology

  • signalQuality: number

  • signalStrength: number

  • registrationStatus: string (enumerated)

    • RegistrationStatus

  • operatorName: string 

{\n  \"accessTechnologies\": [\n    \"LTE\"\n  ],\n  \"autoConnect\": true,\n  \"availableSims\": [\n    {\n      \"active\": true,\n      \"primary\": true,\n      \"eSimStatus\": \"UNKNOWN\",\n      \"eid\": \"\",\n      \"iccid\": \"1111111111111111111\",\n      \"imsi\": \"111111111111111\",\n      \"operatorName\": \"MyOperator\",\n      \"operatorIdentifier\": \"12345\",\n      \"simType\": \"PHYSICAL\"\n    }\n  ],\n  \"bearers\": [\n    {\n      \"apn\": \"apn.myoperator.com\",\n      \"bytesReceived\": 0,\n      \"bytesTransmitted\": 0,\n      \"connected\": true,\n      \"ipTypes\": [\n        \"IPV4\"\n      ],\n      \"name\": \"wwp11s0f2u3i4\"\n    }\n  ],\n  \"connectionStatus\": \"CONNECTED\",\n  \"connectionType\": \"DirectIP\",\n  \"currentBands\": [\n    \"DCS\",\n    \"EUTRAN_3\",\n    \"EUTRAN_19\",\n    \"EUTRAN_40\",\n    \"EUTRAN_26\",\n    \"EUTRAN_28\",\n    \"EUTRAN_41\",\n    \"UTRAN_6\",\n    \"EUTRAN_13\",\n    \"EUTRAN_25\",\n    \"EUTRAN_5\",\n    \"EUTRAN_7\",\n    \"EUTRAN_8\",\n    \"UTRAN_2\",\n    \"EUTRAN_38\",\n    \"UTRAN_1\",\n    \"EUTRAN_12\",\n    \"UTRAN_8\",\n    \"EUTRAN_18\",\n    \"UTRAN_19\",\n    \"G850\",\n    \"EUTRAN_20\",\n    \"UTRAN_5\",\n    \"EUTRAN_1\",\n    \"EUTRAN_39\",\n    \"EUTRAN_2\",\n    \"EUTRAN_4\",\n    \"EGSM\",\n    \"PCS\",\n    \"UTRAN_4\"\n  ],\n  \"currentModemCapabilities\": [\n    \"GSM_UMTS\",\n    \"LTE\"\n  ],\n  \"currentModes\": {\n    \"modes\": [\n      \"MODE_2G\",\n      \"MODE_3G\",\n      \"MODE_4G\"\n    ],\n    \"preferredMode\": \"MODE_4G\"\n  },\n  \"driver\": \"qmi_wwan, option1\",\n  \"driverVersion\": \"\",\n  \"firmwareVersion\": \"\",\n  \"gpsSupported\": true,\n  \"hardwareAddress\": \"00:00:00:00:00:00\",\n  \"hardwareRevision\": \"10000\",\n  \"id\": \"1-3\",\n  \"interfaceIp4Addresses\": {\n    \"addresses\": [\n      {\n        \"address\": \"1.2.3.4\",\n        \"prefix\": 30\n      }\n    ],\n    \"dnsServerAddresses\": [\n      \"1.2.3.6\",\n      \"1.2.3.7\"\n    ],\n    \"gateway\": \"1.2.3.5\"\n  },\n  \"interfaceName\": \"wwp11s0f2u3i4\",\n  \"manufacturer\": \"QUALCOMM INCORPORATED\",\n  \"model\": \"QUECTEL Mobile Broadband Module\",\n  \"mtu\": 1500,\n  \"operatorName\": \"MyOperator\",\n  \"ports\": {\n    \"cdc-wdm0\": \"QMI\",\n    \"ttyUSB0\": \"QCDM\",\n    \"ttyUSB1\": \"GPS\",\n    \"ttyUSB2\": \"AT\",\n    \"ttyUSB3\": \"AT\",\n    \"wwp11s0f2u3i4\": \"NET\"\n  },\n  \"powerState\": \"ON\",\n  \"primaryPort\": \"cdc-wdm0\",\n  \"registrationStatus\": \"HOME\",\n  \"serialNumber\": \"111111111111111\",\n  \"signalQuality\": 55,\n  \"signalStrength\": -80,\n  \"simLocked\": true,\n  \"softwareRevision\": \"EG25GGBR07A08M2G\",\n  \"state\": \"ACTIVATED\",\n  \"supportedBands\": [\n    \"DCS\",\n    \"EUTRAN_3\",\n    \"EUTRAN_19\",\n    \"EUTRAN_40\",\n    \"EUTRAN_26\",\n    \"EUTRAN_28\",\n    \"EUTRAN_41\",\n    \"UTRAN_6\",\n    \"EUTRAN_13\",\n    \"EUTRAN_25\",\n    \"EUTRAN_5\",\n    \"EUTRAN_7\",\n    \"EUTRAN_8\",\n    \"UTRAN_2\",\n    \"EUTRAN_38\",\n    \"UTRAN_1\",\n    \"EUTRAN_12\",\n    \"UTRAN_8\",\n    \"EUTRAN_18\",\n    \"UTRAN_19\",\n    \"G850\",\n    \"EUTRAN_20\",\n    \"UTRAN_5\",\n    \"EUTRAN_1\",\n    \"EUTRAN_39\",\n    \"EUTRAN_2\",\n    \"EUTRAN_4\",\n    \"EGSM\",\n    \"PCS\",\n    \"UTRAN_4\"\n  ],\n  \"supportedModemCapabilities\": [\n    \"NONE\"\n  ],\n  \"supportedModes\": [\n    {\n      \"modes\": [\n        \"MODE_4G\"\n      ],\n      \"preferredMode\": \"NONE\"\n    },\n    {\n      \"modes\": [\n        \"MODE_2G\",\n        \"MODE_3G\",\n        \"MODE_4G\"\n      ],\n      \"preferredMode\": \"MODE_4G\"\n    }\n  ],\n  \"type\": \"MODEM\",\n  \"virtual\": false\n}\n
"},{"location":"core-services/network-status-rest-v1/#networkinterfacestatus","title":"NetworkInterfaceStatus","text":"

This object contains the common properties contained by the status object reported for a network interface. A network interface is identified by Kura using the id field. It is used to internally manage the interface. The interfaceName, instead, is the IP interface as it may appear on the system. For Ethernet and WiFi interfaces the two values coincide (i.e. eth0, wlp1s0, ...). For modems, instead, the id is typically the usb or pci path, while the interfaceName is the IP interface created when they are connected. When the modem is disconnected the interfaceName can have a different value.

Properties:

  • id: string

  • interfaceName: string

  • hardwareAddress: string

    • HardwareAddress

  • driver: string

  • driverVersion: string

  • firmwareVersion: string

  • virtual: bool

  • state: string (enumerated)

    • NetworkInterfaceState

  • autoConnect: bool

  • mtu: number

  • interfaceIp4Addresses: array (optional)

    • array element type: object
      • NetworkInterfaceIpAddressStatus

  • interfaceIp6Addresses: array (optional)

    • array element type: object
      • NetworkInterfaceIpAddressStatus
"},{"location":"core-services/network-status-rest-v1/#ipaddressstring","title":"IPAddressString","text":"

Represents an IPv4 or IPv6 addresses as a string.

"},{"location":"core-services/network-status-rest-v1/#hardwareaddress","title":"HardwareAddress","text":"

Represents an hardware address as its bytes reported as two characters hexadecimal strings separated by the ':' character. e.g. 00:11:22:33:A4:FC:BB.

"},{"location":"core-services/network-status-rest-v1/#networkinterfaceipaddress","title":"NetworkInterfaceIpAddress","text":"

This object describes an IP address with its prefix. It can be used for IPv4 or IPv6 addresses.

Properties:

  • address: string

    • IPAddressString

  • prefix: number

"},{"location":"core-services/network-status-rest-v1/#networkinterfaceipaddressstatus","title":"NetworkInterfaceIpAddressStatus","text":"

This class describes the IP address status of a network interface: a list of IP addresses, an optional gateway and a list of DNS servers address. It can be used for IPv4 or IPv6 addresses.

Properties:

  • addresses: array

    • array element type: object
      • NetworkInterfaceIpAddress

  • gateway: string (optional This field can be missing if the interface has no gateway.)

    • IPAddressString

  • dnsServerAddresses: array

    • array element type: string
      • IPAddressString
"},{"location":"core-services/network-status-rest-v1/#wifichannel","title":"WifiChannel","text":"

This class represent a WiFi channel, providing the channel number, frequency, status and other useful information.

Properties:

  • channel: number

  • frequency: number

  • disabled: bool (optional)

  • attenuation: number (optional)

  • noInitiatingRadiation: bool (optional)

  • radarDetection: bool (optional)

"},{"location":"core-services/network-status-rest-v1/#wifiaccesspoint","title":"WifiAccessPoint","text":"

This object describes a Wifi Access Point. It can be used both for describing a detected AP after a WiFi scan when in Station mode and the provided AP when in Master (or Access Point) mode.

Properties:

  • ssid: string The Service Set IDentifier of the WiFi network

  • hardwareAddress: string

    • HardwareAddress

  • channel: object

    • WifiChannel

  • mode: string (enumerated)

    • WifiMode

  • maxBitrate: number The maximum bitrate this access point is capable of.

  • signalQuality: number The current signal quality of the access point in percentage.

  • signalStrength: number The current signal strength of the access point in dBm.

  • wpaSecurity: array The WPA capabilities of the access point

    • array element type: string (enumerated)
      • WifiSecurity

  • rsnSecurity: array The RSN capabilities of the access point

    • array element type: string (enumerated)
      • WifiSecurity

  • flags: array The capabilities of the access point

    • array element type: string (enumerated)
      • WifiFlags
"},{"location":"core-services/network-status-rest-v1/#modemmodepair","title":"ModemModePair","text":"

This object represents a pair of Modem Mode list and a preferred one.

Properties:

  • modes: array

    • array element type: string (enumerated)
      • ModemMode

  • preferredMode: string (enumerated)

    • ModemMode
"},{"location":"core-services/network-status-rest-v1/#sim","title":"Sim","text":"

This class contains all relevant properties to describe a SIM (Subscriber Identity Module).

Properties:

  • active: bool

  • primary: bool

  • iccid: string

  • imsi: string

  • eid: string

  • operatorName: string

  • operatorIdentifier: string

  • simType: string (enumerated)

    • SimType

  • eSimStatus: string (enumerated)

    • ESimStatus
"},{"location":"core-services/network-status-rest-v1/#bearer","title":"Bearer","text":"

This object describes the Bearer or Context associated to a modem connection.

Properties:

  • name: string

  • connected: bool

  • apn: string

  • ipTypes: array

    • array element type: string (enumerated)
      • BearerIpType

  • bytesTransmitted: number

  • bytesReceived: number

"},{"location":"core-services/network-status-rest-v1/#modemports","title":"ModemPorts","text":"

An object representing a set of modem ports. The members of this object represent modem ports, the member names represent the modem port name. This object can have a variable number of members.

Properties:

  • propertyName: string (enumerated)
    • ModemPortType
"},{"location":"core-services/network-status-rest-v1/#networkinterfacetype","title":"NetworkInterfaceType","text":"

The type of a network interface.

  • Possible values
    • UNKNOWN: The device type is unknown
    • ETHERNET: The device is a wired Ethernet device.
    • WIFI: The device is an 802.11 WiFi device.
    • UNUSED1
    • UNUSED2
    • BT: The device is a Bluetooth device.
    • OLPC_MESH: The device is an OLPC mesh networking device.
    • WIMAX: The device is an 802.16e Mobile WiMAX device.
    • MODEM: The device is a modem supporting one or more of analog telephone, CDMA/EVDO, GSM/UMTS/HSPA, or LTE standards to access a cellular or wireline data network.
    • INFINIBAND: The device is an IP-capable InfiniBand interface.
    • BOND: The device is a bond master interface.
    • VLAN: The device is a VLAN interface.
    • ADSL: The device is an ADSL device.
    • BRIDGE: The device is a bridge master interface.
    • GENERIC: This is a generic support for unrecognized device types.
    • TEAM: The device is a team master interface.
    • TUN: The device is a TUN or TAP interface.
    • TUNNEL: The device is an IP tunnel interface.
    • MACVLAN: The device is a MACVLAN interface.
    • VXLAN: The device is a VXLAN interface.
    • VETH: The device is a VETH interface.
    • MACSEC: The device is a MACsec interface.
    • DUMMY: The device is a dummy interface.
    • PPP: The device is a PPP interface.
    • OVS_INTERFACE: The device is a Open vSwitch interface.
    • OVS_PORT: The device is a Open vSwitch port
    • OVS_BRIDGE: The device is a Open vSwitch bridge.
    • WPAN: The device is a IEEE 802.15.4 (WPAN) MAC Layer Device.
    • SIXLOWPAN: The device is a 6LoWPAN interface.
    • WIREGUARD: The device is a WireGuard interface.
    • WIFI_P2P: The device is an 802.11 Wi-Fi P2P device.
    • VRF: The device is a VRF (Virtual Routing and Forwarding) interface.
    • LOOPBACK: The device is a loopback device.
"},{"location":"core-services/network-status-rest-v1/#networkinterfacestate","title":"NetworkInterfaceState","text":"

The state of a network interface.

  • Possible values
    • UNKNOWN: The device is in an unknown state.
    • UNMANAGED: The device cannot be used (carrier off, rfkill, etc).
    • UNAVAILABLE: The device is not connected.
    • DISCONNECTED: The device is preparing to connect.
    • PREPARE: The device is being configured.
    • CONFIG: The device is awaiting secrets necessary to continue connection.
    • NEED_AUTH: The IP settings of the device are being requested and configured.
    • IP_CONFIG: The device's IP connectivity ability is being determined.
    • IP_CHECK: The device is waiting for secondary connections to be activated.
    • SECONDARIES: The device is waiting for secondary connections to be activated.
    • ACTIVATED: The device is active.
    • DEACTIVATING: The device's network connection is being turn down.
    • FAILED: The device is in a failure state following an attempt to activate it.
"},{"location":"core-services/network-status-rest-v1/#wificapability","title":"WifiCapability","text":"

The capability of a WiFi interface.

  • Possible values
    • NONE: The device has no encryption/authentication capabilities
    • CIPHER_WEP40: The device supports 40/64-bit WEP encryption.
    • CIPHER_WEP104: The device supports 104/128-bit WEP encryption.
    • CIPHER_TKIP: The device supports the TKIP encryption.
    • CIPHER_CCMP: The device supports the AES/CCMP encryption.
    • WPA: The device supports the WPA1 encryption/authentication protocol.
    • RSN: The device supports the WPA2/RSN encryption/authentication protocol.
    • AP: The device supports Access Point mode.
    • ADHOC: The device supports Ad-Hoc mode.
    • FREQ_VALID: The device reports frequency capabilities.
    • FREQ_2GHZ: The device supports 2.4GHz frequencies.
    • FREQ_5GHZ: The device supports 5GHz frequencies.
    • MESH: The device supports mesh points.
    • IBSS_RSN: The device supports WPA2 in IBSS networks
"},{"location":"core-services/network-status-rest-v1/#wifimode","title":"WifiMode","text":"

Modes of operation for wifi interfaces

  • Possible values
    • UNKNOWN: Mode is unknown.
    • ADHOC: Uncoordinated network without central infrastructure.
    • INFRA: Client mode - Coordinated network with one or more central controllers.
    • MASTER: Access Point Mode - Coordinated network with one or more central controllers.
"},{"location":"core-services/network-status-rest-v1/#wifisecurity","title":"WifiSecurity","text":"

Flags describing the security capabilities of an access point.

  • Possible values
    • NONE: None
    • PAIR_WEP40: Supports pairwise 40-bit WEP encryption.
    • PAIR_WEP104: Supports pairwise 104-bit WEP encryption.
    • PAIR_TKIP: Supports pairwise TKIP encryption.
    • PAIR_CCMP: Supports pairwise CCMP encryption.
    • GROUP_WEP40: Supports a group 40-bit WEP cipher.
    • GROUP_WEP104: Supports a group 104-bit WEP cipher.
    • GROUP_TKIP: Supports a group TKIP cipher.
    • GROUP_CCMP: Supports a group CCMP cipher.
    • KEY_MGMT_PSK: Supports PSK key management.
    • KEY_MGMT_802_1X: Supports 802.1x key management.
    • SECURITY_NONE: Supports no encryption.
    • SECURITY_WEP: Supports WEP encryption.
    • SECURITY_WPA: Supports WPA encryption.
    • SECURITY_WPA2: Supports WPA2 encryption.
    • SECURITY_WPA_WPA2: Supports WPA and WPA2 encryption.
"},{"location":"core-services/network-status-rest-v1/#wififlags","title":"WifiFlags","text":"

Flags describing the capabilities of an access point.

  • Possible values
    • NONE: None
    • PRIVACY: supports authentication and encryption
    • WPS: supports WPS (Wi-Fi Protected Setup)
    • WPS_PBC: supports push-button based WPS
    • WPS_PIN: supports PIN based WPS
"},{"location":"core-services/network-status-rest-v1/#modemporttype","title":"ModemPortType","text":"

The type of a modem port.

  • Possible values
    • UNKNOWN
    • NET
    • AT
    • QCDM
    • GPS
    • QMI
    • MBIM
    • AUDIO
    • IGNORED
"},{"location":"core-services/network-status-rest-v1/#modemcapability","title":"ModemCapability","text":"

The generic access technologies families supported by a modem.

  • Possible values
    • NONE: The modem has no capabilities.
    • POTS: The modem supports the Plain Old Telephone Service (analog wired telephone network).
    • EVDO: The modem supports EVDO revision 0, A or B.
    • GSM_UMTS: The modem supports at least one of GSM, GPRS, EDGE, UMTS, HSDPA, HSUPA or HSPA+ technologies.
    • LTE: The modem has LTE capabilities.
    • IRIDIUM: The modem supports Iridium technology.
    • FIVE_GNR: The modem supports 5GNR.
    • TDS: The modem supports TDS.
    • ANY: The modem supports all capabilities.
"},{"location":"core-services/network-status-rest-v1/#modemmode","title":"ModemMode","text":"

The generic access mode a modem supports.

  • Possible values
    • NONE
    • CS
    • MODE_2G
    • MODE_3G
    • MODE_4G
    • MODE_5G
    • ANY
"},{"location":"core-services/network-status-rest-v1/#modemband","title":"ModemBand","text":"

The radio bands supported by a modem when connected to a mobile network.

  • Possible values
    • UNKNOWN
    • EGSM
    • DCS
    • PCS
    • G850
    • UTRAN_1
    • UTRAN_3
    • UTRAN_4
    • UTRAN_6
    • UTRAN_5
    • UTRAN_8
    • UTRAN_9
    • UTRAN_2
    • UTRAN_7
    • G450
    • G480
    • G750
    • G380
    • G410
    • G710
    • G810
    • EUTRAN_1
    • EUTRAN_2
    • EUTRAN_3
    • EUTRAN_4
    • EUTRAN_5
    • EUTRAN_6
    • EUTRAN_7
    • EUTRAN_8
    • EUTRAN_9
    • EUTRAN_10
    • EUTRAN_11
    • EUTRAN_12
    • EUTRAN_13
    • EUTRAN_14
    • EUTRAN_17
    • EUTRAN_18
    • EUTRAN_19
    • EUTRAN_20
    • EUTRAN_21
    • EUTRAN_22
    • EUTRAN_23
    • EUTRAN_24
    • EUTRAN_25
    • EUTRAN_26
    • EUTRAN_27
    • EUTRAN_28
    • EUTRAN_29
    • EUTRAN_30
    • EUTRAN_31
    • EUTRAN_32
    • EUTRAN_33
    • EUTRAN_34
    • EUTRAN_35
    • EUTRAN_36
    • EUTRAN_37
    • EUTRAN_38
    • EUTRAN_39
    • EUTRAN_40
    • EUTRAN_41
    • EUTRAN_42
    • EUTRAN_43
    • EUTRAN_44
    • EUTRAN_45
    • EUTRAN_46
    • EUTRAN_47
    • EUTRAN_48
    • EUTRAN_49
    • EUTRAN_50
    • EUTRAN_51
    • EUTRAN_52
    • EUTRAN_53
    • EUTRAN_54
    • EUTRAN_55
    • EUTRAN_56
    • EUTRAN_57
    • EUTRAN_58
    • EUTRAN_59
    • EUTRAN_60
    • EUTRAN_61
    • EUTRAN_62
    • EUTRAN_63
    • EUTRAN_64
    • EUTRAN_65
    • EUTRAN_66
    • EUTRAN_67
    • EUTRAN_68
    • EUTRAN_69
    • EUTRAN_70
    • EUTRAN_71
    • EUTRAN_85
    • CDMA_BC0
    • CDMA_BC1
    • CDMA_BC2
    • CDMA_BC3
    • CDMA_BC4
    • CDMA_BC5
    • CDMA_BC6
    • CDMA_BC7
    • CDMA_BC8
    • CDMA_BC9
    • CDMA_BC10
    • CDMA_BC11
    • CDMA_BC12
    • CDMA_BC13
    • CDMA_BC14
    • CDMA_BC15
    • CDMA_BC16
    • CDMA_BC17
    • CDMA_BC18
    • CDMA_BC19
    • UTRAN_10
    • UTRAN_11
    • UTRAN_12
    • UTRAN_13
    • UTRAN_14
    • UTRAN_19
    • UTRAN_20
    • UTRAN_21
    • UTRAN_22
    • UTRAN_25
    • UTRAN_26
    • UTRAN_32
    • ANY
    • NGRAN_1
    • NGRAN_2
    • NGRAN_3
    • NGRAN_5
    • NGRAN_7
    • NGRAN_8
    • NGRAN_12
    • NGRAN_13
    • NGRAN_14
    • NGRAN_18
    • NGRAN_20
    • NGRAN_25
    • NGRAN_26
    • NGRAN_28
    • NGRAN_29
    • NGRAN_30
    • NGRAN_34
    • NGRAN_38
    • NGRAN_39
    • NGRAN_40
    • NGRAN_41
    • NGRAN_48
    • NGRAN_50
    • NGRAN_51
    • NGRAN_53
    • NGRAN_65
    • NGRAN_66
    • NGRAN_70
    • NGRAN_71
    • NGRAN_74
    • NGRAN_75
    • NGRAN_76
    • NGRAN_77
    • NGRAN_78
    • NGRAN_79
    • NGRAN_80
    • NGRAN_81
    • NGRAN_82
    • NGRAN_83
    • NGRAN_84
    • NGRAN_86
    • NGRAN_89
    • NGRAN_90
    • NGRAN_91
    • NGRAN_92
    • NGRAN_93
    • NGRAN_94
    • NGRAN_95
    • NGRAN_257
    • NGRAN_258
    • NGRAN_260
    • NGRAN_261
"},{"location":"core-services/network-status-rest-v1/#simtype","title":"SimType","text":"

The SIM (Subscriber Identity Module) type.

  • Possible values
    • UNKNOWN
    • PHYSICAL
    • ESIM
"},{"location":"core-services/network-status-rest-v1/#esimstatus","title":"ESimStatus","text":"

The status of an ESIM.

  • Possible values
    • UNKNOWN
    • NO_PROFILES
    • WITH_PROFILES
"},{"location":"core-services/network-status-rest-v1/#beareriptype","title":"BearerIpType","text":"

The type of Bearer or Context associated to a modem connection.

  • Possible values
    • NONE
    • IPV4
    • IPV6
    • IPV4V6
    • NON_IP
    • ANY
"},{"location":"core-services/network-status-rest-v1/#modemconnectiontype","title":"ModemConnectionType","text":"
  • Possible values
    • PPP: Point to Point Protocol
    • DirectIP: Direct IP
"},{"location":"core-services/network-status-rest-v1/#modemconnectionstatus","title":"ModemConnectionStatus","text":"

The status of a modem.

  • Possible values
    • FAILED: The modem is unavailable
    • UNKNOWN: The modem is in an unknown state.
    • INITIALIZING: The modem is being initialised.
    • LOCKED: The modem is locked.
    • DISABLED: The modem is disabled and powered off.
    • DISABLING: The modem is disabling.
    • ENABLING: The modem is enabling..
    • ENABLED: The modem is enabled but not registered to a network provider.
    • SEARCHING: The modem is searching for a network provider.
    • REGISTERED: The modem is registered to a network provider.
    • DISCONNECTING: The modem is disconnecting.
    • CONNECTING: The modem is connecting.
    • CONNECTED: The modem is connected.
"},{"location":"core-services/network-status-rest-v1/#accesstechnology","title":"AccessTechnology","text":"

The specific technology types used when a modem is connected or registered to a network.

  • Possible values
    • UNKNOWN
    • POTS
    • GSM
    • GSM_COMPACT
    • GPRS
    • EDGE
    • UMTS
    • HSDPA
    • HSUPA
    • HSPA
    • HSPA_PLUS
    • ONEXRTT
    • EVDO0
    • EVDOA
    • EVDOB
    • LTE
    • FIVEGNR
    • LTE_CAT_M
    • LTE_NB_IOT
    • ANY
"},{"location":"core-services/network-status-rest-v1/#registrationstatus","title":"RegistrationStatus","text":"

The registration status of a modem when connected to a mobile network.

  • Possible values
    • IDLE
    • HOME
    • SEARCHING
    • DENIED
    • UNKNOWN
    • ROAMING
    • HOME_SMS_ONLY
    • ROAMING_SMS_ONLY
    • EMERGENCY_ONLY
    • HOME_CSFB_NOT_PREFERRED
    • ROAMING_CSFB_NOT_PREFERRED
    • ATTACHED_RLOS
"},{"location":"core-services/network-status-rest-v1/#failurereport","title":"FailureReport","text":"

An object reporting a failure while retrieving the status of a specific network interface

Properties:

  • interfaceId: string The identifier of the interface whose status cannot be retrieved.

  • reason: string A message describing the reason of the failure.

"},{"location":"core-services/network-status-rest-v1/#genericfailurereport","title":"GenericFailureReport","text":"

An object reporting a failure message.

Properties:

  • message: string A message describing the failure.
"},{"location":"core-services/nvidia-triton-server-inference-engine/","title":"Nvidia\u2122 Triton Server Inference Engine","text":"

The Nvidia\u2122 Triton Server is an open-source inference service software that enables the user to deploy trained AI models from any framework on GPU or CPU infrastructure. It supports all major frameworks like TensorFlow, TensorRT, PyTorch, ONNX Runtime, and even custom framework backend. With specific backends, it is also possible to run Python scripts, mainly for pre-and post-processing purposes, and exploit the DALI building block for optimized operations. For more detail about the Triton Server, please refer to the official website.

Kura provides three components for exposing the Triton Server service functionality which implement the inference engine APIs and provides methods for interacting with a local or remote Nvidia\u2122 Triton Server:

  • TritonServerRemoteService: provides methods for interacting with a remote Nvidia\u2122 Triton Server without managing the server lifecycle. Can be used both for connecting to a remote instance or a local non-managed instance. It exposes a simpler but more limited configuration.
  • TritonServerNativeService: provides methods for interacting with a local native Nvidia\u2122 Triton Server. Requires the Triton Server executable to be already available on the device and offers more options and features (like AI Model Encryption).
  • TritonServerContainerService: provides methods for interacting with a local container running Nvidia\u2122 Triton Server. Requires the Triton Server container image to be already available on the device and offers more options and features (like AI Model Encryption).
  • TritonServerService: provides methods for interacting with a local or remote Nvidia\u2122 Triton Server within the same component. Note: deprecated since 5.2.0
"},{"location":"core-services/nvidia-triton-server-inference-engine/#nvidiatm-triton-server-installation","title":"Nvidia\u2122 Triton Server installation","text":"

Before running Kura's Triton Server Service, you must install the Triton Inference Server. Here you can find the necessary steps for the available suggested installation methods.

"},{"location":"core-services/nvidia-triton-server-inference-engine/#native-triton-installation-on-jetson-devices","title":"Native Triton installation on Jetson devices","text":"

A release of Triton for JetPack is provided in the tar file in the Triton Inference Server release notes. Full documentation is available here.

Installation steps:

  • Before running the executable you need to install the Runtime Dependencies for Triton.
  • After doing so you can extract the tar file and run the executable in the bin folder.
  • It is highly recommended to add the tritonserver executable to your path or symlinking the executable to /usr/local/bin.
"},{"location":"core-services/nvidia-triton-server-inference-engine/#triton-docker-image-installation","title":"Triton Docker image installation","text":"

Before you can use the Triton Docker image you must install Docker. If you plan on using a GPU for inference you must also install the NVIDIA Container Toolkit.

Pull the image using the following command.

$ docker pull nvcr.io/nvidia/tritonserver:<xx.yy>-py3\n

Where <xx.yy> is the version of Triton that you want to pull.

"},{"location":"core-services/nvidia-triton-server-inference-engine/#native-triton-installation-on-supported-devices","title":"Native Triton installation on supported devices","text":"

The official docs mention the possibility to perform a native installation on supported platform by extracting the binaries from the Docker images. To do so you must install the necessary dependencies (some can be found in the Jetson runtime dependencies docs) on the system. For Triton to support NVIDIA GPUs you must install CUDA, cuBLAS and cuDNN referencing the support matrix.

Note

For Python models the libraries available to the Python model are the ones available for the user running the Triton server. Therefore you'll need to install the libraries through pip for the kurad user.

"},{"location":"core-services/nvidia-triton-server-inference-engine/#triton-server-setup","title":"Triton Server setup","text":"

The Triton Inference Server serves models from one or more model repositories that are specified when the server is started. The model repository is the directory where you place the models that you want Triton to serve. Be sure to follow the instructions to setup the model repository directory.

Further information about an example Triton Server setup can be found in the official documentation.

"},{"location":"core-services/nvidia-triton-server-inference-engine/#triton-server-remote-service-component","title":"Triton Server Remote Service component","text":"

The Kura Triton Server Remote Service component is the implementation of the inference engine APIs and provides methods for interacting with a remote (i.e. unmnanaged) Nvidia\u2122 Triton Server. As presented below, the component enables the user to communicate to an external server to load specific models. With this component the server lifecycle (startup, shutdown) won't be handled by Kura and it's the user responsibility to make it available to Kura for connecting.

The parameters used to configure the Triton Service are the following:

  • Nvidia Triton Server address: the address of the Nvidia Triton Server.
  • Nvidia Triton Server ports: the ports used to connect to the server for HTTP, GRPC, and Metrics services.
  • Inference Models: a comma-separated list of inference model names that the server will load. The models have to be already present in the filesystem where the server is running. This option simply tells the server to load the given models from a local or remote repository.
  • Timeout (in seconds) for time consuming tasks: Timeout (in seconds) for time consuming tasks like server startup, shutdown or model load. If the task exceeds the timeout, the operation will be terminated with an error.
  • Max. GRPC message size (bytes): this field controls the maximum allowed size for the GRPC calls to the server instance. By default, size of 4194304 bytes (= 4.19 MB) is used. Increase this value to be able to send large amounts of data as input to the Triton server (like Full HD images). The Kura logs will show the following error when exceeding such limit: 
    io.grpc.StatusRuntimeException: RESOURCE_EXHAUSTED: gRPC message exceeds maximum size 4194304\n

Note

Pay attention on the ports used for communicating with the Triton Server. The default ports are the 8000-8002, but these are tipically used by Kura for debug purposes.

"},{"location":"core-services/nvidia-triton-server-inference-engine/#triton-server-native-service-component","title":"Triton Server Native Service component","text":"

The Kura Triton Server component is the implementation of the inference engine APIs and provides methods for interacting with a local native Nvidia\u2122 Triton Server. As presented below, the component enables the user to configure a local server running on the gateway and handles its lifecycle. This operating mode supports more features for interacting with the server like the AI Model Encryption.

Note

Requirement: tritonserver executable needs to be available in the path to the kurad user. Be sure to have a working Triton Server installation before configuring the local native Triton Server instance through Kura UI.

The parameters used to configure the Triton Service are the following:

  • Nvidia Triton Server ports: the ports used to connect to the server for HTTP, GRPC, and Metrics services.
  • Local model repository path: Specify the path on the filesystem where the models are stored.
  • Local model decryption password: Specify the password to be used for decrypting models stored in the model repository. If none is specified, models are supposed to be plaintext.
  • Inference Models: a comma-separated list of inference model names that the server will load. The models have to be already present in the filesystem where the server is running. This option simply tells the server to load the given models from a local or remote repository.
  • Local backends path: Specify the path on the filesystem where the backends are stored.
  • Optional configuration for the local backends: A semi-colon separated list of configuration for the backends. i.e. tensorflow,version=2;tensorflow,allow-soft-placement=false
  • Timeout (in seconds) for time consuming tasks: Timeout (in seconds) for time consuming tasks like server startup, shutdown or model load. If the task exceeds the timeout, the operation will be terminated with an error.
  • Max. GRPC message size (bytes): this field controls the maximum allowed size for the GRPC calls to the server instance.

Note

Pay attention on the ports used for communicating with the Triton Server. The default ports are the 8000-8002, but these are tipically used by Kura for debug purposes.

"},{"location":"core-services/nvidia-triton-server-inference-engine/#triton-server-container-service-component","title":"Triton Server Container Service component","text":"

The Kura Triton Server component is the implementation of the inference engine APIs and provides methods for interacting with a local container running the Nvidia\u2122 Triton Server. As presented below, the component enables the user to configure a local server running on the gateway and handles its lifecycle. This operating mode supports more features for interacting with the server like the AI Model Encryption.

Note

Requirement: 1. Triton Server container image already installed on the device. For instructions refer to the installation section in this page. 2. Kura's Container Orchestration Service enabled.

The parameters used to configure the Triton Service are the following:

  • Container Image: The image the container will be created with.
  • Container Image Tag: Describes which image version that should be used for creating the container.
  • Nvidia Triton Server ports: The ports used to connect to the server for HTTP, GRPC, and Metrics services.
  • Local model repository path: Specify the path on the filesystem where the models are stored.
  • Local model decryption password: Specify the password to be used for decrypting models stored in the model repository. If none is specified, models are supposed to be plaintext.
  • Inference Models: A comma-separated list of inference model names that the server will load. The models have to be already present in the filesystem where the server is running. This option simply tells the server to load the given models from a local or remote repository.
  • Local Backends Path: Specifies the host filesystem path where the backends are stored. This folder will be mounted as a volume inside the Triton container and will override the existing backends. If left blank, the backends provided by the Triton container will be used.
  • Optional configuration for the local backends: A semi-colon separated list of configuration for the backends. i.e. tensorflow,version=2;tensorflow,allow-soft-placement=false
  • Memory: The maximum amount of memory the container can use in bytes. Set it as a positive integer, optionally followed by a suffix of b, k, m, g, to indicate bytes, kilobytes, megabytes, or gigabytes. The minimum allowed value is platform dependent (i.e. 6m). If left empty, the memory assigned to the container will be set to a default value by the native container orchestrator.
  • CPUs: Specify how many CPUs the Triton container can use. Decimal values are allowed, so if set to 1.5, the container will use at most one and a half cpu resource.
  • GPUs: Specify how many Nvidia GPUs the Triton container can use. Allowed values are 'all' or an integer number. If there's no Nvidia GPU installed, leave the field empty. If the Nvidia Container Runtime is used, leave the field empty.
  • Runtime: Specifies the fully qualified name of an alternate OCI-compatible runtime, which is used to run commands specified by the 'run' instruction for the Triton container. Example: nvidia corresponds to --runtime=nvidia. Note: when using the Nvidia Container Runtime, leave the GPUs field empty. The GPUs available on the system will be accessible from the container by default.
  • Devices: A comma-separated list of device paths passed to the Triton server container (e.g. /dev/video0).
  • Timeout (in seconds) for time consuming tasks: Timeout (in seconds) for time consuming tasks like server startup, shutdown or model load. If the task exceeds the timeout, the operation will be terminated with an error.
  • Max. GRPC message size (bytes): this field controls the maximum allowed size for the GRPC calls to the server instance.

Note

Pay attention on the ports used for communicating with the Triton Server. The default ports are the 8000-8002, but these are typically used by Kura for debug purposes.

"},{"location":"core-services/nvidia-triton-server-inference-engine/#triton-server-service-component-deprecated-since-520","title":"Triton Server Service component [deprecated since 5.2.0]","text":"

The Kura Triton Server component is the implementation of the inference engine APIs and provides methods for interacting with a local or remote Nvidia\u2122 Triton Server. As presented below, the component enables the user to configure a local server running on the gateway or to communicate to an external server to load specific models.

The parameters used to configure the Triton Service are the following:

  • Local Nvidia Triton Server: If enabled, a local native Nvidia Triton Server is started on the gateway. In this case, the model repository and backends path are mandatory. Moreover, the server address property is overridden and set to localhost. Be aware that the Triton Server has to be already installed on the system.
  • Nvidia Triton Server address: the address of the Nvidia Triton Server.
  • Nvidia Triton Server ports: the ports used to connect to the server for HTTP, GRPC, and Metrics services.
  • Local model repository path: Only for a local instance, specify the path on the filesystem where the models are stored.
  • Local model decryption password: Only for local instance, specify the password to be used for decrypting models stored in the model repository. If none is specified, models are supposed to be plaintext.
  • Inference Models: a comma-separated list of inference model names that the server will load. The models have to be already present in the filesystem where the server is running. This option simply tells the server to load the given models from a local or remote repository.
  • Local backends path: Only for a local instance, specify the path on the filesystem where the backends are stored.
  • Optional configuration for the local backends: Only for local instance, a semi-colon separated list of configuration for the backends. i.e. tensorflow,version=2;tensorflow,allow-soft-placement=false
  • Timeout (in seconds) for time consuming tasks: Timeout (in seconds) for time consuming tasks like server startup, shutdown or model load. If the task exceeds the timeout, the operation will be terminated with an error.
  • Max. GRPC message size (bytes): this field controls the maximum allowed size for the GRPC calls to the server instance.

Note

Pay attention on the ports used for communicating with the Triton Server. The default ports are the 8000-8002, but these are tipically used by Kura for debug purposes.

"},{"location":"core-services/nvidia-triton-server-inference-engine/#configuration-for-a-local-native-triton-server-with-triton-server-service-component-deprecated-since-520","title":"Configuration for a local native Triton Server with Triton Server Service component [deprecated since 5.2.0]","text":"

Note

Requirement: tritonserver executable needs to be available in the path to the kurad user. Be sure to have a working Triton Server installation before configuring the local native Triton Server instance through Kura UI.

When the Local Nvidia Triton Server option is set to true, a local instance of the Nvidia\u2122 Triton Server is started on the gateway. The following configuration is required:

  • Local Nvidia Triton Server: true
  • Nvidia Triton Server address: localhost
  • Nvidia Triton Server ports: mandatory
  • Local model repository path: mandatory
  • Inference Models: mandatory. Note that the models have to be already present on the filesystem.
  • Local backends path: mandatory

The typical command used to start the Triton Server is like this:

tritonserver --model-repository=<model_repository_path> \\\n--backend-directory=<backend_repository_path> \\\n--backend-config=<backend_config> \\\n--http-port=<http_port> \\\n--grpc-port=<grpc_port> \\\n--metrics-port=<metrics_port> \\\n--model-control-mode=explicit \\\n--load-model=<model_name_1> \\\n--load-model=<model_name_2> \\\n...\n
"},{"location":"core-services/nvidia-triton-server-inference-engine/#configuration-for-a-local-triton-server-running-in-a-docker-container-with-triton-server-service-component-deprecated-since-520","title":"Configuration for a local Triton Server running in a Docker container with Triton Server Service component [deprecated since 5.2.0]","text":"

If the Nvidia\u2122 Triton Server is running as a Docker container in the gateway, the following configuration is required:

  • Local Nvidia Triton Server: false
  • Nvidia Triton Server address: localhost
  • Nvidia Triton Server ports: \\<mandatory>
  • Inference Models: \\<mandatory>. The models have to be already present on the filesystem.

In order to correctly load the models at runtime, configure the server with the --model-control-mode=explicit option. The typical command used for running the docker container is as follows. Note the forward of the ports to not interfere with Kura.

docker run --rm \\\n-p4000:8000 \\\n-p4001:8001 \\\n-p4002:8002 \\\n--shm-size=150m \\\n-v path/to/models:/models \\\nnvcr.io/nvidia/tritonserver:[version] \\\ntritonserver --model-repository=/models --model-control-mode=explicit\n
"},{"location":"core-services/nvidia-triton-server-inference-engine/#configuration-for-a-remote-triton-server-with-triton-server-service-component-deprecated-since-520","title":"Configuration for a remote Triton Server with Triton Server Service component [deprecated since 5.2.0]","text":"

When the Nvidia\u2122 Triton Server is running on a remote server, the following configuration is needed:

  • Local Nvidia Triton Server: false
  • Nvidia Triton Server address: mandatory
  • Nvidia Triton Server ports: mandatory
  • ** Inference Models**: mandatory. The models have to be already present on the filesystem.
"},{"location":"core-services/nvidia-triton-server-inference-engine/#ai-model-encryption-support","title":"AI Model Encryption Support","text":"

For ensuring inference integrity and providing copyright protection of deep-learning models on edge devices, Kura provides decryption capabilities for trained models to be served through the Triton Server.

"},{"location":"core-services/nvidia-triton-server-inference-engine/#how-it-works","title":"How it works","text":"

Prerequisites: a deep-learning trained model (or more) exists with the corresponding necessary configuration for running on the Triton Server without encryption. A folder containing the required files (model, configuration etc) has been tested on a Triton Server.

Restrictions: if model encryption is used, the following restrictions apply:

  • model encryption support is only available for a local Triton Server instance
  • all models in the folder containing the encrypted models must be encrypted
  • all models must be encrypted with OpenPGP-compliant AES 256 cipher algorithm
  • all models must be encrypted with the same password

Once the development of the deep-learning model is complete, the developer who wants to deploy the model on the edge device in a secure manner can proceed with encrypting the Triton model using the procedure detailed below. After encrypting the model he/she can transfer the file on the edge device using his/her preferred method.

Kura will keep the stored model protected at all times and have the model decrypted in runtime only for use by the Inference Server Runtime. As soon as the model is correctly loaded into memory the decrypted model will be removed from the filesystem.

As an additional security measure, the Model Repository containing the decrypted models will be stored in a temporary subfolder and will feature restrictive permission such that only Kura, the Inference Server and the root user will be able to access it.

"},{"location":"core-services/nvidia-triton-server-inference-engine/#encryption-procedure","title":"Encryption procedure","text":"

Given a trained model inside the folder tf_autoencoder_fp32 (for example) with the following layout (see the official documentation for details):

tf_autoencoder_fp32\n\u251c\u2500\u2500 1\n\u2502\u00a0\u00a0 \u2514\u2500\u2500 model.savedmodel\n\u2502\u00a0\u00a0     \u251c\u2500\u2500 assets\n\u2502\u00a0\u00a0     \u251c\u2500\u2500 keras_metadata.pb\n\u2502\u00a0\u00a0     \u251c\u2500\u2500 saved_model.pb\n\u2502\u00a0\u00a0     \u2514\u2500\u2500 variables\n\u2502\u00a0\u00a0         \u251c\u2500\u2500 variables.data-00000-of-00001\n\u2502\u00a0\u00a0         \u2514\u2500\u2500 variables.index\n\u2514\u2500\u2500 config.pbtxt\n

Compress the model into a zip archive with the following command:

zip -vr tf_autoencoder_fp32.zip tf_autoencoder_fp32/\n

then encrypt it with the AES 256 algorithm using the following gpg command:

gpg --armor --symmetric --cipher-algo AES256 tf_autoencoder_fp32.zip\n

The resulting archive tf_autoencoder_fp32.zip.asc can be transferred to the Local Model Repository Path on the target machine and will be decrypted by Kura.

"},{"location":"core-services/position-service/","title":"Position Service","text":"

The PositionService provides the geographic position of the gateway if a GPS component is available and enabled.

When this service is enabled and provides a valid geographic position, this position is published in the gateway birth certificate with its location.

The GPS connection parameters must be defined in order to allow the service to receive the GPS frames. The PositionService supports direct access to gps device or the connection to that through gpsd.

For a device that is not connected to a GPS, it is possible to define a static position by entering latitude, longitude,, altitude and GNSS Type. In this case, the position, date and time information is returned by the PositionService as if it were an actual GPS position. This may be useful when a gateway is installed in a known place and does not move.

To use this service, select the PositionService option located in the Services area as shown in the screen capture below.

This service provides the following configuration parameters:

  • enabled - defines whether or not this service is enabled or disabled. (Required field.)

  • static - specifies true or false whether to use a static position instead of a GPS. (Required field.)

  • provider - species which position provider use, can be gpsd or serial.

    • gpsd - gpsd service daemon if is available on the system.
    • serial - direct access to gps device through serial or usb port.
    • modemManager - location information retrieved through a Modem Manager controlled modem

Warning

The Modem Manager based provider exploits the Location service offered by an enabled modem controlled by the ModemManager daemon: to work properly, MM requires that the modem has a SIM card inserted. When selecting this mode make sure you meet this necessary condition. It is possible to check the status of the modem through the OS running the command mmcli -m <numberOfModem>, the status of the location service through: mmcli -m <numberOfModem> --location-status; while the location data can be retrieved by running mmcli -m <numberOfModem> --location-get.

  • modem.manager.refresh.rate.seconds - refresh time of the position when using the ModemManager base provider.

  • gpsd.host - host where gpsd service deamon is running. (required only if gpsd provider is selected.)

  • gpsd.port - port where gpsd service is listening. (required only if gpsd provider is selected.)

  • gpsd.max.fix.validity.interval.seconds - maximum time waited for a new position info before considering the fix lost.

  • latitude - provides the static latitude value in degrees.

  • longitude - provides the static longitude value in degrees.

  • altitude - provides the static altitude value in meters.

  • GNSS Type - provides the gnss system used to retrieve static information.

  • port - supplies the USB or serial port of the GPS device.

  • baudRate - supplies the baud rate of the GPS device.

  • bitsPerWord - sets the number of bits per word (databits) for the serial communication to the GPS device.

  • stopbits - sets the number of stop bits for the serial communication to the GPS device.

  • parity - sets the parity for the serial communication to the GPS device.

"},{"location":"core-services/rest-service/","title":"REST Service","text":"

Kura provides a built-in REST Service based on the osgi-jax-rs-connector project.

By default, REST service providers register their services using the context path /services. The REST service provides the BASIC Authentication support and HTTPS client certificate authentication support.

Starting from Kura 5.4.0, REST service provides built in session management support, the Session REST APIs can be used to establish a session. Using sessions is the recommended way for interacting with Kura REST APIs from a browser based application, for this use case it is also possible to disable the default session-less BASIC and certificate based authentication (see the Basic Authentication Enabled and Enable Certificate Authentication Whitout Session Management configuration parameters below).

REST API access is available on all HTTP ports defined in the HTTP/HTTPS Configuration section, unless access is restricted to dedicated ports using the corresponding configuration parameter (see below).

Certificate authentication support is only available on the HTTPS With Certificate Authentication Ports configured in HTTP/HTTPS Configuration section.

Kura Identity names and passwords can be used for BASIC Authentication. Certificate authentication follows the same rules as Gateway Administration Console Authentication.

Warning

If the forced password change feature for a given identity is enabled, REST API password authentication will be blocked for that identity until the password is updated by the user or the feature is manually disabled. Certificate authentication will continue to be allowed even if the forced password change feature is enabled.

JAX-RS roles are mapped to Kura permissions, the name of a permission associated with a JAX-RS role is the rest. prefix followed by the role name. For example the assets role is mapped to the rest.assets permission. REST related permissions can be assigned to an identity using the Gateway Administration Console in the Identities section.

"},{"location":"core-services/rest-service/#rest-service-configuration","title":"Rest Service configuration","text":"

The available configuration parameters are the following:

  • Allowed Ports: If set to a non empty list, REST API access will be allowed only on the specified ports. If set to an empty list, access will be allowed on all ports. Please make sure that the allowed ports are open in HttpService and Firewall configuration. (Default: empty)

  • Password Authentication Enabled: Enables or disables the built-in password authentication support. (Default: true)

  • Certificate Authentication Enabled: Enables or disables the built-in certificate authentication support. (Default: true)

  • Session Based Authentication Enabled: If set to true, enables authentication using the dedicated /services/session/v1 endpoints and cookie based session management. (Default: true)

  • Session Inactivity Interval (Seconds): The session inactivity interval, sessions will expire if no request is performed for the amount of time specified by this parameter in seconds. This parameter is ignored if Session Based Authentication Enabled is set to false. (Default: 900)

  • Basic Authentication Enabled: Allows to perform authentication by providing identity name and password as BASIC credentials in the request to any resource endpoint. Requires that the Password Authentication Enabled parameter is set to true. (Default: true)

  • Enable Certificate Authentication Without Session Management: If set to true, calling /services/session/v1/certificate to create a session will not be necessary in order to perform certificate based authentication. Presenting a valid HTTPS client certificate and accessing resource endpoint directly is enough for authentication to succeed. Requires that the Certificate Authentication Enabled parameter is set to true. (Default: true)

"},{"location":"core-services/rest-service/#custom-authentication-methods","title":"Custom authentication methods","text":"

Starting from Kura 5.2.0 it is also possible to develop custom REST authentication method providers by registering an implementation of the org.eclipse.kura.rest.auth.AuthenticationProvider interface as an OSGi service. The org.eclipse.kura.example.rest.authentication.provider bundle in Kura repository provides an example on how to implement a custom authentication method.

"},{"location":"core-services/rest-service/#assets-rest-apis","title":"Assets REST APIs","text":"

Kura exposes REST APIs for the Asset instances instantiated in the framework. Assets REST APIs are available in the context path /services/assets. Following, the supported REST endpoints.

Method Path Allowed roles Encoding Request parameters Description GET / assets JSON None Returns the list of available assets GET /{pid} assets JSON None Returns the list of available channels for the selected asset (specified by the corresponding PID) GET /{pid}/_read assets JSON None Returns the read for all the READ channels in the selected Asset POST /{pid}/_read assets JSON The list of channels where the READ operation should be performed. Returns the result of the read operation for the specified channels POST /{pid}/_write assets JSON The list of channels and associated values that will be used for the WRITE operation. Performs the write operation for the specified channels returning the result of the operation."},{"location":"core-services/simple-artemis-mqtt-broker/","title":"Simple Artemis MQTT Broker","text":"

By default, this instance is disabled but, selecting the Simple Artemis MQTT Broker option in Services it is possible to enable a basic instance of an \u200bActiveMQ-7 broker with MQTT capabilities.

The service has the following configuration fields:

  • Enabled - (Required) - Enables the broker instance
  • MQTT address - MQTT broker listener address. In order to allow access to the broker from processes running on external nodes, make sure to bind the server to an externally accessible address. Setting this parameter to 0.0.0.0 binds to all addresses.
  • MQTT port - (Required) - MQTT broker port, make sure to open the specified port in the firewall configuration section if external access to the broker is required.
  • User name - The username\u200b required to access to the broker
  • Password of the user - The password required to connect. If the password is empty, no password will be required to connect.
"},{"location":"core-services/sqlite-db-service/","title":"SQLite Db Service","text":"

Starting from version 5.3, Kura provides provides an integration of the SQLite database, based on the org.xerial:sqlite-jdbc wrapper .

The database integration is not included in the official distribution, but it can be downloaded from Eclipse Marketplace as a deployment package.

Warning

Note about Raspberry PI: Recent versions of Raspberry Pi OS 32 bit on Raspberry PI 4 will use by default a 64 bit kernel with a 32 bit userspace. This can cause issues to applications that use the result of uname -m to decide which native libraries to load (see https://github.com/raspberrypi/firmware/issues/1795). This currently affects the Kura SQLite database connector. It should be possible to solve by switching to the 32 bit kernel setting arm_64bit=0 in /boot/config.txt and restarting the device.

"},{"location":"core-services/sqlite-db-service/#supported-features","title":"Supported Features","text":"

Kura supports the following SQLite database features:

  • Persistence modes: The implementation currently supports in-memory and file-based database instances.

  • Multiple database instances: It is possible to create and configure multiple database instances from the Kura Administration UI, these instances can be selectively consumed by applications.

  • Journaling modes: The implementation currently supports the WAL and rollback journal journaling modes.

  • Periodic database defrag and checkpoint: The implementations currently supports periodic defrag (VACUUM) and periodic WAL checkpoint.

"},{"location":"core-services/sqlite-db-service/#usage","title":"Usage","text":""},{"location":"core-services/sqlite-db-service/#creating-a-new-sqlite-database-instance","title":"Creating a new SQLite database instance","text":"

To create a new SQLite database instance, use the following procedure:

  1. Open the Administrative UI and press the + button in the side menu, under the Services section. A pop-up dialog should appear.
  2. Select org.eclipse.kura.db.SQLiteDbService from the Factory drop-down list, enter an arbitrary name for the new instance and click Apply.
  3. An entry for the newly created instance should appear in the side menu under Services, click on it to review its configuration. It is not possible to create different DB instances that manage the same database file.
"},{"location":"core-services/sqlite-db-service/#configuration-parameters","title":"Configuration Parameters","text":"

The SQLite DB provides the following configuration parameters:

  • Database Mode: Defines the database mode. If In Memory is selected, the database will not be persisted on the filesystem, all data will be lost if Kura is restarted and/or the database instance is deleted. If Persisted is selected, the database will be stored on disk in the location specified by the Persisted Database Path parameter.

  • Persisted Database Path: Defines the path to the database file (it must include the database file name). This parameter is only relevant for persisted databases.

  • Encryption Key: Allows to specify a key/passphrase for encrypting the database file. This feature requires a SQLite binary with an encryption extension, and is only relevant for persisted databases. The key format can be specified using the Encryption Key Format parameter. If the value of this parameter is changed, the encryption key of the database will be updated accordingly. This parameter can be left empty to create an unencrypted database or to decrypt an encrypted one.

Note

The sqlite-jdbc version distributed with Kura does not contain any encryption extension, encryption features will not be available out of the box. See sqlite-jdbc documentaton for instructions about how to use a security extension.

  • Encryption Key Format: Allows to specify the format of the Encryption Key parameter value. The possible values are ASCII (an ASCII string), Hex SSE (the key is an hexadecimal string to be used with the SSE extension) or Hex SQLCipher (the key is an hexadecimal string to be used with the SQLCipher extension).

  • Journal Mode: The database journal mode. The following options are available:

    • Rollback Journal: The database instance will use the rollback journal for more details. More specifically, the DELETE argument will be passed to the pragma journal_mode command.

    • WAL: The database instance will use WAL mode. This is the default mode.

    The WAL mode description page contains a comparison of the two modes.

  • Defrag enabled: Enables or disables the database defragmentation. Use the Defrag Interval parameter to specify the interval.

  • Defrag interval (seconds): The implementation supports running periodic defragmentation using the VACUUM command. This parameter specifies the interval in minutes between two successive checkpoints, set to zero to disable. This parameter is only relevant for persisted databases.

Warning

The total disk space used by SQLite database files might temporarily increase during defragmentation and/or if transactions that modify a lot of data are performed (including deletion). In particular:

  • Defragmentation is implemented by copying all non-free database pages to a new file and then deleting the original file.
  • If transactions that involve a lot of data are performed, in case of rollback journal the old content of the modified pages will be stored in the journal until the transaction is completed, and in WAL mode the new content of modified pages will be stored to the WAL file until the next checkpoint is performed.

It is recommended to perform some tests to determine the maximum database files size that will be used by the application and ensure that the size of the partition containing the database is at least twice as the expected db size.

  • Checkpoint enabled: Enables or disables checkpoints in WAL journal mode. Use the WAL Checkpoint Interval parameter to specify the interval.

  • WAL Checkpoint Interval (Seconds): The implementation supports running periodic periodic WAL checkpoints. Checkpoints will be performed in TRUNCATE mode. This parameter specifies the interval in seconds between two consecutive checkpoints, set to zero to disable. This parameter is only relevant for persisted databases in WAL Journal Mode. In WAL mode a checkpoint will be performed after a periodic defragmentation regardless of the value of this parameter.

  • Connection pool max size: The implementation manages connections using a connection pool. This parameter defines the maximum number of connections for the pool. If a new connection is requested

  • Delete Database Files On Failure: If set to true, the database files will be deleted in case of failure in opening a persisted database. This is intended as a last resort measure for keeping the database service operational, especially in the case when it is used as a cloud connection message store.

  • Debug Shell Access Enabled: Enables or disables the interaction with this database instance using the sqlitedbg:excuteQuery OSGi console command. (see #debug-shell)

"},{"location":"core-services/sqlite-db-service/#selecting-a-database-instance-for-existing-components","title":"Selecting a database instance for existing components","text":"

A database instance is identified by its Kura service PID. The PID for instances created using the Web UI is the string entered in the Name field at step 2 of the previous section.

The built-in components that use database functionalities allow to specify which instance to use in their configuration. These components are the DataService component of the cloud stack, the Wire Record Store and Wire Record Query wire components. The configuration of each component contains a property that allows to specify the Kura Service PID of the desired instance.

Warning

Using SQLite database instances through the deprecated DbFilter and DbStore components is not supported.

"},{"location":"core-services/sqlite-db-service/#usage-through-wires","title":"Usage through Wires","text":"

It is possible to store and extract Wire Records into/from a SQLite database instance using the Wire Record Store and Wire Record Query wire components.

When a Wire Record is received by a Wire Record Store attached to a SQLite based database instance, the data will be stored in a table whose name is the current value of the Record Collection Name configuration parameter of the Wire Component.

Each property contained in a Wire Record will be appended to a column with the same name as the property key. A new column will be created if it doesn't already exists.

Since it is not possible to establish a one to one mapping between SQLite storage classes and the data types available on the Wires, the implementation will assign a custom type name to the created columns in order to keep track of the inserted Wire Record property type.

The custom types will be assigned according to the following table:

Wires Data Type Column Type Name Storage Class Type Affinity BOOLEAN BOOLEAN INTEGER INTEGER INT INTEGER LONG BIGINT INTEGER FLOAT FLOAT REAL DOUBLE DOUBLE REAL STRING TEXT TEXT BYTE_ARRAY BLOB BLOB

The custom column type makes it possible to preserve the original type when data is extracted with the Wire Record Query component. Please note that the resulting type may change in case of queries that build computed columns.

Warning

It is not recommended to store Wire Records having properties with the same key and different value type. If the value type changes, the target column will be dropped and recreated with the type derived from the last received record. All existing data in the target column will be lost. The purpose of this is to allow changing the type of a column with a Wire Graph configuration update.

"},{"location":"core-services/sqlite-db-service/#debug-shell","title":"Debug shell","text":"

It is possible to inspect the contents of the database file using the OSGi console with the following command:

sqlitedbg:executeQuery dbServicePid 'query'\n

or more simply 

executeQuery dbServicePid 'query'\n

where dbServicePid is the user defined pid of the target database instance and query is an arbitrary SQL query to be executed (make sure to properly quote the query string with the ' character). The command will print the result set or changed row count on the console.

It is only possible to access database instances whose Debug Shell Access Enabled configuration parameter is set to true. The default of this parameter is false.

The OSGi console is disabled by default, it can be accessed by starting the framework with the /opt/eclipse/kura/bin/start_kura_debug.sh script and running the following command on the gateway: 

telnet localhost 5002\n

Warning

This feature is intended for debug purposes only, the Debug Shell Access Enabled parameter as well as the OSGi console should not be left enabled on production systems.

"},{"location":"core-services/watchdog-service/","title":"Watchdog Service","text":"

The WatchdogService provides methods for starting, stopping, and updating a hardware watchdog if it is present on the system. Once started, the watchdog must be updated to prevent the system from rebooting.

To use this service, select the WatchdogService option located in the Services area as shown in the screen capture below.

This service provides the following configuration parameters:

  • enabled - sets whether or not this service is enabled or disabled. (Required field)

  • pingInterval - defines the maximum time interval between two watchdogs' refresh to prevent the system from rebooting. (Required field)

  • Watchdog device path - sets the watchdog device path. (Required field)

  • Reboot Cause File Path - sets the path to the file that will contain the reboot cause information. (Required field)

"},{"location":"gateway-configuration/authentication-and-authorization/","title":"Authentication and authorization","text":"

Kura 5 introduces a centralized authentication and authorization framework based on the OSGi UserAdmin specification. This framework introduces the concepts of identities and permissions:

  • Identity: A Kura identity is related to authentication, an identity has a name and a set of associated credentials, for example a password.

  • Permission: A Kura permission is related to authorization. Zero or more permissions can be assigned to a given identity. Each permission allows to access a set of resources and/or perform certain operations. Permissions can be defined by applications.

Examples of applications that use the new authentication and authorization framework are the Web Console and the REST API framework:

  • Kura Web Console provides multi user support, Web Console users are mapped to Kura identities, the Web Console also defines a set of permissions that allow to restrict the operations that a given identity is allowed to perform.
  • The Kura REST API framework users are now mapped to Kura identities and REST roles are mapped to Kura permissions. The old ConfigurationService based user and role definition mechanism has been dropped.

The authentication and authorization framework only allows to define and store identities and permissions, it does not provide implementation of authentication methods and/or session management. These aspects are left to applications.

"},{"location":"gateway-configuration/authentication-and-authorization/#permission-and-identity-representation","title":"Permission and identity representation","text":"

Permissions and identities are implemented on top of the UserAdmin User and Group concepts. See OSGi UserAdmin specification for more details on the Role, User and Group concepts.

"},{"location":"gateway-configuration/authentication-and-authorization/#identityservice-java-apis","title":"IdentityService Java APIs","text":"

Kura 5.5 introduces a new set of Java APIs that allow to manage Kura identities, the implementation is based on the UserAdmin conventions described in this page, and allows to manipulate Kura identities without interacting directly with the UserAdmin. Please refer to the Javadoc for more details.

The new APIs also provide the capability to implement and register IdentityConfigurationExtensions in the framework.

An IdentityConfigurationExtension can define additional custom configuration parameters for each identity. The custom configuration can be inspected and modified in the Identities section of Kura Web UI and using the identity/v2 rest APIs and MQTT request handler. The IdentityConfigurationExtension implementation can store the additional configuration in the way that is most suitable for the application, for example by adding custom UserAdmin properties or credentials.

"},{"location":"gateway-configuration/authentication-and-authorization/#identities","title":"Identities","text":"

A Kura identity is represented as a UserAdmin User with the following properties:

  • The User name must be in the kura.user.${identity_name} form where ${identity_name} is a non empty string representing the identity name. The name of an User representing a Kura identity must start with the kura.user. prefix.

  • A password may be assigned to an identity by defining a property in User credentials with the following format:

  • The property name must be kura.password
  • The property value must be a string containing SHA256 hash of the password, as computed by the 
    String org.eclipse.kura.crypto.CryptoService.sha256Hash(String)\n
    method.

Starting from Kura 5.1, it is possible to force an identity to change the password at next login by setting the following property in User properties: - kura.need.password.change : true encoded as a JSON string. - The property will be cleared automatically after a successful password change on next login.

Starting from Kura 5.5 the following restrictions will be applied by the IdentityService:

  • New Identity Names:
    • must be at least 3 and at most 255 characters long.
    • can only be composed by one or more sequences of alphanumeric characters ([A-Za-z0-9]+) separated by the dot or underscore symbols, dot and underscore is not allowed at the beginning or at the end of the permission name, sequences of consecutive dots and/or underscores are not allowed (examples of valid names are foo1.bAr, foo, a.b.c, foo.bar_baz).
  • New Passwords:
    • cannot be empty.
    • must satisfy the password strenght requirements configured on the system.
    • the maximum allowed length is 255 characters.
    • cannot contain whitespace characters.
"},{"location":"gateway-configuration/authentication-and-authorization/#permissions","title":"Permissions","text":"

A Kura permission is represented as a UserAdmin Group with the following properties:

  • The Group name must be in the kura.permission.${permission_name} form where ${permission_name} is a non empty string representing the permission name. The name of a Group representing a Kura permission must start with the kura.permission. prefix.

  • Assigning a permission to a specific identity can be done by adding the User representing the identity to the basic members of the Group representing the permission.

Starting from Kura 5.5 the following restrictions will be applied by the IdentityService to the name new permissions:

  • must be at least 3 and at most 255 characters long.
  • can only be composed by one or more sequences of alphanumeric characters ([A-Za-z0-9]+) separated by the dot symbol, the dot is not allowed at the beginning or at the end of the permission name (examples of valid permission names are foo1.bAr, foo, a.b.c).
"},{"location":"gateway-configuration/authentication-and-authorization/#useradmin-persistence","title":"UserAdmin persistence","text":"

The org.eclipse.kura.internal.useradmin.store.RoleRepositoryStoreImpl Kura service allows to persist the UserAdmin state in Kura configuration snapshot, this includes the defined identities and permissions.

The following configuration properties are used to store the UserAdmin concepts in Json format:

  • Role configuration (id roles.config):

Stores the UserAdmin Roles, plain Roles are non used for representing Kura identities and permissions. The value must be a JSON array of Role elements.

  • User configuration (id users.config):

Stores the UserAdmin Users. The value must be a JSON array of User elements.

  • Group configuration (id groups.config):

Stores the UserAdmin Groups. The value must be a JSON array of Group elements.

"},{"location":"gateway-configuration/authentication-and-authorization/#json-representation-details","title":"JSON representation details","text":"

This section describes the JSON format used in org.eclipse.kura.internal.useradmin.store.RoleRepositoryStoreImpl configuration.

"},{"location":"gateway-configuration/authentication-and-authorization/#useradmindictvalue","title":"UserAdminDictValue","text":"

A value appearing in UserAdmin dictionaries like properties and credentials

  • type : variant Variants:

  • a String property

    • type : string
  • a byte[] property
    • type : array, element description: a byte of the array encoded as an unsigned integer
    • type : number

Examples:

\"A string property\"\n
[1, 2, 3, 4, 5]\n
"},{"location":"gateway-configuration/authentication-and-authorization/#useradmindict","title":"UserAdminDict","text":"

A UserAdmin property dictionary, there are no well known property names, property values must be of UserAdminDictValue type

  • type : object

Example:

{\n  \"stringProperty\": \"A string property\",\n  \"byteArrayProperty\": [1, 2, 3, 4, 5]\n}\n
"},{"location":"gateway-configuration/authentication-and-authorization/#role","title":"Role","text":"

An object describing and UserAdmin Role

  • type : object Properties:

  • name The role name

  • type : string

  • properties

  • optional If the dictionary is empty
    • UserAdminDict
"},{"location":"gateway-configuration/authentication-and-authorization/#user","title":"User","text":"

An object describing and UserAdmin User

  • type : object Properties:

  • name The role name

  • type : string

  • properties

  • optional If the dictionary is empty

    • UserAdminDict

  • credentials

  • optional If the dictionary is empty
    • UserAdminDict

Example:

{\n  \"name\": \"kura.user.appadmin\",\n  \"credentials\": {\n    \"kura.password\": \"3hPckF8Zc+IF3pVineBvck3zJERUl8itosySULE1hpM=\"\n  }\n}\n
"},{"location":"gateway-configuration/authentication-and-authorization/#group","title":"Group","text":"

An object describing and UserAdmin Group

  • type : object Properties:

  • name The role name

  • type : string

  • properties

  • optional If the dictionary is empty

    • UserAdminDict

  • credentials

  • optional If the dictionary is empty

    • UserAdminDict

  • basicMembers

  • optional If the list is empty The list of the group basic members

    • type : array, element description: A role name
    • type : string

  • requiredMembers

  • optional If the list is empty The list of the group required members
    • type : array, element description: A role name
    • type : string

Example:

{\n  \"name\": \"kura.permission.kura.wires.admin\",\n  \"basicMembers\": [\"kura.user.appadmin\"]\n}\n
"},{"location":"gateway-configuration/cellular-configuration/","title":"Cellular Configuration","text":"

If it is not configured, the cellular interface is presented on the interface list by modem USB address (i.e. 2-1). This 'fake' interface name is completed by 'proper' interface name (e.g., ppp0) when the first modem configuration is submitted.

The cellular interface should be configured by first enabling it in the IPv4 or IPv6 tab, and then setting the Cellular tab. Note that the cellular interface can only be set as WAN using DHCP, Disabled or Not Managed (only for IPv4 connections). The cellular interface configuration options are described below.

"},{"location":"gateway-configuration/cellular-configuration/#cellular-configuration_1","title":"Cellular Configuration","text":"

The Cellular tab contains the following configuration parameters:

  • Model: specifies the modem model.

  • Network Technology: describes the network technology used by this modem.

    • HSDPA
    • EVDO
    • EDGE

  • Connection Type: specifies the type of connection to the modem.

  • Modem Identifier: provides a unique name for this modem.

  • Interface #: provides a unique number for the modem interface (e.g., an interface # of 0 would name the modem interface ppp0).

  • Dial String: instructs how the modem should attempt to connect. Typical dial strings are as follows:

    • HSPA modem: atd*99***1#
    • EVDO/CDMA modem: atd#777

  • APN: defines the modem access point name.

    This is an optional parameter. If left empty, the value is automatically picked up from the Mobile Broadband Provider the modem is registered to. If a value is filled, the APN value is explicitly configured.

    To avoid misconfiguration issues, it is strongly recommended to set it manually.

    Note

    APN value configuration

    A good practice is to set the interface status to Disabled and then Enable For WAN when the APN is explicitly set. NetworkManager, indeed, may fallback to the default value if a wrong APN is specified, causing misleading behaviors. This does not happen if the interface is disabled and re-enabled after APN changes.

  • Auth Type: specifies the authentication type.

    • None
    • Auto
    • CHAP
    • PAP

  • Username: supplies the username; disabled if no authentication method is specified.

  • Password: supplies the password; disabled if no authentication method is specified.

  • Modem Reset Timeout: sets the modem reset timeout in minutes. If set to a non-zero value, the modem is reset after n consecutive minutes of unsuccessful connection attempts. If set to zero, the modem keeps trying to establish a PPP connection without resetting. The default value is 5 minutes.

  • Reopen Connection on Termination: sets the persist option of the PPP daemon that specifies if PPP daemon should exit after connection is terminated. Note that the maxfail option still has an effect on persistent connections.

  • Connection Attempts Retry Delay: Sets the holdoff parameter to instruct the PPP daemon on how many seconds to wait before re-initiating the link after it terminates. This option only has any effect if the persist option (Reopen Connection on Termination) is set to true. The holdoff period is not applied if the link was terminated because it was idle. The default value is 1 second.

  • Connection Attempts: sets the maxfail option of the PPP daemon that limits the number of consecutive failed PPP connection attempts. The default value is 5 connection attempts. A value of zero means no limit. The PPP daemon terminates after the specified number of failed PPP connection attempts and restarts by the ModemMonitor thread.

  • Disconnect if Idle: sets the idle option of the PPP daemon, which terminates the PPP connection if the link is idle for a specified number of seconds. The default value is 95 seconds. To disable this option, set it to zero.

  • Active Filter: sets the active-filter option of the PPP daemon. This option specifies a packet filter (filter-expression) to be applied to data packets in order to determine which packets are regarded as link activity, and thereby, reset the idle timer. The filter-expression syntax is as described for tcpdump(1); however, qualifiers that do not apply to a PPP link, such as ether and arp, are not permitted. The default value is inbound. To disable the active-filter option, leave it blank.

  • LCP Echo Interval: sets the lcp-echo-interval option of the PPP daemon. If set to a positive number, the modem sends LCP echo request to the peer at the specified number of seconds. To disable this option, set it to zero. This option may be used with the lcp-echo-failure option to detect that the peer is no longer connected.

  • LCP Echo Failure: sets the lcp-echo-failure option of the PPP daemon. If set to a positive number, the modem presumes the peer to be dead if a specified number of LCP echo-requests are sent without receiving a valid LCP echo-reply. To disable this option, set it to zero.

"},{"location":"gateway-configuration/cellular-configuration/#gps","title":"GPS","text":"

The GPS tab allows the user to enable or disable the GPS module provided by the cellular modem. The available properties are:

  • Enable GPS: enables GPS module for the selected modem.
  • GPS Mode: specifies the GPS mode.
    • UNMANAGED: the GPS device of the modem will be setup but not directly managed, therefore freeing the serial port for other services to use. This can be used in order to perform the setup of the GPS and then have another service (like gpsd) parse the NMEA strings in order to extract the position informations.
    • MANAGED_GPS: the GPS device of the modem will be setup and directly managed (typically by ModemManager) therefore the serial port won't be available for other services to use.

GPS modes availability

GPS modes available for the modem are dependent on the modem model, modem firmware version and ModemManager version installed on the system. Some modes may not be selectable if the modem does not support them.

Therefore, to use the GPS module provided by the cellular modem with Kura's PositionService, the following considerations should be taken into account:

  • The PositionService should be enabled. Serial settings of the PositionService should not be changed; it will be redirected to the modem GPS port automatically.
  • To use the gpsd and serial PositionService providers with the GPS module provided by the cellular modem, the GPS mode should be set to UNMANAGED.
  • To use the modemmanager PositionService provider with the GPS module provided by the cellular modem, the GPS mode should be set to MANAGED_GPS.

Refer to the Position Service section for more information.

"},{"location":"gateway-configuration/cloud-connections/","title":"Cloud Connections","text":"

The Cloud Connections section of the Kura Gateway Administration Console allows to create and manage cloud connections.

By default, Kura starts with a single cloud connection, as depicted in the following image:

The cloud services page allows to: - create a new cloud connection; - delete an existing cloud connection; - connect a selected cloud stack to the configured cloud platform; - disconnect the selected cloud stack from the connected cloud platform; - refresh the existing cloud connections.

When clicking on the New button, a dialog is displayed as depicted in the image below:

The user can select one of the existing cloud connection factories and give it a name (depending on the implementation, a name format can be suggested or forced).

Selecting a created Cloud Connection it is possible to associate a new publisher/subscriber by clicking the New Pub/Sub button. As for the connection creation case, the user can select one of the existing publisher/subscriber factories and give it a name.

"},{"location":"gateway-configuration/cloud-service-configuration/","title":"Cloud Service Configuration","text":"

The CloudService provides an easy-to-use API layer for the M2M application to communicate with a remote server. It operates as a decorator for the DataService, providing add-on features over the management of the DataTransport layer.

In addition to simple publish/subscribe, the Cloud Connection API simplifies the implementation of more complex interaction flows like request/response or remote resource management. The Cloud Connection abstracts the developers from the complexity of the transport protocol and payload format used in the communication.

The Cloud Connection allows a single connection to a remote server to be shared across more than one application in the gateway, providing the necessary topic partitioning. Its functions include:

  • Adds application topic prefixes to allow a single remote server connection to be shared across applications.

  • Defines a payload data model and provides default encoding/decoding serializers.

  • Publishes life-cycle messages when the device and applications start and stop.

To use this service, select the CloudService option located in the Cloud Services area as shown in the screen capture below.

The CloudService provides the following configuration parameters:

  • device.display-name: defines the device display name given by the system. (Required field).

  • device.custom-name: defines the custom device display name if the device.display-name parameter is set to \"Custom\".

  • topic.control-prefix: defines the topic prefix used for system and device management messages.

  • encode.gzip: defines if the message payloads are sent compressed.

  • republish.mqtt.birth.cert.on.gps.lock: when set to true, forces a republish of the MQTT Birth Certificate when a GPS correct position lock is received. The device is then registered with its real coordinates. (Required field).

  • enable.default.subscriptions: manages the default subscriptions to the gateway management MQTT topics. When disabled, the gateway will not be remotely manageable.

  • payload.encoding: specifies the encoding for the messages sent by the specific CloudService instance.

    • Kura Protobuf - when this option is selected, the Kura Protobuf encoding will be used
    • Simple JSON - the simple JSON encoding will be used instead. More information is available here. An example below.
{\n\"sentOn\" : 1491298822,\n\"position\" : {\n    \"latitude\" : 45.234,\n    \"longitude\" : -7.3456,\n    \"altitude\" : 1.0,\n    \"heading\" : 5.4,\n    \"precision\" : 0.1,\n    \"speed\" : 23.5,\n    \"timestamp\" : 1191292288,\n    \"satellites\" : 3,\n    \"status\" : 2\n},\n\"metrics\": {\n    \"code\" : \"A23D44567Q\",\n    \"distance\" : 0.26456E+4,\n    \"temperature\" : 27.5,\n    \"count\" : 12354,\n    \"timestamp\" : 23412334545,\n    \"enable\" : true,\n    \"rawBuffer\" : \"cGlwcG8gcGx1dG8gcGFwZXJpbm8=\"\n},\n\"body\": \"UGlwcG8sIHBsdXRvLCBwYXBlcmlubywgcXVpLCBxdW8gZSBxdWEu\"\n}\n

The default CloudService implementations publishes the following lifecycle messages:

  1. BIRTH message: sent immediately when device is connected to the cloud platform;
  2. DISCONNECT message: sent immediately before device is disconnected from the cloud platform;
  3. delayed BIRTH message: sent when new cloud application handler becomes available, a DP is installed or removed, or when the GPS position is locked (can be disabled). These messages are cached for 30 seconds before sending. If no other message of such type arrives the message is sent; otherwise the BIRTH is cached and the timeout restarts. This is to avoid sending multiple messages when the framework starts.
"},{"location":"gateway-configuration/data-service-configuration/","title":"Data Service Configuration","text":"

The DataService provides the ability to connect to a remote broker, publish messages, subscribe to topics, receive messages on the subscribed topics, and disconnect from the remote message broker. The DataService delegates to the MqttDataTransport service the implementation of the transport protocol that is used to interact with the remote server.

The DataService also adds the capability of storing published messages in a persistent store function and sending them over the wire at a later time. The purpose of this feature is to relieve service users from implementing their own persistent store. Service users may publish messages independently on the DataService connection status.

Info

Starting from Kura 5.3.0, the DataService allows to bind to custom persistent stores. A custom persistent store can be defined by creating an implementation the new org.eclipse.kura.message.store.provider.MessageStoreProvider service interface and registering it as an OSGi service.

In order to overcome the potential latencies introduced by buffering messages, the DataService allows a priority level to be assigned to\u200b each published message. Depending on the store configuration, there are certain guarantees that stored messages are not lost due to sudden crashes or power outages.

To use this service, select the DataService option located in the Cloud Connections area as shown in the screen capture below.

The DataService offers methods and configuration options to manage the connection to the remote server including the following (all required) parameters described below.

  • Connect Auto-on-startup - When set to true, the service tries to auto-connect to the remote server on start-up and restore the connection every time the device is disconnected. These attempts are made at the frequency defined in the Connect Retry-interval parameter until the connection is established. Using the Connect/Disconnect button disables this function.
  • Connect Retry-interval - Frequency in seconds to retry a connection of the Data Publishers after a disconnect.
  • Enable Recovery On Connection Failure - Enables the recovery feature on connection failure. If the device is not able to connect to a remote cloud platform, the service will wait for a specified amount of connection retries. If the recovery fails, the device will be rebooted. Being based on the Watchdog service, it needs to be activated as well.
  • Connection Recovery Max Failure - Number of failures in Data Publishers connection before forcing a reboot.
  • Disconnect Quiesce-timeout - Allows the delivery of in-flight messages to be completed before disconnecting from the broker when a disconnection from the broker is being forced.
  • Message Store Provider Service PID - The Kura service pid of the Message Store instance to be used. The pid of the default instance is org.eclipse.kura.db.H2DbService. The Message Store instance must implement the org.eclipse.kura.message.store.provider.MessageStoreProvider interface.
  • Store Housekeeper-interval - Defines the interval in seconds used to run the Data Store housekeeper task.
  • Store Purge-age - defines the age in seconds of completed messages (either published with QoS = 0 or confirmed with QoS > 0) after which they are deleted (minimum 5).
  • Store Capacity - Defines the maximum number of messages persisted in the Data Store.
  • In-flight-messages parameters - Define the management of messages that have been published and not yet confirmed, including:
  • In-flight-messages Republish-on-new-session - Whether to republish in-flight messages on a new MQTT session.
  • In-flight-messages Max-number - The maximum number of in-flight messages.
  • In-flight-messages Congestion-timeout - Timeouts the in-flight messages congestion condition. The service will force a disconnect attempting to reconnect (0 to disable).
"},{"location":"gateway-configuration/data-service-configuration/#connection-monitors","title":"Connection Monitors","text":"

The DataService offers methods and configuration options to monitor the connection to the remote server and, eventually, cause a system reboot to recover from transient network problems.

This feature, if enabled, leverages the watchdog service and reboots the gateway if the maximum number of configured connection attempts has been made.

A reboot is not requested if the connection to the remote broker succeeds but an authentication error, an invalid client id or an authorization error is thrown by the remote cloud platform and causes a connection drop.

The image below shows the parameters that need to be tuned in order to enable this connection monitor feature.

To configure this functionality, the System Administrator needs to specify the following configuration elements:

  • Enable Recovery On Connection Failure: when enabled, activates the recovery feature on connection failure: if the device is not able to connect to a remote cloud platform, the service will wait for a specified amount of connection retries. If the recovery fails, the device will be rebooted. Being based on the Watchdog service, it needs to be activated as well.

  • Connection Recovery Max Failure: related to the previous parameter. It specifies the number of failures before a reboot is requested. !!! warning To be fully working, this feature needs the enabling of the Watchdog Service.

"},{"location":"gateway-configuration/data-service-configuration/#message-publishing-backoff-delay","title":"Message Publishing Backoff Delay","text":"

In order to have a finer control on the data flow, when a device reconnects to a remote cloud platform, Kura integrates into the Data Service a Backoff delay feature that limits the rate of messages sent.

This feature, enabled by default, integrates the Token Bucket concept to limit the bursts of messages sent to a remote cloud platform.

In the image below, the parameters that need to be tuned, in the Data Service, to take advantage of this feature:

  • Enable Rate Limit - Enables the token bucket message rate limiting.

  • Rate Limit Average - he average message publish rate in number of messages per unit of time (e.g. 10 messages per MINUTE).

    Danger

    The maximum allowed message rate is 1 message per millisecond, so the following limitations are applied:

    • 86400000 per DAY
    • 3600000 per HOUR
    • 60000 messages per MINUTE
    • 1000 messages per SECOND
    • Rate Limit Time Unit - The time unit for the Rate Limit Average.
    • Rate Limit Burst Size - The token bucket burst size.

The default setup limits the data flow to 1 message per second with a bucket size of 1 token.

Warning

This feature needs to be properly tuned by the System Administrator in order to prevent delays in the remote cloud platform due to messages stacked at the edge.

If not sure of the number of messages that your gateways will try to push to the remote platform, we suggest to disable this feature.

"},{"location":"gateway-configuration/data-service-configuration/#connection-schedule","title":"Connection schedule","text":"

Starting from Kura 5.3.0, the Data Service supports a configurable time based connection schedule. If this functionality is enabled, the Data Service will connect at specific time instants represented by a configurable Cron expression, keep the connection open until it becomes idle and then disconnect until the next instant that matches the expression.

More in detail, the connection logic is as follows:

  1. The DataService parses the confgiured Cron expression and schedules a connection attempt at the next instant that matches the expression. When the connection instant is reached, the logic continues from step 2.

  2. The Data Service will start the auto connect logic. One or more connection attempts will be performed until the connection is established honoring the connect.retry-interval parameter.

  3. The Data Service starts a timer that ticks after connection.schedule.inactivity.interval.seconds seconds. When the timer ticks the connection will be closed, and the logic resumed from step 1. The timer is reset delaying the disconnection when a message is published or confirmed (for QoS >= 1). The connection will not be closed if there are messages with QoS >= 1 that have not been confirmed yet. If an unexpected connection drop occurs in this phase, the logic will resume from step 2.

The Data Service will attempt to detect large time shifts in system clock, if a time shift is detected, the logic will switch to step 1, rescheduling the next connection attempt.

The relevant configuration parameters are the following:

  • Enable Connection Schedule: Enables or disables the connection schedule feature. Please note that in order to enable the connection logic, the Connect Auto-on-startup parameter must be set to true as well.

  • Connection Schedule CRON Expression: A CRON expression that specifies the instants when the gateway should perform a connection attempt. This parameter is only used if Enable Connection Schedule is set to true. The default expression schedules a connection every day at midnight.

  • Allow priority message to overide connection schedule - Allows messages beyond a specified priority to force a connection and be sent regardless of connection schedule.

  • Message schedule priority override threshold - A message with a priority equal to or less than this threshold will cause the framework to automatically re-connect and send regardless of the connection schedule.

  • Connection Schedule Disconnect Inactivity Interval Second: Specifies an inactivity timeout in seconds. If the timeout expires, the cloud connection will be automatically closed. This parameter is only used if Enable Connection Schedule is set to true.

"},{"location":"gateway-configuration/data-service-configuration/#payload-size-limiting","title":"Payload size limiting","text":"

Starting from Kura 5.3.0, the DataService allows to limit the maximum payload size for published messages. Attempts to publish a payload larger than the configured threshold will fail with a KuraStoreException. The threshold can be configured with the following parameter:

  • Maximum Payload Size: The maximum allowed size in bytes for the message payload.

In order to keep backwards compatibility, the default value for the parameter is set to 16777216 bytes, which is the maximum allowed size by the current H2DbService implementation.

"},{"location":"gateway-configuration/data-transport-service-configuration/","title":"Data Transport Service Configuration","text":"

The DataTransport service provides the ability to connect to a remote broker, publish messages, subscribe to topics, receive messages on the subscribed topics, and disconnect from the remote message broker. To use this service, select the MqttDataTransport option located in the Cloud Connections area as shown in the screen captures below.

The MqttDataTransport service provides the following configuration parameters:

  • broker-url: defines the URL of the MQTT broker to connect to. For the Everyware Cloud sandbox, this address is either mqtt://broker-sbx.everyware.io:1883/ or mqtts://broker-sbx.everyware.io:8883/ for an encrypted connection. (Required field).

  • topic.context.account-name: defines the name of the account to which the device belongs.

  • username and password: define the username and password that have been assigned to the device by the account administrator (generally username is account-name_broker). (Required field).

  • client-id: defines the identifier of the MQTT client representing the device when connecting to the MQTT broker. If left empty, it is automatically determined by the client software as the MAC address of the main network interface (in general numbers and uppercase letters without ':'). This identifier has to be unique within your account.

  • keep-alive: defines the \"keep alive\" interval measured in seconds. It specifies the maximum amount of time that should pass without communication between the client and the server. The client will ensure that at least one message travels across the network within each keep alive period. In the absence of a data-related message during this time period, the client will send a very small MQTT \"ping\" message that the server will acknowledge. The keep alive interval enables the client to detect when the server is no longer available without having to wait for the long TCP/IP timeout. (Required field).

    Warning

    The keep-alive interval may \"conflict\" with the TCP idle timeout set at the TCP/IP level. As a best practice the TCP idle timeout should be at least 1,5 times the keep-alive time interval. If the TCP idle timeout is less or equal the keep-alive, the MQTT connection may be dropped due to the TCP idle timeout expiration.

  • timeout: sets the timeout used for all interactions with the MQTT broker. (Required field).

  • clean-session: controls the behavior of both the client and the server at the time of connection and disconnection. When this parameter is set to true, the state information is discarded at connection and disconnection; when set to false, the state information is maintained. (Required field).

  • lwt parameters: define the MQTT \"Last Will and Testament\" (LWT) settings for the client. In the event that the client unexpectedly loses its connection to the server, the server publishes the LWT message (lwt.payload) to the LWT topic on behalf of the client. This allows other clients (subscribed to the LWT topic) to be made aware that the client has disconnected. LWT parameters that may be configured include:

    • lwt.topic
    • lwt.payload
    • lwt.qos
    • lwt.retain

  • in-flight.persistence: defines the storage type where in-flight messages are persisted across reconnections. They may be stored in memory, or in a file on the disk. (Required field).

  • protocol-version: defines the MQTT Protocol version to be used. This value may be 3.1 or 3.1.1.

  • SSL parameters: define the SSL specific settings for the client. SSL parameters that can be configured include:

    • ssl.default.protocol
    • ssl.hostname.verification
    • ssl.default.cipherSuites
    • ssl.certificate.alias
"},{"location":"gateway-configuration/device-information/","title":"Device Information","text":"

The Device section provides several information about the gateway where Kura is running on. This section can be accessed by selecting the Device option located in the System area.

"},{"location":"gateway-configuration/device-information/#profile","title":"Profile","text":"

The Profile tab shows several information about the gateway, organized under the Device, Hardware, Software and Java Information.

"},{"location":"gateway-configuration/device-information/#bundles","title":"Bundles","text":"

This tab lists all the bundles installed on Kura, with details about the name, version, id, state and signature status. The signature value will be true if the corresponding bundle is signed, false otherwise.

The buttons in the upper part of the tab allows the user to manage the listed bundles:

  • Start Bundle: starts a bundle that is in Resolved or Installed state;
  • Stop Bundle: stops a bundle that is in Active state;
  • Refresh: reloads the bundles states list.

"},{"location":"gateway-configuration/device-information/#containers","title":"Containers","text":"

The Containers tab lists the containers and images that are currently managed by the Container Orchestration Service. From this tab, the user can start and stop containers and delete images.

"},{"location":"gateway-configuration/device-information/#threads","title":"Threads","text":"

The Threads tab shows a list of the threads that are currently running in the JVM.

"},{"location":"gateway-configuration/device-information/#system-packages","title":"System Packages","text":"

The System Packages tab shows the list of all the Linux packages installed on the OS. The package is detailed with the name, version and type (DEB/RPM/APK).

Note

In Debian based systems, if a package is removed without the purge option, the package will be still listed on the System Packages tab.

"},{"location":"gateway-configuration/device-information/#system-properties","title":"System Properties","text":"

The System Properties tab shows a list of relevant properties including OS and JVM parameters.

"},{"location":"gateway-configuration/device-information/#command","title":"Command","text":"

A detailed description of this tab is presented in the Command Service page.

"},{"location":"gateway-configuration/device-information/#system-logs","title":"System Logs","text":"

The System Logs tab allows downloading a compressed file containing all the relevant log files from the gateway. The download button creates and downloads a compressed file with the following items:

  • all the files in /var/log or the content of the folder defined by the kura.log.download.sources property;
  • the content of the journal for the Kura process (kura-journal.log);
  • the content of the journal for the whole system (system-journal.log).

In addition to this feature, the page also allows the real-time displaying of system logs, if the framework has the availability of one or more components that implement the LogProvider API. The UI also provides a useful button to open a new Kura instance in a new browser window. A reference implementation of the LogProvider API is provided in the org.eclipse.kura.log.filesystem.provider bundle. This bundle exposes in the framework a factory that can be used to read filesystem files. By default, Eclipse Kura creates two log providers at startup: one that reads from /var/log/kura.log and the other that reads from /var/log/kura-audit.log.

The device logs are stored in a server-side cache and are collected from the point in time where the log providers get attached to the UI (usually, from the login or after a refresh of the browser's window). When the section \"System Logs\" is accessed, the new log entries are polled from the server's cache and stored client-side.

Note

The default log provider, that is the first log provider shown in the dropdown menu, is filesystem-kura-log. It is used to collect logs from the /var/log/kura.log file. The default value can be changed using the kura.default.log.manager property in the kura.properties file.

"},{"location":"gateway-configuration/ethernet-configuration/","title":"Ethernet Configuration","text":"

As described in the Network Configuration section, Ethernet interfaces have four configuration tabs: IPv4, IPv6, DHCPv4 & NAT and Advanced. Each Ethernet interface may be configured either as LAN or WAN; it may also be disabled.

If the interface is designated as LAN in the IPv4 tab and is manually configured, the DHCPv4 & NAT tab is enabled to allow DHCP server and/or 'many-to-one' NAT setup; otherwise, the DHCPv4 & NAT tab is disabled.

For more information on IPv4, IPv6 and DHCPv4 & NAT settings, please refer to the Network Configuration section. For the advanced settings, see the Advanced Settings section.

"},{"location":"gateway-configuration/firewall-configuration/","title":"Firewall Configuration","text":"

Kura offers easy management of the Linux firewall iptables and ip6tables included in an IoT Gateway. Additionally, Kura provides the ability to manage network access security to an IoT Gateway for both IPv4 and IPv6 through the following:

  • Open Ports (local service rules)
  • Port Forwarding
  • IP Forwarding and Masquerading (NAT service rules)
  • 'Automatic' NAT service rules

Open Ports, Port Forwarding, and IP Forwarding and Masquerading are configured via respective Firewall configuration tabs. 'Automatic' NAT is enabled for each local (LAN) interface using the DHCP & NAT tab of the respective interface configuration. While the IPv4 Firewall configuration capability is present on all IoT Gateways, the IPv6 Firewall is present only on devices that support IPv6 Networking.

"},{"location":"gateway-configuration/firewall-configuration/#firewall-linux-configuration","title":"Firewall Linux Configuration","text":"

This section describes the changes applied by Kura at the Linux networking configuration. Please read the following note before proceeding with manual changes of the Linux networking configuration.

Warning

It is NOT recommended performing manual editing of the Linux networking configuration files when the gateway configuration is being managed through Kura. While Linux may correctly accept manual changes, Kura may not be able to interpret the new configuration resulting in an inconsistent state.

When a new firewall configuration is submitted, Kura immediately applies it using the iptables service provided by the OS. Moreover, the rules are stored in the filesystem and a new Kura snapshot is generated containing the new configuration. At the next startup, the firewall service in the OS will re-apply them and Kura will check the firewall configuration against the one contained in the last snapshot. In this way, the user can update the snapshot with the needed rules and apply them to the system using the webUI or modify the snapshot_0.xml before the first start of Kura.

In order to allow a better coexistence between Kura and external applications that need to modify firewall rules, Kura writes its rules to a set of custom iptables chains. They are input-kura, output-kura, forward-kura, forward-kura-pf and forward-kura-ipf for the filter table and input-kura, output-kura, prerouting-kura, prerouting-kura-pf, postrouting-kura, postrouting-kura-pf and postrouting-kura-ipf for the nat table. The custom chains are then put in their respective standard iptables chains, as shown in the following:

iptables -t filter -I INPUT -j input-kura\niptables -t filter -I OUTPUT -j output-kura\niptables -t filter -I FORWARD -j forward-kura\niptables -t filter -I forward-kura -j forward-kura-pf\niptables -t filter -I forward-kura -j forward-kura-ipf\niptables -t nat -I PREROUTING -j prerouting-kura\niptables -t nat -I prerouting-kura -j prerouting-kura-pf\niptables -t nat -I INPUT -j input-kura\niptables -t nat -I OUTPUT -j output-kura\niptables -t nat -I POSTROUTING -j postrouting-kura\niptables -t nat -I postrouting-kura -j postrouting-kura-pf\niptables -t nat -I postrouting-kura -j postrouting-kura-ipf\n

The same custom chains are used in the IPv6 case.

Even if many firewall rules can be handled by Kura, it could be that some rules cannot be filled through the Web Console. In this case, custom firewall rules may be added to the /etc/init.d/firewall_cust script manually. These rules are applied/reapplied every time the firewall service starts, that is at the gateway startup. These custom rules should not be applied to the Kura custom chains, but to the standard ones.

"},{"location":"gateway-configuration/firewall-configuration/#open-ports","title":"Open Ports","text":"

If Kura is running on a gateway, all TCP/UDP ports are closed by default unless they are listed in the Open Ports IPv4 or Open Ports IPv6 tab of the Firewall section in the Gateway Administration Console, or in the /etc/sysconfig/iptables script. Therefore, if a user needs to connect to a specific port on a gateway, it is insufficient to have an application listening on the desired port; the port also needs to be opened in the firewall.

To open a port using the Gateway Administration Console, select the Firewall option located in the System area. The Firewall configuration display appears in the main window. With the Open Ports IPv4 or Open Ports IPV6 tab selected, click the New button. The New Open Port Entry form appears.

The New Open Port Entry form contains the following configuration parameters:

  • Port: specifies the port to be opened. (Required field.)
  • Protocol: defines the protocol (tcp or udp). (Required field.)
  • Permitted Network: only allows packets originated by a host on this network.
  • Permitted Interface Name: only allows packets arrived on this interface.
  • Unpermitted Interface Name: blocks packets arrived on this interface.
  • Permitted MAC Address: only allows packets originated by this host.
  • Source Port Range: only allows packets with source port in the defined range.

Complete the New Open Port Entry form and click the Submit button when finished. Once the form is submitted, a new port entry will appear. Click the Apply button for the change to take effect.

The firewall rules related to the open ports section are stored in the input-kura custom chain of the IPv4/IPv6 filter table.

"},{"location":"gateway-configuration/firewall-configuration/#port-forwarding","title":"Port Forwarding","text":"

Port forwarding rules are needed to establish connectivity from the WAN side to a specific port on a host that resides on a LAN behind the gateway. In this case, a routing solution may be avoided since the connection is made to a specified external port on a gateway, and packets are forwarded to an internal port on the destination host; therefore, it is not necessary to add the external port to the list of open ports.

To add a port forwarding rule, select the Port Forwarding IPv4 or Port Forwarding IPv6 tab on the Firewall display and click the New button. The Port Forward Entry form appears.

The Port Forward Entry form contains the following configuration parameters:

  • Input Interface: specifies the interface through which a packet is going to be received. (Required field).

  • Output Interface: specifies the interface through which a packet is going to be forwarded to its destination. (Required field).

  • LAN Address: supplies the IP address of destination host. (Required field).

  • Protocol: defines the protocol (tcp or udp). (Required field).

  • External Port: provides the external destination port on gateway unit. (Required field).

  • Internal Port: provides the port on a destination host. (Required field).

  • Enable Masquerading: defines whether masquerading is used (yes or no). If enabled, the gateway replaces the IP address of the originating host with the IP address of its own output (LAN) interface. This is needed when the destination host does not have a back route to the originating host (or default gateway route) via the gateway unit. The masquerading option is provided with port forwarding to limit gateway forwarding only to the destination port. (Required field).

  • Permitted Network: only forwards if the packet is originated from a host on this network.

  • Permitted MAC Address: only forwards if the packet is originated by this host.

  • Source Port Range: only forwards if the packet's source port is within the defined range.

Complete the Port Forward Entry form and click the Apply button for the desired port forwarding rules to take effect.

The firewall rules related to the port forwarding section are stored in the forward-kura-pf custom chain of the IPv4/IPv6 filter table and in the postrouting-kura-pf and prerouting-kura-pf chains of the IPv4/IPv6 nat table.

"},{"location":"gateway-configuration/firewall-configuration/#port-forwarding-example","title":"Port Forwarding example","text":"

This section describes an example of port forwarding rules applied to the IPv4 case. The initial setup is described below.

  • A couple of RaspberryPi that shares the same LAN over Ethernet.

  • The first RaspberryPi running Kura is configured as follows:

    • The eth0 interface static with IP address of 172.16.0.5.
    • There is no default gateway.

  • The second RaspberryPi running Kura is configured as follows:

    • The eth0 interface LAN/static with IP address of 172.16.0.1/24 and no NAT.
    • The wlan0 interface is WAN/DHCP client.

  • A laptop is connected to the same network of the wlan0 of the second RaspberryPi and can ping its wlan0 interface.

The purpose of the second RaspberryPi configuration is to enable access to the Administration Console running on the first one (port 80) by connecting to the second RaspberryPi's port 8080 over the wlan. This scenario assumes that IP addresses are assigned as follows:

  • Second RaspberryPi wlan0 - 10.200.12.6

  • Laptop wlan0 - 10.200.12.10

The following port forwarding entries are added to the second RaspberryPi configuration as described above using the Port Forward Entry form:

  • Input Interface - wlan0

  • Output Interface - eth0

  • LAN Address - 172.16.0.5

  • Protocol - tcp

  • External Port - 8080

  • Internal Port - 80

  • Masquerade - yes

The Permitted Network, Permitted MAC Address, and Source Port Range fields are left blank.

The following iptables rules are applied and added to the /etc/sysconfig/iptables file:

iptables -t nat -A prerouting-kura-pf -i wlan0 -p tcp -s 0.0.0.0/0 --dport 8080 -j DNAT --to 172.16.0.5:80\niptables -t nat -A postrouting-kura-pf -o eth0 -p tcp -d 172.16.0.5 -j MASQUERADE\niptables -A forward-kura-pf -i wlan0 -o eth0 -p tcp -s 0.0.0.0/0 --dport 80 -d 172.16.0.5 -j ACCEPT\niptables -A forward-kura-pf -i eth0 -o wlan0 -p tcp -s 172.16.0.5 -m state --state RELATED,ESTABLISHED -j ACCEPT\n

The following iptables commands may be used to verify that the new rules have been applied:

sudo iptables -v -n -L\nsudo iptables -v -n -L -t nat\n

At this point, it is possible to try to connect to http://10.200.12.6 and to http://10.200.12.6:8080 from the laptop. Note that when a connection is made to the device on port 80, it is to the Kura configuration page on the device itself (the second RaspberryPi). When the gateway is connected on port 8080, you are forwarded to the Kura Gateway Administration Console on the first RaspberryPi. The destination host can only be reached by connecting to the gateway on port 8080.

Another way to connect to the Kura Gateway Administration Console on the first RaspberryPi would be to add an IP Forwarding/Masquerading entry as described in the next section.

"},{"location":"gateway-configuration/firewall-configuration/#ip-forwardingmasquerading","title":"IP Forwarding/Masquerading","text":"

The advantage of the Automatic NAT method is its simplicity. However, this approach does not handle reverse NATing, and it cannot be used for interfaces that are not listed in the Gateway Administration Console (such as VPN tun0 interface). To set up generic (one-to-many) NATing, select the IP Forwarding/Masquerading IPv4 or IP Forwarding/Masquerading IPv6 tab on the Firewall display. Press the New button and the IP Forwarding/Masquerading form appears.

The IP Forwarding/Masquerading form contains the following configuration parameters:

  • Input Interface: specifies the interface through which a packet is going to be received. (Required field).

  • Output Interface: specifies the interface through which a packet is going to be forwarded to its destination. (Required field).

  • Protocol: defines the protocol of the rule to check (all, tcp, or udp). (Required field).

  • Source Network/Host: identifies the source network or host name (CIDR notation). Set to IPv4 0.0.0.0/0 or IPv6 ::/0 if empty.

  • Destination Network/Host: identifies the destination network or host name (CIDR notation). Set to IPv4 0.0.0.0/0 or IPv6 ::/0 if empty.

  • Enable Masquerading: defines whether masquerading is used (yes or no). If set to 'yes', masquerading is enabled. If set to 'no', only FORWARDING rules are be added. (Required field).

The rules will be added to the forward-kura-ipf chain in the IPv4/IPv6 filter table and in the postrouting-kura-ipf one in the IPv4/IPv6 nat table.

As a use-case scenario, consider the same setup as in port forwarding, but with cellular interface disabled and eth1 interface configured as WAN/DHCP client. In this case, the interfaces of the gateway are configured as follows:

  • eth0: LAN/Static/No NAT 172.16.0.1/24

  • eth1: WAN/DHCP 10.11.5.4/24

To reach the gateway sitting on the 172.16.0.5/24 from a specific host on the 10.11.0.0/16 network, set up the following Reverse NAT entry:

  • Input Interface: eth1 (WAN interface)

  • Output Interface: eth0 (LAN interface)

  • Protocol: all

  • Source Network/Host: 10.11.5.21/32

  • Destination Network/Host: 172.16.0.5/32

  • Enable Masquerading: yes

This case applies the following iptables rules:

iptables -t nat -A postrouting-kura-ipf -p tcp -s 10.11.5.21/32 -d 172.16.0.5/32 -o eth0 -j MASQUERADE\niptables -A forward-kura-ipf -p tcp -s 172.16.0.5/32 -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT\niptables -A forward-kura-ipf -p tcp -s 10.11.5.21/32 -d 172.16.0.5/32 -i eth1 -o eth0 -m tcp -j ACCEPT\n

Additionally, a route to the 172.16.0.0/24 network needs to be configured on a connecting laptop as shown below:

sudo route add -net 172.16.0.0 netmask 255.255.255.0 gw 10.11.5.4\n

Since masquerading is enabled, there is no need to specify the back route on the destination host. Note that with this setup, the gateway only forwards packets originating on the 10.11.5.21 laptop to the 172.16.0.5 destination.

If the Source Network/Host and Destination Network/Host fields are empty, iptables rules appear as follows:

iptables -t nat -A postrouting-kura-ipf -p tcp -s 0.0.0.0/0 -d 0.0.0.0/0 -o eth0 -j MASQUERADE\niptables -A forward-kura-ipf -p tcp -s 0.0.0.0/0 -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT\niptables -A forward-kura-ipf -p tcp -s 0.0.0.0/0 -d 0.0.0.0/0 -i eth1 -o eth0 -j ACCEPT\n

The gateway forwards packets from any external host (connected to eth1) to any destination on the local network (eth0 interface).

"},{"location":"gateway-configuration/gateway-administration-console-authentication/","title":"Gateway Administration Console Authentication","text":"

The Gateway Administration Console supports multiple login identities with associated permissions and HTTPS client side authentication with certificates.

The identity and permission configuration and credentials is stored externally the UserAdmin service (see Authentication and Authorization for more details).

"},{"location":"gateway-configuration/gateway-administration-console-authentication/#permissions","title":"Permissions","text":"

The Gateway Administration Console defines the following permissions, that allow to restrict the operations that an identity is allowed to perform:

  • kura.cloud.connection.admin: Allows to manage cloud connections using Cloud Connections tab.
  • kura.packages.admin: Allows to install deployment packages using the Packages tab.
  • kura.device: Allows to interact with the Device and Status tabs.
  • kura.network.admin: Allows to manage network connectivity and firewall configuration using the Network and Firewall tabs.
  • kura.wires.admin: Allows to manage Wire Graph and Driver and Asset configurations using the Wires and Drivers and Assets tabs.
  • kura.admin: This permission implies all other permissions, including the ones defined by external applications.
"},{"location":"gateway-configuration/gateway-administration-console-authentication/#default-identities","title":"Default identities","text":"

Kura provides the following identities by default:

Name Password Permissions admin admin kura.admin appadmin appadmin kura.cloud.connection.admin, kura.packages.admin, kura.wires.admin netadmin netadmin kura.cloud.connection.admin, kura.device, kura.network.admin

It is possible to modify/remove the default identity configuration.

"},{"location":"gateway-configuration/gateway-administration-console-authentication/#login","title":"Login","text":"

The login screen can be accessed by entering the https://${device.ip} URL in a browser window, where ${device.ip} is the IP address. Replace https with http if HTTPS support has been disabled on the gateway.

"},{"location":"gateway-configuration/gateway-administration-console-authentication/#identity-name-and-password","title":"Identity name and password","text":"

In order to login with identity name and password, select Password as authentication method and enter the credentials.

Note

Password authentication method might not be available if it has been disabled by the administrator using the Security -> Web Console section.

"},{"location":"gateway-configuration/gateway-administration-console-authentication/#forced-password-change-on-login","title":"Forced password change on login","text":"

Kura supports forcing an identity to change the password at login, before accessing the Administration Console. This functionality is enabled by default after a fresh installation. At login the following prompt will appear forcing the user to define a new password.

This functionality can be configured by an admin identity using the Identities section of the Administration Console.

The forced password change can also be disabled by editing the snapshot_0.xml file removing the kura.need.password.change property for the desired identity in the org.eclipse.kura.internal.useradmin.store.RoleRepositoryStoreImpl configuration before Kura first boot. If this functionality is enabled, REST API username and password authentication is will be disabled for the specific identity until the password is updated, REST API certificate authentication will still work.

"},{"location":"gateway-configuration/gateway-administration-console-authentication/#certificate-authentication","title":"Certificate authentication","text":"

In order to perform HTTPS certificate authentication, select the Certificate authentication method and click Login, the browser may prompt to select the certificate to use.

Note

Certificate authentication method might not be available if no HTTPS with client authentication ports have been configured or if it has been explicitly disabled by the administrator using the Security -> Web Console section.

"},{"location":"gateway-configuration/gateway-administration-console-authentication/#identity-and-permission-management","title":"Identity and Permission management","text":"

The Gateway Administration Console allows the management of identity and permission configuration in a dedicated view, accessible by navigating to the Identities section:

The section above allows to:

"},{"location":"gateway-configuration/gateway-administration-console-authentication/#create-new-identities","title":"Create new identities","text":"

New identities can be created by clicking the New Identity button.

"},{"location":"gateway-configuration/gateway-administration-console-authentication/#remove-existing-identities","title":"Remove existing identities","text":"

Existing identities can be removed by selecting the corresponding entry in the list and pressing the Delete Identity button.

"},{"location":"gateway-configuration/gateway-administration-console-authentication/#manage-password-authentication","title":"Manage password authentication","text":"

Password authentication can be enabled or disabled by changing the Password authentication enabled parameter. Changing this parameter will not modify the existing stored password. Enabling password authentication for a new identity requires to define a new password. The password can be set/modified by clicking the Change password button.

"},{"location":"gateway-configuration/gateway-administration-console-authentication/#assign-or-remove-permissions","title":"Assign or remove permissions","text":"

Permissions can be assigned or removed by ticking the corresponding entries in the Permissions table. No changes will be applied to the gateway until the Apply button is pressed.

"},{"location":"gateway-configuration/gateway-administration-console-authentication/#certificate-based-authentication","title":"Certificate based authentication","text":"

The Gateway Administration Console supports HTTPS certificate based client side authentication. The authentication process works as follows:

  • One or more Https client certificate must be added to keystore, this can be done using the Certificate Management section.

  • The user must provide a certificate or certificate chain signed by one of the CAs added as Https client certificate.

  • The common name field of the leaf certificate provided by the user must be the name of the identity that should be used for the session.

  • HTTPS with certificate based authentication must be enabled in the HTTP/HTTPS Configuration section.

Log in with certificate can be performed by selecting the Certificate authentication method in Gateway Administration Console login screen or by connecting directly to the HTTPS port with client side authentication specified in gateway configuration.

"},{"location":"gateway-configuration/gateway-administration-console/","title":"Gateway Administration Console","text":""},{"location":"gateway-configuration/gateway-administration-console/#accessing-the-kura-gateway-administration-console","title":"Accessing the Kura Gateway Administration Console","text":"

Kura provides a web-based, user interface for the administration and management of your IoT gateway. The Kura Gateway Administration Console enables you to monitor the gateway status, manage the network configuration, and manage the installed application and services. Access to the Kura Gateway Administration Console requires that a unit running Eclipse Kura is reachable via its Ethernet primary interface.

Connections on HTTP port 443 for these interfaces are allowed by default through the built-in firewall. The Kura Gateway Administration Console can be accessed by typing the IP address of the gateway into the browser's URL bar. Once the URL is submitted, the user is required to log in and is then redirected to the Administration Console (e.g., https://192.168.2.8/admin/console) shown in the screen capture below. The default login name and password is admin/admin.

Warning

It is recommended to change the default password after initial setup and before deployment, as well as limiting access to the Administration Console to a trusted local network interface using appropriate firewall rules.

"},{"location":"gateway-configuration/gateway-administration-console/#password-change","title":"Password change","text":"

Once logged in, the user can modify its password (recommended after the first login). To access the option, click on the button near the username in the header section. A dropdown menu appears with the logout and the password modification options. When clicking on \"Change password\", the following dialog will appear:

After confirming the changes, the user will be logged out.

"},{"location":"gateway-configuration/gateway-administration-console/#accessing-the-kura-gateway-administration-console-over-a-cellular-link","title":"Accessing the Kura Gateway Administration Console over a Cellular Link","text":"

In order to connect to the Gateway Administration Console via a cellular interface, the following requirements must be met:

  • The service plan must allow for a static, public IP address to be assigned to the cellular interface.
  • The used ports must not be blocked by the provider.
  • The user must add Open Port entries for the cellular interface. This may be done either through the Firewall tab.

If some of the used ports are blocked by the service provider, there is an option to reconfigure the gateway to use another port (i.e., 8080). In order to do so, the following requirements must be met:

  • The HttpService configuration must be changed to use the new ports.
  • The new ports must be open in the firewall for all network interfaces.
"},{"location":"gateway-configuration/gateway-administration-console/#https-related-warnings","title":"HTTPS related warnings","text":"

Most browsers will probably warn the user that the connection is not secure when Gateway Administration Console is accessed using HTTPS.

In order to remove the warning, the browser must be able to verify the identity of the gateway as an HTTPS server. The verification process will fail with default server certificate provided by Kura because it is self-signed and it is not suitable for hostname verification.

Fixing this might require to configure the browser to trust the certificate provided by the gateway and/or using a server certificate signed by a CA trusted by the browser and assigning a DNS name to the gateway in order to pass hostname verification.

"},{"location":"gateway-configuration/gateway-administration-console/#system-use-notification-banner","title":"System Use Notification Banner","text":"

For security reasons, it may be needed to display to the user a banner that describes the intended system use before authenticating. The system use notification message is customisable by authorised personnel in the Security section of the Kura Web UI, in the Web Console tab.

"},{"location":"gateway-configuration/gateway-status/","title":"Gateway Status","text":"

The status of the gateway may be viewed from the Status window, which is accessed by selecting the Status option located in the System area. The Status window provides a summary of the key information regarding the status of the gateway including its IoT Cloud connection and network configuration.

The values reported in the page can be reloaded using the Refresh button. This will read the current values from the system and update the page. Since the update procedure can take time, the update can be performed at most every 30 seconds.

"},{"location":"gateway-configuration/gateway-status/#cloud-services","title":"Cloud Services","text":"

This section provides a summary of the IoT Cloud connection status including the following details:

  • Account - defines the name of the account used by the MqttDataTransport service when an MQTT connection is opened.
  • Broker URL - defines the URL of the MQTT broker.
  • Client ID - specifies the client identifier used by the MqttDataTransport service when an MQTT connection is opened.
  • Service Status - provides the status of the DataService and DataTransport connection. Valid values are CONNECTED or DISCONNECTED.
  • Username - supplies the name of the user used by the MqttDataTransport service when an MQTT connection is opened.
"},{"location":"gateway-configuration/gateway-status/#ethernet-wireless-and-cellular-settings","title":"Ethernet, Wireless, and Cellular Settings","text":"

This section provides information about the currently configured network interfaces.

"},{"location":"gateway-configuration/gateway-status/#position-status","title":"Position Status","text":"

This section provides the GPS status and latest known position (if applicable) including the following details:

  • Longitude - longitude as reported by the PositionService in radians.
  • Latitude - latitude as reported by the PositionService in radians.
  • Altitude - altitude as reported by the PositionService in meters.

Warning

The status reported in the page may not be synchronized with the real state of the system. In this case, use the Refresh button to updated the values in the page.

"},{"location":"gateway-configuration/keys-and-certificates/","title":"Keys and Certificates","text":"

The framework manages directly different key pairs and trusted certificates from different keystores. To simplify the management of such complex objects, the framework provides a dedicated section of its Administrative Web UI, a set of REST APIs for local management and a request handler (KEYS-V1 and KEYS-V2) for cloud remote interaction.

"},{"location":"gateway-configuration/keys-and-certificates/#web-ui","title":"Web UI","text":"

The Certificates List tab in the Security section of the Kura Web UI provides a simple way for the user to get the list of all the managed keys and certificates of the framework:

The page allows the user to add a new Keypair or trusted certificate or to delete an existing element.

Every key pair or trusted certificate is listed by its alias, identified by the corresponding type and further identified by the keystore that is managing that element.

If the user needs to add a new entry to one of the managed KeystoreService instances, can click on the Add button on the top left part of the page. The user will be guided through a process that will allow to identify the type of entry to add:

It can be either a:

  • Private/Public Key Pair
  • Trusted Certificate

If the user decides to add a key pair, then the wizard will provide a page like the following:

Here the user can specify: - Key Store: the KeystoreService instance that will store and maintain the key pair - Storage Alias: the alias that will be used to identify the key pair - Private Key: the private key part of the key pair - Certificate: the public key part of the key pair

After clicking on the Apply button, the new entry will be stored in the selected Keystore and listed along the other entries managed by the framework.

The following cryptographic algorithms are supported for Key Pairs: - RSA - DSA

Instead, if the user wants to load a Trusted Certificate, the Ui will change as follows:

Here the user can specify: - Key Store: the KeystoreService instance that will store and maintain the trusted certificate - Storage Alias: the alias that will be used to identify the trusted certificate - Certificate: the trusted certificate

The following cryptographic algorithms are supported for Trusted Certificates: - RSA - DSA - EC

"},{"location":"gateway-configuration/keys-and-certificates/#rest-apis","title":"REST APIs","text":""},{"location":"gateway-configuration/keys-and-certificates/#keystoresv1","title":"keystores/v1","text":"

The org.eclipse.kura.core.keystore bundle exposes a REST endpoint under the /services/keystores/v1 path. The Kura REST APIs for Keys and Certificates support the following calls and are allowed to any user with rest.keystores permission.

Method Path Roles allowed Encoding Request parameters Description GET / keystores JSON None Returns the list of all the KeystoreService instances. GET /entries keystores JSON None Returns the list of all the entries managed by the KeystoreService instances. GET /entries?keystoreServicePid={keystoreServicePid} keystores JSON keystoreServicePid Returns the list of all the entries managed by the specified KeystoreService instance. GET /entries?alias={alias} keystores JSON alias Returns the list of all the entries specified by the defined alias and managed in all the available KeystoreService instances in the framework. GET /entries/entry?keystoreServicePid={keystoreServicePid}&alias={alias} keystores JSON keystoreServicePid and alias Returns the entry identified by the specified keystoreServicePid and alias. POST /entries/csr keystores JSON The reference to the key pair in a specified KeystoreService instance that will be used to generate the CSR. The request has to be associated with additional parameters that identify the algorithm used to compute and sign the CSR and the DN or the corresponding public key that needs to be countersigned. Generates a CSR for the specified key pair in the specified KeystoreService instance, based on the parameters provided in the request. POST /entries/certificate keystores JSON The reference to the KeystoreService instance and the alias that will be used for storage. A type filed identifies the type of key that needs to be managed. This request allows the user to upload a TrustedCertificate. POST /entries/keypair keystores JSON To generate a new KeyPair directly in the device, the request format need to follow the references in the following paragraphs. This request allows the user to generate a new KeyPair into the device. DELETE /entries keystores JSON A JSON identifying the resource to delete. The format of the request is described in in one of the following sections. Deletes the entry in the specified KeystoreService instance."},{"location":"gateway-configuration/keys-and-certificates/#list-all-the-keystoreservices","title":"List All the KeystoreServices","text":"

Request: URL - https://<gateway-ip>/services/keystores/v1

Response:

[\n    {\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.SSLKeystore\",\n        \"type\": \"jks\",\n        \"size\": 4\n    },\n    {\n        \"keystoreServicePid\": \"org.eclipse.kura.crypto.CryptoService\",\n        \"type\": \"jks\",\n        \"size\": 3\n    },\n    {\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n        \"type\": \"jks\",\n        \"size\": 1\n    },\n    {\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.DMKeystore\",\n        \"type\": \"jks\",\n        \"size\": 1\n    }\n]\n
"},{"location":"gateway-configuration/keys-and-certificates/#get-all-the-managed-entries","title":"Get all the Managed Entries","text":"

Request: URL - https://<gateway-ip>/services/keystores/v1/entries

Response:

[\n    {\n        \"subjectDN\": \"OU=Go Daddy Class 2 Certification Authority, O=\\\"The Go Daddy Group, Inc.\\\", C=US\",\n        \"issuer\": \"OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\\\\, Inc.,C=US\",\n        \"startDate\": \"Tue, 29 Jun 2004 17:06:20 GMT\",\n        \"expirationDate\": \"Thu, 29 Jun 2034 17:06:20 GMT\",\n        \"algorithm\": \"SHA1withRSA\",\n        \"size\": 2048,\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.SSLKeystore\",\n        \"alias\": \"ca-godaddyclass2ca\",\n        \"type\": \"TRUSTED_CERTIFICATE\"\n    },\n    {\n        \"algorithm\": \"RSA\",\n        \"size\": 4096,\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n        \"alias\": \"localhost\",\n        \"type\": \"PRIVATE_KEY\"\n    }\n]\n
"},{"location":"gateway-configuration/keys-and-certificates/#get-all-the-entries-by-keystoreservice","title":"Get All the Entries by KeystoreService","text":"

Request: URL - https://<gateway-ip>/services/keystores/v1/entries?keystoreServicePid=org.eclipse.kura.core.keystore.HttpsKeystore

Response:

[\n    {\n        \"algorithm\": \"RSA\",\n        \"size\": 4096,\n        \"certificateChain\": [\n            \"-----BEGIN CERTIFICATE-----\\n<CERTIFICATE>\\n-----END CERTIFICATE-----\"\n        ],\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n        \"alias\": \"localhost\",\n        \"type\": \"PRIVATE_KEY\"\n    }\n]\n
"},{"location":"gateway-configuration/keys-and-certificates/#get-all-the-entries-by-alias","title":"Get All the Entries by Alias","text":"

Request: URL - https://<gateway-ip>/services/keystores/v1/entries?alias=localhost

Response:

[\n    {\n        \"algorithm\": \"RSA\",\n        \"size\": 4096,\n        \"certificateChain\": [\n            \"-----BEGIN CERTIFICATE-----\\n<CERTIFICATE>\\n-----END CERTIFICATE-----\"\n        ],\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n        \"alias\": \"localhost\",\n        \"type\": \"PRIVATE_KEY\"\n    }\n]\n
"},{"location":"gateway-configuration/keys-and-certificates/#get-specific-entry","title":"Get Specific Entry","text":"

Request: URL - https://<gateway-ip>/services/keystores/v1/entries/entry?keystoreServicePid=org.eclipse.kura.core.keystore.HttpsKeystore&alias=localhost

Response:

{\n    \"algorithm\": \"RSA\",\n    \"size\": 4096,\n    \"certificateChain\": [\n        \"-----BEGIN CERTIFICATE-----\\n<CERTIFICATE>-----END CERTIFICATE-----\"\n    ],\n    \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n    \"alias\": \"localhost\",\n    \"type\": \"PRIVATE_KEY\"\n}\n
"},{"location":"gateway-configuration/keys-and-certificates/#get-the-csr-for-a-keypair","title":"Get the CSR for a KeyPair","text":"

Request: URL - https://<gateway-ip>/services/keystores/v1/entries/csrkeystoreServicePid=org.eclipse.kura.core.keystore.HttpsKeystore&alias=localhost`

Request body:

{ \n    \"keystoreServicePid\":\"org.eclipse.kura.core.keystore.HttpsKeystore\",\n    \"alias\":\"localhost\",\n    \"signatureAlgorithm\" : \"SHA256withRSA\",\n    \"attributes\" : \"CN=Kura, OU=IoT, O=Eclipse, C=US\"\n}\n
"},{"location":"gateway-configuration/keys-and-certificates/#store-trusted-certificate","title":"Store Trusted Certificate","text":"

Request: URL - https://<gateway-ip>/services/keystores/v1/entries/certificate

Request body:

{\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"myCertTest99\",\n    \"certificate\":\"-----BEGIN CERTIFICATE-----\n        <CERTIFICATE>\n        -----END CERTIFICATE-----\"\n}\n
"},{"location":"gateway-configuration/keys-and-certificates/#generate-keypair","title":"Generate KeyPair","text":"

Request: URL - https://<gateway-ip>/services/keystores/v1/entries/keypair

Request body:

{\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"keypair1\",\n    \"algorithm\" : \"RSA\",\n    \"size\": 1024,\n    \"signatureAlgorithm\" : \"SHA256WithRSA\",\n    \"attributes\" : \"CN=Kura, OU=IoT, O=Eclipse, C=US\"\n}\n
"},{"location":"gateway-configuration/keys-and-certificates/#delete-entry","title":"Delete Entry","text":"

Request: URL - https://<gateway-ip>/services/keystores/v1/entries

Request body:

{\n    \"keystoreServicePid\" : \"MyKeystore\",\n    \"alias\" : \"mycerttestec\"\n}\n
"},{"location":"gateway-configuration/keys-and-certificates/#keys-v1-request-handler","title":"KEYS-V1 Request Handler","text":"

Mapping the previously defined REST APIs, the framework exposed to the remote cloud platforms a request handler named KEYS-V1 that allows the remote user to list and manage the keystores, the keys and the certificates in the framework.

The request handler exposes also the capability to generate on the edge a CSR that can be countersigned remotely by a trusted CA.

"},{"location":"gateway-configuration/keys-and-certificates/#keystoresv2","title":"keystores/v2","text":"

Starting from Kura 5.4.0, the keystores/v2 REST API is also available, it supports all of the request endpoints of keystores/v1 plus an additional endpoint that allows to upload and modify private key entries:

Method Path Roles allowed Encoding Request parameters Description POST /entries/privatekey keystores JSON To upload a new private key entry directly in the device, the request format need to follow the references in the following paragraphs. This request allows the user to upload a new private key entry into the device or to modify the certificate chain of an existing one."},{"location":"gateway-configuration/keys-and-certificates/#uploading-a-private-key-entry","title":"Uploading a Private Key Entry","text":"

Request: URL - https://<gateway-ip>/services/keystores/v2/entries/privatekey

Request body:

The request should include the private key in unencrypted PEM format and the certificate chain in PEM format, the first certificate in the certificateChain list must use the public key associated with the private key supplied as the privateKey parameter.

The device will overwrite the entry with the provided alias if it already exists.

WARINING: Please use this endpoint through a secure connection.

{\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"keypair1\",\n    \"privateKey\":\"-----BEGIN RSA PRIVATE KEY-----\\n...\\n-----END RSA PRIVATE KEY-----\",\n    \"certificateChain\":[\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n    ]\n}\n
"},{"location":"gateway-configuration/keys-and-certificates/#updating-a-private-key-entry","title":"Updating a Private Key Entry","text":"

Request: URL - https://<gateway-ip>/services/keystores/v2/entries/privatekey

Request body:

In order to update the certificate chain associated to a specific private key entry it is possible to use the same format as previous request and omit the privateKey parameter.

In this case the certificate chain of the existing entry will be replaced with the one specified in the request and the existing private key will be retained.

This request can be useful for example to create a CSR on the device, sign it externally and then updating the corresponding entry with the resulting certificate.

{\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"keypair1\",\n    \"certificateChain\":[\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n    ]\n}\n
"},{"location":"gateway-configuration/keystores-management/","title":"Keystores Management","text":"

The framework manages different types of cryptographic keys and certificates. In order to simplify the interaction with those objects, Kura provides a KeystoreService API and a specific section in the Kura Web UI that lists all the available KeystoreService instances.

From the Security section, a user with Security permissions can access the Keystore Configuration section. A list of all the framework managed keystores will be available to the user with the Service PID that will be used by other components to reference the selected keystore. Associated to the Service PID, the UI shows the Factory PID that identifies the specific KeystoreService API implementation that is providing the service to the framework.

In order to modify the configuration of a specific keystore service instance, the user can select one of the available rows, obtaining the corresponding keystore service configuration.

The following KeystoreService factories are available:

"},{"location":"gateway-configuration/keystores-management/#filesystemkeystoreserviceimpl","title":"FilesystemKeystoreServiceImpl","text":"

The org.eclipse.kura.core.keystore.FilesystemKeystoreServiceImpl factory provides a KeystoreService implementation that stores the private keys and certificates as a file. The user can customise the following options:

  • Keystore Path: identifies the path in the filesystem. If the keystore file does not exists, a new file will be created. The value cannot be empty.
  • Keystore Password: the corresponding keystore password.
  • Randomize Password: a boolean flag that allows the user to specify if the keystore password needs to be randomised at the next framework boot. If set true, the framework will try to access the identified keystore and randomise the password. The new password will be persisted in the framework snapshot. Once successfully randomised, the flag will be automatically set to false by the framework.
"},{"location":"gateway-configuration/keystores-management/#pkcs11keystoreserviceimpl","title":"PKCS11KeystoreServiceImpl","text":"

The org.eclipse.kura.core.keystore.PKCS11KeystoreServiceImpl factory provides a KeystoreService implementation that allows to access a PKCS11 token through the SunPKCS11 implementation.

At the moment this type of KeystoreService provides read only access to the underlying token, operations such as adding or removing entries will fail.

It is possible to use the entries provided by a PKCS11KeystoreServiceImpl for SSL authentication.

The available configuration options closely match the parameters provided by the SunPKCS11 implementation, see the official documentation for more details.

In particular, the official documentation contains a section that explains how the PKCS11 objects are mapped to Java KeyStore entries.

The only required parameter is the PKCS11 Implementation Library Path parameter. It is usually also necessary to specify the token user pin as the Pin parameter.

The configuration parameters are mapped to the SunPKCS11 provider parameters in the following way:

Kura Parameter SunPKCS11 Parameter Notes Slot slot Slot List Index slotListIndex Enabled Mechanisms enabledMechanisms The curly braces must be omitted Disabled Mechanisms disabledMechanisms The curly braces must be omitted. Attributes attributes The value of this field will be appended to the provider configuration."},{"location":"gateway-configuration/network-advanced/","title":"Advanced Network Settings","text":"

The Advanced configuration tab is designed for users who seek a higher level of control and customization over their network experience. Whether you are an IT professional, network administrator, or enthusiast looking to fine-tune specific aspects of your network, this tab provides access to advanced parameters like Maximum Transmission Unit (MTU) and Promiscuous Mode. Adjusting these settings allows for optimized performance in unique network environments, troubleshooting capabilities, and enhanced security monitoring. Please exercise caution when modifying these settings, ensuring that you have a clear understanding of their implications on your network's behavior.

Tip

Some parameters requires a minimum version of NetworkManager, as described below and in Kura UI. The System Component Inventory can be used to check what version is available on your device.

The Advanced tab allow configuration of:

  • MTU (Maximum Transmission Unit)
    • MTU determines the maximum size of data packets transmitted over your network. While most users can leave this at the default setting, adjusting the MTU may be necessary for optimizing performance in specialized environments or overcoming network constraints.
    • Use Case: Modify MTU if you encounter issues related to packet size, especially in scenarios involving VPNs, specific network equipment, or other unique requirements.
  • Promiscuous Mode
    • Promiscuous mode is a specialized network mode where your device captures and analyzes all network packets, regardless of their destination. This is particularly useful for network monitoring, troubleshooting, and security analysis.
    • Use Case: Enable promiscuous mode when you need to closely inspect network traffic, diagnose connectivity issues, or enhance your device's capabilities for security monitoring.
"},{"location":"gateway-configuration/network-advanced/#advanced-configuration","title":"Advanced Configuration","text":"

The Advanced tab contains the following configuration parameters:

  • IPv4 MTU - defines the Maximum Trasmission unit for IPv4 traffic on the selected interface, a value of 0 or empty delegates the MTU definition to the link layer.
  • IPv6 MTU - defines the Maximum Trasmission unit for IPv6 traffic on the selected interface, a value of 0 or empty delegates the MTU definition to the link layer. Requires NetworkManager 1.40 or above.

Warning

The MTU value for a VLAN is limited by the configured MTU of its parent interface as an upper bound.

  • Promiscuous Mode - enable promiscuous mode for the selected interface; Requires NetworkManager 1.32 or above.
    • System default - This delegates to the underlying OS setting. In most cases the system default equates to Disabled
    • Enabled
    • Disabled
"},{"location":"gateway-configuration/network-configuration/","title":"Network Configuration","text":"

To configure the gateway network interfaces using the Gateway Administration Console, select the Network option located in the System area. With this option selected, the Network display appears with a list of available interfaces. Configuration tabs for the selected interface appear on the right side of the screen. By default, the loopback (lo) interface is selected when the network interfaces are displayed. Choose the desired network interface (e.g., eth0, eth1, wlan0, ppp0) and apply the necessary configuration changes using the tabs on the right. Submit the modified configuration by clicking the Apply button.

In case of typing errors, the Reset button can be used to reload the prior configuration on the screen. Since the network configuration shown on the screen may not be synchronized with the current state of the system, it can be updated pressing the Refresh button. This can be used also to force the reload of specific parameters like the RSSI or dynamic IP addresses. The refresh procedure reads all the needed parameters from the system and can take several seconds before updating.

Tip

It is recommended that the IPv4 or IPv6 tab is configured first since it defines how the interface is going to be used.

"},{"location":"gateway-configuration/network-configuration/#tcpip-configuration","title":"TCP/IP Configuration","text":"

The IPv4 and IPv6 tabs contain the following configuration parameters:

  • Status
    • Disabled: disables the selected interface (i.e., administratively down).
    • Enabled for LAN: designates the interface for a local network. It can be set as a DHCP server for hosts on the local network and can serve as a default gateway for those hosts; however, it cannot be set as an actual gateway interface for this device. That is, packets must be routed from this interface to another interface that is configured as WAN. The interface is automatically brought up at boot.
    • Enabled for WAN: designates the interface as a gateway to an external network. The interface is automatically brought up at boot.
    • Not Managed: the interface will be ignored by Kura (available only for IPv4).
    • Layer 2 Only: only the Layer 2 portion of the interface will be configured. The interface is automatically brought up at boot (available only for IPv4).
  • WAN Priority - configure the network failover. See here for more details.
  • Configure
    • Manually: allows manual entry of the IP Address and Netmask fields, if the interface is configured as LAN; allows manual entry of the IP Address, Netmask, Gateway, and DNS Servers fields, if the interface is designated as WAN.
    • Using DHCP/DHCPv6: configures the interface as a DHCP client obtaining the IP address from a network DHCP server.
    • Stateless Address Auto-Configuration (SLAAC): automatically assign an IP address (available only for IPv6).
  • Address Generation Mode - defines the method used to automatically generate the IP address with SLAAC (available only for IPv6)
    • EUI64: use EUI-64 method for address generation
    • Stable-privacy: use RFC7217 method for address generation
  • IP Address - defines the IP address of the interface, if manually configured.
  • Subnet Mask - defines the subnet mask of the interface, if manually configured.
  • Gateway - specifies the default gateway for the unit. (Required field if the interface is designated as WAN and manually configured.)
  • DNS Servers - provides a list of DNS servers, if the interface is designated as WAN and is manually configured.
  • Privacy - configure privacy extension for SLAAC (available only for IPv6).
    • Disabled: disables the privacy extension.
    • Prefer public addresses: use public address for outgoing traffic.
    • Prefer temporary addresses: prefer temporary address for outgoing traffic.

If the network interface is configured as Enabled for LAN and manually configured (i.e., not a DHCP client) in the IPV4 tab, the DHCPv4 & NAT tab allows the DHCP server to be configured and/or NAT (IP forwarding with masquerading) to be enabled.

"},{"location":"gateway-configuration/network-configuration/#more-details-about-the-not-managed-interface-status-tbd-not-applicable-in-nm","title":"More details about the Not Managed interface Status - (TBD: not applicable in NM)","text":"

When a network interface is configured as Not Managed, Kura will ignore it and the configuration will not be touched. The user can configure the interface with the network tools provided by the OS, allowing unusual network setups.

Regarding DNS, both Kura and the external tools store the DNS addresses in the /etc/resolv.conf file. So, if multiple interfaces are configured to get the DNS information and store it in the same file, the device can be misconfigured. To avoid that, the following table presents who is responsible to update the DNS file depending on the network interfaces configurations.

Is there at least an interface set as WAN? Is there at least one interface set as Not Managed? Does Kura manage resolv.conf? NO NO YES NO YES NO YES NO YES YES YES YES

So, the only way to configure the DNS addresses with external tools, is to configure at least one interface as Not Managed and not to set any interface as Enabled For Wan using Kura. If at least one WAN interface is configured by Kura, it will take the control of the /etc/resolv.conf/ file. Finally, if any interface is configured in Enabled For Wan or Not Managed mode, Kura will empty the file.

To avoid device misconfigurations when Not Managed interfaces are used, don't use the dns-nameservers directive in the /etc/network/interfaces file. Please add the DNS addresses directly to the /etc/resolv.conf file.

"},{"location":"gateway-configuration/network-configuration/#dhcpv4-nat-configuration","title":"DHCPv4 & NAT Configuration","text":"

The DHCPv4 & NAT tab contains the following configuration parameters:

  • Router Mode
    • DHCP and NAT: indicates that both DHCP server and NAT are enabled.
    • DHCP Only: indicates that DHCP server is enabled and NAT is disabled.
    • NAT Only: indicates that NAT is enabled and DHCP server is disabled.
    • Off: indicates that both DHCP server and NAT are disabled.
  • DHCP Beginning Address: specifies the first address of DHCP pool (i.e., first available client IP address).
  • DHCP Ending Address: specifies the last address of DHCP pool (i.e., last IP address that can be assigned to a client).
  • DHCP Subnet Mask: defines the subnet mask that is assigned to a client.
  • DHCP Default Lease Time: sets the default time (in minutes) that the client retains the provided IP address. It must be greater than 0.
  • DHCP Max Lease Time: sets the maximum time (in minutes) that the client retains the provided IP address. It must be greater than 0.
  • Pass DNS Servers through DHCP: enables DNS Proxy (i.e., passing DNS servers through DHCP).

If NAT is enabled and there is another interface designated as WAN (e.g., ppp0), the following iptables rules are added to the custom automatic NAT service rules section of the /etc/init.d/firewall script:

# custom automatic NAT service rules (if NAT option is enabled for LAN interface)\niptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE\niptables -A FORWARD -i ppp0 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT\niptables -A FORWARD -i eth0 -o ppp0 -j ACCEPT\n

Also, IP forwarding is enabled in the kernel as follows:

# allow fowarding if any masquerade is defined\necho 1 > /proc/sys/net/ipv4/ip_forward\n

The rules shown above create an Overloaded (i.e., many-to-one) NAT. This type of network address translation maps multiple IP addresses on the LAN side to a single IP address on the WAN side, allowing internet access from hosts on a local network via a gateway (WAN) interface. Note that for NAT rules to be added, it is insufficient to enable NATing through the DHCPv4 & NAT tab of the LAN interface; there must also be another interface designated as WAN.

"},{"location":"gateway-configuration/network-configuration/#network-linux-configuration","title":"Network Linux Configuration","text":"

When applying a new network configuration, Kura changes the configuration files of the Linux networking subsystem. Please read the following note before proceeding with manual changes of the Linux networking configuration.

Warning

It is NOT recommended performing manual editing of the Linux networking configuration files when the gateway configuration is being managed through Kura. While Linux may correctly accept manual changes, Kura may not be able to interpret the new configuration resulting in an inconsistent state.

"},{"location":"gateway-configuration/network-configuration/#network-configuration-properties","title":"Network Configuration properties","text":"

The Network configuration can be modified using the Kura Gateway Administration Console, as described above, the Configuration Service or appling a proper snapshot.

The following table describes all the properties related to the Network Configuration. It includes the name of the property, the type, a description and the default value (if applicable). The network configuration pid is org.eclipse.kura.net.admin.NetworkConfigurationService.

"},{"location":"gateway-configuration/network-configuration/#common-properties","title":"Common properties","text":"Name Type Description Default value net.interfaces String Comma-separated list of the interface names in the device net.interface.<interface>.type String The type of the network interface; possible values are: ETHERNET, WIFI, MODEM, VLAN, LOOPBACK and UNKNOWN UNKNOWN net.interface.<interface>.config.wifi.mode String For wifi interfaces, specify the modality; possible values are INFRA, MASTER and UNKNOWN UNKNOWN net.interface.<interface>.config.nat.enabled Boolean Enable the NAT feature false net.interface.<interface>.config.promisc Integer Enable the Promiscuous Mode; possible values are: -1 (System default), 0 (Disabled), 1 (Enabled) -1"},{"location":"gateway-configuration/network-configuration/#ipv4-properties","title":"IPv4 properties","text":"Name Type Description Default value net.interface.<interface>.config.ip4.status String The status of the interface for the IPv4 configuration; possibile values are: netIPv4StatusDisabled, netIPv4StatusUnmanaged, netIPv4StatusL2Only, netIPv4StatusEnabledLAN, netIPv4StatusEnabledWAN, netIPv4StatusUnknown netIPv4StatusDisabled (see note below) net.interface.<interface>.config.ip4.wan.priority Integer (NetworkManager only) Priority used to determine which interface select as primary WAN. Allowed values range from -1 to 2147483647, inclusive. See Network Failover for further details -1 net.interface.<interface>.config.ip4.address String The IPv4 address assigned to the network interface net.interface.<interface>.config.ip4.prefix Short The IPv4 netmask assigned to the network interface -1 net.interface.<interface>.config.ip4.gateway String The IPv4 address of the default gateway net.interface.<interface>.config.ip4.dnsServers String Comma-separated list of dns servers net.interface.<interface>.config.ip4.mtu Integer The Maximum Transition Unit (MTU) for this interface

Note

For physical interfaces the default status is netIPv4StatusDisabled. For virtual ones, instead, the default status is defined by the kura.net.virtual.devices.config property in the kura.properties file.

"},{"location":"gateway-configuration/network-configuration/#ipv4-dhcp-server-properties","title":"IPv4 DHCP Server properties","text":"Name Type Description Default value net.interface.<interface>.config.dhcpServer4.enabled Boolean Specify if the DHCP server is enabled false net.interface.<interface>.config.dhcpServer4.rangeStart String First IP address available for clients net.interface.<interface>.config.dhcpServer4.rangeEnd String Last IP address available for clients net.interface.<interface>.config.dhcpServer4.defaultLeaseTime Integer The default lease time -1 net.interface.<interface>.config.dhcpServer4.maxLeaseTime Integer The maximum lease time -1 net.interface.<interface>.config.dhcpServer4.prefix Short The netmask for the available IP addresses -1 net.interface.<interface>.config.dhcpServer4.passDns Boolean Specify if the DNS server addresses has to be passed through DHCP false"},{"location":"gateway-configuration/network-configuration/#ipv4-dhcp-client-properties","title":"IPv4 DHCP Client properties","text":"Name Type Description Default value net.interface.<interface>.config.dhcpClient4.enabled Boolean Specify if the DHCP client is enabled false"},{"location":"gateway-configuration/network-configuration/#ipv6-properties","title":"IPv6 properties","text":"Name Type Description Default value net.interface.<interface>.config.ip6.status String The status of the interface for the IPv6 configuration; possibile values are: netIPv6StatusDisabled, netIPv6StatusUnmanaged, netIPv6StatusL2Only, netIPv6StatusEnabledLAN, netIPv6StatusEnabledWAN, netIPv6StatusUnknown netIPv6StatusDisabled (see note below) net.interface.<interface>.config.ip6.wan.priority Integer (NetworkManager only) Priority used to determine which interface select as primary WAN. Allowed values range from -1 to 2147483647, inclusive. See Network Failover for further details -1 net.interface.<interface>.config.ip6.address.method String The IPv6 configuration method; possible values are: AUTO, DHCP, MANUAL. AUTO net.interface.<interface>.config.ip6.address String The IPv6 address assigned to the network interface net.interface.<interface>.config.ip6.prefix Short The IPv6 netmask assigned to the network interface -1 net.interface.<interface>.config.ip6.gateway String The IPv6 address of the default gateway net.interface.<interface>.config.ip6.dnsServers String Comma-separated list of dns servers net.interface.<interface>.config.ip6.addr.gen.mode String The IPv6 address generation mode; possible values are EUI64, STABLE_PRIVACY net.interface.<interface>.config.ip6.privacy String The IPv6 Privacy Extensions for SLAAC; possible values are DISABLED, ENABLED_PUBLIC_ADD, ENABLED_TEMP_ADD net.interface.<interface>.config.ip6.mtu Integer The Maximum Transition Unit (MTU) for Ipv6 traffic on this interface. Requires NetworkManager 1.40 or newer

Note

For physical interfaces the default status is netIPv6StatusDisabled. For virtual ones, instead, the default status is defined by the kura.net.virtual.devices.config property in the kura.properties file.

"},{"location":"gateway-configuration/network-configuration/#wifi-master-access-point-properties","title":"WiFi Master (Access Point) properties","text":"Name Type Description Default value net.interface.<interface>.config.wifi.master.driver String The driver used for the connection net.interface.<interface>.config.wifi.master.passphrase Password The password for the access point net.interface.<interface>.config.wifi.master.ssid String The SSID of the access point net.interface.<interface>.config.wifi.master.securityType String The security protocol for the wireless network; possible values are SECURITY_NONE, SECURITY_WEP, SECURITY_WPA, SECURITY_WPA2, SECURITY_WPA_WPA2 SECURITY_NONE net.interface.<interface>.config.wifi.master.mode String The mode of the wireless connection; for the access point mode set it to MASTER MASTER net.interface.<interface>.config.wifi.master.channel String The channel to be used for the access point 1 net.interface.<interface>.config.wifi.master.radioMode String Specify the 802.11 radio mode; possible values are RADIO_MODE_80211a, RADIO_MODE_80211b, RADIO_MODE_80211g, RADIO_MODE_80211nHT20, RADIO_MODE_80211_AC RADIO_MODE_80211b net.interface.<interface>.config.wifi.master.ignoreSSID Boolean Specify if the SSID broadcast is ignored false net.interface.<interface>.config.wifi.master.groupCiphers String Group ciphers i.e. group/broadcast encryption algorithms which prevents connections to Wi-Fi networks that do not utilize one of the algorithms set, possible values are CCMP, TKIP, and CCMP_TKIP CCMP_TKIP net.interface.<interface>.config.wifi.master.pairwiseCiphers String Pairwise ciphers i.e. pairwise encryption algorithms which prevents connections to Wi-Fi networks that do not utilize one of the algorithms set, possible values are CCMP, TKIP, and CCMP_TKIP CCMP_TKIP"},{"location":"gateway-configuration/network-configuration/#wifi-infra-station-mode-properties","title":"WiFi Infra (Station Mode) properties","text":"Name Type Description Default value net.interface.<interface>.config.wifi.infra.ssid String The SSID of the wireless network to connect to net.interface.<interface>.config.wifi.infra.channel String The channel of the wireless network to connect to 1 net.interface.<interface>.config.wifi.infra.bgscan String Set the background scans; possible values have the form <mode>:<shortInterval>:<rssiThreshold>:<longInterval> where mode (String) is one of NONE, SIMPLE, or LEARN, shortInterval (Integer) sets the Bgscan short interval (secs), rssiThreshold (Integer) sets the Bgscan Signal strength threshold (dBm), and longInterval (Integer) sets the Bgscan long interval (secs) net.interface.<interface>.config.wifi.infra.passphrase Password The password for the wireless network net.interface.<interface>.config.wifi.infra.ignoreSSID Boolean Specify if a scan for SSID is required before attempting to associate false net.interface.<interface>.config.wifi.infra.mode String The mode of the wireless connection; for station mode set to INFRA INFRA net.interface.<interface>.config.wifi.infra.pingAccessPoint Boolean Enable pinging the access point after connection is established false net.interface.<interface>.config.wifi.infra.driver String The driver used for the connection net.interface.<interface>.config.wifi.infra.securityType String The security protocol for the wireless network; possible values are SECURITY_NONE, SECURITY_WEP, SECURITY_WPA, SECURITY_WPA2, SECURITY_WPA_WPA2 SECURITY_NONE net.interface.<interface>.config.wifi.infra.groupCiphers String Group ciphers i.e. group/broadcast encryption algorithms which prevents connections to Wi-Fi networks that do not utilize one of the algorithms set, possible values are CCMP, TKIP, and CCMP_TKIP CCMP_TKIP net.interface.<interface>.config.wifi.infra.pairwiseCiphers String Pairwise ciphers i.e. pairwise encryption algorithms which prevents connections to Wi-Fi networks that do not utilize one of the algorithms set, possible values are CCMP, TKIP, and CCMP_TKIP CCMP_TKIP"},{"location":"gateway-configuration/network-configuration/#cellular-modem-properties","title":"Cellular Modem properties","text":"Name Type Description Default value net.interface.<interface>.config.enabled Boolean Enable the interface false net.interface.<interface>.config.idle Integer The idle option of the PPP daemon 95 net.interface.<interface>.config.username String The username used for the connection net.interface.<interface>.config.password Password The password used for the connection net.interface.<interface>.config.pdpType String The PdP type; possible values are IP, PPP and IPv6 IP net.interface.<interface>.config.maxFail Integer The maxfail option of the PPP daemon 5 net.interface.<interface>.config.authType String The authentication type; possible values are NONE, AUTO, CHAP and PAP NONE net.interface.<interface>.config.lpcEchoInterval Integer The lcp-echo-interval option of the PPP daemon 0 net.interface.<interface>.config.activeFilter String The active-filter option of the PPP daemon inbound net.interface.<interface>.config.lpcEchoFailure Integer The lcp-echo-failure option of the PPP daemon 0 net.interface.<interface>.config.diversityEnabled Boolean Enable the LTE diversity antenna false net.interface.<interface>.config.resetTimeout Integer The modem reset timeout in minutes 5 net.interface.<interface>.config.gpsEnabled Boolean Enable the GPS device in the modem if available false net.interface.<interface>.config.gpsMode String Select the GPS mode to activate for the modem if available kuraModemGpsModeUnmanaged net.interface.<interface>.config.persist Boolean The persist option of the PPP daemon true net.interface.<interface>.config.apn String The modem Access Point Name net.interface.<interface>.config.dialString String The dial string used for connecting to the APN net.interface.<interface>.config.holdoff Integer The holdoff option of the PPP daemon (in seconds) 1 net.interface.<interface>.config.pppNum Integer Assigned ppp interface number 0"},{"location":"gateway-configuration/network-configuration/#gps-mode","title":"GPS Mode","text":"

The GPS mode can be set to one of the following values:

  • kuraModemGpsModeUnmanaged: the GPS device of the modem will be setup but not directly managed, therefore freeing the serial port for other services to use. This can be used in order to perform the setup of the GPS and then have another service (like gpsd) parse the NMEA strings in order to extract the position informations. This is the default value.
  • kuraModemGpsModeManagedGps: the GPS device of the modem will be setup and directly managed (typically by ModemManager) therefore the serial port won't be available for other services to use.

For older versions compatibility, if the net.interface.<interface>.config.gpsMode property is not set, the GPS mode will be automatically set to the kuraModemGpsModeUnmanaged equivalent.

"},{"location":"gateway-configuration/network-configuration/#vlan-properties","title":"VLAN properties","text":"Name Type Description Default value net.interface.<interface>.config.vlan.parent String Physical interface Vlan is bound to net.interface.<interface>.config.vlan.id Integer Vlan tag identifier, between 0 and 4094 net.interface.<interface>.config.vlan.ingress String Incoming traffic priorities in the format from:to, as comma separated pairs of unsigned integers (Optional) net.interface.<interface>.config.vlan.egress String Outgoing traffic priorities in the format from:to, as comma separated pairs of unsigned integer (Optional) net.interface.<interface>.config.vlan.flags String Configuration flags, between 0 and 15 (Optional) 1"},{"location":"gateway-configuration/network-configuration/#8021x-properties","title":"802.1x properties","text":"Name Type Description net.interface.<interface>.config.802-1x.eap String The EAP method to be used when authenticating to the network with 802.1x. Supported methods: \"Kura8021xEapTls\", \"Kura8021xEapPeap\", \"Kura8021xEapTtls\". net.interface.<interface>.config.802-1x.innerAuth String Specifies the \"phase 2\" inner authentication method when an EAP method that uses an inner TLS tunnel is specified in the \"eap\" property. Supported methods: \"Kura8021xInnerAuthNone\", \"Kura8021xInnerAuthMschapv2\". net.interface.<interface>.config.802-1x.identity String Identity string for EAP authentication methods. Typically the user's user or login name. net.interface.<interface>.config.802-1x.password String Password used for EAP authentication methods. net.interface.<interface>.config.802-1x.client-cert-name String Name referring to the corresponding Kura keystore entry containing the client certificate if used by the EAP method specified in the \"eap\" property. Typically is set to the same name as the net.interface.<interface>.config.802-1x.private-key-name when using EAP-TLS. net.interface.<interface>.config.802-1x.private-key-name String Name referring to the corresponding Kura keystore entry containing the private key when the \"eap\" property is set to \"Kura8021xEapTls\". Typically is set to the same name as the net.interface.<interface>.config.802-1x.client-cert-name. net.interface.<interface>.config.802-1x.ca-cert-name String Name referring to the corresponding Kura keystore entry containing the CA certificate if used by the EAP method specified in the \"eap\" property. This parameter is optional but this allows man-in-the-middle attacks and is NOT recommended. net.interface.<interface>.config.802-1x.anonymous-identity String Anonymous identity string for EAP authentication methods. Used as the unencrypted identity with EAP types that support different tunneled identity like EAP-TTLS (Optional)"},{"location":"gateway-configuration/network-configuration/#network-configuration-recipes","title":"Network Configuration recipes","text":"

This section presents some snapshot examples to perform basic operations on networking. The snippets can be modified adapting them to the required configuration (i.e. changing the interface name in the property to be applied).

Warning

Be aware that an inconsitent or wrong configuration can compromise the network functionality of the gateway. Try the new configuration on a test device before appling it in a production environment!

Moreover, if a property is not present in the new snapshot, the old value is used for the configuration. So, the best practice is to set all the needed properties in the snapshot.

"},{"location":"gateway-configuration/network-configuration/#disable-a-network-interface","title":"Disable a network interface","text":"
<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.type\" type=\"String\">\n                <esf:value>ETHERNET</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusDisabled</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
"},{"location":"gateway-configuration/network-configuration/#configure-an-ethernet-interface-for-wan-with-dhcp-client-enabled-and-custom-dns-server","title":"Configure an ethernet interface for WAN with DHCP client enabled and custom DNS server","text":"
<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.type\" type=\"String\">\n                <esf:value>ETHERNET</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.dnsServers\" type=\"String\">\n                <esf:value>1.2.3.4</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledWAN</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
"},{"location":"gateway-configuration/network-configuration/#configure-an-ethernet-interface-for-lan-with-dhcp-server-enabled-and-nat-disabled","title":"Configure an ethernet interface for LAN with DHCP server enabled and NAT disabled","text":"
<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.type\" type=\"String\">\n                <esf:value>ETHERNET</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.dnsServers\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.rangeEnd\" type=\"String\">\n                <esf:value>192.168.4.110</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.defaultLeaseTime\" type=\"Integer\">\n                <esf:value>900</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.passDns\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.rangeStart\" type=\"String\">\n                <esf:value>192.168.4.100</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.maxLeaseTime\" type=\"Integer\">\n                <esf:value>900</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.address\" type=\"String\">\n                <esf:value>192.168.4.1</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.gateway\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.nat.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
"},{"location":"gateway-configuration/network-configuration/#configure-a-wireless-interface-as-access-point-with-dhcp-server-and-nat-enabled","title":"Configure a wireless interface as access point with DHCP server and NAT enabled","text":"
<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.type\" type=\"String\">\n                <esf:value>WIFI</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.gateway\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.dnsServers\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.address\" type=\"String\">\n                <esf:value>172.16.1.1</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.rangeStart\" type=\"String\">\n                <esf:value>172.16.1.100</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.maxLeaseTime\" type=\"Integer\">\n                <esf:value>900</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.defaultLeaseTime\" type=\"Integer\">\n                <esf:value>900</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.rangeEnd\" type=\"String\">\n                <esf:value>172.16.1.110</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.passDns\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.nat.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.mode\" type=\"String\">\n                <esf:value>MASTER</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.driver\" type=\"String\">\n                <esf:value>nl80211</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"true\" name=\"net.interface.wlp1s0.config.wifi.master.passphrase\" type=\"Password\">\n                <esf:value>ZW5hYmxlbWVwbGVhc2U=</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.ssid\" type=\"String\">\n                <esf:value>kura_gateway_19</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.securityType\" type=\"String\">\n                <esf:value>SECURITY_WPA2</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.mode\" type=\"String\">\n                <esf:value>MASTER</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.channel\" type=\"String\">\n                <esf:value>11</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.radioMode\" type=\"String\">\n                <esf:value>RADIO_MODE_80211g</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.ignoreSSID\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.pairwiseCiphers\" type=\"String\">\n                <esf:value>CCMP</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
"},{"location":"gateway-configuration/network-configuration/#configure-a-wireless-interface-as-station-mode-with-dhcp-client-enabled","title":"Configure a wireless interface as station mode with DHCP client enabled","text":"
<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.type\" type=\"String\">\n                <esf:value>WIFI</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.dnsServers\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.mode\" type=\"String\">\n                <esf:value>INFRA</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.ssid\" type=\"String\">\n                <esf:value>MyWirelessNetwork</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.bgscan\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"true\" name=\"net.interface.wlp1s0.config.wifi.infra.passphrase\" type=\"Password\">\n                <esf:value>MyPasswordBase64</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.ignoreSSID\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.mode\" type=\"String\">\n                <esf:value>INFRA</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.pingAccessPoint\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.driver\" type=\"String\">\n                <esf:value>nl80211</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.securityType\" type=\"String\">\n                <esf:value>SECURITY_WPA2</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
"},{"location":"gateway-configuration/network-configuration/#enable-a-cellular-interface","title":"Enable a cellular interface","text":"
<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>  \n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.type\" type=\"String\">\n                <esf:value>MODEM</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledWAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.ip4.dnsServers\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.idle\" type=\"Integer\">\n                <esf:value>95</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"true\" name=\"net.interface.1-1.config.password\" type=\"Password\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.pdpType\" type=\"String\">\n                <esf:value>IP</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.ipAddress\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.maxFail\" type=\"Integer\">\n                <esf:value>5</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.authType\" type=\"String\">\n                <esf:value>NONE</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.lcpEchoInterval\" type=\"Integer\">\n                <esf:value>0</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.activeFilter\" type=\"String\">\n                <esf:value>inbound</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.lcpEchoFailure\" type=\"Integer\">\n                <esf:value>0</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.diversityEnabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.resetTimeout\" type=\"Integer\">\n                <esf:value>5</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.gpsEnabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.persist\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.dialString\" type=\"String\">\n                <esf:value>atd*99***2#</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.apn\" type=\"String\">\n                <esf:value>web.omnitel.it</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
"},{"location":"gateway-configuration/network-configuration/#create-a-vlan","title":"Create a VLAN","text":"
<?xml version=\"1.0\" encoding=\"UTF-8\"?><esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interfaces\" type=\"String\">\n                <esf:value>wlan0,lo,ens33,vlanFull,ens34</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.nat.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.type\" type=\"String\">\n                <esf:value>VLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.vlan.parent\" type=\"String\">\n                <esf:value>ens33</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.vlan.id\" type=\"Integer\">\n                <esf:value>41</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.vlan.flags\" type=\"Integer\">\n                <esf:value>1</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.vlan.ingress\" type=\"String\">\n                <esf:value>1:2,3:4</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.vlan.egress\" type=\"String\">\n                <esf:value>5:6</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.ip4.address\" type=\"String\">\n                <esf:value>192.168.41.100</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.ip4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
"},{"location":"gateway-configuration/network-failover/","title":"Network Failover","text":"

For devices configured to use NetworkManager, it is possible to configure multiple WAN interfaces and a basic network failover functionality.

As in the picture below, the Kura UI allows for multiple WAN interfaces to be defined. Each WAN interface can be configured with a WAN Priority. WAN Priority is used to determine which interface will be selected for primary WAN. In the case where the primary WAN interface loses connection, then the next highest priority interface is assigned.

Kura uses NetworkManager's implementation to achieve network failover (see NetworkManager). Lower values correspond to higher priority. Allowed values range from -1 to 2147483647. Value -1 means that the metric is chosen automatically based on the device type (see NetworkManager DBUS properties).

To observe changes to the applied configuration, use the following command on your device's shell:

route -n\n\nKernel IP routing table\nDestination     Gateway         Genmask         Flags Metric Ref    Use Iface\n0.0.0.0         192.168.2.1     0.0.0.0         UG    100    0        0 eth0\n172.16.1.0      0.0.0.0         255.255.255.0   U     600    0        0 wlan0\n172.17.0.0      0.0.0.0         255.255.0.0     U     0      0        0 docker0\n192.168.2.0     0.0.0.0         255.255.255.0   U     100    0        0 eth0\n

The metric flag will correspond to the set WAN Priority. NetworkManager will always prioritize lower metric routes.

"},{"location":"gateway-configuration/network-failover/#operating-modes","title":"Operating modes","text":"

The NetworkManager failover mechanism can work at two different levels:

  • by detecting disruptions at physical level (i.e. an ethernet cable that disconnects);
  • by performing a connectivity check to an upstream URI.

NetworkManager brings a network interface down when it detects the loss of its physical link. In such case, the next highest priority interface is selected as the main one.

When the connectivity check fails, NetworkManager penalizes the metric of that interface in the routing table. NetworkManager continues to perform connectivity checks over all the other interfaces. As soon as the connectivity is restored over a previously failing interface, the metric is also restored to the original value and the routing table goes back to the original state.

"},{"location":"gateway-configuration/network-failover/#configuring-the-connectivity-check","title":"Configuring the connectivity check","text":"

The connectivity check is enabled by default in Kura and is configured to probe the connection to http://network-test.debian.org/nm every 60 seconds. To set a specific URI and a different interval edit /etc/NetworkManager/conf.d/99kura-nm.conf (reference NetworkManager):

[connectivity]\nuri=http://network-test.debian.org/nm\ninterval=60\nresponse=\"NetworkManager is online\"\n

The minimun interval is 60 seconds, if no interval is specified it defaults to 300 seconds.

The response should match what the URI is returning when probed. Some examples of web pages with NetworkManager responses:

URI Response http://network-test.debian.org/nm NetworkManager is online https://fedoraproject.org/static/hotspot.txt OK http://nmcheck.gnome.org/check_network_status.txt NetworkManager is online https://www.pkgbuild.com/check_network_status.txt NetworkManager is online

To disable the connectivity check feature:

  • remove the [connectivity] section from the configuration file; or
  • set interval=0; or
  • remove uri; or
  • set an empty URI, like uri=
"},{"location":"gateway-configuration/network-hardware/","title":"Hardware Tab","text":"

Each interface in the Network page contains inside its specific box the tab Hardware: this collects the most significant information about the current state of the interface.

In this way the user can have a quick and complete view of what are the settings and physical specifications of a network interface.

These information are respectively:

  • Status: the current state of the network interface, from the framework point of view. Some examples of status are UNMANAGED, ACTIVATED, FAILED, UNKNOWN.
  • Name: name of the interface
  • Type: physical interface type like WIFI or ETHERNET
  • Hardware Address: MAC address of the interface
  • Serial #: serial number of the hardware interface
  • Driver: Linux driver used for the interface
  • Version: Linux driver version
  • Firmware: firmware version of the interface module
  • MTU: Maximum Transmission Unit, is the measurement in bytes of the largest data packets that the interface can accept
  • USB Device: path of the usb device
  • Received Signal Strength (dBm): power of the received radio signal from a wireless interface
  • Current WLAN Channel: actual channel used by the wifi connection

These entries are filled only if the associated data is available. This means, for example, that no information will be shown under Current WLAN Channel if the interface is of Ethernet type. Conversely, if the interface is Wifi type and no information is shown, it is possible that there has been some problem with the configuration or connection of the interface.

So this tab, could be also an intuitive way to check if the interface is working properly or not.

"},{"location":"gateway-configuration/network-threat-manager/","title":"Network Threat Manager","text":"

Eclipse Kura provides a set of features to detect and prevent network attacks. The Security section in the Gateway Administration Console shows the Network Threat Manager tab where is it possible to activate these functions.

Warning

The Network Threat Manager tab is not available for the No Network version of Eclipse Kura.

"},{"location":"gateway-configuration/network-threat-manager/#flooding-protection","title":"Flooding protection","text":"

The flooding protection function is used to prevent DDos (Distributed Denial-of-Service) attacks using the firewall. When enabled, the feature adds a set of firewall rules to the mangle table.

"},{"location":"gateway-configuration/network-threat-manager/#flooding-protection-for-ipv4","title":"Flooding protection for IPv4","text":"

The following rules are added to the mangle table and they are implemented to block invalid or malicious network packets:

iptables -A prerouting-kura -m conntrack --ctstate INVALID -j DROP\niptables -A prerouting-kura -p tcp ! --syn -m conntrack --ctstate NEW -j DROP\niptables -A prerouting-kura -p tcp -m conntrack --ctstate NEW -m tcpmss ! --mss 536:65535 -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags FIN,SYN FIN,SYN -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags SYN,RST SYN,RST -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags FIN,RST FIN,RST -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags FIN,ACK FIN -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ACK,URG URG -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ACK,FIN FIN -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ACK,PSH PSH -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ALL ALL -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ALL NONE -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ALL SYN,FIN,PSH,URG -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP\niptables -A prerouting-kura -p icmp -j DROP\niptables -A prerouting-kura -f -j DROP\n

To further filter the incoming TCP fragmented packets, specific system configuration files are configured. The flooding.protection.enabled property is used to enable the feature.

"},{"location":"gateway-configuration/network-threat-manager/#flooding-protection-for-ipv6","title":"Flooding protection for IPv6","text":"

The same rules applied to the IPv4 are used for preventing attack on IPv6. In addition, some rules are implemented to drop specific IPv6 headers and limit the incoming ICMPv6 packets. Moreover, the incoming TCP fragmented packets are dropped configuring specific system files.

The following rules are applied to the mangle table:

ip6tables -A prerouting-kura -m conntrack --ctstate INVALID -j DROP\nip6tables -A prerouting-kura -p tcp ! --syn -m conntrack --ctstate NEW -j DROP\nip6tables -A prerouting-kura -p tcp -m conntrack --ctstate NEW -m tcpmss ! --mss 536:65535 -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags FIN,SYN FIN,SYN -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags SYN,RST SYN,RST -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags FIN,RST FIN,RST -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags FIN,ACK FIN -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ACK,URG URG -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ACK,FIN FIN -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ACK,PSH PSH -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ALL ALL -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ALL NONE -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ALL SYN,FIN,PSH,URG -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP\nip6tables -A prerouting-kura -p ipv6-icmp -m ipv6-icmp --icmpv6-type 128 -j DROP\nip6tables -A prerouting-kura -p ipv6-icmp -m ipv6-icmp --icmpv6-type 129 -j DROP\nip6tables -A prerouting-kura -m ipv6header --header dst --soft -j DROP\nip6tables -A prerouting-kura -m ipv6header --header hop --soft -j DROP\nip6tables -A prerouting-kura -m ipv6header --header route --soft -j DROP\nip6tables -A prerouting-kura -m ipv6header --header frag --soft -j DROP\nip6tables -A prerouting-kura -m ipv6header --header auth --soft -j DROP\nip6tables -A prerouting-kura -m ipv6header --header esp --soft -j DROP\nip6tables -A prerouting-kura -m ipv6header --header none --soft -j DROP\nip6tables -A prerouting-kura -m rt --rt-type 0 -j DROP\nip6tables -A output-kura -m rt --rt-type 0 -j DROP\n

Also in this case, to enable the feature and add the rules to the firewall, the flooding.protection.enabled.ipv6 property has to be set to true. If the device doesn't support IPv6, this property is ignored.

Warning

To recover the device state when the IPv6 flooding protection feature is disabled, a reboot is required. So, to disable the feature, set the flooding.protection.enabled.ipv6 property to false tha reboot the device.

"},{"location":"gateway-configuration/ssl-configuration/","title":"SSL Configuration","text":"

A SSL Service instance manages the configuration of the SSL connections. It uses the associated KeystoreService to access the trust certificates, private keys pairs needed to setup a SSL connection. It also enforces best practices that are not enabled by default in the Java VM, such as, enabling hostname verification, disabling the legacy SSL-2.0-compatible Client Hello, and disabling the Nagle algorithm.

The list of all available SSL Service instances is available in the SSL Configuration tab of the Security section, accessible only by the users with the corresponding permission.

By default, the framework creates a SSLManagerService instance with the org.eclipse.kura.ssl.SslManagerService PID. This instance is generally used by all the core services of the framework.

A new SSL Service instance can be created using the New Button, by specifying the desired factory and the Service PID that will be associated with this new instance.

An instance of the default org.eclipse.kura.ssl.SslManagerService factory has the following configuration parameters:

  • KeystoreService Target Filter - specifies, as an OSGi target filter, the pid of the KeystoreService used to manage the SSL key store (Required field).

  • Truststore Target Filter - specifies, as an OSGi target filter, the pid of the KeystoreService used to manage the SSL trust store. If the target service cannot be found, the service configured with the Keystore Target Filter parameter will be used as truststore.

  • ssl.default.protocol - defines the allowed SSL protocol.

  • ssl.hostname.verification - indicates whether hostname verification is enabled or disabled.

  • ssl.default.cipherSuites - defines the allowed cipher suites.

By selecting the Select available targets button, the user can associate the SSLManagerService instance with the corresponding KeystoreService instances available in the framework runtime.

"},{"location":"gateway-configuration/ssl-configuration/#server-ssl-certificate","title":"Server SSL Certificate","text":"

The device requires a public key in its trust store in order to authenticate the broker and be able to setup an SSL connection. Kura is distributed with a pre-initialized SSL keystore that contains only some of the major Certification Authorities (CA) public keys.

If the broker uses a certificate signed by a different CA, or uses an auto-signed certificate, the system administrator must setup Kura with the correct certificates used to trust the remote cloud broker.

The inclusion of public certificates is accomplished with the Server SSL Certificate feature. To do so, the SSL Certificates form must be completed by providing a certificate or a certificates chain to be trusted and defining the alias used to register this new data in the device's trust store.

With this feature, when the device tries to instantiate an SSL connection with the broker, it receives the broker's public key chain. The SSL connection is secured only if the received chain is trusted. This connection can only happen if one of the certificates that compose the broker chain are available in the device's trust store.

When instantiating the device's trust store, the user decides whether to add a single certificate (leaf or CA certificate) or the full chain.

In the latter case, the chain should be provided by specifying the leaf certificate, followed by the CA certificate that is signing it, and so on, until the root CA is reached. An example of this scenario is depicted in the following image:

"},{"location":"gateway-configuration/ssl-configuration/#device-ssl-certificate-mutual-authentication","title":"Device SSL Certificate & Mutual Authentication","text":"

Mutual authentication is a technique that allows authentication of the device that is connecting to the broker. The form available in Certificates List may be used to specify the keys needed to enable mutual authentication.

This authentication may be accomplished by specifying a couple of certificates (private and public keys) to be used by the client device to authenticate itself to the broker. This authentication is possible because the broker has the root CA certificate that has been used to sign the couple held by the device. In this way, the authenticity of the couple of certificates held by the device may be verified, and therefore, enable the two communicating parts (the broker and the device) to trust each other.

To enable mutual authentication, the user must complete the form with a well-formed key pair (public and private), and with an alias value that corresponds with the account name used to connect to the broker.

"},{"location":"gateway-configuration/ssl-configuration/#key-pair-generation","title":"Key Pair Generation","text":"

The keys may be generated using specific software, such as OpenSSL or Keytool. This section describes how to use OpenSSL to generate a couple of private and public keys.

The private key may be created using the following command:

openssl genrsa -out certsDirectory/certs/certificate.key 1024\n

This command creates a new, 1024-bit private key in the specified path. This key is used to generate a Certificate Signing Request (CSR) file, which is used by a CA to authenticate the certificate's creator. A CSR file is created with OpenSSL using the following command:

openssl req -new -key certsDirectory/certs/certificate.key -out certsDirectory/crl/certificate.csr\n

If the user is creating their own certificate chain, the CSR file may be signed using a personal CA. This process may be accomplished using OpenSSL with the following command:

openssl ca -config certsDirectory/openssl.cnf -days 3650 -keyfile certsDirectory/ca/ca.key -cert certsDirectory/ca/ca.pem -out certsDirectory/certs/certificate.pem -infiles certsDirectory/crl/certificate.csr\n

The parameters are defined as follows:

  • -config: specifies the OpenSSL configuration file that must be used to sign the certificate.

  • -days: specifies how long the certificate is valid.

  • -keyfile and -cert: allow the specification of the CA that will sign the CSR file.

  • -out: identifies the location and the name of the signed certificate that will be created.

  • -infiles: identifies the location of the CSR file that has to be signed.

Tip

The private key may not be placed into the Kura Gateway Administration Console without a format conversion.

OpenSSL offers the following command to convert the input private key to a non-encrypted PKCS#8 format that may be processed by the Kura code:

openssl pkcs8 -topk8 -inform PEM -outform PEM -in inPrivateKey.key -out outKey.pem -nocrypt\n
"},{"location":"gateway-configuration/vlan-configuration/","title":"VLAN Configuration","text":"

A VLAN, or Virtual Local Area Network, is a network segmentation technology that allows a single physical network to be logically divided into multiple isolated networks. These virtual networks operate as if they are independent, even though they share the same physical infrastructure. This is achieved via a VLAN ID, or VLAN tag, a numerical label added to network frames to identify the specific Virtual Local Area Network (VLAN) to which they belong. It's a critical component in VLAN technology, allowing network switches and routers to differentiate and route traffic within a VLAN. VLAN tags are added to the Ethernet frame's header, indicating which virtual network a data packet should be directed to when it traverses the physical network infrastructure. Therefore, VLANs must also be supported and configured on the network equipment a device is connected to.

A VLAN can be named freely, as long as it's 15 or less characters. A typical VLAN naming format is physicalInterfaceName.vlanId (eg. a vlan with id 100 on the interface eth0 would be named eth0.100).

This is achieved by NetworkManager by creating a virtual device bound to the underlying physical interface when Kura sets up a new VLAN connection.

"},{"location":"gateway-configuration/vlan-configuration/#vlan-configuration-via-kura-snapshot-upload","title":"VLAN Configuration via Kura Snapshot upload","text":"

Currently, VLAN configuration is supported via uploading snapshot.xml fragments.

Warning

When creating a new VLAN be sure to include the net.interfaces parameter, containing both the previously existing network interfaces, either virtual or physical, and the name of the new VLAN to be created.

"},{"location":"gateway-configuration/vlan-configuration/#basic-vlan-configuration-example","title":"Basic VLAN configuration example","text":"

The following example creates a VLAN with ID 40 over the ethernet interface ens33, naming it ens33.40, using a predefined IP address, enabled for LAN.

<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interfaces\" type=\"String\">\n                <esf:value>lo,ens33,ens34,ens33.40</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.nat.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.type\" type=\"String\">\n                <esf:value>VLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.vlan.parent\" type=\"String\">\n                <esf:value>ens33</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.vlan.id\" type=\"Integer\">\n                <esf:value>40</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.ip4.address\" type=\"String\">\n                <esf:value>10.0.55.37</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.ip4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
"},{"location":"gateway-configuration/vlan-configuration/#complete-vlan-configuration-example","title":"Complete VLAN configuration example","text":"

The following example creates a VLAN with ID 41 over the ethernet interface ens33, naming it ens33.41, using a predefined IP address, enabled for WAN. This example also sets the 'flags' and 'traffic priority' optional parameters as described in Network Manager API documentation.

<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interfaces\" type=\"String\">\n                <esf:value>lo,ens33,ens34,ens33.41</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.nat.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.type\" type=\"String\">\n                <esf:value>VLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.ip4.gateway\" type=\"String\">\n                <esf:value>192.168.41.254</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledWAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.ip4.dnsServers\" type=\"String\">\n                <esf:value>8.8.8.8</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.vlan.parent\" type=\"String\">\n                <esf:value>ens33</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.vlan.id\" type=\"Integer\">\n                <esf:value>41</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.ip4.address\" type=\"String\">\n                <esf:value>192.168.41.1</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.ip4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.vlan.flags\" type=\"Integer\">\n                <esf:value>1</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.vlan.ingress\" type=\"String\">\n                <esf:value>1:2,3:4</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.vlan.egress\" type=\"String\">\n                <esf:value>5:6</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
"},{"location":"gateway-configuration/vlan-configuration/#vlan-management","title":"VLAN Management","text":"

Once a VLAN is created it can be managed via the Kura UI just like any other Ethernet interface.

Warning

Setting a VLAN status to \"Disabled\" deletes its configuration in NetworkManager and the related virtual interface from the system. Although it will is no longer be visible on the UI, all the configurations are left in Kura. Therefore the VLAN can be restored by setting the net.interface.<interface>.config.ip4.status to netIPv4StatusEnabledLAN or netIPv4StatusEnabledWAN via snapshot upload, then resume configuration via UI.

As an example, the configuration to reactivate a disabled VLAN named ens33.40 would be as follows:

<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledLAN</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
"},{"location":"gateway-configuration/web-console-configuration/","title":"Web Console Configuration","text":"

The Web Console exposes a set of configuration parameters that can be used to increase the overall UI security. The Web Console configuration can be accessed in the Security section.

"},{"location":"gateway-configuration/web-console-configuration/#web-server-entry-point","title":"Web Server Entry Point","text":"

This parameter allows to configure the relative path that the user will be redirected to when accessing http(s)://gateway-ip/. Note: this parameter does not change the Kura Web UI relative path, that is always /admin/console. The default value set is /admin/console

"},{"location":"gateway-configuration/web-console-configuration/#session-max-inactivity-interval","title":"Session max inactivity interval","text":"

The session max inactivity interval in minutes. If no interaction with the Web UI is performed for the value of this parameter in minutes, a new login will be requested. The default value set is 15 minutes

"},{"location":"gateway-configuration/web-console-configuration/#access-banner-enabled","title":"Access Banner Enabled","text":"

For security reasons, it may be needed to display to the user a banner that describes the intended system use before authenticating.

Once enabled and configured, the Kura Web UI will display a banner before every access attempt, as depicted in the image below.

"},{"location":"gateway-configuration/web-console-configuration/#password-management","title":"Password Management","text":"

This section is related to the definition of required parameters that must be respected when defining a new password, for example when a user changes its password at first access.

"},{"location":"gateway-configuration/web-console-configuration/#minimum-password-length","title":"Minimum password length","text":"

The minimum length to be enforced for new passwords. Set to 0 to disable. The default value set is 8 characters

"},{"location":"gateway-configuration/web-console-configuration/#require-digits-in-new-password","title":"Require digits in new password","text":"

If set to true, new passwords will be accepted only if containing at least one digit. The default value is false

"},{"location":"gateway-configuration/web-console-configuration/#require-special-characters-in-new-password","title":"Require special characters in new password","text":"

If set to true, new passwords will be accepted only if containing at least one non alphanumeric character The default value is false

"},{"location":"gateway-configuration/web-console-configuration/#require-uppercase-and-lowercase-characters-in-new-passwords","title":"Require uppercase and lowercase characters in new passwords","text":"

If set to true, new passwords will be accepted only if containing both uppercase and lowercase alphanumeric characters. The default value is false

"},{"location":"gateway-configuration/web-console-configuration/#allowed-ports","title":"Allowed ports","text":"

If set to a non empty list, Web Console access will be allowed only on the specified ports. If set to an empty list, access will be allowed on all ports. It is needed for the end user to make sure that the allowed ports are open in HttpService and Firewall configuration.

"},{"location":"gateway-configuration/web-console-configuration/#authentication-method-password-enabled","title":"Authentication Method \"Password\" Enabled","text":"

Defines whether the \"Password\" authentication method is enabled or not. The default value is true

"},{"location":"gateway-configuration/web-console-configuration/#authentication-method-certificate-enabled","title":"Authentication Method \"Certificate\" Enabled","text":"

Defines whether the \"Certificate\" authentication method is enabled or not The default value is true

"},{"location":"gateway-configuration/web-console-configuration/#sslmanagerservice-target-filter","title":"SslManagerService Target Filter","text":"

It is possible to specify the SslManagerService containing the certificates truststore required to establish a new https connection, this is needed, for example, for fetching package descriptions from Eclipse Marketplace. The default target is the org.eclipse.kura.ssl.SslManagerService

"},{"location":"gateway-configuration/wifi-configuration-8021x/","title":"Wi-Fi 802.1x Configuration","text":"

To enable the Enterprise Wi-Fi, the Wireless Security property in the Wireless tab has to be set to WPA2/WPA3-Enterprise. This feature is available only if the Wireless Mode is Station Mode. The following is a list of currently supported 802.1x authentication methods.

  • TTLS-MSCHAPv2
  • PEAP-MSCHAPv2
  • EAP-TLS
"},{"location":"gateway-configuration/wifi-configuration-8021x/#ttls-mschapv2","title":"TTLS-MSCHAPv2","text":"
  1. Set up gateway Wi-Fi as described in the Wi-Fi configuration guide.
  2. Ensure Wireless Security is set to WPA2/WPA3-Enterprise
  3. select the 802.1x tab
  4. Set Enteprise EAP -> TTLS
  5. Set Inner Authentication -> MSCHAPV2
  6. Set Identity (Username)
  7. Set Password
  8. Press 'Apply'

The configuration should look like the following:

"},{"location":"gateway-configuration/wifi-configuration-8021x/#peap-mschapv2","title":"PEAP-MSCHAPv2","text":"
  1. Set up gateway Wi-Fi as described in the Wi-Fi configuration guide.
  2. Ensure Wireless Security is set to WPA2/WPA3-Enterprise
  3. select the 802.1x tab
  4. Set Enteprise EAP -> PEAP
  5. Set Inner Authentication -> MSCHAPV2
  6. Set Identity (Username)
  7. Set Password
  8. Press 'Apply'

The configuration should look like the following:

"},{"location":"gateway-configuration/wifi-configuration-8021x/#eap-tls","title":"EAP-TLS","text":"

To connect via EAP-TLS you will need the following items in unencrypted PEM format:

  • Certificate Authority (CA) Certificate
  • Client Certificate + Private Key (PKCS8)
"},{"location":"gateway-configuration/wifi-configuration-8021x/#enrolling-secrets-in-the-keystore-service","title":"Enrolling secrets in the Keystore service.","text":"
  1. Navigate to Security under the System tab.
  2. Under the Keystore Configuration add a new keystore, and keep note of the name.
  3. After the Keystore is created, be sure to change the path to a persistent directory.
  4. Navigate to the Certificate List and create a new Certificate. Insert the PEM and Apply, keep note of the name.
  5. Now press add and create a new Private Key. Insert both the certificates in the PEM in the dialogue and press apply. keep note of the name.
"},{"location":"gateway-configuration/wifi-configuration-8021x/#wifi-setup","title":"Wifi Setup","text":"
  1. Set up gateway Wi-Fi as described in the Wi-Fi configuration guide.
  2. Ensure Wireless Security is set to WPA2/WPA3-Enterprise.
  3. Select the 802.1x tab.
  4. Set Enteprise EAP -> TLS.
  5. Set Identity (Username).
  6. Set Keystore Pid to the name of the keystore created above.
  7. Set Certificate Authority Certificate (CA-Cert) to the name of the certificate created above.
  8. Set the Client Private Key to the name of the Private Key created above.

When completed the Wi-Fi configuration should look like the following:

"},{"location":"gateway-configuration/wifi-configuration/","title":"Wi-Fi Configuration","text":"

From a configuration standpoint, the Wi-Fi interface (e.g., wlan0) may be viewed as an extension of Ethernet. In addition to the IPv4, IPv6 and DHCPv4 & NAT configuration tabs, it has the Wireless tab that allows for the configuration of wireless settings. These configuration options are described below.

Warning

Before using wifi make sure that you have correctly set the Regulatory Domain on the gateway. You can check the current configuration using the iw reg get command. To set the Regulatory Domain please refer to the specific section in the Gateway Configurations.

"},{"location":"gateway-configuration/wifi-configuration/#wireless-configuration","title":"Wireless Configuration","text":"

The Wireless tab contains the following configuration parameters:

  • Wireless Mode: defines the mode of operation.

    • Access Point: creates a wireless access point.
    • Station Mode: connects to a wireless access point.

  • Network Name: specifies the Service Set Identifier (SSID).

    • In Access Point mode, this is the SSID that identifies this wireless network.
    • In Station mode, this is the SSID of a wireless network to connect to.

  • Band: defines the frequency band to use

    • 2.4GHz: use 2.4GHz band
    • 5GHz: use 5GHz band
    • 2.4GHz/5GHz: use either in 2.4Ghz or 5Ghz depending on the choosen channel

  • Wireless Security: sets the security protocol for the wireless network.

    • None: No Wi-Fi security
    • WEP: Wired Equivalent Privacy
    • WPA: Wi-Fi Protected Access
    • WPA2: Wi-Fi Protected Access II
    • WPA2/WPA3-Enterprise: Wi-Fi Protected Access II & III with 802.1x. Please see here for further details. This fearture is available only in station mode

  • Wireless Password: sets the password for the wireless network.

    • WEP: 64-bit or 128-bit encryption key
    • WPA/WPA2: pre-shared key

  • Verify Password: sets the password verification field.

    • In Access Point mode, allows the wireless password to be retyped for verification.
    • In Station mode, this field is disabled.

  • Pairwise Ciphers: lists accepted pairwise (unicast) ciphers for WPA/WPA2.

    • In Access Point mode, this option is disabled.
    • In Station mode,
      • CCMP (AES-based encryption mode with strong security)
      • TKIP (Temporal Key Integrity Protocol)
      • CCMP and TKIP

  • Group Ciphers: lists accepted group (broadcast/multicast) ciphers for WPA/WPA2.

    • In Access Point mode, this option is disabled.
    • In Station mode,
      • CCMP (AES-based encryption mode with strong security)
      • TKIP (Temporal Key Integrity Protocol)
      • CCMP and TKIP

  • Bgscan Module: requests background scans for the purpose of roaming within an ESS (i.e., within a single network block with all the APs using the same SSID).

    • None: background scan is disabled
    • Simple: periodic background scans based on signal strength
    • Learn: learn channels used by the network and try to avoid bgscans on other channels

  • Bgscan Signal Strength Threshold: defines a threshold (in dBm) that determines which one of the following two parameters (i.e., Short Interval or Long Interval) will be effective.

  • Bgscan Short Interval: defines the interval between background scans (in seconds) if the actual signal level of the currently connected access point is worse than signal_strength.

  • Bgscan Long Interval: defines the interval between background scans (in seconds) if the actual signal level of the currently connected access point is better than signal_strength.

  • Ping Access Point & renew DHCP lease if not reachable: enables pinging the access point after connection is established.

    • In Access Point mode, this option is disabled.
    • In Station mode, if set to true, the unit will ping the access point and attempt to renew the DHCP lease if the access point is not reachable.

  • Ignore Broadcast SSID: operates as follows if set to true:

    • In Access Point mode, sends an empty SSID in beacons and ignores probe request frames that do not specify full SSID.
    • In Station mode, does not scan for the SSID before attempting to associate.

  • Channels list: allows the selection of desired channel frequencies. The availability of the desired frequency is subject to the Regdom set on the device. For a list of limitations in different countries you can consult the following page: List of WLAN channels. Channels marked as No Irradiation and Radar Detection can be used only if DFS (Dynamic Frequency Selection) is supported by the Wi-Fi chip.

    • In Access Point mode, only one channel may be selected.
    • In Station mode, the list of available channels depends on the selected Radio Mode. The selected radio mode also affects the ability to select a network in the scan window (if the channel associated with the network is not enabled in the regulatory domain an error message will be shown).

"},{"location":"gateway-configuration/wifi-configuration/#wi-fi-station-mode-configuration","title":"Wi-Fi Station Mode Configuration","text":"

In addition to the options described above, the Wireless configuration display the Access Point Scan button that help to configure Wi-Fi in the Station mode.

  • Access Point Scan: clicking this button triggers access point scan operations. Upon a successful scan, a table containing access points within range is presented. This table contains the following information:

    • SSID
    • MAC Address
    • Signal Strength (in dBm)
    • Channel
    • Frequency
    • Security

    If you select one of these access points, respective wireless controls (i.e., Network Name, Wireless Security, and Channel) are filled with information obtained during the scan operation. The Force Wireless Network Scan button triggers a manual scan for available access points.

"},{"location":"getting-started/docker-quick-start/","title":"Docker Quick Start","text":""},{"location":"getting-started/docker-quick-start/#installation","title":"Installation","text":"

Eclipse Kura is also available as a Docker container available in Docker Hub.

To download and run, use the following command:

docker run -d -p 443:443 -t eclipse/kura\n

This command will start Kura in background and the Kura Web Ui will be available through port 443.

Once the image is started you can navigate your browser to https://localhost and log in using the credentials admin : admin.

"},{"location":"getting-started/docker-quick-start/#command-toolbox","title":"Command Toolbox","text":"

Following, a set of useful Docker command that can be used to list and manage Docker containers. For more details on Docker commands, please reference the official Docker documentation

"},{"location":"getting-started/docker-quick-start/#list-docker-images","title":"List Docker Images","text":"

To list all the installed Docker images run:

docker images\n
"},{"location":"getting-started/docker-quick-start/#list-running-docker-containers","title":"List Running Docker Containers","text":"

To list all the available instances (both running and powered off) run:

docker ps -a\n
"},{"location":"getting-started/docker-quick-start/#startstop-a-docker-container","title":"Start/Stop a Docker Container","text":"
docker stop <container id>\ndocker start <container id>\n

where <container id> is the instance identification number.

"},{"location":"getting-started/install-kura/","title":"Install Kura","text":"

Eclipse Kura\u2122 is provided using a Debian Linux package. Visit the Kura download page to find the correct installation file for the target system.

"},{"location":"getting-started/install-kura/#installer-types","title":"Installer types","text":"

Several installers can be found on such page, and they fall into one of the following categories:

  1. standard installers, like kura-6.0.0_generic-arm32_installer.deb; and
  2. installers with suffix nn, like kura-6.0.0_generic-arm32-nn_installer.deb

Profiles of types (1) ship a Kura version with networking functionalities. In particular, they can be installed on targets with NetworkManager, a commonly available tool for managing Linux networking. Kura leverages this tool for networking functionalities. Refer to the Kura installers section for further information.

Installers of type (2) with the suffix nn are No Networking profiles that do not bundle the Kura Network Manager: all the network configurations need to be done outside of Kura. Functionalities missing in NN profiles compared to the full Kura profiles:

  • Networking interfaces management
  • Firewall configuration management
  • Network Threat management
"},{"location":"getting-started/install-kura/#kura-installers","title":"Kura installers","text":"

A user can deploy Kura on a target system using the installer tailored for the device architecture. The installer file looks like:

kura-<kura-version>_generic-<arch>_installer.deb/rpm\n

where <arch> is one of the supported architectures: x86_64, arm32, and arm64. Kura can work on systems that have available the dependencies listed in the Kura dependencies section, and that have at least one physical ethernet interface.

"},{"location":"getting-started/install-kura/#java-heap-memory-assignment","title":"Java Heap Memory Assignment","text":"

The Eclipse Kura\u2122's installer incorporates an adaptive Heap Memory allocation system during installation. The allocation follows a formula based on your gateway's available memory. If your gateway has less than 1024MB of RAM, Kura will set -Xms and -Xmx to 256MB. For gateways with more than 1024MB, one quarter of the total RAM will be assigned to -Xms and -Xmx.

"},{"location":"getting-started/install-kura/#initial-network-configuration","title":"Initial network configuration","text":"

During the installation of Eclipse Kura with network management support, the initial network configuration will be generated dynamically. The existing wired and wireless network interface names are detected and sorted in ascending lexicographic order at the installation.

If only one ethernet interface is detected (e.g. eth0), it will be configured as follows:

Interface Configuration Ethernet interface (e.g. eth0) - Status: Enabled for WAN- Configure: Using DHCP

If multiple ethernet interfaces are detected, instead, the first two interfaces will be configured as presented in the table below. The other ethernet interfaces will be disabled.

Interface Configuration First Ethernet interface (e.g. eth0) - Status: Enabled for LAN- Configure: Manually- IP address: 172.16.0.1- Router Mode: DHCP and NAT Second Ethernet interface (e.g. eth1) - Status: Enabled for WAN- Configure: Using DHCP

Finally, if a wireless interface (e.g. wlan0) is detected, it will configured as shown below. The other wireless interfaces will be disabled.

Interface Configuration Wireless interface (e.g. wlan0) - Status: Enabled for LAN- Configure: Manually- IP address: 172.16.1.1- Passphrase: testKEYS- Router Mode: DHCP and NAT

For example, if the system contains the following interfaces: wlp2s0, wlp3s0, enp3s0, eno1, ens2; then eno1 will be enabled for LAN with a DHCP server, enp3s0 will be enabled for WAN in DHCP client mode, wlp2s0 will be configured as an AP, and all other network interfaces will be disabled.

Warning

On systems that do not use systemd's predictable interface naming scheme (see Freedesktop reference) the primary network interface name might change whenever a re-enumeration is triggered (for example, after a reboot or after plugging in an external network adapter).

The advice is to install Kura on systems that use a reliable naming convention for network interfaces.

Systemd consistent network interface naming assigns the name prefix based on the physical location of the device, see Understanding the Predictable Network Interface Device Names for further reference.

"},{"location":"getting-started/install-kura/#initial-firewall-configuration","title":"Initial firewall configuration","text":"

Similarly to the initial network configuration, the initial firewall setup is adapted based on the network interface detected on the system. In case of multiple ethernet and wireless interfaces, the configuration will be as shown in the screenshot below.

If the wireless interface is not present, the firewall entries for the wlan0 are dropped.

Please note that installing Eclipse Kura with network configuration support will replace the current network and firewall configuration with the one shown above.

"},{"location":"getting-started/install-kura/#other-kura-services","title":"Other Kura services","text":"

Eclipse Kura\u2122 do not contain gateway specific customizations, this implies that the values of some configuration parameters may be incorrect and/or missing and must be manually filled after installation. For example the user might want to:

  • Configure the other network interfaces, if any.
  • Setup additional firewall rules.
  • Edit the /opt/eclipse/kura/framework/jdk.dio.properties with the correct GPIO mappings. By default this file is empty.
"},{"location":"getting-started/install-kura/#kura-dependencies","title":"Kura dependencies","text":"

To have all the Kura features working, the following dependencies are required:

  • General: setserial, zip, gzip, unzip, procps, usbutils, socat, gawk, sed, inetutils-telnet.
  • Security: polkit or policykit-1, ssh or openssh, openssl, busybox, openvpn.
  • Bluetooth: bluez or bluez5, bluez-hcidump or bluez5-noinst-tools.
  • Time: ntpdate, chrony, chronyc, cron or cronie.
  • Networking: network-manager or networkmanager, bind9 or bind, dnsmasq or isc-dhcp-server or (dhcp-server and dhcp-client), iw, iptables, modemmanager, hostapd, wpa-supplicant, ppp, iproute2.
  • Logs: logrotate.
  • Gps: gpsd.
  • Python: python3.
  • Java: openjdk-17-jre-headless or temurin-17-jdk or openjdk-8-jre-headless or temurin-8-jdk.
  • Others: dos2unix
"},{"location":"getting-started/install-kura/#reference-devices","title":"Reference devices","text":"

Eclipse Kura\u2122 has been tested on the following devices and provides full configuration of all the available interfaces and GPIO mappings.

Device Architecture OS Raspberry Pi 3/4 arm32 Raspberry Pi OS \"Bookworm\" Raspberry Pi 3/4 arm64 Raspberry Pi OS \"Bookworm\" Raspberry Pi 3/4 arm64 Ubuntu 20.04 ZimaBoard/Blade x86_64 TBD NVIDIA Jetson AGX Orin\u2122 arm64 TBD

Check out the quick start guides for the detailed installation steps and set-up procedures:

  • Raspberry Pi - Raspberry Pi OS Quick Start
  • Raspberry Pi - Ubuntu 20 Quick Start
  • Docker Quick Start
  • Nvidia Jetson AGX Orin Quick Start
  • ZimaBoard/Blade Quick Start
"},{"location":"getting-started/nvidia-jetson-orin-quick-start/","title":"NVIDIA Jetson AGX Orin\u2122 - Quick Start","text":""},{"location":"getting-started/nvidia-jetson-orin-quick-start/#overview","title":"Overview","text":""},{"location":"getting-started/raspberry-pi-raspberryos-quick-start/","title":"Raspberry Pi - Raspberry Pi OS Quick Start","text":""},{"location":"getting-started/raspberry-pi-raspberryos-quick-start/#overview","title":"Overview","text":"

This section provides Eclipse Kura\u2122 quick installation procedures for the Raspberry Pi and the Kura development environment.

Warning

This quickstart will install the version of Kura with the administrative web UI and network configuration support but not CAN bus support. For more information on this please visit the Eclipse Kura download page

This quickstart has been tested using the latest Raspberry Pi OS 32 and 64 bits images which are available for download through the official Raspberry Pi foundation site and the Raspberry Pi Imager.

Warning

Recent versions of Raspberry Pi OS 32 bit on Raspberry PI 4 will use by default a 64 bit kernel with a 32 bit userspace. This can cause issues to applications that use the result of uname -m to decide which native libraries to load (see https://github.com/raspberrypi/firmware/issues/1795). This currently affects for example the Kura SQLite database connector. It should be possible to solve by switching to the 32 bit kernel setting arm_64bit=0 in /boot/config.txt and restarting the device.

For additional details on OS compatibility refer to the Kura\u2122 release notes.

"},{"location":"getting-started/raspberry-pi-raspberryos-quick-start/#enable-ssh-access","title":"Enable SSH Access","text":"

The ssh server is disabled by default on Raspbian images released after November 2016, in order to enable it follow the instructions available here.

If you're using the Raspberry Pi Imager you can directly enable SSH before writing the operating system into the SD card by clicking on the \"setting\" icon.

"},{"location":"getting-started/raspberry-pi-raspberryos-quick-start/#eclipse-kuratm-installation","title":"Eclipse Kura\u2122 Installation","text":"

To install Eclipse Kura with its dependencies on the Raspberry Pi, perform the following steps:

  1. Boot the Raspberry Pi with the latest\u00a0Raspberry Pi OS image.

  2. Make sure your device is connected to the Internet. The best installation experience can be obtained when the device is cabled to the local network and the Internet. By default, the Raspberry Pi OS configures the ethernet interface eth0 in DHCP mode.

  3. Upgrade the system:

    sudo apt update\n
    sudo apt upgrade\n

    Tip

    Optional: Since version 5.3.0 Kura also supports Eclipse Temurin\u2122 as an alternative JVM. To install it you need to perform these additional steps:

    sudo apt-get install -y wget apt-transport-https gnupg\n
    sudo wget -O - https://packages.adoptium.net/artifactory/api/gpg/key/public | sudo apt-key add -\n
    sudo echo \"deb https://packages.adoptium.net/artifactory/deb $(awk -F= '/^VERSION_CODENAME/{print$2}' /etc/os-release) main\" | sudo tee /etc/apt/sources.list.d/adoptium.list\n
    sudo apt-get update\n
    sudo apt-get install temurin-17-jdk\n

  4. Download the Kura package with:

    wget http://download.eclipse.org/kura/releases/<version>/kura-<kura-version>_generic-<arch>_installer.deb\n

    Note: replace <version> in the URL above with the version number of the latest release (e.g. 5.5.0) and <arch> with your device architecture

  5. Install Kura with:\u00a0

    sudo apt-get install ./kura-<kura-version>_generic-<arch>_installer.deb\n

  6. For a correct configuration of the Wlan interface, it is necessary to set the Locale and the WLAN Country through the raspi-config command:

    sudo raspi-config\n

    From the raspi-config main menu select Localisation Options:

    Then modify the Locale and WLAN Country with with the proper settings for your location. For example, an user located in Italy could set the values as the ones in the table:

    Setting Value L1 Locale it_IT.UTF-8 UTF-8 L4 WLAN Country IT Italy

  7. (Optional) To correctly use the GPIO pins, the user is asked to update the jdk.dio.properties file with the proper configuration, based on its own device.

    This is required since the sysfs interface has been deprecated, and some OS distribution may have already suppressed it. Moreover, the kernel complains if a static base number is assigned to a GPIO controller: indeed, when it assigns the numbers automatically, it usually starts from 511. More information can be found here.

    In order to set the correct configuration the user can perform the following steps:

    • Execute on the device the command cat /sys/kernel/debug/gpio, looking for entries similar to gpio-ABC (GPIxx): from this information it is possible to retrieve which number the GPIO controller was assigned to by the OS (in this case the GPIO controller number xx is assigned with the number ABC). The image below represent an example of this file

    • Modify the /opt/eclipse/kura/framework/jdk.dio.properties with the number and controllers found in the previous step:
    573 = deviceType: gpio.GPIOPin, pinNumber:573, name:GPI02\n574 = deviceType: gpio.GPIOPin, pinNumber:574, name:GPIO3\n575 = deviceType: gpio.GPIOPin, pinNumber:575, name:GPIO4\n576 = deviceType: gpio.GPIOPin, pinNumber:576, name:GPIO5\n577 = deviceType: gpio.GPIOPin, pinNumber:577, name:GPIO6\n578 = deviceType: gpio.GPIOPin, pinNumber:578, name:GPIO7\n579 = deviceType: gpio.GPIOPin, pinNumber:579, name:GPIO8\n580 = deviceType: gpio.GPIOPin, pinNumber:580, name:GPIO9\n581 = deviceType: gpio.GPIOPin, pinNumber:581, name:GPIO10\n582 = deviceType: gpio.GPIOPin, pinNumber:582, name:GPIO11\n583 = deviceType: gpio.GPIOPin, pinNumber:583, name:GPIO12\n584 = deviceType: gpio.GPIOPin, pinNumber:584, name:GPIO13\n585 = deviceType: gpio.GPIOPin, pinNumber:585, name:GPIO14\n586 = deviceType: gpio.GPIOPin, pinNumber:586, name:GPIO15\n587 = deviceType: gpio.GPIOPin, pinNumber:587, name:GPIO16\n588 = deviceType: gpio.GPIOPin, pinNumber:588, name:GPIO17\n589 = deviceType: gpio.GPIOPin, pinNumber:589, name:GPIO18\n590 = deviceType: gpio.GPIOPin, pinNumber:590, name:GPIO19\n591 = deviceType: gpio.GPIOPin, pinNumber:591, name:GPIO20\n592 = deviceType: gpio.GPIOPin, pinNumber:592, name:GPIO21\n593 = deviceType: gpio.GPIOPin, pinNumber:593, name:GPIO22\n594 = deviceType: gpio.GPIOPin, pinNumber:594, name:GPIO23\n595 = deviceType: gpio.GPIOPin, pinNumber:595, name:GPIO24\n596 = deviceType: gpio.GPIOPin, pinNumber:596, name:GPIO25\n597 = deviceType: gpio.GPIOPin, pinNumber:597, name:GPIO26\n598 = deviceType: gpio.GPIOPin, pinNumber:598, name:GPIO27\n\ngpio.GPIOPin = initValue:0, deviceNumber:0, direction:3, mode:-1, trigger:3\nuart.UART = baudRate:19200, parity:0, dataBits:8, stopBits:1, flowControl:0\n

    You can also check your GPIO device configuration executing the command pinout

  8. Reboot the Raspberry Pi with:

    sudo reboot\n

    Kura starts on the target platform after reboot.

  9. Kura setups a local web ui that is available using a browser via:

    https://<device-ip>\n

    The browser will prompt the user to accept the connection to an endpoint with an untrusted certificate:

    Once trusted the source, the user will be redirected to a login page where the following credentials: username: admin password: admin

"},{"location":"getting-started/raspberry-pi-ubuntu-20-quick-start/","title":"Raspberry Pi - Ubuntu 20 Quick Start","text":""},{"location":"getting-started/raspberry-pi-ubuntu-20-quick-start/#overview","title":"Overview","text":"

This section provides Eclipse Kura\u2122 quick installation procedures for the Raspberry Pi.

Warning

This quickstart will install the version of Kura with the administrative web UI and network configuration support but not CAN bus support. For more information on this please visit the Eclipse Kura download page

This quickstart has been tested using the latest Ubuntu 20.04.3 LTS Live Server for arm64 architecture flashed on the SD card through Raspberry Pi Imager.

The official images can be also found on the Project Page. Further information on the Ubuntu installation for Raspberry Pi can be found here.

Warning

Please note that, at the time of this writing, only 64 bit OS image is supported.

"},{"location":"getting-started/raspberry-pi-ubuntu-20-quick-start/#enable-ssh-access","title":"Enable SSH Access","text":"

On Ubuntu 20.04.3 the ssh access is enabled only for the standard ubuntu user. If you desire to remote login as root user, edit the file /etc/ssh/sshd_config (using the root permission) adding the line PermitRootLogin yes

"},{"location":"getting-started/raspberry-pi-ubuntu-20-quick-start/#eclipse-kuratm-installation","title":"Eclipse Kura\u2122 Installation","text":"

To install Eclipse Kura with its dependencies on the Raspberry Pi, perform the following steps:

  1. Boot the Raspberry Pi with the latest\u00a0Ubuntu 20.04.3 LTS Server image.

  2. Make sure your device is connected to internet. By default, eth0 lan network interface is configured in DHCP mode.

  3. Upgrade the system:

    sudo apt update\n
    sudo apt upgrade\n

    Tip

    Optional: Since version 5.3.0 Kura also supports Eclipse Temurin\u2122 as an alternative JVM. To install it you need to perform these additional steps:

    sudo apt-get install -y wget apt-transport-https gnupg\n
    sudo wget -O - https://packages.adoptium.net/artifactory/api/gpg/key/public | sudo apt-key add -\n
    sudo echo \"deb https://packages.adoptium.net/artifactory/deb $(awk -F= '/^VERSION_CODENAME/{print$2}' /etc/os-release) main\" | sudo tee /etc/apt/sources.list.d/adoptium.list\n
    sudo apt-get update\n
    sudo apt-get install temurin-17-jdk\n

  4. Download the Kura package with:

    wget http://download.eclipse.org/kura/releases/<version>/kura-<kura-version>_generic-<arch>_installer.deb\n

    Note: replace <version> in the URL above with the version number of the latest release (e.g. 5.5.0) and <arch> with your device architecture

  5. Install Kura with:

    sudo apt install ./kura-<kura-version>_generic-<arch>_installer.deb\n

    All the required dependencies will be downloaded and installed.

  6. Set the right Wi-Fi regulatory domain based on your current world region editing the /etc/default/crda and adding the ISO 3166-1 alpha-2 code of your region.

  7. (Optional) Configure the GPIO replacing the content of the file /opt/eclise/kura/framework/jdk.dio.properties with the following text:

    0 = deviceType: gpio.GPIOPin, pinNumber:0, name:GPIO0\n1 = deviceType: gpio.GPIOPin, pinNumber:1, name:GPIO1\n2 = deviceType: gpio.GPIOPin, pinNumber:2, name:GPI02\n3 = deviceType: gpio.GPIOPin, pinNumber:3, name:GPIO3\n4 = deviceType: gpio.GPIOPin, pinNumber:4, name:GPIO4\n5 = deviceType: gpio.GPIOPin, pinNumber:5, name:GPIO5\n6 = deviceType: gpio.GPIOPin, pinNumber:6, name:GPIO6\n7 = deviceType: gpio.GPIOPin, pinNumber:7, name:GPIO7\n8 = deviceType: gpio.GPIOPin, pinNumber:8, name:GPIO8\n9 = deviceType: gpio.GPIOPin, pinNumber:9, name:GPIO9\n10 = deviceType: gpio.GPIOPin, pinNumber:10, name:GPIO10\n11 = deviceType: gpio.GPIOPin, pinNumber:11, name:GPIO11\n12 = deviceType: gpio.GPIOPin, pinNumber:12, name:GPIO12\n13 = deviceType: gpio.GPIOPin, pinNumber:13, name:GPIO13\n14 = deviceType: gpio.GPIOPin, pinNumber:14, name:GPIO14\n15 = deviceType: gpio.GPIOPin, pinNumber:14, name:GPIO15\n16 = deviceType: gpio.GPIOPin, pinNumber:16, name:GPIO16\n17 = deviceType: gpio.GPIOPin, pinNumber:17, name:GPIO17\n18 = deviceType: gpio.GPIOPin, pinNumber:18, name:GPIO18\n19 = deviceType: gpio.GPIOPin, pinNumber:19, name:GPIO19\n20 = deviceType: gpio.GPIOPin, pinNumber:20, name:GPIO20\n21 = deviceType: gpio.GPIOPin, pinNumber:21, name:GPIO21\n22 = deviceType: gpio.GPIOPin, pinNumber:22, name:GPIO22\n23 = deviceType: gpio.GPIOPin, pinNumber:23, name:GPIO23\n24 = deviceType: gpio.GPIOPin, pinNumber:24, name:GPIO24\n25 = deviceType: gpio.GPIOPin, pinNumber:25, name:GPIO25\n26 = deviceType: gpio.GPIOPin, pinNumber:26, name:GPIO26\n27 = deviceType: gpio.GPIOPin, pinNumber:27, name:GPIO27\n\ngpio.GPIOPin = initValue:0, deviceNumber:0, direction:3, mode:-1, trigger:3\nuart.UART = baudRate:19200, parity:0, dataBits:8, stopBits:1, flowControl:0\n

  8. Reboot the Raspberry Pi with:

    sudo reboot\n

    Kura starts on the target platform after reboot.

  9. Kura setups a local web ui that is available using a browser via:

    https://<device-ip>\n

    The browser will prompt the user to accept the connection to an endpoint with a self signed certificate, select Accept the risk and continue:

    Once trusted the source, the user will be redirected to a login page where the following credentianls: username: admin password: admin

"},{"location":"getting-started/zima-board-quick-start/","title":"ZimaBoard/Blade Quick Start","text":""},{"location":"getting-started/zima-board-quick-start/#overview","title":"Overview","text":""},{"location":"java-application-development/configurable-application/","title":"Configurable Application","text":""},{"location":"java-application-development/configurable-application/#overview","title":"Overview","text":"

This section provides a simple example of how to create an OSGi bundle that implements the ConfigurableComponent interface in Kura. This bundle will interact with the Kura ConfigurationService via the ConfigurableComponent interface. It also uses the MQTT services in Kura to connect to the Cloud, which allows for a local configuration mechanism using a Web user-interface (UI). In this example, you will learn how to perform the following functions:

  • Create a plugin project

  • Implement the ConfigurableComponent interface

  • Use the Kura web UI to modify the bundle\u2019s configuration

  • Export a single OSGi bundle (plug-in)

"},{"location":"java-application-development/configurable-application/#prerequisites","title":"Prerequisites","text":"

  • Requires Kura development environment set-up (Setting up Kura Development Environment)

  • Implements the use of Kura web user-interface (UI)

"},{"location":"java-application-development/configurable-application/#configurable-component-example","title":"Configurable Component Example","text":""},{"location":"java-application-development/configurable-application/#create-plug-in","title":"Create Plug-in","text":"

In Eclipse, create a new Plug-in project by selecting File | New | Project. Select Plug-in Development | Plug-in Project and click Next.

Your screen should display the New Plug-in Project dialog box as shown in the following screen capture. Enter your project a name, such as \u201corg.eclipse.kura.example.configurable\u201d. Under Target Platform, ensure that the an OSGi framework option button is selected and set to standard as shown below. You can also (optionally) add projects to a working set. To continue, click Next.

In the next New Plug-in Project menu (shown below), change the Name field to something more descriptive, such as \u201cConfigurable Component Example.\u201d Make sure that the Execution Environment list is set to match the JVM version running on the target device (JavaSE-1.6 or JavaSE-1.7). To determine the JVM version running on the target device, log in to its administrative console and enter the command

java \u2013version

Also, uncheck the Generate an activator, a Java class that controls the plug-in\u2019s life cycle option button. For the purposes of this example, a single class will be used. An Activator class will not be created; instead, OSGi Declarative Services will be used to start and stop the bundle.

Finally, click Finish.

You should see the new project in the Package Explorer (or Project Explorer) in Eclipse. Also, you will see the MANIFEST.MF was automatically opened in the Manifest Editor. An OSGi bundle is a regular Java .jar file that contains Java code and resources and a custom Manifest and an Activator. The manifest will be modified in the next section.

"},{"location":"java-application-development/configurable-application/#add-dependencies-to-manifest","title":"Add Dependencies to Manifest","text":"

First, you will use the Manifest Editor in Eclipse to add some dependencies. Click the Dependencies tab at the bottom of the editor screen and then click the Automated Management of Dependencies heading to expand it.

Under Automated Management of Dependencies, click Add. In the Select a Plug-in field, enter org.eclipse.osgi.services. Select the plug-in name and click OK.

Note that this operation is very much like adding standalone jars to the buildpath by including the \u2018-cp\u2019 argument to javac. However, in this case you are telling Eclipse where to find these dependencies the \u201cOSGi way\u201d, so it is aware of them at compile time.

Click Add again and use the same procedure to add the following dependencies:

  • slf4j.api
  • org.eclipse.kura.api

You should now see the list of dependencies. Save changes to the Manifest.

"},{"location":"java-application-development/configurable-application/#create-java-class","title":"Create Java Class","text":"

Now you are ready to start writing a simple Java class. Right-click the org.eclipse.kura.example.configurable project. Select New | Class. Set the Package field to org.eclipse.kura.example.configurable, set the Name field to ConfigurableExample, and then click Finish.

Write the following code for the new class. You can copy and paste the code provided below into your newly created Java class file.

package org.eclipse.kura.example.configurable;\n\npublic class ConfigurableExample implements ConfigurableComponent {\n    private static final Logger s_logger = LoggerFactory.getLogger(ConfigurableExample.class);\n    private static final String APP_ID = \"org.eclipse.kura.example.configurable.ConfigurableExample\";\n    private Map<String, Object> properties;\n\n    protected void activate(ComponentContext componentContext) {\n        s_logger.info(\"Bundle \" + APP_ID + \" has started!\");\n    }\n\n    protected void activate(ComponentContext componentContext, Map<String, Object> properties) {\n        s_logger.info(\"Bundle \" + APP_ID + \" has started with config!\");\n        updated(properties);\n    }\n\n    protected void deactivate(ComponentContext componentContext) {\n        s_logger.info(\"Bundle \" + APP_ID + \" has stopped!\");\n    }\n\n    public void updated(Map<String, Object> properties) {\n        this.properties = properties;\n        if(properties != null && !properties.isEmpty()) {\n            Iterator<Entry<String, Object>> it = properties.entrySet().iterator();\n            while (it.hasNext()) {\n                Entry<String, Object> entry = it.next();\n                s_logger.info(\"New property - \" + entry.getKey() + \" = \" +\n                entry.getValue() + \" of type \" + entry.getValue().getClass().toString());\n            }\n        }\n    }\n}\n

The activate() method is the entry point when the bundle is started. Note this class has two forms of the activate() method. The second method (with the \u201cMap properties\u201d parameter) enables a default configuration to be specified at bundle start time. The deactivate() method is the entry point when the bundle is stopped. You have also specified an updated() method. These methods define how the bundle receives a new configuration from the Kura configuration manager. Kura handles robust configuration management routines automatically once you implement the ConfigurableComponent interface and the updated() method."},{"location":"java-application-development/configurable-application/#resolve-dependencies","title":"Resolve Dependencies","text":"

At this point, there will be errors in your code because of unresolved imports.

Select the menu Source | Organize Imports to resolve these errors. Because you added dependencies to your dependency list in the Manifest, you will be prompted to choose one of the following two potential sources for importing a few classes.

For the \u201cEntry\u201d class, select java.util.Map.Entry as shown below and click Next.

For the \u201cLogger\u201d class, select org.slf4j.Logger as shown below and click Finish.

Resolving the imports should clear the errors in the class as shown in the screen capture that follows. Save the changes to the ConfigurableExample class.

The complete set of code (with import statements) is shown below.

package org.eclipse.kura.example.configurable;\n\nimport java.util.Iterator;\nimport java.util.Map;\nimport java.util.Map.Entry;\nimport org.osgi.service.component.ComponentContext;\nimport org.slf4j.Logger;\nimport org.slf4j.LoggerFactory;\nimport org.eclipse.kura.configuration.ConfigurableComponent;\n\npublic class ConfigurableExample implements ConfigurableComponent {\n\n    private static final Logger s_logger = LoggerFactory.getLogger(ConfigurableExample.class);\n    private static final String APP_ID* = \"org.eclipse.kura.configurable.ConfigurableExample\";\n    private Map<String, Object> properties;\n\n    protected void activate(ComponentContext componentContext) {\n      s_logger.info(\"Bundle \" + APP_ID + \" has started!\");\n    }\n\n    protected void activate(ComponentContext componentContext, Map<String, Object> properties) {\n        s_logger.info(\"Bundle \" + APP_ID + \" has started with config!\");\n        updated(properties);\n    }\n\n    protected void deactivate(ComponentContext componentContext) {\n        s_logger.info(\"Bundle \" + APP_ID + \" has stopped!\");\n    }\n\n    public void updated(Map<String, Object> properties) {\n        this.properties = properties;\n        if(properties != null && !properties.isEmpty()) {\n            Iterator<Entry<String, Object>> it = properties.entrySet().iterator();\n            while(it.hasNext()) {\n                Entry<String, Object> entry = it.next();\n                s_logger.info(\"New property - \" + entry.getKey() + \" = \" +\n                entry.getValue() + \" of type \" + entry.getValue().getClass().toString());\n            }\n        }\n    }\n}\n

Switch back to the Manifest Editor. Under Automated Management of Dependencies, ensure the Import-Package option button is selected. Click the add dependencies link to automatically add packages to the dependencies list (under Imported Packages) based on the \u201cimport\u201d statements in your example code. Save changes to the Manifest again.

"},{"location":"java-application-development/configurable-application/#create-component-class","title":"Create Component Class","text":"

Right-click the example project and select New | Folder. Create a new folder named \u201cOSGI-INF\u201d.

Now, right-click the example project\u2019s \u201cOSGI-INF\u201d folder and select New | Other. From the wizard, select Plug-in Development | Component Definition and click Next.

Next to the Class field, click Browse and type the name of your newly created class in the Select entries field. In this case, type the word \u201cConfigurable\u201d, and you will see matching items. Select the ConfigurableExample class and click OK.

In the Enter or select the parent folder field, make sure \u201c/OSGI-INF\u201d is at the end of the existing entry (e.g., org.eclipse.kura.example.configurable/OSGI-INF). Set the Name field equal to the Class field as shown below:

Click Finish.

After the Component class has been created, it will open in the Workspace. On the Services tab, click the Add button under Provided Services. Enter \u201cconfigurable\u201d and select the interface \u201corg.eclipse.kura.example.configurable\u201d. This is required for components that are configurable through the Kura ConfigurationService, so that they expose a Service.

In the Overview tab, the Name and Class fields should already point to your Java class. Make the following settings:

  • Set the Activate field to activate and set the Deactivate field to deactivate. This tells the component where these OSGi activation methods are located.

  • Set the Configuration Policy to require.

  • Set the Modified field to updated. This tells the component which method to call when the configuration is updated.

  • Uncheck the box This component is enabled when started, then check both boxes This component is enabled when started and This component is immediately activated.

Click the Add Property button. Enter a property with the name \u201cservice.pid\u201d and value \u201corg.eclipse.kura.example.configurable.ConfigurableExample\u201d as shown in the screen capture below.

Verify that the completed Overview tab looks like the screen shot shown below and save the Component class definition file:

Check the Source tab of the component.xml file and carefully verify that each of the property values and tags match what is shown below:

<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\"\n    activate=\"activate\"\n    configuration-policy=\"require\"\n    deactivate=\"deactivate\"\n    enabled=\"true\"\n    immediate=\"true\"\n    modified=\"updated\"\n    name=\"org.eclipse.kura.example.configurable.ConfigurableExample\">\n\n    <implementation class=\"org.eclipse.kura.example.configurable.ConfigurableExample\"/>\n    <service>\n        <provide interface=\"org.eclipse.kura.example.configurable.ConfigurableExample\"/>\n    </service>\n    <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.example.configurable.ConfigurableExample\"/>\n</scr:component>\n

If Kura 3.0 or newer versions are used and the \"org.eclipse.kura.core.configuration.legacyServiceTracking\" system property is set to false or not set, proceed as follows.

"},{"location":"java-application-development/configurable-application/#create-the-default-configuration","title":"Create the Default Configuration","text":"

With the component definition file created, you also need to specify the configurable parameters of this bundle. This is done using the \u201cmetatype\u201d definition. Right-click the OSGI-INF directory for the example project in the Package Explorer window and select New | Folder. Name the folder \u201cmetatype\u201d. Next, right-click the metatype folder and select New | File.

Name the file \u201corg.eclipse.kura.example.configurable.ConfigurableExample.xml\u201d as shown in the following screen capture:

At this point, you have to write the \u2018metatype\u2019 file that defines the parameters, default values, types, etc. Click on the Source button and paste the following XML text into ConfigurableExample.xml for this example. Save changes to ConfigurableExample.xml.

<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<MetaData xmlns=\"http://www.osgi.org/xmlns/metatype/v1.2.0\" localization=\"en_us\">\n    <OCD id=\"org.eclipse.kura.example.configurable.ConfigurableExample\"\n        name=\"ConfigurableExample\"\n        description=\"This is a sample metatype file for a simple configurable component\">\n\n        <AD id=\"param1.string\"\n            name=\"param1.string\"\n            type=\"String\"\n            cardinality=\"0\"\n            required=\"true\"\n            default=\"Some Text\"\n            description=\"String configuration parameter\"/>\n\n        <AD id=\"param2.float\"\n            name=\"param2.float\"\n            type=\"Float\"\n            cardinality=\"0\"\n            required=\"false\"\n            default=\"20.5\"\n            min=\"5.0\"\n            max=\"40.0\"\n            description=\"Float configuration parameter\"/>\n\n        <AD id=\"param3.integer\"\n            name=\"param3.integer\"\n            type=\"Integer\"\n            cardinality=\"0\"\n            required=\"true\"\n            default=\"2\"\n            min=\"1\"\n            description=\"Integer configuration parameter\"/>\n    </OCD>\n\n    <Designate pid=\"org.eclipse.kura.example.configurable.ConfigurableExample\">\n        <Object ocdref=\"org.eclipse.kura.example.configurable.ConfigurableExample\"/>\n    </Designate>\n</MetaData>\n

In the MANIFEST.MF of this bundle, you must also make sure the XML file gets packaged into the bundle when you export the plug-in. Click the Build tab, and in the Binary Build section of the Manifest editor verify that all the checkboxes for items under META-INF and OSGI-INF are checked. Save the Manifest after making this change.

"},{"location":"java-application-development/configurable-application/#run-the-bundle","title":"Run the Bundle","text":"

At this point, you can run the bundle using the emulator in Eclipse (Linux or OS X only). To do so, expand the org.eclipse.kura.emulator project in the package explorer and browse to src/main/resources. As appropriate for you platform type, right-click Kura_Emulator_[OS].launch (where \u201c[OS]\u201d specifies your operating system) and select Run as | KURA_EMULATOR_[OS].launch. Doing so will start the Kura emulator and your new bundle in the console window of Eclipse.

"},{"location":"java-application-development/configurable-application/#view-the-bundle-configuration-in-the-local-web-ui","title":"View the Bundle Configuration in the Local Web UI","text":"

With the bundle running, open a browser window on the same computer as the Eclipse development environment and browse to the Kura web UI at http://127.0.0.1:8080. Once connected to the Kura web UI, a log in window appears prompting you to enter the Name and Password as shown below:

Enter the appropriate name and password (default is admin/admin) and click Log in. The Kura Admin web UI appears with the ConfigurableExample in the Services area on the left side of the browser window as shown below:

From the Kura Admin web UI, you can change the parameters that are used by the Kura configuration manager and in turn call the updated() method of the newly created bundle. To do so, click ConfigurableExample and the configurable component parameters will be displayed as shown below:

Make any necessary changes and click the Apply button near the top left of the configuration pane for the modifications to take affect. Every time a change is made to the configuration, a new snapshot is generated along with an ID.

"},{"location":"java-application-development/connected-application/","title":"Connected Application","text":""},{"location":"java-application-development/connected-application/#overview","title":"Overview","text":"

This section describes the prepackaged heater demo bundle that comes with the Kura development environment and demonstrates how to perform the following functions:

  • Run the Kura Emulator

  • Connect to the Cloud

  • Gain an understanding of ConfigurableComponents in Kura

  • Modify configurations of custom bundles

"},{"location":"java-application-development/connected-application/#prerequisites","title":"Prerequisites","text":"

  • Setting up Kura Development Environment

  • Using the Kura web UI

"},{"location":"java-application-development/connected-application/#heater-demo-introduction","title":"Heater Demo Introduction","text":"

The org.eclipse.kura.demo.heater bundle is a simple OSGi bundle that represents a thermostat and heater combination. The application utilizes the Kura ConfigurableComponent interface to be able to receive configuration updates through the local Kura web UI. In addition, this bundle utilizes OSGi declarative services and the Kura CloudClientListener. This tutorial demonstrates how to modify configurations of custom bundles and shows how those configuration changes can dynamically impact the behavior of the bundle through the Kura web UI.

"},{"location":"java-application-development/connected-application/#code-walkthrough","title":"Code Walkthrough","text":"

The following sections will highlight three important API layers when creating an application that will publish to the cloud. These layers are:

  • DataTransportService
  • Available for standard MQTT messaging. Allows consumers of the service to connect to brokers, publish messages, and receive messages on subscribed topics
  • DataService
  • Delegates data transport to the DataTransportService
  • Provides extended features for managing broker connections, buffering of published messages, and priority based delivery of messages
  • CloudService
  • Further extends the functionality of DataService
  • Provides means for more complex flows (i.e. request/response)
  • Manages single broker connection across multiple applications
  • Provides payload data model with encoding/decoding serializers
  • Publishes life cycle manages for devices and applications
"},{"location":"java-application-development/connected-application/#acquiring-cloudclient","title":"Acquiring CloudClient","text":"

The CloudService can manage multiple applications over a shared MQTT connection by treating each application as a client. The example code uses the \"setCloudService\" and \"unsetCloudService\" methods for referencing and releasing the CloudService. In the bundles activate method, the service reference in conjunction with a unique application ID can then be used to obtain a CloudClient. The relevant code is shown below (ommitted sections are denoted by ==OMMITTED==):

==OMMITTED==\n// Cloud Application identifier\nprivate static final String APP_ID = \"heater\";\n\n==OMMITTED==\n\npublic void setCloudService(CloudService cloudService) {\n    m_cloudService = cloudService;\n}\n\npublic void unsetCloudService(CloudService cloudService) {\n    m_cloudService = null;\n}\n\n==OMMITTED==\n\n// Acquire a Cloud Application Client for this Application\ns_logger.info(\"Getting CloudClient for {}...\", APP_ID);\nm_cloudClient = m_cloudService.newCloudClient(APP_ID);\n
"},{"location":"java-application-development/connected-application/#publishingsubscribing","title":"Publishing/Subscribing","text":"

The private \"doPublish\" method is used to publish messages at a fixed rate. The method demonstrates how to use the CloudClient and KuraPayload to publish MQTT messages.

==OMMITTED==\n\n// Allocate a new payload\nKuraPayload payload = new KuraPayload();\n\n// Timestamp the message\npayload.setTimestamp(new Date());\n\n// Add the temperature as a metric to the payload\npayload.addMetric(\"temperatureInternal\", m_temperature);\npayload.addMetric(\"temperatureExternal\", 5.0F);\npayload.addMetric(\"temperatureExhaust\",  30.0F);\n\nint code = m_random.nextInt();\nif ((m_random.nextInt() % 5) == 0) {\n    payload.addMetric(\"errorCode\", code);\n}\nelse {\n    payload.addMetric(\"errorCode\", 0);\n}\n\n// Publish the message\ntry {\n    m_cloudClient.publish(topic, payload, qos, retain);\n    s_logger.info(\"Published to {} message: {}\", topic, payload);\n}\ncatch (Exception e) {\n    s_logger.error(\"Cannot publish topic: \"+topic, e);\n}\n

Similarly, the CloudClient can be used to subscribe to MQTT topics. Although not shown in the example code, the following snippet could be added to subscribe to all published messages:

m_cloudClient.subscribe(topic, qos);\n
"},{"location":"java-application-development/connected-application/#callback-methods","title":"Callback Methods","text":"

The example class implements CloudClientListener, which provides methods for several common callback methods. The below snippet shows the relevant code for creating the listeners for the demo application.

==OMMITTED==\n\npublic class Heater implements ConfigurableComponent, CloudClientListener\n\n==OMMITTED==\n\nm_cloudClient.addCloudClientListener(this);\n

The available methods for implementation are:

  • onControlMessageArrived: Method called when a control message is received from the broker.
  • onMessageArrived: Method called when a data message is received from the broker.
  • onConnectionLost: Method called when the client has lost connection with the broker.
  • onConnectionEstablished: Method called when the client establishes a connection with the broker.
  • onMessageConfirmed: Method called when a published message has been fully acknowledged by the broker (not applicable for qos 0 messages).
  • onMessagePublished: Method called when a message has been transfered from the publishing queue to the DataTransportService.

For more information on the various Kura APIs, please review the Kura APIs

"},{"location":"java-application-development/connected-application/#run-the-bundle","title":"Run the Bundle","text":"

By default, the heater demo bundle does not run automatically. To run the bundle and Kura in the Emulator, locate the org.eclipse.kura.emulator project. Expand it to show the src/main/resources folder.

Right-click the correct Kura_Emulator_[OS].launch file, depending on which operating system you are running. In the context menu, select the Run As option, and click on Run Configurations.

Under OSGi Framework (Run Configurations window shown below), click on the Kura_Emulator_[OS] entry. In the Bundles tab under Workspace, enable the org.eclipse.kura.demo.heater checkbox to enable it as shown below:

Click the Apply and Run buttons to start the Kura Emulator. Once this setting has been made, you only need to right-click on the launch file and select Run As and the Kura_Emulator_[OS] option to run with the same settings.

This will start Kura running locally and will display a Console window in Eclipse. The Console window will show the OSGi diagnostics as various bundles start and execute.

"},{"location":"java-application-development/connected-application/#configure-the-mqtt-client","title":"Configure the MQTT Client","text":"

With the heater demo bundle running, open a browser window on the same computer as the Eclipse development environment and browse to the Kura web UI at http://127.0.0.1:8080. Once connected to the Kura web UI, a log in window appears prompting you to enter the Name and Password as shown below:

Enter the appropriate name and password (default is admin/admin) and click Log in. The Kura Admin web UI appears as shown below:

From the Kura web UI, click on MqttDataTransport in the Services pane on the lower left of the browser window. You will see a menu similar to the one shown in the following screen capture:

Fill in the following fields then click the Apply button:

Field Value broker-url: The url for the MQTT broker (this example shows the MQTT broker-url mqtt://iot.eclipse.org:1883/ hosted by the Eclipse Foundation) topic.context.account-name: Your [account_name] username: Typically [account_name]_broker password: The password for your user client-id The client identifier to be used when connecting to the MQTT broker (optional)

Now that the account credentials are set in the MqttDataTransport service, the DataService needs to be configured to connect by default. To do so, click DataService in the Services area on the left of the browser window. For the \u2018connect.auto-on-startup\u2019 parameter, select true as shown below:

"},{"location":"java-application-development/connected-application/#modify-bundle-configuration-in-local-web-ui","title":"Modify Bundle Configuration in Local Web UI","text":"

Bundles changes may be made directly in the emulator web UI. Since you are running an emulated device in Eclipse, you can do this by browsing to http://127.0.0.1:8080 (same URL where the MQTT client was configured in the previous section of this tutorial). If the bundle was running on a real device and you had network access to it, you would browse to http://[ip_address_of_device].

From the Kura web UI, select the Heater bundle from the configurable services on the left and modify the parameters as needed (shown in the screen capture below). By default, the heater demo is configured according to the following characteristics and assumptions about its operational environment:

  • Start operation is at 6:00am (06:00).

  • End operation is at 10:00pm (22:00).

  • It is colder outside than inside the heated chamber (hard-coded to 5 degrees in the application).

  • Output of the heater is constant at 30 degrees (hard-coded).

  • When in operational mode, the temperature will drop inside if the heater is off.

  • The heater turns off when it is about to exceed the setPoint defined in the configuration.

  • After the temperature drops to four times the increment point (a made-up value to show dropping temperature, hard-coded in the application), the heater turns back on, and the temperature starts increment at the rate of the \u2018temperature.increment\u2019 rate.

Click Apply for changes to take affect. The updated() method is called after settings are applied for the new configuration.

After completing this tutorial, it is highly recommended that you review the heater demo source code in Eclipse to see how it is put together. Kura automatically generates the user configuration interface through implementation of the ConfigurableComponent interface and some small additions to the component.xml file (called heater.xml). This powerful feature provides both a local and remote configuration user interface with no additional development requirements.

"},{"location":"java-application-development/contributing/","title":"Contributing","text":"

Contributing to Eclipse Kura project is very easy.

The steps required to submit code to the project can be found on Github Contributing Page.

If you face any issues, or just want to get involved with the kura community feel free to join us on:

  • Github Issues: for bug reporting.
  • Github Discussions: for receiving feedback, making new proposals and generally talking about the project.
"},{"location":"java-application-development/contributing/#kura-dev-meeting","title":"Kura Dev Meeting","text":"

If you want to get involved in the development process you can join us at the Kura Dev Meeting. The meeting is held every 2 weeks on Wednesday, at 5 PM CEST on Microsoft Teams.

You can join by using this link.

The scheduled dates for the meeting can be found here. Unzip the calendar file and double-click on it to add the scheduled dates to your calendar.

"},{"location":"java-application-development/deploy-and-debug-applications/","title":"Deploy and Debug Applications","text":""},{"location":"java-application-development/deploy-and-debug-applications/#overview","title":"Overview","text":"

This section provides a simple example of how to test and deploy OSGi bundles and deployment packages in a Kura environment. These instructions use the \u201cHello World\u201d OSGi project created in the previous section. In this example, you will learn how to perform the following functions:

  • Use local OSGi emulation mode in Eclipse

  • Deploy a bundle to a remote target running the OSGi Framework

  • Install a Deployment Package to a remote target running the OSGi Framework

  • Manage OSGi bundles on a target device

  • Set bundle Logger levels in Kura

"},{"location":"java-application-development/deploy-and-debug-applications/#prerequisites","title":"Prerequisites","text":"

  • Setting up Kura Development Environment

  • Hello World Using the Kura Logger

"},{"location":"java-application-development/deploy-and-debug-applications/#testing-the-osgi-plug-in","title":"Testing the OSGi Plug-in","text":"

Once you have created an OSGi plug-in, you can test it in Local Emulation Mode and/or deploy it to a Remote Target Device.

"},{"location":"java-application-development/deploy-and-debug-applications/#local-emulation-mode","title":"Local Emulation Mode","text":"

The Kura user workspace can be used in Eclipse in local emulation mode (Linux/OS X only; this feature is not currently supported under Windows). To deploy the code to a running system, see the section Remote Target Device.

"},{"location":"java-application-development/deploy-and-debug-applications/#run-kura-in-emulator-mode","title":"Run Kura in Emulator Mode","text":"

In the Eclipse workspace, locate the org.eclipse.kura.emulator project. Expand it to show the src/main/resources folder.

Right-click the Kura_Emulator.launch file. In the context menu, select the Run as option, and select the Kura_Emulator*. This will start Kura running locally and will display a Console window in the bottom pane in Eclipse. The Console window will show the OSGi diagnostics as various bundles start and execute.

Because the org.eclipse.kura.example.hello_osgi bundle is in the workspace with a valid activate() method, it is automatically started with the Kura OSGi framework. Note the INFO message highlighted below that shows the bundle\u2019s activate() method was run.

"},{"location":"java-application-development/deploy-and-debug-applications/#list-osgi-bundles-in-local-mode","title":"List OSGi Bundles in Local Mode","text":"

With the OSGi framework running in the Eclipse console (refer to the previous section), click in the Console window. Press Enter/Return and then type the \u2018ss\u2019 command to show a list of installed bundles. Note the bundle ID number for the org.eclipse.kura.example.hello_osgi bundle.

"},{"location":"java-application-development/deploy-and-debug-applications/#startstop-bundle-in-local-mode","title":"Start/Stop Bundle in Local Mode","text":"

In the OSGi Console window in Eclipse, run the

start ## or stop ##

commands to start or stop a bundle, where the \u201c##\u201d is either the bundle ID number or the bundle name (such as \u201cstart org.eclipse.kura.example.hello_osgi\u201d). Note that the INFO messages for both the activate() and deactivate() messages appear in the Console window when the bundle is started or stopped.

"},{"location":"java-application-development/deploy-and-debug-applications/#installuninstall-bundle-in-local-mode","title":"Install/Uninstall Bundle in Local Mode","text":"

In the OSGi Console window in Eclipse, bundles can be installed or uninstalled. To uninstall the example bundle, issue the command \u2018uninstall ##\u2019, where \u201c##\u201d is either the bundle ID number or the bundle name, such as:

uninstall 47 or uninstall org.eclipse.kura.example.hello_osgi

A message will appear indicating that the bundle has been stopped.

Once the bundle has been uninstalled from the local OSGi console, it cannot be started or installed by number or name. Instead, it must be installed by using the plug-in JAR file created earlier. Issue the \u2018install\u2019 command to install a bundle into the Emulation environment:

install file:/[*path_to_bundle*]/[*bundle_name*].jar

where \u201c[path_to_bundle]/[bundle_name].jar\u201d should be replaced with the name of the bundle exported earlier (the section Hello World Using the Kura Logger), as shown in the example below:

install file:/Users/Nina/Documents/myPlugins/plugins/plugins/plugins/plugins/plugins/org.eclipse.kura.example.hello_osgi_ 1.0.0.201409101740.jar

Then the bundle can be started or stopped, as described in the previous section, Start/Stop Bundle in Local Mode. Optionally, you can add the flag \u2018-start\u2019 to the \u2018install\u2019 command to automatically start the bundle after installation.

"},{"location":"java-application-development/deploy-and-debug-applications/#remote-target-device","title":"Remote Target Device","text":"

One or more OSGi bundles can be deployed to a remote device running Kura, either by installing separate bundle files or deployment packages using Eclipse.

Warning

These steps require Kura to be running on the target device.

This method of deployment is temporary on the remote target device and is not persistent after a restart. To make the deployment permanent, see Making Deployment Permanent.

"},{"location":"java-application-development/deploy-and-debug-applications/#connect-to-remote-osgi-framework","title":"Connect to Remote OSGi Framework","text":"

To deploy a bundle to the remote target device, you will need to connect Eclipse to the OSGi framework running on the device. This is done using mToolkit. See Kura Setup for instructions on installing mToolkit into the Eclipse development environment.

  • Select the Eclipse menu Window | Show View | Other.

  • Select mToolkit -> Frameworks entry to open the mToolkit Frameworks view.

  • Enter a name for the framework definition and the IP address of the target device.

Close the dialog by clicking the OK button.

Warning

The remote target device must have port 1450 open in its firewall, in order to allow mToolkit o make a connection to its OSGi framework. If this port is not opened, refer to the section Open Port for OSGi Remote Connection.

Right-click the framework icon name and select Connect Framework. The list of installed bundles and deployment packages should be retrieved shortly. (Use the Disconnect Framework option to disconnect from the remote target framework when finished.)

"},{"location":"java-application-development/deploy-and-debug-applications/#open-port-for-osgi-remote-connection","title":"Open Port for OSGi Remote Connection","text":"

In order to allow mToolkit to make a remote connection to the OSGi framework on the target device, the device must allow the incoming port in its firewall. To set this option, open a Web browser and log into Kura using its current IP address, such as:

http://10.11.5.4

Click the Firewall icon and then click the Open Ports tab. If port 1450 is not shown in the list of allowed ports, click the New button under Open Ports. Enter the port 1450 and select protocol TCP. Then click Submit.

Now, click Apply to apply changes to the remote device.

"},{"location":"java-application-development/deploy-and-debug-applications/#install-single-bundle-to-target-device","title":"Install Single Bundle to Target Device","text":"

With the Eclipse environment connected to the remote OSGi target framework, a single bundle can be installed on the remote device.

In the mToolkit Frameworks view, right-click the Framework name and select Install Bundle. (This requires that you have exported the bundle as a deployable plug-in JAR file. See the section Hello World Using the Kura Logger.)

Use the Browse button to select the JAR file and click OK to install it to the target device.

The newly installed bundle should be shown in the Frameworks view under Bundles.

To control operation of the bundle through the OSGi Frameworks view, right-click the bundle name. The following actions can be performed:

  • Start \u2013 start the bundle

  • Stop \u2013 stop the bundle

  • Update \u2013 reinstall the bundle

  • Install Bundle \u2013 install a different bundle

  • Uninstall Bundle \u2013 remove this bundle from the target device

  • Show Bundle IDs / Show Bundle Versions \u2013 show additional information about bundles

You can also verify operation of the bundle on the target device itself. See the section Manage Bundles on Target Device.

"},{"location":"java-application-development/deploy-and-debug-applications/#install-deployment-package-to-target-device","title":"Install Deployment Package to Target Device","text":"

With the Eclipse environment connected to the remote OSGi target framework, a deployment package can be installed on the remote device.

NOTE: If you have just installed the individual bundle in the previous section, you should uninstall it before proceeding. Doing so will avoid any confusion in having the same bundle installed twice.

In the mToolkit Frameworks view, right-click the Framework name and select Install Deployment Package. (This step requires that you have exported the bundle as a deployable plug-in JAR file. See the section Hello World Using the Kura Logger for instructions on exporting the OSGi bundle.)

Open the resources/dp folder in the Workspace filesystem directory, select the .dp file (not the \u201c.dpp\u201d file), and click OK.

The deployment package will be installed on the target device and shown in the Frameworks view under Deployment Packages. (The deployment package can also be uninstalled from the Framework view.)

The bundle included in the deployment package can also be viewed under Bundles and can be controlled remotely (start/stop) as with other bundles. The operation of the bundle can also be verified on the target device itself. See the section Manage Bundles on Target Device.

"},{"location":"java-application-development/deploy-and-debug-applications/#connect-to-osgi-on-target-device","title":"Connect to OSGi on Target Device","text":"

You can manage the OSGi framework on a target device by logging into a console on the device using a connected keyboard and VGA monitor or over a network connection using SSH (PuTTY in Windows or \u2018ssh\u2019 from Linux or Mac).

At the command prompt, display the Kura log file with:

tail -f /var/log/kura.log

Connect to the OSGi framework by typing the following commands:

telnet localhost 5002

There are many commands available in the OSGi console for managing bundles. Following are just a few useful commands:

Command Description ss Lists names and ID of bundles help Displays the help menu of OSGi commands lb Lists all installed bundles and IDs h [bundle IDs] Displays bundle headers (i.e., Bundle Manifest Version, Name, Required Execution Environment, Symbolic Name, Version, Import Package, Manifest Version, and Service Component) exit Exits the OSGi console and stops Kura disconnect Exits the OSGi console, but leaves Kura running"},{"location":"java-application-development/deploy-and-debug-applications/#manage-bundles-on-target-device","title":"Manage Bundles on Target Device","text":"

From the OSGi command line, you can display a list of bundles with the \u2018ss\u2019 command as shown in the example below:

ss

In this example, the org.eclipse.kura.example.hello_osgi bundle ID is 64.

You can run the \u2018start ##\u2019 or \u2018stop ##\u2019 commands to start or stop a bundle, where the \u201c##\u201d is either the bundle ID number or the bundle name (such as \u201cstart org.eclipse.kura.example.hello_osgi\u201d). To verify that the bundled is stopped, you can issue the \u2018ss\u2019 command. If the bundled is stopped, the activity will show RESOLVED (as shown below). If the bundle is started, the activity will show ACTIVE (as shown above).

"},{"location":"java-application-development/deploy-and-debug-applications/#set-kura-logger-levels","title":"Set Kura Logger Levels","text":"

Kura logger levels are defined in a configuration file. The messages that appear require a log statement in the application and that the log level of the statement matches the log level of the application (such as logger.info or logger.debug).

To set or change logger levels, the Kura logger configuration file may be modified using the vi editor. From the Linux command prompt, enter the following command:

vi /opt/eclipse/kura/kura/log4j.properties

At the bottom of the \u201clog4j.properties\u201d file, there will be one or more \u201clog4j\u201d logger property entries, which determine the logger level used by the bundles at startup.

In the example screen capture shown below, the \u201clog4j.logger.org.eclipse.kura\u201d property has been set to \u201cINFO\u201d, which applies to all bundles that start with \u201corg.eclipse.kura.\u201d Additional, more specific, properties may be defined as required for your particular logging needs. The property entries will take on the defined logger level at startup. The logger levels are hierarchical, so that those in a deeper level of the hierarchy will apply; otherwise, the more general logger level will override them.

Once you have made the necessary changes, save and close the file using the \u2018:wq\u2019 command. Restart Kura, and check the log levels in the OSGi console again to make sure that the desired levels have taken effect.

"},{"location":"java-application-development/deploy-and-debug-applications/#making-deployment-permanent","title":"Making Deployment Permanent","text":"

The mToolkit deployment of a package is a temporary installation and does not make the package permanent. Once a set of bundles has been tested on the remote target device and is ready for permanent deployment, the software can be installed on a device with deployment packages from the command line of a target device using the instructions below:

  1. Copy the deployment package file (*.dp) to the target device, into the folder:

/opt/eclipse/kura/kura/packages

  1. Edit the dpa.properties file through the vi editor by entering the following command:

vi /opt/eclipse/kura/kura/dpa.properties

  1. Add an entry in the dpa.properties file to include the new package name, such as:

package_name=file\\:/opt/eclipse/kura/kura/packages/package_filename.dp

where, \u201cpackage_name\u201d and \u201cpackage_filename\u201d should be replaced with the actual name of the deployment package.

  1. Save and close the file using the \u2018:wq\u2019 command.

  2. Then restart Kura, and the new package should be installed in addition to the default Kura package.

In conclusion, this section described how to test a bundle in an Emulation environment within the Eclipse IDE and how to install bundles and Deployment Packages to a remote target system running Kura.

"},{"location":"java-application-development/development-environment-setup/","title":"Development Environment Setup","text":"

In this document we'll cover the required steps to setup the Development Environment for contributing to the Eclipse Kura project. If, instead, you want to develop applications or bundles running on Eclipse Kura refer to the Eclipse Kura Workspace setup guide.

The Eclipse Kura development environment may be installed on Windows, Linux, or Mac OS. The setup instructions will be the same across each OS though each system may have unique characteristics.

Info

The local emulation of Eclipse Kura code is only supported in Linux and Mac, not in Windows.

This document will cover the use of Eclipse Oomph installer which is the easiest way to install and configure the Eclipse IDE to start contributing to Eclipse Kura.

The setup requires three basic steps:

  1. Requirements installation
  2. Eclipse Oomph setup
  3. Eclipse Kura maven build
"},{"location":"java-application-development/development-environment-setup/#requirements","title":"Requirements","text":"

Before building Eclipse Kura, you need to have the following programs installed in your system:

  • JDK 1.8 (or JDK 17)
  • Maven 3.5.x (or greater)

Recommended additional software:

  • Git
"},{"location":"java-application-development/development-environment-setup/#installing-prerequisites-in-mac-os","title":"Installing Prerequisites in Mac OS","text":"

To install Java 8, download the JDK tar archive from the Adoptium Project Repository.

Once downloaded, copy the tar archive in /Library/Java/JavaVirtualMachines/ and cd into it. Unpack the archive with the following command: 

sudo tar -xzf <archive-name>.tar.gz\n
The tar archive can be deleted afterwards.

Depending on which terminal you are using, edit the profiles (.zshrc, .profile, .bash_profile) to contain: 

# Adoptium JDK 8\nexport JAVA_8_HOME=/Library/Java/JavaVirtualMachines/<archive-name>/Contents/Home\nalias java8='export JAVA_HOME=$JAVA_8_HOME'\njava8 \n
Reload the terminal and run java -version to make sure it is installed correctly.

Using Brew you can easily install Maven from the command line: 

brew install maven@3.5\n
Run mvn -version to ensure that Maven has been added to the PATH. If Maven cannot be found, try running brew link maven@3.5 --force or manually add it to your path with: 
export PATH=\"/usr/local/opt/maven@3.5/bin:$PATH\"\n

"},{"location":"java-application-development/development-environment-setup/#installing-prerequisites-in-linux","title":"Installing Prerequisites in Linux","text":"

For Java 

sudo apt install openjdk-8-jdk\n

For Maven

You can follow the tutorial from the official Maven site. Remember that you need to install 3.5.x version or greater.

"},{"location":"java-application-development/development-environment-setup/#eclipse-oomph-setup","title":"Eclipse Oomph setup","text":"

Download the latest Eclipse Installer appropriate for your platform from the Eclipse Downloads page and start it.

Switch to \"Advanced Mode\" (top right hamburger menu) and select \"Eclipse IDE for Eclipse Committers\" and configure the \"Product Version\" to be the version 2023-03 or newer.

Select the Eclipse Kura installer from the list. If this is not available, add a new installer from https://raw.githubusercontent.com/eclipse/kura/develop/kura/setups/kura.setup, then check and press the \"Next\" button.

Variables setup

  • Select the \"Developer Type\":
    • \"User\": if you want to develop applications or bundles running on Eclipse Kura, select this option. It will install only the APIs and the examples.
    • \"Developer\": if you are a framework developer, select this option. It will download and configure the Eclipse Kura framework (for the purpose of this document we'll use this option)
  • Set the JRE 1.8 location value to the installed local jdk-8 VM
  • Update Eclipse Kura Git repository username (prefer the anonymous HTTPS option, link to your fork) and customize further settings if you like (e.g. Root install folder, Installation folder name). To show these options, make sure that the \"Show all variables\" checkbox is enabled.

If you plan to contribute to Eclipse Kura you might want to create a fork, see our contributing guide for further informations. For the purpose of this tutorial we'll work with a fictional fork for the username user. To clone the repo use the link appropriate for your fork, in our case it will be: https://github.com/user/kura.git

Keep in mind that the \"Root install folder\" is where the Eclipse executable will be installed and the Eclipse Kura sources will be downloaded (in the git subfolder).

Press Next, leave all Bootstrap Tasks selected and press the Finish button

Accept all the licenses and wait for the installation to finish.

At first startup Eclipse IDE will checkout the code, perform a full build and configure a few Working Sets

When the tasks are completed, go to into the Package Explorer and Target Platform > Target-Definition > Kura Target Platform Equinox 3.16.0, and press \"Set as Target Platform\" located at the top right of the window:

"},{"location":"java-application-development/development-environment-setup/#eclipse-kura-maven-build","title":"Eclipse Kura maven build","text":"

Navigate to the git folder created within the Eclipse workspace (~/iot-kura-workspace in the example above) and build the target platform:

mvn -f target-platform/pom.xml clean install\n

Then build the core components:

mvn -f kura/pom.xml clean install\n

Build the examples (optional):

mvn -f kura/examples/pom.xml clean install\n

Build the target profiles:

mvn -f kura/distrib/pom.xml clean install -DbuildAll\n

Note

You can skip tests by adding -Dmaven.test.skip=true in the commands above and you can compile a specific target by specifying the profile (e.g. -Praspberry-pi-armhf).

"},{"location":"java-application-development/development-environment-setup/#build-scripts","title":"Build scripts","text":"

Alternatively you can use the build scripts available in the root directory.

./build-all.sh\n

or

./build-menu.sh\n

and select the profiles you want to build.

"},{"location":"java-application-development/hello-world-application/","title":"Hello World Application","text":""},{"location":"java-application-development/hello-world-application/#overview","title":"Overview","text":"

This section provides a simple example of how to create a Kura \u201cHello World\u201d OSGi project using Eclipse. With this example, you will learn how to perform the following functions:

  • Create a plugin project

  • Consume the Kura Logger service

  • Write an OSGi Activator

  • Export a single OSGi bundle (plug-in)

  • Create a Deployment Package

"},{"location":"java-application-development/hello-world-application/#prerequisites","title":"Prerequisites","text":"

Setting up the Kura Development Environment

"},{"location":"java-application-development/hello-world-application/#hello-world-using-the-kura-logger","title":"Hello World Using the Kura Logger","text":""},{"location":"java-application-development/hello-world-application/#create-hello-world-plug-in","title":"Create Hello World Plug-in","text":"

In Eclipse, create a new Plug-in project by selecting File | New | Project. Select Plug-in Development | Plug-in Project and click Next.

Your screen should display the New Plug-in Project dialog box as shown in the following screen capture. Enter your project a name, such as \u201corg.eclipse.kura.example.hello_osgi\u201d, in the appropriate field. Under Target Platform, ensure that the an OSGi framework option button is selected and set the variable to standard as shown below. You can also (optionally) add projects to a working set. To continue, click Next.

In the next New Plug-in Project menu (shown below), change the Name field to a descriptive name, such as \u201cHello World Example with Logger\u201d.

Also, verify that the Execution Environment list is set to match the Java JVM version running on the target device (JavaSE-1.8 or JavaSE-11). To determine the JVM version running on the target device, log in to its administrative console and enter the command

java \u2013version

Finally, uncheck the Generate an activator, a Java class that controls the plug-in\u2019s life cycle option button. For the purposes of this example, a single class will be used. An Activator class will not be created; instead, OSGi Declarative Services will be used to start and stop the bundle.

Click Finish.

If the Open Associated Perspective pop-up window (shown below) appears for adding Plug-ins and Error Log views, select Yes or No depending on your development requirements.

You should see the new project in the My Projects working set in the Package Explorer (or Project Explorer). Also, you will see the MANIFEST.MF was automatically opened in the Manifest Editor. An OSGi bundle is a regular Java .jar file that contains Java code and resources and a custom Manifest and an Activator.

"},{"location":"java-application-development/hello-world-application/#add-dependencies-to-manifest","title":"Add Dependencies to Manifest","text":"

First, you will use the Manifest Editor in Eclipse to add some dependencies. Click the Dependencies tab at the bottom of the editor screen and then click the Automated Management of Dependencies heading to expand it.

Under Automated Management of Dependencies, click Add. In the Select a Plug-in field, enter org.eclipse.osgi.services. Select the plug-in name and click OK.

Note that this operation is very much like adding standalone jars to the buildpath by including the \u2018-cp\u2019 argument to javac. However, in this case you are telling Eclipse where to find these dependencies the \u201cOSGi way\u201d, so it is aware of them at compile time. Click Add again and use the same procedure to add the following dependency:

  • slf4j.api

You should now see the list of dependencies. Save changes to the Manifest.

"},{"location":"java-application-development/hello-world-application/#create-java-class","title":"Create Java Class","text":"

Now you are ready to start writing a simple Java class. Right-click the org.eclipse.kura.example.hello_osgi project. Select New | Class. The New Java Class window appears as shown below. Set the Source folder to org.eclipse.kura.example.hello_osgi/src. Set the Package field to org.eclipse.kura.example.hello_osgi, set the Name field to HelloOsgi, and then click Finish.

Write the following code for the new class. You can copy and paste the code provided below into your newly created Java class file.

package org.eclipse.kura.example.hello_osgi;\n\npublic class HelloOsgi {\n\n    private static final Logger s_logger = LoggerFactory.getLogger(HelloOsgi.class);\n\n    private static final String APP_ID = \"org.eclipse.kura.example.hello_osgi\";\n\n    protected void activate(ComponentContext componentContext) {\n\n        s_logger.info(\"Bundle \" + APP_ID + \" has started!\");\n\n        s_logger.debug(APP_ID + \": This is a debug message.\");\n\n    }\n\n    protected void deactivate(ComponentContext componentContext) {\n\n        s_logger.info(\"Bundle \" + APP_ID + \" has stopped!\");\n\n    }\n\n}\n

The activate() method is the entry point when the bundle in started. The deactivate() method is the entry point when the bundle is stopped.

Notice the use of the private LoggerFactory.getLogger() method. If the LoggerFactory method is present (running) in the OSGi framework and your hello_osgi bundle is started, your activate method is called, and you can simply access the service by calling the getLogger() method.

One convenient feature of Eclipse, auto-completion, is worth mentioning here. If you type \u2018s_logger.\u2019 (instance name of the \u201cLoggerFactory.getLogger\u201d method) and stop after the period, it will show you a list of methods implemented in that class. The examples above show two different methods used for logging messages. Logger methods include: \u201cerror\u201d, \u201cwarn\u201d, \u201cinfo\u201d, \u201cdebug\u201d, and \u201ctrace\u201d, which represent increasingly lower (more detailed) levels of log information. Logger levels should generally be used to represent the following conditions:

  • ERROR - A serious problem has occurred that requires attention from the system administrator.

  • WARNING - An action occurred or a condition was discovered that should be reviewed and may require action before an error occurs. It may also be used for transient issues.

  • INFO - A report of a normal action or event. This could be a user operation, such as \"login completed\", or an automatic operation, such as a log file rotation.

  • DEBUG - A debug message used for troubleshooting or performance monitoring. It typically contains detailed event data including things an application developer would need to know.

  • TRACE - A fairly detailed output of diagnostic logging, such as actual bytes of a particular message being examined.

"},{"location":"java-application-development/hello-world-application/#resolve-dependencies","title":"Resolve Dependencies","text":"

At this point, there will be errors in your code because of unresolved imports.

Select the menu Source | Organize Imports to resolve these errors. Because you added the \u201corg.slf4j\u201d to your dependency list, you will be prompted to choose one of two potential sources for importing the \u201cLogger\u201d class. Select org.slf4j.Logger and click Finish.

Now the errors in the class should have been resolved. Save the HelloOsgi class.

The complete set of code (with import statements) is shown below.

package org.eclipse.kura.example.hello_osgi;\n\nimport org.osgi.service.component.ComponentContext;\n\nimport org.slf4j.Logger;\n\nimport org.slf4j.LoggerFactory;\n\npublic class HelloOsgi {\n\n    private static final Logger s_logger = LoggerFactory.getLogger(HelloOsgi.class);\n\n    private static final String APP_ID = \"org.eclipse.kura.example.hello_osgi\";\n\n    protected void activate(ComponentContext componentContext) {\n\n        s_logger.info(\"Bundle \" + APP_ID + \" has started!\");\n\n        s_logger.debug(APP_ID + \": This is a debug message.\");\n\n    }\n\n    protected void deactivate(ComponentContext componentContext) {\n\n        s_logger.info(\"Bundle \" + APP_ID + \" has stopped!\");\n\n    }\n\n}\n

For more information on using the Simple Logging Facade for Java (slf4j), see the Logger API.

Switch back to the Manifest Editor. Under Automated Management of Dependencies, ensure the Import-Package option button is selected. Click the add dependencies link to automatically add packages to the dependencies list based on the \u201cimport\u201d statements in your example code. Save changes to the Manifest again.

"},{"location":"java-application-development/hello-world-application/#create-component-class","title":"Create Component Class","text":"

Right-click the example project and select New | Other. From the wizard, select Plug-in Development | Component Definition and click Next.

Warning

This option is available only if the Plug-in Development Environment (PDE) is installed in Eclipse (plugins can be installed into Eclipse IDE by searching the name in the Eclipse Marketplace under the Help menu).

In the Class field of the New Component Definition window shown below, click Browse.

Enter the name of your newly created class in the Select entries field. In this case, type the word \u201chello\u201d, and you will see a list of matching items. Select the HelloOsgi class and click OK.

In the Enter or select the parent folder field of the New Component Definition window, add \"/OSGI-INF\" to the existing entry (e.g., org.eclipse.kura.example.hello_osgi/OSGI-INF). Then click Finish.

After the Component class has been created, it will open in the Workspace. In the Overview tab, the Name and Class point to our Java class. Set the Activate field to activate and set the Deactivate field to deactivate. Doing so tells the component where these OSGi activation methods are located. Then save the Component class definition file.

"},{"location":"java-application-development/hello-world-application/#deploying-the-plug-in","title":"Deploying the Plug-in","text":"

The next few sections describe how to create a stand-alone JAR file as a deployable OSGI plug-in and how to create an installable Deployment Package.

An OSGi bundle is a Java archive file containing Java code, resources, and a Manifest.

A Deployment Package is a set of resources grouped into a single package file that may be deployed in the OSGi framework through the Deployment Admin service and may contain one or more bundles, configuration objects, etc.

"},{"location":"java-application-development/hello-world-application/#export-the-osgi-bundle","title":"Export the OSGi Bundle","text":"

Your bundle can be built as a stand-alone OSGi plug-in.

To do so, right-click the project and select the Export menu. This is equivalent to running javac on your project. From the wizard, select Plug-in Development | Deployable plug-ins and fragments and click Next.

Under Available Plug-ins and Fragments of the Export window, ensure the newly created plug-in is selected. Under Destination, select the Directory option button and use the Browse button to select an appropriate place to save the JAR file on the local file system.

NOTE: During the deployment process that is described in the following section, you will need to remember the location where this JAR file is saved.

Click Finish.

This will create a JAR file in the selected directory (e.g., /home/joe/myPlugins/plugins/org.eclipse.kura.example.hello_osgi_1.0.0.jar).

"},{"location":"java-application-development/hello-world-application/#create-a-deployment-package","title":"Create a Deployment Package","text":"

Rather than creating a stand-alone plug-in, you can also create a Deployment Package that contains multiple bundles, configuration elements, etc. that can be deployed into an OSGi framework. In this example, you will simply create a Deployment Package containing the \u201chello_osgi\u201d bundle. This step requires mToolkit to be installed. (See Kura Setup for instructions on setting up the Eclipse development environment.)

Right-click the project and select New | Folder. Select the org.eclipse.kura.example.hello_osgi project and enter a folder named \u201cresources\u201d.

Then repeat this step to create a folder named \u201cdp\u201d under the resources folder. The resources/dp folder will be used to store the Deployment Package.

Select File | New | Other. Select OSGi | Deployment Package Definition and click Next.

Ensure that the Target folder field of the New dpp file window is set to the /[project_name]/resources/dp folder. In the File name field, enter the name for the new Deployment Package file to create, such as \u201chello_osgi\u201d. A version number can also be entered in the Version field. Then click Finish.

Under the resources/dp folder in your project, verify that the [filename].dpp file was created. This is a Deployment Package Project that provides information needed to create the Deployment Package, such as its output directory, ant build file, etc.

Select the Bundles tab and then click New. In the Bundle Path column, select the browse icon. Browse to the bundle\u2019s JAR file created earlier. Select the file and click Open. Doing so should populate the remaining columns as needed.

Save changes to the deployment package file.

In the resources/dp folder, right-click the .dpp file. Select Quick Build. A new [filename].dp file will be created in the same directory. This is the final Deployment Package that can be installed on a remote target system.

In conclusion, you were able to create a new bundle from scratch, write the Java code and Activator, modify the Manifest, and build the plug-in and/or Deployment Package that can be used in a Kura environment.

The next steps will be to test your code in an Emulation mode and/or to deploy your code to a target system running Kura. See Testing and Deploying Bundles to continue with those steps.

"},{"location":"java-application-development/how-to-manage-network-settings/","title":"How to manage Network Settings","text":"

This section provides an example of how to create a Kura bundle that can be used to configure the network interfaces of your device. In this example, you will learn how to perform the following functions:

  • Create a plugin that configures the network interfaces

  • Connect to a wireless access point

  • Create a wireless access point

As written, the example code configures the device with a static Wi-Fi configuration. Typically, the device settings would be defined through the Kura Gateway Administration Console instead of through Java code.

A more practical application of this example is for IP network interfaces that need to be dynamically modified based on some external trigger or condition, such as geo-fencing. The Kura framework allows the device to be programmatically changed via its APIs based on application-specific logic.

"},{"location":"java-application-development/how-to-manage-network-settings/#prerequisites","title":"Prerequisites","text":"

Setting up the Eclipse Kura Development Environment

"},{"location":"java-application-development/how-to-manage-network-settings/#network-configuration-with-kura","title":"Network Configuration with Kura","text":""},{"location":"java-application-development/how-to-manage-network-settings/#hardware-setup","title":"Hardware Setup","text":"

This example requires an embedded device running Kura with at least one Ethernet port and Wi-Fi support.

Additionally, the Connect to an Access Point section requires a wireless access point and the following information about the access point:

  • SSID (Network Name)

  • Security Type (WEP, WPA, or WPA2), if any

  • Password/Passphrase, if any

Lastly, the Create an Access Point section requires:

  • A wireless device, such as a laptop, to test the access point.

  • Optionally, you may connect the Kura device\u2019s Ethernet port to another network and use Kura as a gateway to that network.

"},{"location":"java-application-development/how-to-manage-network-settings/#determine-your-network-interfaces","title":"Determine Your Network Interfaces","text":"

In order to determine your network interfaces, run one of the following commands at a terminal on the embedded gateway:

ifconfig -a or ip link show

Typical network interfaces will appear as follows:

  • lo - loopback interface

  • eth0 - first Ethernet network interface

  • wlan0 - first wireless network interface

  • ppp0 - first point-to-point protocol network interface, which could be a dial-up modem, PPTP VPN connection, cellular modem, etc.

Make note of your wireless interface. For this tutorial, we will assume the wireless interface name is \u2018wlan0\u2019.

"},{"location":"java-application-development/how-to-manage-network-settings/#kura-networking-api","title":"Kura Networking API","text":"

The networking API consists of two basic services: org.eclipse.kura.net.NetworkService and org.eclipse.kura.net.NetworkAdminService.

The NetworkService is used to get the current state of the network. For example, the getNetworkInterfaces() method will return a List of NetInterface objects (such as EthernetInterface or WifiInterface) for each interface. This provides a detailed representation of the current state of that interface, such as its type, whether it is currently up, and its current address, which is returned by the getNetInterfaceAddresses() method as a List of NetInterfaceAddress objects. The NetworkService can also be used to get a list of all the network interface names available on the system, or a list of all the Wi-Fi access points that are currently detected by the system.

The NetworkAdminService is used to get and set the configuration for each interface. Similar to the NetworkService, it has a getNetworkInterfaceConfigs() that returns a List of NetInterfaceConfig objects (such as EthernetInterfaceConfig and WifiInterfaceConfig) for each interface. These have the same methods as a NetInterface object but represent the current configuration for that interface. For a NetInterfaceConfig object, the getNetInterfaceAddress() method will return a List of NetInterfaceAddressConfig objects. These NetInterfaceAddressConfig instances, in turn, contain a List of NetConfig objects that define the configuration for that interface.

There are many types of NetConfig objects, including:

  • NetConfigIP4 - contains the IPv4 address configuration

  • WifiConfig - contains the Wi-Fi configuration. Note that a WifiInterfaceAddressConfig may contain multiple WifiConfigs, since a configuration might exist for one or more Wi-Fi modes. The currently active WifiConfig is the one with a WifiMode that matches the WifiInterfaceAddressConfig WifiMode.

  • DhcpServerConfigIP4 - contains the IPv4-based DHCP server configuration

  • DnsServerConfigIP4 - contains the IPv4-based DNS server configuration

  • FirewallNatConfig - contains the firewall NAT configuration

These NetConfigs can also be used to configure an interface by providing them as a list to the updateEthernetInterfaceConfig(), updateWifiInterfaceConfig(), or updateModemInterfaceConfig() methods in the NetworkAdminService.

"},{"location":"java-application-development/how-to-manage-network-settings/#connect-to-an-access-point","title":"Connect to an Access Point","text":"

In this section, you will develop a Kura network configuration bundle that sets up the Wi-Fi interface as a client to a wireless access point.

"},{"location":"java-application-development/how-to-manage-network-settings/#implement-the-bundle","title":"Implement the Bundle","text":"

To implement the network configuration bundle, perform the following steps:

Note

For more detailed information about bundle development (i.e., the plug-in project, classes, and MANIFEST file configuration), please refer to the Hello World Application

  • Create a Plug-in Project named org.eclipse.kura.example.network; set the an OSGi framework option to standard; uncheck the Generate an activator option; and set the Execution Environment variable to match the JVM on your target device.

  • Include the following bundles in the MANIFEST.MF:

  • org.eclipse.kura
  • org.eclipse.kura.net
  • org.eclipse.kura.net.dhcp
  • org.eclipse.kura.net.firewall
  • org.eclipse.kura.net.wifi
  • org.osgi.service.component

  • org.slf4j

  • Create a class named NetworkConfigExample in the org.eclipse.kura.example.network project.

  • Create an OSGI-INF folder in the org.eclipse.kura.example.network project. Add a Component Class with the parent folder org.eclipse.kura.example.network/OSGI-INF, Component Name org.eclipse.kura.example.network, and Class org.eclipse.kura.example.network.NetworkConfigExample.

  • Select the Services tab in the component.xml file. Under Referenced Services, add org.eclipse.kura.net.NetworkAdminService. Edit the properties of this service, and configure the Bind property to setNetworkAdminService and Unbind to unsetNetworkAdminService as shown in the following screen capture. These settings are required because of the dependency on NetworkAdminService.

The following source code will also need to be implemented:

  • META-INF/MANIFEST.MF - OSGI manifest that describes the bundle and its dependencies.

  • OSGI-INF/component.xml - declarative services definition describing what services are exposed by and consumed by this bundle.

  • org.eclipse.kura.example.network.NetworkConfigExample.java - main implementation class.

"},{"location":"java-application-development/how-to-manage-network-settings/#meta-infmanifestmf-file","title":"META-INF/MANIFEST.MF File","text":"

The META-INF/MANIFEST.MF file should look as follows when complete:

Warning

Whitespace is significant in this file; make sure yours matches this file exactly.

Manifest-Version: 1.0\nBundle-ManifestVersion: 2\nBundle-Name: Network\nBundle-SymbolicName: org.eclipse.kura.example.network\nBundle-Version: 1.0.0.qualifier\nBundle-Vendor: ECLIPSE\nBundle-RequiredExecutionEnvironment: JavaSE-1.7\nImport-Package: org.eclipse.kura,\n org.eclipse.kura.net,\n org.eclipse.kura.net.dhcp,\n org.eclipse.kura.net.firewall,\n org.eclipse.kura.net.wifi,\n org.osgi.service.component;version=\"1.2.0\",\n org.slf4j;version=\"1.6.4\"\nService-Component: OSGI-INF/component.xml\n
"},{"location":"java-application-development/how-to-manage-network-settings/#osgi-infcomponentxml-file","title":"OSGI-INF/component.xml File","text":"
<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\"\n    name=\"org.eclipse.kura.example.network.NetworkConfigExample\"\n    activate=\"activate\"\n    deactivate=\"deactivate\"\n    enabled=\"true\"\n    immediate=\"true\"\n    configuration-policy=\"require\"\n    modified=\"updated\">\n   <implementation class=\"org.eclipse.kura.example.network.NetworkConfigExample\"/>\n   <service>\n        <provide interface=\"org.eclipse.kura.configuration.ConfigurableComponent\"/>\n   </service>\n   <reference name=\"NetworkAdminService\"\n        interface=\"org.eclipse.kura.net.NetworkAdminService\"\n        policy=\"static\"\n        cardinality=\"1..1\"\n        bind=\"setNetworkAdminService\"\n        unbind=\"unsetNetworkAdminService\"/>\n   <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.example.network.NetworkConfigExample\"/>\n</scr:component>\n
"},{"location":"java-application-development/how-to-manage-network-settings/#orgeclipsekuraexamplenetworknetworkconfigexamplejava","title":"org.eclipse.kura.example.network.NetworkConfigExample.java","text":"
package org.eclipse.kura.example.network;\n\nimport java.util.ArrayList;\nimport java.util.List;\n\nimport org.osgi.service.component.ComponentContext;\nimport org.slf4j.Logger;\nimport org.slf4j.LoggerFactory;\n\nimport org.eclipse.kura.KuraException;\nimport org.eclipse.kura.net.IP4Address;\nimport org.eclipse.kura.net.IPAddress;\nimport org.eclipse.kura.net.NetConfig;\nimport org.eclipse.kura.net.NetConfigIP4;\nimport org.eclipse.kura.net.NetInterfaceStatus;\nimport org.eclipse.kura.net.NetworkAdminService;\nimport org.eclipse.kura.net.dhcp.DhcpServerConfigIP4;\nimport org.eclipse.kura.net.firewall.FirewallNatConfig;\nimport org.eclipse.kura.net.wifi.WifiCiphers;\nimport org.eclipse.kura.net.wifi.WifiConfig;\nimport org.eclipse.kura.net.wifi.WifiMode;\nimport org.eclipse.kura.net.wifi.WifiRadioMode;\nimport org.eclipse.kura.net.wifi.WifiSecurity;\n\npublic class NetworkConfigExample {\n\n  private static final Logger s_logger = LoggerFactory.getLogger(NetworkConfigExample.class);\n\n  private NetworkAdminService m_netAdminService;\n\n  // ----------------------------------------------------------------\n  //\n  //   Dependencies\n  //\n  // ----------------------------------------------------------------\n\n  public void setNetworkAdminService(NetworkAdminService netAdminService) {\n    this.m_netAdminService = netAdminService;\n  }\n\n  public void unsetNetworkAdminService(NetworkAdminService netAdminService) {\n    this.m_netAdminService = null;\n  }\n\n\n  // ----------------------------------------------------------------\n  //\n  //   Activation APIs\n  //\n  // ----------------------------------------------------------------\n\n  protected void activate(ComponentContext componentContext) {\n    s_logger.info(\"Activating NetworkConfigExample...\");\n\n    connectToWirelessAccessPoint();\n//      createWirelessAccessPoint();\n\n    s_logger.info(\"Activating NetworkConfigExample... Done.\");\n  }\n\n  protected void deactivate(ComponentContext componentContext) {\n    s_logger.info(\"Deactivating NetworkConfigExample...\");\n\n    s_logger.info(\"Deactivating NetworkConfigExample... Done.\");\n  }\n\n\n  // ----------------------------------------------------------------\n  //\n  //   Private Methods\n  //\n  // ----------------------------------------------------------------\n\n  /**\n   * Connect to a wireless access point using the hard-coded parameters below\n   */\n  private void connectToWirelessAccessPoint() {\n    String interfaceName = \"wlan0\";\n\n    // Create a NetConfigIP4 - configure as a WAN (gateway) interface, and a DHCP client\n    NetInterfaceStatus netInterfaceStatus = NetInterfaceStatus.netIPv4StatusEnabledWAN;\n    boolean dhcpClient = true;\n    boolean autoConnect = true;\n    NetConfigIP4 netConfigIP4 = new NetConfigIP4(netInterfaceStatus, autoConnect, dhcpClient);\n\n    // Create a WifiConfig managed mode client\n    String driver = \"nl80211\";\n    String ssid = \"access_point_ssid\";\n    String password = \"password\";\n    WifiSecurity security = WifiSecurity.SECURITY_WPA2;\n    WifiCiphers ciphers = WifiCiphers.CCMP_TKIP;\n    int[] channels = {1,2,3,4,5,6,7,8,9,10,11};\n\n    WifiConfig wifiConfig = new WifiConfig();\n    wifiConfig.setMode(WifiMode.INFRA);\n    wifiConfig.setDriver(driver);\n    wifiConfig.setSSID(ssid);\n    wifiConfig.setPasskey(password);\n    wifiConfig.setSecurity(security);\n    wifiConfig.setChannels(channels);\n    wifiConfig.setGroupCiphers(ciphers);\n    wifiConfig.setPairwiseCiphers(ciphers);\n\n    // Create a NetConfig List\n    List<NetConfig> netConfigs = new ArrayList<NetConfig>();\n    netConfigs.add(netConfigIP4);\n    netConfigs.add(wifiConfig);\n\n    // Configure the interface\n    try{\n      s_logger.info(\"Reconfiguring \" + interfaceName + \" to connect to \" + ssid);\n      m_netAdminService.disableInterface(interfaceName);\n      m_netAdminService.updateWifiInterfaceConfig(interfaceName, autoConnect, null, netConfigs);\n\n      s_logger.info(\"Enable \" + interfaceName);\n      m_netAdminService.enableInterface(interfaceName, dhcpClient);\n    } catch(KuraException e) {\n      s_logger.error(\"Error connecting to wireless access point\", e);\n    }\n  }\n\n  /**\n   * Create a wireless access point\n   */\n  private void createWirelessAccessPoint() {\n    try{\n      String interfaceName = \"wlan0\";\n\n      // Create a NetConfigIP4 - configure as a LAN interface with a manual IP address\n      NetInterfaceStatus netInterfaceStatus = NetInterfaceStatus.netIPv4StatusEnabledLAN;\n      boolean dhcpClient = false;\n      boolean autoConnect = true;\n      IP4Address ipAddress = (IP4Address) IPAddress.parseHostAddress(\"172.16.10.1\");\n      IP4Address subnetMask = (IP4Address) IPAddress.parseHostAddress(\"255.255.255.0\");\n\n      NetConfigIP4 netConfigIP4 = new NetConfigIP4(netInterfaceStatus, autoConnect);\n      netConfigIP4.setAddress(ipAddress);\n      netConfigIP4.setSubnetMask(subnetMask);\n\n      // Create a WifiConfig access point\n      String driver = \"nl80211\";\n      String ssid = \"NetworkConfigExample\";\n      String password = \"password\";\n      WifiSecurity security = WifiSecurity.SECURITY_WPA2;\n      WifiCiphers ciphers = WifiCiphers.CCMP_TKIP;\n      int[] channels = {1};\n      WifiRadioMode radioMode = WifiRadioMode.RADIO_MODE_80211g;\n      String hwMode = \"g\";\n\n      WifiConfig wifiConfig = new WifiConfig();\n      wifiConfig.setMode(WifiMode.MASTER);\n      wifiConfig.setDriver(driver);\n      wifiConfig.setSSID(ssid);\n      wifiConfig.setPasskey(password);\n      wifiConfig.setSecurity(security);\n      wifiConfig.setChannels(channels);\n      wifiConfig.setGroupCiphers(ciphers);\n      wifiConfig.setPairwiseCiphers(ciphers);\n      wifiConfig.setRadioMode(radioMode);\n      wifiConfig.setHardwareMode(hwMode);\n\n\n      // Create a DhcpServerConfig to enable DHCP server functionality\n      int defaultLeaseTime = 7200;\n      int maximumLeaseTime = 7200;\n      IP4Address routerAddress = ipAddress;\n      IP4Address rangeStart = (IP4Address) IPAddress.parseHostAddress(\"172.16.10.100\");\n      IP4Address rangeEnd = (IP4Address) IPAddress.parseHostAddress(\"172.16.10.200\");\n      IP4Address dhcpSubnetMask = (IP4Address) IPAddress.parseHostAddress(\"255.255.255.0\");\n      IP4Address subnet = (IP4Address) IPAddress.parseHostAddress(\"172.16.10.0\");\n      short prefix = 24;\n      boolean passDns = true;\n\n      List<IP4Address> dnsServers = new ArrayList<IP4Address>();\n      dnsServers.add(ipAddress);                // Use our IP as the DNS server\n\n      DhcpServerConfigIP4 dhcpServerConfigIP4 = new DhcpServerConfigIP4(\n          interfaceName, true, subnet, routerAddress, dhcpSubnetMask, defaultLeaseTime,\n          maximumLeaseTime, prefix, rangeStart, rangeEnd, passDns, dnsServers);\n\n      // Create a FirewallNatConfig to enable NAT (network address translation)\n      // note that the destination interface is determined dynamically\n      FirewallNatConfig natConfig = new FirewallNatConfig(interfaceName, \"tbd\", true);\n\n\n      // Create a NetConfig List\n      List<NetConfig> netConfigs = new ArrayList<NetConfig>();\n      netConfigs.add(netConfigIP4);\n      netConfigs.add(wifiConfig);\n      netConfigs.add(dhcpServerConfigIP4);\n      netConfigs.add(natConfig);\n\n      // Configure the interface\n      s_logger.info(\"Reconfiguring \" + interfaceName + \" as an access point with SSID: \" + ssid);\n      m_netAdminService.disableInterface(interfaceName);\n      m_netAdminService.updateWifiInterfaceConfig(interfaceName, autoConnect, null, netConfigs);\n\n      s_logger.info(\"Enable \" + interfaceName);\n      m_netAdminService.enableInterface(interfaceName, dhcpClient);\n    } catch(Exception e) {\n      s_logger.error(\"Error configuring as an access point\", e);\n    }\n  }\n}\n

Modify the parameters in the connectToWirelessAccessPoint() method with the specific values for the access point you want to connect to, including the variables for SSID, password, and security settings:

  • String ssid = \"access_point_ssid\";

  • String password = \"password\";

  • WifiSecurity security = WifiSecurity.SECURITY_WPA2;

At this point, the bundle implementation is complete. Make sure to save all files before proceeding.

Export the OSGi bundle as a stand-alone plug-in, following the instructions in Hello World Using the Kura Logger.

"},{"location":"java-application-development/how-to-manage-network-settings/#deploy-the-bundle","title":"Deploy the Bundle","text":"

In order to proceed, you need to know the IP address of your embedded gateway that is running Kura. Follow the mToolkit instructions for installing a single bundle to the remote target device located here. Once the bundle has finished deploying, it will set the device\u2019s network configuration and attempt to connect to a Wi-Fi access point using the configured parameters in the connectToWirelessAccessPoint() method.

"},{"location":"java-application-development/how-to-manage-network-settings/#test-the-connection-to-the-access-point","title":"Test the Connection to the Access Point","text":"

To verify that the interface (wlan0) has acquired an IP address, run the ifconfig command at a terminal on the embedded gateway.

To show the current connection status to the access point, run the following commands:

wpa_cli -i wlan0 status\niw dev wlan0 link\niw dev wlan0 station dump\n
"},{"location":"java-application-development/how-to-manage-network-settings/#create-an-access-point","title":"Create an Access Point","text":"

This example code can be modified slightly to make the gateway function as an access point instead of connecting to an access point.

To do this, modify the activate() method in the NetworkConfigExample.java file to comment out connectToWirelessAccessPoint() and uncomment createWirelessAccessPoint().

protected void activate(ComponentContext componentContext) {\n  s_logger.info(\"Activating NetworkConfigExample...\");\n\n//  connectToWirelessAccessPoint();\n  createWirelessAccessPoint();\n\n  s_logger.info(\"Activating NetworkConfigExample... Done.\");\n}\n

Modify the access point configuration variables under createWirelessAccessPoint() for your needs, if necessary, such as the variables:

IP4Address ipAddress = (IP4Address) IPAddress.parseHostAddress(\"172.16.10.1\");\nIP4Address subnetMask = (IP4Address) IPAddress.parseHostAddress(\"255.255.255.0\");\n\n// Create a WifiConfig access point\nString driver = \"nl80211\";\nString ssid = \"NetworkConfigExample\";\nString password = \"password\";\n

Export the bundle again as a stand-alone OSGi plug-in and redeploy it to the target device. It should now reconfigure itself to create an access point with an active DHCP server, DNS proxy forwarding, and NAT enabled.

"},{"location":"java-application-development/how-to-manage-network-settings/#test-the-access-point","title":"Test the Access Point","text":"

To verify that the interface (wlan0) has a fixed IP address, run the ifconfig command at a terminal on the embedded gateway.

To view information on the Wi-Fi access point, including interface name, wireless channel, and MAC address, enter:

iw dev wlan0 info

To monitor connect and disconnect events from the access point, enter:

iw event \u2013f

Use another wireless client, such as a laptop, to verify that you can connect to the access point, that it receives an IP address, and that it can ping the network. When the client connects to the access point, the console should show a new station connection event.

To view station statistic information, including signal strength and bitrate, enter:

iw dev wlan0 station dump

Optionally, if the gateway has another interface configured for WAN with connection to the Internet, then the wireless client should be able to reach the Internet using this access point as its gateway. The setup for the other interface (not covered in this example) would need to be configured in the device using the Kura Gateway Administration Console.

"},{"location":"java-application-development/how-to-serial-ports/","title":"How to Use Serial Ports","text":""},{"location":"java-application-development/how-to-serial-ports/#overview","title":"Overview","text":"

This section provides an example of how to create a Kura bundle that will communicate with a serial device. In this example, you will communicate with a simple terminal emulator to demonstrate both transmitting and receiving data. You will learn how to perform the following functions:

  • Create a plugin that communicates to serial devices

  • Export the bundle

  • Install the bundle on the remote device

  • Test the communication with minicom where, minicom is acting as an attached serial device such as an NFC reader, GPS device, or some other ASCII-based communication device

"},{"location":"java-application-development/how-to-serial-ports/#prerequisites","title":"Prerequisites","text":"

  • Setting up Kura Development Environment

  • Hello World Using the Kura Logger

  • Hardware

    • Use an embedded device running Kura with two available serial ports. (If the device does not have a serial port, USB to serial adapters can be used.)

    • Ensure minicom is installed on the embedded device.

"},{"location":"java-application-development/how-to-serial-ports/#serial-communication-with-kura","title":"Serial Communication with Kura","text":"

This section of the tutorial covers setting up the hardware, determining serial port device nodes, implementing the basic serial communication bundle, deploying the bundle, and validating its functionality. After completing this section, you should be able to communicate with any ASCII-based serial device attached to a Kura-enabled embedded gateway. In this example, we are using ASCII for clarity, but these same techniques can be used to communicate with serial devices that communicate using binary protocols.

"},{"location":"java-application-development/how-to-serial-ports/#hardware-setup","title":"Hardware Setup","text":"

Your setup requirements will depend on your hardware platform. At a minimum, you will need two serial ports with a null modem serial, crossover cable connecting them.

  • If your platform has integrated serial ports, you only need to connect them using a null modem serial cable.

  • If you do not have integrated serial ports on your platform, you will need to purchase USB-to-Serial adapters. It is recommended to use a USB-to-Serial adapter with either the PL2303 or FTDI chipset, but others may work depending on your hardware platform and underlying Linux support. Once you have attached these adapters to your device, you can attach the null modem serial cable between the two ports.

"},{"location":"java-application-development/how-to-serial-ports/#determine-serial-device-nodes","title":"Determine Serial Device Nodes","text":"

This step is hardware specific. If your hardware device has integrated serial ports, contact your hardware device manufacturer or review the documentation to find out how the ports are named in the operating system. The device identifiers should be similar to the following:

/dev/ttyS*xx*\n/dev/ttyUSB*xx*\n/dev/ttyACM*xx*\n

If you are using USB-to-Serial adapters, Linux usually allocates the associated device nodes dynamically at the time of insertion. In order to determine what they are, run the following command at a terminal on the embedded gateway:

tail -f /var/log/syslog\n

Warning

Depending on your specific Linux implementation, other possible log files may be: /var/log/kern.log, /var/log/kernel, or /var/log/dmesg.

With the above command running, insert your USB-to-Serial adapter. You should see output similar to the following:

root@localhost:/root> tail -f /var/log/syslog\nAug 15 18:43:47 localhost kernel: usb 3-2: new full speed USB device using uhci_hcd and address 3\nAug 15 18:43:47 localhost kernel: pl2303 3-2:1.0: pl2303 converter detected\nAug 15 18:43:47 localhost kernel: usb 3-2: pl2303 converter now attached to ttyUSB10\n

In this example, our device is a PL2303-compatible device and is allocated a device node of \u201c/dev/ttyUSB10\u201d. While your results may differ, the key is to identify the \u201ctty\u201d device that was allocated. For the rest of this tutorial, this device will be referred to as [device_node_1], which in this example is /dev/ttyUSB10. During development, it is also important to keep in mind that these values are dynamic; therefore, from one boot to the next and one insertion to the next, these values may change. To stop \u2018tail\u2019 from running in your console, escape with \u2018 c\u2019.

If you are using two USB-to-Serial adapters, repeat the above procedure for the second serial port. The resulting device node will be referred to as [device_node_2].

"},{"location":"java-application-development/how-to-serial-ports/#implement-the-bundle","title":"Implement the Bundle","text":"

Now that you have two serial ports connected to each other, you are ready to implement the code. You will use the same general method that is described in section Hello World Application with the following exceptions:

  1. process to export the OSGi bundle will have an additional step,
  2. the actual code in this example will have the following differences:
    • The new Plug-in Project is named \u201corg.eclipse.kura.example.serial\u201d
    • A class named \u201cSerialExample\u201d is created in the org.eclipse.kura.example.serial project
    • The following bundles are included in the Automated Management of Dependencies section in the MANIFEST.MF:
      • javax.comm
      • javax.microedition.io
      • org.eclipse.kura.cloud
      • org.eclipse.kura.comm
      • org.eclipse.kura.configuration
      • org.osgi.service.component
      • org.osgi.service.io
      • org.slf4j

The following files need to be implemented:

  • META-INF/MANIFEST.MF \u2013 OSGI manifest that describes the bundle and its dependencies

  • OSGI-INF/component.xml \u2013 declarative services definition that describe what services are exposed and consumed by this bundle

  • OSGI-INF/metatype/org.eclipse.kura.example.serial.SerialExample.xml \u2013 configuration description of the bundle and its parameters, types, and defaults

  • org.eclipse.kura.example.serial.SerialExample.java \u2013 main implementation class

"},{"location":"java-application-development/how-to-serial-ports/#meta-infmanifestmf-file","title":"META-INF/MANIFEST.MF File","text":"

The META-INF/MANIFEST.MF file should appear as shown below when complete:

NOTE: Whitespace is significant in this file. Make sure yours matches this file exactly with the exception that RequiredExecutionEnvironment may be JavaSE-1.6 or JavaSE-1.7, depending on the Java installation of your device.

Manifest-Version: 1.0\nBundle-ManifestVersion: 2\nBundle-Name: Serial\nBundle-SymbolicName: org.eclipse.kura.example.serial\nBundle-Version: 1.0.0.qualifier\nBundle-RequiredExecutionEnvironment: JavaSE-1.7\nService-Component: OSGI-INF/component.xml\nBundle-ActivationPolicy: lazy\nImport-Package: javax.comm;version=\"1.2.0\",\n  javax.microedition.io;resolution:=optional,\n  org.eclipse.kura.cloud;version=\"0.2.0\",\n  org.eclipse.kura.comm;version=\"0.2.0\",\n  org.eclipse.kura.configuration;version=\"0.2.0\",\n  org.osgi.service.component;version=\"1.2.0\",\n  org.osgi.service.io;version=\"1.0.0\",\n  org.slf4j;version=\"1.6.4\"\nBundle-ClassPath: .\n

In addition, the build.properties file should have org.eclipse.equinox.io listed as an additional bundle similar to below:

additional.bundles = org.eclipse.equinox.io\n
"},{"location":"java-application-development/how-to-serial-ports/#osgi-infcomponentxml-file","title":"OSGI-INF/component.xml File","text":"

Warning

Starting from Kura 3.0, the configuration service will only track \"relevant services\" that, in their component description files, will provide the ConfigurableComponent or SelfConfigurableComponent interface. The old behavior can be restored by setting the \"org.eclipse.kura.core.configuration.legacyServiceTracking\" property to true.

If Kura 2.1.0 or older versions are used or the org.eclipse.kura.core.configuration.legacyServiceTracking system property is set to true, the OSGI-INF/component.xml should appear as shown below when complete:

<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\"\n  name=\"org.eclipse.kura.example.serial.SerialExample\" activate=\"activate\"\n  deactivate=\"deactivate\" modified=\"updated\" enabled=\"true\" immediate=\"true\"\n  configuration-policy=\"require\">\n\n  <implementation class=\"org.eclipse.kura.example.serial.SerialExample\"/>\n  <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.example.serial.SerialExample\"/>\n\n  <service>\n    <provide interface=\"org.eclipse.kura.example.serial.SerialExample\"/>\n  </service>\n  <reference bind=\"setConnectionFactory\" cardinality=\"1..1\"\n    interface=\"org.osgi.service.io.ConnectionFactory\" name=\"ConnectionFactory\"\n    policy=\"static\" unbind=\"unsetConnectionFactory\" />\n</scr:component>\n

If Kura 3.0 or newer versions are used and the org.eclipse.kura.core.configuration.legacyServiceTracking system property is set to false or not set, the OSGI-INF/component.xml should appear as shown below when complete:

<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\"\n  name=\"org.eclipse.kura.example.serial.SerialExample\" activate=\"activate\"\n  deactivate=\"deactivate\" modified=\"updated\" enabled=\"true\" immediate=\"true\"\n  configuration-policy=\"require\">\n\n  <implementation class=\"org.eclipse.kura.example.serial.SerialExample\"/>\n  <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.example.serial.SerialExample\"/>\n\n  <service>\n    <provide interface=\"org.eclipse.kura.configuration.ConfigurableComponent\"/>\n  </service>\n  <reference bind=\"setConnectionFactory\" cardinality=\"1..1\"\n    interface=\"org.osgi.service.io.ConnectionFactory\" name=\"ConnectionFactory\"\n    policy=\"static\" unbind=\"unsetConnectionFactory\" />\n</scr:component>\n
"},{"location":"java-application-development/how-to-serial-ports/#osgi-infmetatypeorgeclipsekuraexampleserialserialexamplexml-file","title":"OSGI-INF/metatype/org.eclipse.kura.example.serial.SerialExample.xml File","text":"

The OSGI-INF/metatype/org.eclipse.kura.example.serial.SerialExample.xml file should appear as shown below when complete:

<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<MetaData xmlns=\"http://www.osgi.org/xmlns/metatype/v1.2.0\" localization=\"en_us\">\n  <OCD id=\"org.eclipse.kura.example.serial.SerialExample\"\n    name=\"SerialExample\"\n    description=\"Example of a Configuring KURA Application echoing data read from the serial port.\">\n\n    <Icon resource=\"http://sphotos-a.xx.fbcdn.net/hphotos-ash4/p480x480/408247_10151040905591065_1989684710_n.jpg\" size=\"32\"/>\n\n    <AD id=\"serial.device\"\n        name=\"serial.device\"\n        type=\"String\"\n        cardinality=\"0\"\n        required=\"false\"\n        description=\"Name of the serial device (e.g. /dev/ttyS0, /dev/ttyACM0, /dev/ttyUSB0).\"/>\n\n    <AD id=\"serial.baudrate\"\n        name=\"serial.baudrate\"\n        type=\"String\"\n        cardinality=\"0\"\n        required=\"true\"\n        default=\"9600\"\n        description=\"Baudrate.\">\n        <Option label=\"9600\" value=\"9600\"/>\n        <Option label=\"19200\" value=\"19200\"/>\n        <Option label=\"38400\" value=\"38400\"/>\n        <Option label=\"57600\" value=\"57600\"/>\n        <Option label=\"115200\" value=\"115200\"/>\n    </AD>\n\n    <AD id=\"serial.data-bits\"\n        name=\"serial.data-bits\"\n        type=\"String\"\n        cardinality=\"0\"\n        required=\"true\"\n        default=\"8\"\n        description=\"Data bits.\">\n        <Option label=\"7\" value=\"7\"/>\n        <Option label=\"8\" value=\"8\"/>\n    </AD>\n\n    <AD id=\"serial.parity\"\n        name=\"serial.parity\"\n        type=\"String\"\n        cardinality=\"0\"\n        required=\"true\"\n        default=\"none\"\n        description=\"Parity.\">\n        <Option label=\"none\" value=\"none\"/>\n        <Option label=\"even\" value=\"even\"/>\n        <Option label=\"odd\" value=\"odd\"/>\n    </AD>\n\n    <AD id=\"serial.stop-bits\"\n        name=\"serial.stop-bits\"\n        type=\"String\"\n        cardinality=\"0\"\n        required=\"true\"\n        default=\"1\"\n        description=\"Stop bits.\">\n        <Option label=\"1\" value=\"1\"/>\n        <Option label=\"2\" value=\"2\"/>\n    </AD>\n\n  </OCD>\n  <Designate pid=\"org.eclipse.kura.example.serial.SerialExample\">\n    <Object ocdref=\"org.eclipse.kura.example.serial.SerialExample\"/>\n  </Designate>\n</MetaData>\n
"},{"location":"java-application-development/how-to-serial-ports/#orgeclipsekuraexampleserialserialexamplejava-file","title":"org.eclipse.kura.example.serial.SerialExample.java File","text":"

The org.eclipse.kura.example.serial.SerialExample.java file should appear as shown below when complete:

package org.eclipse.kura.example.serial;\n\nimport java.io.IOException;\nimport java.io.InputStream;\nimport java.io.OutputStream;\nimport java.util.HashMap;\nimport java.util.Map;\nimport java.util.concurrent.Future;\nimport java.util.concurrent.ScheduledThreadPoolExecutor;\nimport org.osgi.service.component.ComponentContext;\nimport org.osgi.service.io.ConnectionFactory;\nimport org.slf4j.Logger;\nimport org.slf4j.LoggerFactory;\n\npublic class SerialExample implements ConfigurableComponent {\n\n  private static final Logger s_logger = LoggerFactory.getLogger(SerialExample.class);\n\n  private static final String SERIAL_DEVICE_PROP_NAME= \"serial.device\";\n  private static final String SERIAL_BAUDRATE_PROP_NAME= \"serial.baudrate\";\n  private static final String SERIAL_DATA_BITS_PROP_NAME= \"serial.data-bits\";\n  private static final String SERIAL_PARITY_PROP_NAME= \"serial.parity\";\n  private static final String SERIAL_STOP_BITS_PROP_NAME= \"serial.stop-bits\";\n\n  private ConnectionFactory m_connectionFactory;\n  private CommConnection m_commConnection;\n  private InputStream m_commIs;\n  private OutputStream m_commOs;\n  private ScheduledThreadPoolExecutor m_worker;\n  private Future<?> m_handle;\n  private Map<String, Object> m_properties;\n\n  // ----------------------------------------------------------------\n  //\n  // Dependencies\n  //\n  // ----------------------------------------------------------------\n  public void setConnectionFactory(ConnectionFactory connectionFactory) {\n    this.m_connectionFactory = connectionFactory;\n  }\n\n  public void unsetConnectionFactory(ConnectionFactory connectionFactory) {\n    this.m_connectionFactory = null;\n  }\n\n  // ----------------------------------------------------------------\n  //\n  // Activation APIs\n  //\n  // ----------------------------------------------------------------\n\n  protected void activate(ComponentContext componentContext, Map<String,Object> properties) {\n    s_logger.info(\"Activating SerialExample...\");\n\n    m_worker = new ScheduledThreadPoolExecutor(1);\n    m_properties = new HashMap<String, Object>();\n    doUpdate(properties);\n    s_logger.info(\"Activating SerialExample... Done.\");\n  }\n\n  protected void deactivate(ComponentContext componentContext) {\n    s_logger.info(\"Deactivating SerialExample...\");\n\n    // shutting down the worker and cleaning up the properties\n    m_handle.cancel(true);\n    m_worker.shutdownNow();\n    //close the serial port\n    closePort();\n    s_logger.info(\"Deactivating SerialExample... Done.\");\n  }\n\n  public void updated(Map<String,Object> properties) {\n    s_logger.info(\"Updated SerialExample...\");\n\n    doUpdate(properties);\n    s_logger.info(\"Updated SerialExample... Done.\");\n  }\n\n  // ----------------------------------------------------------------\n  //\n  // Private Methods\n  //\n  // ----------------------------------------------------------------\n\n  /**\n   * Called after a new set of properties has been configured on the service\n   */\n  private void doUpdate(Map<String, Object> properties) {\n    try {\n      for (String s : properties.keySet()) {\n        s_logger.info(\"Update - \"+s+\": \"+properties.get(s));\n      }\n\n      // cancel a current worker handle if one if active\n      if (m_handle != null) {\n        m_handle.cancel(true);\n      }\n\n      //close the serial port so it can be reconfigured\n      closePort();\n\n      //store the properties\n      m_properties.clear();\n      m_properties.putAll(properties);\n\n      //reopen the port with the new configuration\n      openPort();\n\n      //start the worker thread\n      m_handle = m_worker.submit(new Runnable() {\n        @Override\n        public void run() {\n          doSerial();\n        }\n      });\n\n    } catch (Throwable t) {\n        s_logger.error(\"Unexpected Throwable\", t);\n      }\n  }\n\n  private void openPort() {\n    String port = (String) m_properties.get(SERIAL_DEVICE_PROP_NAME);\n\n    if (port == null) {\n      s_logger.info(\"Port name not configured\");\n      return;\n    }\n\n    int baudRate = Integer.valueOf((String) m_properties.get(SERIAL_BAUDRATE_PROP_NAME));\n    int dataBits = Integer.valueOf((String) m_properties.get(SERIAL_DATA_BITS_PROP_NAME));\n    int stopBits = Integer.valueOf((String) m_properties.get(SERIAL_STOP_BITS_PROP_NAME));\n    String sParity = (String) m_properties.get(SERIAL_PARITY_PROP_NAME);\n    int parity = CommURI.PARITY_NONE;\n\n    if (sParity.equals(\"none\")) {\n      parity = CommURI.PARITY_NONE;\n    } else if (sParity.equals(\"odd\")) {\n        parity = CommURI.PARITY_ODD;\n    } else if (sParity.equals(\"even\")) {\n        parity = CommURI.PARITY_EVEN;\n    }\n\n    String uri = new CommURI.Builder(port)\n    .withBaudRate(baudRate)\n    .withDataBits(dataBits)\n    .withStopBits(stopBits)\n    .withParity(parity)\n    .withTimeout(1000)\n    .build().toString();\n\n    try {\n      m_commConnection = (CommConnection) m_connectionFactory.createConnection(uri, 1, false);\n      m_commIs = m_commConnection.openInputStream();\n      m_commOs = m_commConnection.openOutputStream();\n      s_logger.info(port+\" open\");\n    } catch (IOException e) {\n      s_logger.error(\"Failed to open port \" + port, e);\n      cleanupPort();\n    }\n  }\n\n  private void cleanupPort() {\n\n    if (m_commIs != null) {\n      try {\n        s_logger.info(\"Closing port input stream...\");\n        m_commIs.close();\n        s_logger.info(\"Closed port input stream\");\n      } catch (IOException e) {\n          s_logger.error(\"Cannot close port input stream\", e);\n      }\n      m_commIs = null;\n    }\n\n    if (m_commOs != null) {\n      try {\n        s_logger.info(\"Closing port output stream...\");\n        m_commOs.close();\n        s_logger.info(\"Closed port output stream\");\n      } catch (IOException e) {\n          s_logger.error(\"Cannot close port output stream\", e);\n      }\n      m_commOs = null;\n    }\n\n    if (m_commConnection != null) {\n      try {\n        s_logger.info(\"Closing port...\");\n        m_commConnection.close();\n        s_logger.info(\"Closed port\");\n      } catch (IOException e) {\n          s_logger.error(\"Cannot close port\", e);\n      }\n      m_commConnection = null;\n    }\n  }\n\n  private void closePort() {\n    cleanupPort();\n  }\n\n  private void doSerial() {\n    if (m_commIs != null) {\n      try {\n        int c = -1;\n        StringBuilder sb = new StringBuilder();\n        while (m_commIs != null) {\n          if (m_commIs.available() != 0) {\n            c = m_commIs.read();\n          } else {\n            try {\n              Thread.sleep(100);\n              continue;\n            } catch (InterruptedException e) {\n                return;\n            }\n          }\n\n        // on reception of CR, publish the received sentence\n        if (c==13) {\n          s_logger.debug(\"Received serial input, echoing to output: \" + sb.toString());\n          sb.append(\"\\r\\n\");\n          String dataRead = sb.toString();\n          //echo the data to the output stream\n          m_commOs.write(dataRead.getBytes());\n          //reset the buffer\n          sb = new StringBuilder();\n        } else if (c!=10) {\n          sb.append((char) c);\n        }\n      }\n\n      } catch (IOException e) {\n          s_logger.error(\"Cannot read port\", e);\n      } finally {\n          try {\n            m_commIs.close();\n          } catch (IOException e) {\n            s_logger.error(\"Cannot close buffered reader\", e);\n          }\n      }\n    }\n  }\n}\n
At this point, the bundle implementation is complete. Make sure to save all files before proceeding.

"},{"location":"java-application-development/how-to-serial-ports/#export-the-bundle","title":"Export the Bundle","text":"

To build the Serial Example bundle as a stand-alone OSGi plugin, right-click the project and select Export.

From the wizard, select Plug-in Development | Deployable plug-ins and fragments and click Next.

The Export window appears. Under Available Plug-ins and Fragments, verify that the newly created plug-in is selected.

Under Destination, select the Directory option button and use the Browse button to select an appropriate place to save the JAR file on the local file system.

Info

You will need to know the location where this JAR file is saved for the deployment process.

Under Options, select the checkbox Use class files compiled in the workspace in addition to the checkboxes already enabled, and click Finish.

Doing so will create a JAR file in the selected directory (e.g., /home/joe/myPlugins/plugins/org.eclipse.kura.example.serial_1.0.0.201410311510.jar).

"},{"location":"java-application-development/how-to-serial-ports/#deploy-the-bundle","title":"Deploy the Bundle","text":"

In order to proceed, you need to know the IP address of your embedded gateway that is running Kura. Once you have this IP address, follow the mToolkit instructions for installing a single bundle to a remote target device (refer to section 2.03 Testing and Deploying Bundles).

Once the installation successfully completes, you should see a message from the /var/log/kura.log file indicating that the bundle was successfully installed and configured. You can also run this example with the emulator in a Linux or OS X environment as shown sample output below. Make sure that your user account has owner permission for the serial device in /dev.

"},{"location":"java-application-development/how-to-serial-ports/#validate-the-bundle","title":"Validate the Bundle","text":"

Next, you need to test that your bundle does indeed echo characters back by opening minicom and configuring it to use [device_node_2] that was previously determined.

Open minicom using the following command at a Linux terminal on the remote gateway device:

minicom -s\n

This command opens a view similar to the following screen capture:

Scroll down to Serial port setup and press . A new dialog window opens as shown below:

Use the minicom menu options on the left (i.e., A, B, C, etc.) to change desired fields. Set the fields to the same values as shown in the previous screen capture except the Serial Device should match the [device_node_2] on your target device. Once this is set, press \\<ENTER> to exit from this menu.

In the main configuration menu, select Exit (do not select the option Exit from Minicom). At this point, you have successfully started minicom on the second serial port attached to your null modem cable allowing minicom to act as a serial device that can send and receive commands to your Kura bundle. You can verify this operation by typing characters and pressing . The function (specifically a \u2018\\n\u2019 character) signals to the Kura application to echo the buffered characters back to the serial device (minicom in this case).

Upon startup, minicom sends an initialization string to the serial device. These characters are sent to the minicom terminal because they were echoed back by Kura listening on the port at the other end of the null modem cable.

When you are done, exit minicom by pressing \u2018 a\u2019, then \u2018q\u2019, and finally \u2018\u2019. Doing so brings you back to the Linux command prompt.

This tutorial instructed you how to write and deploy a Kura bundle on your target device that listens for serial data (coming from the minicom terminal and being received on [device_node_1]). This tutorial also demonstrated that the application echoes data back to the same serial port that is received in minicom, which acts a serial device that sends and receives data. If supported by the device, Kura may send and receive binary data instead of ASCII.

"},{"location":"java-application-development/how-to-use-beacon-apis/","title":"How to Use Beacon APIs","text":""},{"location":"java-application-development/how-to-use-beacon-apis/#overview","title":"Overview","text":"

Eclipse Kura implements a set of APIs for managing Bluetooth Low Energy and Beacon devices.

The purpose of the BLE Beacon APIs is to simplify the development of applications that interact with Bluetooth LE Beacon devices, offering clear and easy-to-use methods for advertising and scanning. Eclipse Kura offers out-of-the-box the implementation of the Beacon APIs for iBeacon\u2122 and Eddystone\u2122 technologies.

"},{"location":"java-application-development/how-to-use-beacon-apis/#how-to-use-kura-ibeacontm-apis","title":"How to use Kura iBeacon\u2122 APIs","text":"

This section briefly presents how to use the iBeacon\u2122 implementation of the Kura Beacon APIs, providing several code snippets to explain how to perform common operations on iBeacons. For a complete example on iBeacon advertising and scanning, please refer to the iBeacon\u2122 advertiser and iBeacon\u2122 scanner examples. For more information about iBeacon\u2122 please refer to official page.

An application that wants to use the iBeacon\u2122 implementation of Kura Beacon APIs should bind the BluetoothLeService and BluetoothLeIBeaconService OSGI services, as shown in the following Java snippet:

public void setBluetoothLeService(BluetoothLeService bluetoothLeService) {\n    this.bluetoothLeService = bluetoothLeService;\n}\n\npublic void unsetBluetoothLeService(BluetoothLeService bluetoothLeService) {\n    this.bluetoothLeService = null;\n}\n\npublic void setBluetoothLeIBeaconService(BluetoothLeIBeaconService bluetoothLeIBeaconService) {\n    this.bluetoothLeIBeaconService = bluetoothLeIBeaconService;\n}\n\npublic void unsetBluetoothLeIBeaconService(BluetoothLeIBeaconService bluetoothLeIBeaconService) {\n    this.bluetoothLeIBeaconService = null;\n}\n

and in the component definition:

<reference bind=\"setBluetoothLeService\" \n            cardinality=\"1..1\" \n            interface=\"org.eclipse.kura.bluetooth.le.BluetoothLeService\" \n            name=\"BluetoothLeService\" \n            policy=\"static\" \n            unbind=\"unsetBluetoothLeService\"/>\n\n<reference bind=\"setBluetoothLeIBeaconService\" \n            cardinality=\"1..1\" \n            interface=\"org.eclipse.kura.ble.ibeacon.BluetoothLeIBeaconService\" \n            name=\"BluetoothLeIBeaconService\" \n            policy=\"static\" \n            unbind=\"unsetBluetoothLeIBeaconService\"/>\n

The BluetoothLeService is used to get the BluetoothLeAdapter to be used with the BluetoothLeIBeaconScanner and BluetoothLeIBeaconAdvertiser. As explained here, the adapter can be retrieved and powered on as follows:

this.bluetoothLeAdapter = this.bluetoothLeService.getAdapter(adapterName);\nif (this.bluetoothLeAdapter != null) {\n    if (!this.bluetoothLeAdapter.isPowered()) {\n        this.bluetoothLeAdapter.setPowered(true);\n    }\n} \n

where adapterName is the name of the adapter, e.g. hci0.

"},{"location":"java-application-development/how-to-use-beacon-apis/#create-an-ibeacontm-advertiser","title":"Create an iBeacon\u2122 advertiser","text":"

In order to properly configure an iBeacon\u2122 advertiser, a BluetoothLeIBeaconService is needed to create a new BluetoothLeIBeaconAdvertiser instance bound to a specific Bluetooth adapter:

try {\n    BluetoothLeBeaconAdvertiser<BluetoothLeIBeacon> advertiser = this.bluetoothLeIBeaconService.newBeaconAdvertiser(this.bluetoothLeAdapter);\n} catch (KuraBluetoothBeaconAdvertiserNotAvailable e) {\n    logger.error(\"Beacon Advertiser not available on {}\", this.bluetoothLeAdapter.getInterfaceName(),e);\n}\n

Then a BluetoothLeIBeacon object should be created, containing all the information to be broadcasted. In the following snippet, the BluetoothLeIBeacon object is instantiated and added to the advertiser. Then the broadcast time interval is set and the beacon advertising is started.

try {\n    BluetoothLeIBeacon iBeacon = new BluetoothLeIBeacon(uuid, major, minor, txPower);\n    advertiser.updateBeaconAdvertisingData(iBeacon);\n    advertiser.updateBeaconAdvertisingInterval(minInterval, maxInterval;\n\n    advertiser.startBeaconAdvertising();\n} catch (KuraBluetoothCommandException e) {\n    logger.error(\"IBeacon configuration failed\", e);\n}\n

The BluetoothLeIBeacon represents the beacon packet that will be broadcasted by the advertiser and it should be configured will the following parameters:

  • uuid a unique number that identifies the beacon.
  • major a number that identifies a subset of beacons within a large group.
  • minor a number that identifies a specific beacon.
  • txPower the transmitter power level indicating the signal strength one meter from the device.

Warning

Only one advertising packet can be broadcasted at a time on a specific Bluetooth adapter.

Finally, in the following snippet the advertiser is stopped and removed from the BluetoothLeIBeaconService:

try {\n    advertiser.stopBeaconAdvertising();\n    this.bluetoothLeIBeaconService.deleteBeaconAdvertiser(advertiser);\n} catch (KuraBluetoothCommandException e) {\n    logger.error(\"Stop iBeacon advertising failed\", e);\n}\n
"},{"location":"java-application-development/how-to-use-beacon-apis/#create-an-ibeacontm-scanner","title":"Create an iBeacon\u2122 scanner","text":"

As done for the advertiser, a BluetoothLeIBeaconService is needed to create a new BluetoothLeIBeaconScanner instance bound to a specific Bluetooth adapter:

bluetoothLeBeaconScanner<BluetoothLeIBeacon> scanner = this.bluetoothLeIBeaconService.newBeaconScanner(this.bluetoothLeAdapter);\n

A BluetoothLeIBeaconScanner needs a listener to collect the iBeacon packets that the Bluetooth adapter detects. In the following snippet, a simple listener that prints the iBeacon packet configuration is added to the scanner object:

private class iBeaconListener implements BluetoothLeBeaconListener<BluetoothLeIBeacon> {\n\n    @Override\n    public void onBeaconsReceived(BluetoothLeIBeacon beacon) {\n        logger.info(\"iBeacon received from {}\", beacon.getAddress());\n        logger.info(\"UUID : {}\", beacon.getUuid());\n        logger.info(\"Major : {}\", beacon.getMajor());\n        logger.info(\"Minor : {}\", beacon.getMinor());\n        logger.info(\"TxPower : {}\", beacon.getTxPower());\n        logger.info(\"RSSI : {}\", beacon.getRssi());   \n    }\n\n}\n
scanner.addBeaconListener(listener);\n

The scanner is started for a specific time interval (in this case 10 seconds):

scanner.startBeaconScan(10);\n

Finally the scanner should be stopped, if needed, and the resources are released:

if (scanner.isScanning()) {\n    scanner.stopBeaconScan();\n}\nscanner.removeBeaconListener(listener);\nthis.bluetoothLeIBeaconService.deleteBeaconScanner(scanner);\n

Note

The kura.legacy.bluetooth.beacon.scan property in the kura.properties file defines how the scan for beacons is performed. If set to true, the deprecated hcitool command is used. This guarantees that all the advertisement packets are reported. If set to false, the library will communicate to the OS using dbus. In the latter case, the rate of reports is limited and not all the advertisement packets are reported.

"},{"location":"java-application-development/how-to-use-beacon-apis/#how-to-use-kura-eddystonetm-apis","title":"How to use Kura Eddystone\u2122 APIs","text":"

Eddystone\u2122 is a protocol specification that defines a BLE message format for proximity beacon messages. It describes several different frame types that may be used individually or in combinations to create beacons that can be used for a variety of applications. For more information please see here and here.

In this section the Eddystone\u2122 implementation of the Kura Beacon APIs is presented, providing several code snippets to explain how to perform common operations on them. For a complete example on Eddystone\u2122 advertising and scanning, please refer to the Eddystone\u2122 advertiser and Eddystone\u2122 scanner examples.

Warning

Only Eddystone UID and URL frame types are currently supported.

As done with the iBeacon\u2122 implementation, an application has to bind the BluetoothLeService and BluetoothLeEddystoneService OSGI services, as shown in the following Java snippet:

public void setBluetoothLeService(BluetoothLeService bluetoothLeService) {\n    this.bluetoothLeService = bluetoothLeService;\n}\n\npublic void unsetBluetoothLeService(BluetoothLeService bluetoothLeService) {\n    this.bluetoothLeService = null;\n}\n\npublic void setBluetoothLeEddystoneService(BluetoothLeEddystoneService bluetoothLeEddystoneService) {\n    this.bluetoothLeEddystoneService = bluetoothLeEddystoneService;\n}\n\npublic void unsetBluetoothLeEddystoneService(BluetoothLeEddystoneService bluetoothLeEddystoneService) {\n    this.bluetoothLeEddystoneService = null;\n}\n

and in the component definition:

<reference bind=\"setBluetoothLeService\" \n            cardinality=\"1..1\" \n            interface=\"org.eclipse.kura.bluetooth.le.BluetoothLeService\" \n            name=\"BluetoothLeService\" \n            policy=\"static\" \n            unbind=\"unsetBluetoothLeService\"/>\n\n<reference bind=\"setBluetoothLeEddystoneService\" \n            cardinality=\"1..1\" \n            interface=\"org.eclipse.kura.ble.eddystone.BluetoothLeEddystoneService\" \n            name=\"BluetoothLeEddystoneService\" \n            policy=\"static\" \n            unbind=\"unsetBluetoothLeEddystoneService\"/>\n

The BluetoothLeService is used to get the BluetoothLeAdapter to be used with the BluetoothLeEddystoneScanner and BluetoothLeEddystoneAdvertiser. As explained here, the adapter can be retrieved and powered on as follows:

this.bluetoothLeAdapter = this.bluetoothLeService.getAdapter(adapterName);\nif (this.bluetoothLeAdapter != null) {\n    if (!this.bluetoothLeAdapter.isPowered()) {\n        this.bluetoothLeAdapter.setPowered(true);\n    }\n} \n

where adapterName is the name of the adapter, e.g. hci0.

"},{"location":"java-application-development/how-to-use-beacon-apis/#create-an-eddystonetm-advertiser","title":"Create an Eddystone\u2122 advertiser","text":"

In order to properly configure an Eddystone\u2122 advertiser, a BluetoothLeEddystoneService is needed to create a new BluetoothLeEddystoneAdvertiser instance bound to a specific Bluetooth adapter:

try {\n    BluetoothLeBeaconAdvertiser<BluetoothLeEddystone> advertiser = this.advertising = this.bluetoothLeEddystoneService.newBeaconAdvertiser(this.bluetoothLeAdapter);\n} catch (KuraBluetoothBeaconAdvertiserNotAvailable e) {\n    logger.error(\"Beacon Advertiser not available on {}\", this.bluetoothLeAdapter.getInterfaceName(),e);\n}\n

The advertiser has to be configured with a BluetoothLeEddystone object that contains all the information to be broadcasted. Currently, UID and URL frame types are supported. A UID frame can be created as follows:

BluetoothLeEddystone eddystone = new BluetoothLeEddystone();\neddystone.configureEddystoneUIDFrame(namespace, instance, txPower);\n

where namespace and instance are respectively 10-byte and 6-byte long sequences that compose a unique 16-byte Beacon ID. The txPower is the calibrated transmission power at 0 m.

A URL frame is created as follows:

BluetoothLeEddystone eddystone = new BluetoothLeEddystone();\neddystone.configureEddystoneURLFrame(url, txPower);\n

where url is the URL to be broadcasted and the txPower is the calibrated transmission power at 0 m.

After the BluetoothLeEddystone creation, the packet is added to the advertiser and the broadcast time interval is set. Then the advertiser is started:

try {\n    advertiser.updateBeaconAdvertisingData(eddystone);\n    advertiser.updateBeaconAdvertisingInterval(this.options.getMinInterval(), this.options.getMaxInterval());\n    advertiserstartBeaconAdvertising();\n} catch (KuraBluetoothCommandException e) {\n    logger.error(\"Eddystone configuration failed\", e);\n}\n

Finally, in the following snippet the advertiser is stopped and removed from the BluetoothLeEddystoneService:

try {\n    advertiser.stopBeaconAdvertising();\n    this.bluetoothLeEddystoneService.deleteBeaconAdvertiser(advertiser);\n} catch (KuraBluetoothCommandException e) {\n    logger.error(\"Stop Advertiser advertising failed\", e);\n}\n
"},{"location":"java-application-development/how-to-use-beacon-apis/#create-an-eddystonetm-scanner","title":"Create an Eddystone\u2122 scanner","text":"

As done for the advertiser, a BluetoothLeEddystoneService is needed to create a new BluetoothLeEddystoneScanner instance bound to a specific Bluetooth adapter:

bluetoothLeBeaconScanner<BluetoothLeEddystone> scanner = this.bluetoothLeEddystoneService.newBeaconScanner(this.bluetoothLeAdapter);\n

A BluetoothLeEddystoneScanner needs a listener to collect the Eddystone packets that the Bluetooth adapter detects. In the following snippet, a simple listener that detects the frame type and prints the packet content is added to the scanner object:

private class EddystoneListener implements BluetoothLeBeaconListener<BluetoothLeEddystone> {\n\n    @Override\n    public void onBeaconsReceived(BluetoothLeEddystone beacon) {\n        logger.info(\"Eddystone {} received from {}\", eddystone.getFrameType(), eddystone.getAddress());\n        if (\"UID\".equals(eddystone.getFrameType())) {\n            logger.info(\"Namespace : {}\", bytesArrayToHexString(eddystone.getNamespace()));\n            logger.info(\"Instance : {}\", bytesArrayToHexString(eddystone.getInstance()));\n        } else if (\"URL\".equals(eddystone.getFrameType())) {\n            logger.info(\"URL : {}\", eddystone.getUrlScheme() + eddystone.getUrl());\n        }\n        logger.info(\"TxPower : {}\", eddystone.getTxPower());\n        logger.info(\"RSSI : {}\", eddystone.getRssi());  \n    }\n\n}\n
scanner.addBeaconListener(listener);\n

The scanner is started for a specific time interval (in this case 10 seconds):

scanner.startBeaconScan(10);\n

Finally the scanner should be stopped, if needed, and the resources are released:

if (scanner.isScanning()) {\n    scanner.stopBeaconScan();\n}\nscanner.removeBeaconListener(listener);\nthis.bluetoothLeEddystoneService.deleteBeaconScanner(scanner);\n

Note

The kura.legacy.bluetooth.beacon.scan property in the kura.properties file defines how the scan for beacons is performed. If set to true, the deprecated hcitool command is used. This guarantees that all the advertisement packets are reported. If set to false, the library will communicate to the OS using dbus. In the latter case, the rate of reports is limited and not all the advertisement packets are reported.

"},{"location":"java-application-development/how-to-use-beacon-apis/#add-new-beacon-apis-implementation","title":"Add new Beacon APIs implementation","text":"

Eclipse Kura offers the implementation for iBeacon\u2122 and Eddystone\u2122 protocols, but it is possible to add implementations of different kinds of beacon protocols.

The org.eclipse.kura.bluetooth.le.beacon package contains the interfaces used by the beacon implementations:

  • BluetoothLeBeaconService is the entry point for applications that want to use the Beacon APIs.
  • BluetoothLeBeaconManager is used by the BluetoothLeBeaconService and provides methods to create and delete Beacon advertisers and scanners.
  • BluetoothLeBeaconAdvertiser allows configuring advertisement packets and managing advertising.
  • BluetoothLeBeaconScanner is used to search for specific Beacon packets.
  • BluetoothLeBeaconEncoder implements methods for encoding a Beacon object to a stream of bytes.
  • BluetoothLeBeaconDecoder implements methods for decoding a stream of bytes in to a Beacon object.
  • BluetoothLeBeacon represents a generic Beacon packet.

The BluetoothLeBeaconManager, BluetoothLeBeaconScanner and BluetoothLeBeaconAdvertiser interfaces handles generic BluetoothLeBeacon objects and their implementations are provided by the org.eclipse.kura.ble.provider. The others interfaces, instead, are Beacon specific and their implementations depend on the specific protocol that is used. As a consequence, who wants to support a new Beacon protocol, should provide the implementation of the BluetoothLeBeaconService, BluetoothLeBeaconEncoder and BluetoothLeBeaconDecoder interfaces and extend the BluetoothLeBeacon class.

As an example, the org.eclipse.kura.ble.ibeacon.provider provides the implementation of the above APIs for the iBeacon\u2122 protocol. In this case, the org.eclipse.kura.ble.ibeacon package contains the following:

  • BluetoothLeIBeacon implements the BluetoothLeBeacon interface for the iBeacon\u2122 packet.
  • BluetoothLeIBeaconEncoder is a marker interface that extends BluetoothLeBeaconEncoder.
  • BluetoothLeIBeaconDecoder is a marker interface that extends BluetoothLeBeaconDecoder.
  • BluetoothLeIBeaconService is a marker interface that extends BluetoothLeBeaconService and is the entry point for applications that wants to use an iBeacon\u2122.

The org.eclipse.kura.internal.ble.ibeacon provides the implementations for the above interfaces:

  • BluetoothLeIBeaconEncoderImpl implements BluetoothLeIBeaconEncoder offering a method to encode the BluetoothLeIBeacon into a byte stream.
  • BluetoothLeIBeaconDecoderImpl implements BluetoothLeIBeaconDecoder offering a method to decode a stream of bytes into a BluetoothLeIBeacon object.
  • BluetoothLeIBeaconServiceImpl is the implementation of BluetoothLeIBeaconService and uses the generic BluetoothLeBeaconManager service to create scanners and advertisers.

The following image shows the UML diagram.

"},{"location":"java-application-development/how-to-use-bt-le-apis/","title":"How to Use Bluetooth LE APIs","text":""},{"location":"java-application-development/how-to-use-bt-le-apis/#overview","title":"Overview","text":"

Eclipse Kura implements a set of APIs for managing Bluetooth Low Energy and Beacon devices.

The purpose of the BLE APIs is to simplify the development of applications that interact with Bluetooth LE devices, offering clear and easy-to-use methods, and add new features to correctly manage the connection with remote devices. Moreover, the APIs organize the methods in a logical way to access all levels of a GATT client, from GATT services to GATT characteristics and descriptors, using UUIDs to identify the correct resource.

"},{"location":"java-application-development/how-to-use-bt-le-apis/#bluez-dbus-ble-gatt-api","title":"Bluez-Dbus - BLE GATT API","text":"

The implementation of the Kura BLE APIs is based on the Bluez-Dbus library that provides an easy to use Bluetooth LE API based on BlueZ over DBus. The library eases the access to GATT services and the management of BLE connections and discovery, without using any wrapper library as it is based on a newer version of dbus-java which uses jnr-unixsocket.

"},{"location":"java-application-development/how-to-use-bt-le-apis/#apis-description","title":"APIs description","text":"

The BLE APIs are exported in the org.eclipse.kura.bluetooth.le package. The interfaces are briefly described in the following.

  • BluetoothLeService is the entry point of the OSGI service. It allows to get all the Bluetooth interfaces installed on the gateway or a specific one using the name of the adapter.
  • BluetoothLeAdapter represents the physical Bluetooth adapter on the gateway. It allows to start/stop a discovery, search a specific BLE device based on the BD address, power up/down the adapter and get information about the adapter.
  • BluetoothLeDevice represents a Bluetooth LE device. The interface provides methods for connections and disconnections, list the GATT services or search a specific one based on the UUID and get generic information about the device.
  • BluetoothLeGattService represents a GATT service and allows listing the GATT characteristics provided by the device.
  • BluetoothLeGattCharacteristic represents a GATT characteristic. It provides methods to read from and write to the characteristic, enable or disable notifications and get the properties.
  • BluetoothLeGattDescriptor represents a GATT descriptor associated with the characteristic.

More information about the APIs can be found in API Reference.

"},{"location":"java-application-development/how-to-use-bt-le-apis/#how-to-use-the-kura-ble-api","title":"How to use the Kura BLE API","text":"

This section briefly presents how to use the Kura BLE APIs, providing several code snippets to explain how to perform common bluetooth operations. For a complete example, please refer to the SensorTag application.

An application that wants to use the Kura BLE APIs should bind the BluetoothLeService OSGI service, as shown in the following Java snippet:

public void setBluetoothLeService(BluetoothLeService bluetoothLeService) {\n    this.bluetoothLeService = bluetoothLeService;\n}\n\npublic void unsetBluetoothLeService(BluetoothLeService bluetoothLeService) {\n    this.bluetoothLeService = null;\n}\n

and in the component definition:

<reference bind=\"setBluetoothLeService\" \n            cardinality=\"1..1\" \n            interface=\"org.eclipse.kura.bluetooth.le.BluetoothLeService\" \n            name=\"BluetoothLeService\" \n            policy=\"static\" \n            unbind=\"unsetBluetoothLeService\"/>\n
"},{"location":"java-application-development/how-to-use-bt-le-apis/#get-the-bluetooth-adapter","title":"Get the Bluetooth adapter","text":"

Once bound to the BluetoothLeService, an application can get the Bluetooth adapter and power on it, if needed:

this.bluetoothLeAdapter = this.bluetoothLeService.getAdapter(adapterName);\nif (this.bluetoothLeAdapter != null) {\n    if (!this.bluetoothLeAdapter.isPowered()) {\n        this.bluetoothLeAdapter.setPowered(true);\n    }\n} \n

where adapterName is the name of the adapter, i.e. hci0.

"},{"location":"java-application-development/how-to-use-bt-le-apis/#search-for-ble-devices","title":"Search for BLE devices","text":"

The BluetoothLeAdapter provides several methods to search for a device, a.k.a. perform a BLE discovery:

  • Future<BluetoothLeDevice> findDeviceByAddress(long timeout, String address) search for a BLE device with the specified address. The method will perform a BLE discovery for at most timeout seconds or until the device is found. It will return a Future instance and the discovered device can be retrieved using the get() method.
  • Future<BluetoothLeDevice> findDeviceByName(long timeout, String name) search for a BLE device with the specified system name and return a Future.
  • void findDeviceByAddress(long timeout, String address, Consumer<BluetoothLeDevice> consumer) search for a BLE device with the specified address. The method will perform a BLE discovery for at most timeout seconds or until the device is found. When the device is found or the timeout is reached the consumer is used to get the device.
  • void findDeviceByAddress(long timeout, String address, Consumer<BluetoothLeDevice> consumer) search for a BLE device with the specified name and use the provided consumer to return the device.
  • Future<List<BluetoothLeDevice>> findDevices(long timeout) and void findDevices(long timeout, Consumer<List<BluetoothLeDevice>> consumer) are similar to the methods above, but they get a list of Bluetooth devices.

The following snippet shows how to perform a discovery of 10 seconds using findDevices method:

if (this.bluetoothLeAdapter.isDiscovering()) {\n    try {\n        this.bluetoothLeAdapter.stopDiscovery();\n    } catch (KuraException e) {\n        logger.error(\"Failed to stop discovery\", e);\n    }\n}\nFuture<List<BluetoothLeDevice>> future = this.bluetoothLeAdapter.findDevices(10);\ntry {\n    List<BluetoothLeDevice>; devices = future.get();\n} catch (InterruptedException | ExecutionException e) {\n    logger.error(\"Scan for devices failed\", e);\n}\n
"},{"location":"java-application-development/how-to-use-bt-le-apis/#get-the-gatt-services-and-characteristics","title":"Get the GATT services and characteristics","text":"

To get the GATT services using the BluetoothLeDevice, use the following snippet:

try {\n    List<BluetoothLeGattService>; services = device.findServices();\n} catch (KuraBluetoothResourceNotFoundException e) {\n    logger.error(\"Unable to find GATT services\", e);\n}\n

A specific GATT service can be retrieved using its UUID:

try {\n    BluetoothLeGattService service = device.findService(uuid);\n} catch (KuraBluetoothResourceNotFoundException e) {\n    logger.error(\"Unable to find GATT service\", e);\n}\n

Using the GATT service, it is possible to get a specific GATT characteristic (or the complete list) and the GATT descriptor from it:

try {\n    BluetoothLeGattCharacteristic characteristic = service.findCharacteristic(characteristicUuid);\n    BluetoothLeGattDescriptor descriptor = characteristic.findDescriptor(descriptorUuid);\n} catch (KuraBluetoothResourceNotFoundException e) {\n    logger.error(\"Unable to find GATT resources\", e);\n}\n
"},{"location":"java-application-development/how-to-use-bt-le-apis/#io-operations-on-gatt-characteristics-and-descriptors","title":"IO operations on GATT characteristics and descriptors","text":"

The Kura BLE APIs provides methods to manage the IO operations on GATT characteristics and descriptors. The following snippet provides an example on how to read and write data to a characteristic.

try {\n    byte[] valueRead = characteristic.readValue();\n    byte[] valueWrite = { 0x01};\n    characteristic.writeValue(valueWrite);\n} catch (KuraBluetoothIOException e) {\n    logger.error(\"IO operation failed\", e);\n}\n

In the following example, instead, a notification listener is configured to periodically receive the data from a GATT characteristic and print the first value of the given array. The period is internally set by the BLE device.

try {\n    Consumer<byte[]>; callback = valueBytes -> System.out.println((int) valueBytes[0]);\n    characteristic.enableValueNotifications(callback);\n} catch (KuraBluetoothNotificationException e) {\n    logger.error();\n}\n
"},{"location":"java-application-development/how-to-use-bt-le-apis/#configure-bluez-on-the-raspberry-pi","title":"Configure Bluez on the Raspberry Pi","text":"

The minimum version of Bluez supported by Kura Bluetooth LE APIs is 5.42. The Raspbian Stretch OS comes with Bluez 5.43, but older OS couldn't have an updated Bluez version. In this case, it is possible to compile and install Bluez from sources using a Raspberry Pi. The Bluez sources can be found here Proceed as follows:

  • Install the packages needed for compile Bluez: 

sudo apt-get install libusb-dev libdbus-1-dev libglib2.0-dev libudev-dev libical-dev libreadline-dev\n
* Download bluez-5.43.tar.xz (or newer version) from here. * Decompress the compressed archive:

tar -xf bluez-5.43.tar.x\n
  • Compile the sources:
cd bluez-5.43\n./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-library -disable-systemd --enable-experimental --enable-maintainer-mod\nmake\nmake install\n
"},{"location":"java-application-development/how-to-use-can-bus/","title":"How to Use CAN bus","text":"

The Kura CAN bus protocol implementation is based on the SocketCAN interface, which provides a socket interface to userspace applications. The sockets are designed as can0 and can1. The SocketCAN package is an implementation of Controller Area Network (CAN) protocols. For more information, refer to the following link: https://www.kernel.org/doc/Documentation/networking/can.txt.

"},{"location":"java-application-development/how-to-use-can-bus/#configure-the-can-bus-driver","title":"Configure the CAN bus Driver","text":"

The CAN network must be initialized prior to communications. Verify that the CAN driver module has been enabled in the kernel by issuing the following command:

ifconfig -a\n
The connections \u201ccan0\u201d and \u201ccan1\u201d should be displayed.

Next, the sockets must be enabled and configured using the following commands (the bitrate value must be set according to the bitrate of the device that will be connected): 

ip link set can0 type can bitrate 50000 triple-sampling on\nip link set can0 up\nip link set can1 type can bitrate 50000 triple-sampling on\nip link set can1 up\n

"},{"location":"java-application-development/how-to-use-can-bus/#use-the-can-bus-driver-in-kura","title":"Use the CAN bus Driver in Kura","text":"

To use the Can bus Driver in Kura, the bundle org.eclipse.kura.protocol.can must be installed. Refer to the section Application Management for more information.

Once this bundle is installed and verified, the CanConnectionService provides access to basic functionalities of the CAN network, including:

  • sendCanMessage \u2013 sends an array of bytes in RAW mode.

  • receiveCanMessage \u2013 reads frames in RAW mode waiting on socket CAN.

Refer to the following Kura javadocs for more information: http://download.eclipse.org/kura/docs/api/5.2.0/apidocs/.

Also, for information about the wrapper that this service utilizes, refer to the following link: https://github.com/entropia/libsocket-can-java.

"},{"location":"java-application-development/how-to-use-dummy-signature-service/","title":"How to use the Dummy Container Signature Validation Service","text":"

The Dummy Container Signature Validation Service is an example implementation of the Container Signature Validation Service interface which mainly serves as a reference for future implementations and testing.

The purpose of this component is to have a service whose configuration dictates the signature verification outcome. In the main text area is possible to set the container image reference that the service will report as correctly signed.

The format accepted by the service is: <imageName>:<imageTag>@<imageDigest> where

  • <imageName>: is the container image name. The value will need to be expressed in the form registryURL/imagename in case of a custom registry. Example: nginx or nvcr.io/nvidia/deepstream.
  • <imageTag>: is the container image tag. Example: latest or 6.4-gc-triton-devel.
  • <imageDigest>: is the image digest in the OCI specification format.

Each image should be separated by a newline. The service will report a successful signature validation for each image inside its configuration, returning the provided image digest as a result.

"},{"location":"java-application-development/how-to-use-gpio/","title":"How to use GPIO","text":"

GPIO resources can be accessed either using the GPIO Service provided by Kura, or directly using the OpenJDK Device I/O embedded library.

"},{"location":"java-application-development/how-to-use-gpio/#gpio-service","title":"GPIO Service","text":"

Access to GPIO resources is granted by the GPIOService. Once retrieved, the service can be used to acquire a GPIO Pin and use it as a digital output or a digital input.

The GPIO Service exposes methods to retrieve a GPIO Pin via its name or index as shown below.

KuraGpioPin thePin = gpioServiceInstance.getPinByTerminal(18);\nKuraGpioPin thePin = gpioServiceInstance.getPinByName(\"IgnitionPin\");\n

The KuraGpioPin object is used to manipulate GPIO Pins and exposes methods to read the status of an input, or set the status of digital output as shown below. 

//sets digital output value to high\nthePin.setValue(true);\n\n//get value of a digital input pin\nboolean active = thePin.getValue();\n\n//listen for status change on a digital input pin\ntry {  \n      thePin.addPinStatusListener(new PinStatusListener() {\n          @Override    \n          public void pinStatusChange(boolean value) {      \n          // Perform tasks when pin status changes    \n          }  \n      });\n} catch (KuraClosedDeviceException e) {\n  // Here if GPIO cannot be acquired\n  } catch (IOException e) {\n    // Here on I/O error\n  }\n

"},{"location":"java-application-development/how-to-use-gpio/#pin-configuration","title":"Pin Configuration","text":"

Pin names, indexes, and configuration are defined in the jdk.dio.properties file.

Although GPIO pins can be accessed with their default configuration, the settings of each pin can be changed when acquiring it with the GPIO Service as shown below. 

KuraGpioPin customInputPin = gpioServiceInstance.getPinByTerminal(\n  14, \n  KuraGPIODirection.INPUT, \n  KuraGPIOMode.INPUT_PULL_UP, \n  KuraGPIOTrigger.BOTH_LEVELS);\n

"},{"location":"java-application-development/how-to-use-gpio/#default-configuration","title":"Default Configuration","text":"

Default hardware configuration for the hardware platform is defined in the jdk.dio.properties file. Standard configuration for complex devices can be added on a per-device basis as shown below.

#Default PIN configuration. To be overwritten in the following lines\ngpio.GPIOPin = initValue:0, deviceNumber:0, direction:3, mode:-1, trigger:3\n\n#Standard PIN configuration\n64 = deviceType: gpio.GPIOPin, pinNumber:64, name:RELAY1\n

Starting from Kura 5.5.0, the default pin configuration can be described in the form of symbolic links. The syntax is as follows:

/dev/digital_in1 = deviceType: gpio.GPIOPin, direction:0, mode=1, name:digital_in1\n

where /dev/digital_in1 points to /sys/class/gpio/gpioXYZ. The pin number is set to XYZ and it can be retrieved by name.

"},{"location":"java-application-development/how-to-use-gpio/#openjdk-device-io","title":"OpenJDK Device I/O","text":"

Linux-level access in Kura is granted through OpenJDK Device I/O, a third-party library that leverages standard Java ME Device I/O APIs to Java SE. Kura is distributed with the relevant native libraries, together with the default hardware configuration, for each platform on which it runs.

I2C, SPI, and GPIO resources can be directly accessed through the jdk.dio library present in the target platform.

"},{"location":"java-application-development/how-to-use-gpio/#apis","title":"APIs","text":"

Kura supports the full set of APIs for the listed device types. Refer to References for further API information.

"},{"location":"java-application-development/how-to-use-gpio/#accessing-a-gpio-pin-with-openjdk-device-io","title":"Accessing a GPIO Pin with OpenJDK Device I/O","text":"

A GPIO Pin can be accessed by referencing its index in the properties file, or by creating a Pin configuration object and feeding it to the DeviceManager as shown in the code examples below.

"},{"location":"java-application-development/how-to-use-gpio/#accessing-a-gpio-pin-by-its-index","title":"Accessing a GPIO Pin by its Index","text":"
#Accessing the GPIO Pin number 17. The default behaviour is defined in the\n#jdk.dio.properties file\n#\n#i.e.:\n# gpio.GPIOPin = initValue:0, deviceNumber:0, direction:3, mode:-1, trigger:3\n# 17 = deviceType: gpio.GPIOPin, pinNumber:17, name:GPIO_USER_1\n\nGPIOPin led = (GPIOPin)DeviceManager.open(17);\n\nled.setValue(true) //Turns the LED on\nled.setValue(false) //Turns the LED off\nboolean status = led.getValue() //true if the LED is on\n
"},{"location":"java-application-development/how-to-use-gpio/#accessing-a-gpio-pin-using-a-device-configuration-object","title":"Accessing a GPIO Pin Using a Device Configuration Object","text":"
#Accessing the Pin number 17 with custom configuration\n\nGPIOPinConfig pinConfig = new GPIOPinConfig(\n    DeviceConfig.DEFAULT,                       //GPIO Controller number or name\n    17,                                                 //GPIO Pin number\n    GPIOPinConfig.DIR_INPUT_ONLY,               //Pin direction\n    GPIOPinConfig.MODE_INPUT_PULL_DOWN,     //Pin resistor\n    GPIOPinConfig.TRIGGER_BOTH_EDGES,       //Triggers\n    false                                           //initial value (for outputs)\n);\n\nGPIOPin button = (GPIOPin) DeviceManager.open(GPIOPin.class, pinConfig);\n\nbutton.setInputListener(new PinListener(){\n        @Override\n        public void valueChanged(PinEvent event) {\n            System.out.println(\"PIN Status Changed!\");\n            System.out.println(event.getLastTimeStamp() + \" - \" + event.getValue());\n        }\n});\n
"},{"location":"java-application-development/how-to-use-modbus/","title":"How to Use Modbus","text":"

ModbusProtocolDevice is a service that provides a connection to a device or a network of devices over Serial Line (RS-232/RS-485) or Ethernet using the Modbus protocol. This service implements a subset of the Modbus Application Protocol as defined by Modbus Organization (for more information, refer to http://www.modbus.org/specs.php).

The ModbusProtocolDevice service needs to receive a valid Modbus configuration including the following parameters:

  • Modbus protocol mode - defines the protocol mode as RTU or ASCII (only RTU mode for Ethernet connections).

  • Timeout - sets the timeout in order to detect a disconnected device.

The ModbusProtocolDevice service also requires a valid Serial Line or Ethernet connection configuration including the following parameters:

  • Serial Line
  • port name
  • baudrate
  • bits
  • stops

  • parity

  • Ethernet

  • ip address
  • port number

When a valid configuration is received, the ModbusProtocolDevice service tries to open the communication port. Serial Line communication uses the CommConnection class; Ethernet communication is based on java.net.Socket. When the communication is established, the client makes direct calls to the Modbus functions. The first parameter of each method is the Modbus address of the queried unit. This address must be in the range of 1 - 247.

"},{"location":"java-application-development/how-to-use-modbus/#function-codes","title":"Function Codes","text":"

The following function codes are implemented within the ModbusProtocolDevice service:

  • 01 (0x01) readCoils(int unitAddr,\u00a0 int dataAddress, int count) - read 1 to 2000 maximum contiguous status of coils from the attached field device with address \"unitAddr\". An array of booleans representing the requested data points is returned.

  • 02 (0x02) readDiscreteInputs(int unitAddr,\u00a0 int dataAddress, int count) - read 1 to 2000 maximum contiguous status of discrete inputs from the attached field device with address \"unitAddr\". An array of booleans representing the requested data points is returned.

  • 03 (0x03) readHoldingRegisters(int unitAddr,\u00a0 int dataAddress, int count) - read contents of 1 to 125 maximum contiguous block of holding registers from the attached field device with address \"unitAddr\". An array of int representing the requested data points (data registers on 2 bytes) is returned.

  • 04 (0x04) readInputRegisters(int unitAddr,\u00a0 int dataAddress, int count) - read contents of 1 to 125 maximum contiguous block of input registers from the attached field device with address \"unitAddr\". An array of int representing the requested data points (data registers on 2 bytes) is returned.

  • 05 (0x05) writeSingleCoil(int unitAddr,\u00a0 int dataAddress, boolean data) - write a single output to either ON or OFF in the attached field device with address \"unitAddr\".

  • 06 (0x06) writeSingleRegister(int unitAddr,\u00a0 int dataAddress, int data) - write a single holding register in the attached field device with address \"unitAddr\".

  • 15 (0x0F) writeMultipleCoils(int unitAddr,\u00a0 int dataAddress, boolean[ ] data) - write multiple coils in a sequence of coils to either ON or OFF in the attached field device with address \"unitAddr\".

  • 16 (0x10) writeMultipleRegister(int unitAddr,\u00a0 int dataAddress, int[ ] data) - write a block of contiguous registers (1 to 123) in the attached field device with address \"unitAddr\".

All functions throw a ModbusProtocolException. Valid exceptions include:

  • INVALID_CONFIGURATION

  • NOT_AVAILABLE

  • NOT_CONNECTED

  • TRANSACTION_FAILURE

"},{"location":"java-application-development/how-to-use-modbus/#code-examples","title":"Code Examples","text":"

The ModbusProtocolDeviceService is an OSGi declarative service referenced in the client XML definition file: 

<reference bind=\"setModbusProtocolDeviceService\"\n       cardinality=\"1..1\"\n       interface=\"org.eclipse.kura.protocol.modbus.ModbusProtocolDeviceService\"\n       name=\"ModbusProtocolDeviceService\"\n       policy=\"static\"\n       unbind=\"unsetModbusProtocolDeviceService\"/>\n
public void setModbusProtocolDeviceService(ModbusProtocolDeviceService modbusService) {\n  this.m_protocolDevice = modbusService;\n}\n\npublic void unsetModbusProtocolDeviceService(ModbusProtocolDeviceService modbusService) {\n  this.m_protocolDevice = null;\n}\n
if(m_protocolDevice!=null){\n  m_protocolDevice.disconnect();\n  m_protocolDevice.configureConnection(modbusSerialProperties);\n}\n
If no exception occurs, the ModbusProtocolDevice can then be used to exchange data: 
boolean[] digitalInputs = m_protocolDevice.readDiscreteInputs(1, 2048, 8);\nint[] analogInputs = m_protocolDevice.readInputRegisters(1, 512, 8);\nboolean[] digitalOutputs = m_protocolDevice.readCoils(1, 2048, 6); // LEDS\n\n// to set LEDS\nm_protocolDevice.writeSingleCoil(1, 2047 + LED, On?TurnON:TurnOFF);\n

"},{"location":"java-application-development/how-to-use-watchdog/","title":"How to use watchdog","text":""},{"location":"java-application-development/how-to-use-watchdog/#overview","title":"Overview","text":"

When enabled, the watchdog is a peripheral monitor that will reboot the system if it is not refreshed during a certain time interval. In Kura, the WatchdogService can be used by critical applications. If the specified application is alive, the service notifies the watchdog; if the application is down, the service stops notifying the watchdog and a hardware reset occurs.

The WatchdogService notifies the kernel watchdog driver using the /dev/watchdog device file. You can verify that the watchdog driver is installed using the following command:

ls \u2013l /dev/watchdog\n
"},{"location":"java-application-development/how-to-use-watchdog/#configuration","title":"Configuration","text":"

To configure the WatchdogService, select the WatchdogService option located in the Services area as shown in the screen capture below.

The WatchdogService provides the following configuration parameters:

  • enabled - sets whether or not this service is enabled or disabled. If enabled, you must set a pingInterval periodicity compatible with the watchdog driver.

  • pingInterval - specifies the time between two watchdog notifications. This time is hardware dependent. Generally, the maximum time between two notifications should be between 30 seconds and 1 minute. 10000 milliseconds for the pingInterval is typically a good choice.

"},{"location":"java-application-development/how-to-use-watchdog/#code-example","title":"Code Example","text":"

The WatchdogService references a list of Critical Components that correspond to the applications implementing the CriticalComponent interface.

CriticalComponent is an interface that can be used to denote a component that is crucial to system operations. If a component implements CriticalComponent, then it must state its name as well as its criticalComponentTimeout. The name is a unique identifier in the system. The timeout is the length of time in milliseconds that the CriticalComponent must \"check in\" with the WatchdogService. If the CriticalComponent extends beyond the period of time specified in this timeout, a system reboot will be performed based on the WatchdogService configuration.

If at least one of the registered CriticalComponents has not \"checked in\" during the pingInterval time, the WatchdogService stops notifying the watchdog driver. The system reboots when the time interval reaches the hardware time that is programmed for the watchdog. When the WatchdogService is enabled and no application is using it, the service runs silently in the background.

An example of the WatchdogService can be found here.

The following code snippets demonstrate how to implement the CriticalComponent interface:

public class ModbusManager implements ConfigurableComponent, CriticalComponent, CloudClientListener\n

Registration of the class in WatchdogService::

if(m_watchdogService!=null){\n  m_watchdogService.registerCriticalComponent(this);\n}\n

Periodic call to checkin method of WatchdogService in the main loop (keeps watchdog notification alive):

if(m_watchdogService!=null){\n  m_watchdogService.checkin(this);\n}\n
"},{"location":"java-application-development/kura-workspace-setup/","title":"Kura Workspace Setup","text":"

This document describes how to set up the Eclipse Kura workspace development environment, which consists of the following components:

  • JVM (Java JDK SE 8)
  • Eclipse IDE
  • Eclipse Kura Workspace

This setup will allow you to develop applications or bundles running on Eclipse Kura. It will install only the APIs and the examples. If you want to contribute to the Eclipse Kura project follow this guide instead.

The Eclipse Kura development environment may be installed on Windows, Linux, or Mac OS. The setup instructions will be the same across each OS though each system may have unique characteristics.

Info

The local emulation of Eclipse Kura code is only supported in Linux and Mac, not in Windows.

"},{"location":"java-application-development/kura-workspace-setup/#jvm-installation","title":"JVM Installation","text":"

Download and install JDK SE 8 from the following links as appropriate for your OS.

For Windows and Linux users, the JDK can be downloaded from the following link: Java SE 8 Downloads. Use the latest version of the Java SE Development Kit and download the version appropriate for your system.

For additional information regarding the installation of Java 8 on all supported operating systems, see JDK 8 and JRE 8 Installation Guide.

"},{"location":"java-application-development/kura-workspace-setup/#installing-eclipse-ide","title":"Installing Eclipse IDE","text":"

Before installing Eclipse, you should choose directory locations for the Eclipse install and its workspaces.

Info

The following points should be kept in mind regarding Eclipse installs and workspaces:

  • The directory location of the Eclipse workspaces should be chosen carefully. Once Eclipse is installed and workspaces are created, they should never be moved to another location in the file system.
  • There may be multiple installs of Eclipse (of different or similar versions), and single instances of each install can be run simultaneously; but there should never be more that one instance of a specific install running at the same time (to avoid corruption to the Eclipse environment).
  • Each workspace should be used with only one Eclipse install. You should avoid opening the workspace from more than one installation of Eclipse.

Download the current distribution of Eclipse for your OS from Eclipse official website. Choose the Eclipse IDE for Eclipse Committers.

The zipped Eclipse file will be downloaded to the local file system and can be saved to a temporary location that can be deleted after Eclipse has been installed. After the file has been downloaded, it should be extracted to the Eclipse installs directory. The following screen capture shows the installation in Linux using an eclipse\\installs directory. The Eclipse executable will then be found in the eclipse\\installs\\eclipse directory. This installation will be different depending on the operating system.

Because there may potentially be future Eclipse installs extracted into this location, before doing anything else, rename the directory, such as eclipse\\installs\\juno1\\.

Warning

Once you begin using this Eclipse install, it should NOT be moved or renamed.

"},{"location":"java-application-development/kura-workspace-setup/#workspaces","title":"Workspaces","text":""},{"location":"java-application-development/kura-workspace-setup/#creating-an-eclipse-workspace","title":"Creating an Eclipse Workspace","text":"

Run Eclipse by clicking its executable in the install directory.

When Eclipse is run for the first time, a workspace needs to be created. A single workspace will contain all the Java code/projects/bundles, Eclipse configuration parameters, and other relevant files for a specific business-level product. If the Use this as the default option is selected, the designated workspace becomes the default each time you run Eclipse.

If a workspace has not already been defined, or if you are creating a different workspace for another development project, enter a new workspace name. The workspace should be named appropriate to the project/product being developed.

Warning

Once you begin using a particular workspace, it should NOT be moved or renamed at any time.

Otherwise, select an existing workspace and click OK. After Eclipse is running, you can select the Eclipse menu File | Switch Workspace | Other to create or open a different workspace.

After the new workspace opens, click the Workbench icon to display the development environment.

Info

Additional workspace configuration:

  • In the Eclipse workspace modify the lifecycle mapping by adding these XML lines to the lifecycle-mapping-metadata.xml in Eclipse Kura workspace. You can find the file in the Windows -> Preferences -> Maven -> Lifecycle Mappings -> Open workspace lifecycle mappings metadata. After editing the file, reload it by pressing the \"Reload workspace lifecycle mappings metadata\" button. 
    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<lifecycleMappingMetadata>\n    <lifecycleMappingFilters>\n        <lifecycleMappingFilter>\n            <symbolicName>org.eclipse.m2e.pde.connector</symbolicName>\n            <versionRange>[2.1.2,)</versionRange>\n            <packagingTypes>\n                <packagingType>eclipse-test-plugin</packagingType>\n                <packagingType>eclipse-plugin</packagingType>\n                <packagingType>eclipse-feature</packagingType>\n            </packagingTypes>\n        </lifecycleMappingFilter>\n    </lifecycleMappingFilters>\n</lifecycleMappingMetadata>\n
  • Install the eclipse-tycho plugin following this steps:
    1. Menu Help -> Install new software... -> Paste the m2eclipse-tycho repository URL in the Work with: text field -> expand the category and select the Tycho Project Configurators Feature and proceed with the installation.
    2. Then restart Eclipse.
"},{"location":"java-application-development/kura-workspace-setup/#importing-the-eclipse-kura-user-workspace","title":"Importing the Eclipse Kura User Workspace","text":"

To set up your Eclipse Kura project workspace, you will need to download the Eclipse Kura User Workspace archive from Eclipse Kura Download Page.

From the Eclipse File menu, select the Import option. In the Import dialog box, expand the General heading, select Existing Projects into Workspace, and then click Next.

Now click the Select archive file option button and browse to the archive file, such as user_workspace_archive_.zip.

Finally, click Finish to import the projects. At this point, you should have four projects in your workspace. The four projects are as follows:

  • org.eclipse.kura.api \u2013 the core Eclipse Kura API.

  • org.eclipse.kura.demo.heater \u2013 an example project that you can use as a starting point for creating your own bundle.

  • org.eclipse.kura.emulator \u2013 the emulator project for running Eclipse Kura within Eclipse (Linux/Mac only).

  • target-definition \u2013 a set of required bundles that are dependencies of the APIs and Eclipse Kura.

Eclipse will also report some errors at this point. See the next section to resolve those errors.

"},{"location":"java-application-development/kura-workspace-setup/#workspace-setup","title":"Workspace Setup","text":"

This section will guide the users to configure the development workspace environment.

"},{"location":"java-application-development/kura-workspace-setup/#jre-configuration","title":"JRE Configuration","text":"

The latest Eclipse IDEs require and configure, by default, a Java 11 environment. In order to be able to leverage and develop using the new workspace for Eclipse Kura, the user will be required to perform a one-time operation to specify to the IDE a Java 8 JDK. Opening the Eclipse preferences and selecting the Installed JREs in the Java section, the user has to select an installed Java 8 instance.

After applying the configuration change, the user will be prompted to align also the compiler options. To do so, selecting the Compiler entry in the Java section, the user has to select 1.8 from the list of available Java versions.

After applying the changes, the user will be prompted to recompile the environment.

"},{"location":"java-application-development/kura-workspace-setup/#target-definition-setup","title":"Target Definition Setup","text":"

Click the arrow next to the target-definition project in the workspace and double-click kura-equinox_.target to open it.

In the Target Definition window, click the link Set as Target Platform. Doing so will reset the target platform, rebuild the Eclipse Kura projects, and clear the errors that were reported. At this point, you are ready to begin developing Eclipse Kura-based applications for your target platform.

"},{"location":"java-application-development/kura-workspace-setup/#run-the-eclipse-kura-emulator","title":"Run the Eclipse Kura Emulator","text":"

To start the Eclipse Kura emulator, select the \"Eclipse Kura Emulator.launch\" profile from \"Other Projects\" -> \"setups\" -> \"launchers\" and open it with \"Run as\" -> \"Run Configurations...\". Then click on the \"Arguments\" tab and update the \"VM arguments\" as follows to adapt the paths to the folder structure created by the Oomph installer:

-Dkura.have.net.admin=false -Dorg.osgi.framework.storage=/tmp/osgi/framework_storage -Dosgi.clean=true -Dosgi.noShutdown=true -Declipse.ignoreApp=true -Dorg.eclipse.kura.mode=emulator -Dkura.configuration=file:${workspace_loc}/../git/kura/kura/emulator/org.eclipse.kura.emulator/src/main/resources/kura.properties -Ddpa.configuration=/tmp/kura/dpa.properties -Dlog4j.configurationFile=file:${workspace_loc}/../git/kura/kura/emulator/org.eclipse.kura.emulator/src/main/resources/log4j.xml -Dkura.data=${workspace_loc}/kura/data -Dkura.snapshots=${workspace_loc}/kura/user/snapshots -Dorg.eclipse.equinox.http.jetty.customizer.class=org.eclipse.kura.jetty.customizer.KuraJettyCustomizer\n

The Eclipse Kura Web UI will be available at the following URL: http://127.0.0.1:8080 with username and password admin.

"},{"location":"java-application-development/ram-usage-considerations/","title":"RAM Usage Considerations","text":"

During application development and before moving to production, it is advisable to understand if the amount of free RAM available on the device is enough for correct device operation.

Since RAM usage is application dependent, it is important to perform some stress tests to bring the device in the worst case conditions and verify system behavior.

Some of the aspects that should be taken into account are the following:

"},{"location":"java-application-development/ram-usage-considerations/#java-heap-memory-usage","title":"Java Heap memory usage","text":"

Java heap is used to store the Java objects and classes at runtime.

The heap should be:

  1. Large enough to satisfy the requirements of applications running inside Kura.
  2. Small enough so that the requirements of the system and applications running outside Kura are satisfied.

The size of the heap is controlled by the -Xms and -Xmx Java command line arguments. These parameters are defined in the /opt/eclipse/kura/bin/start_kura_debug.sh (for development mode) and /opt/eclipse/kura/bin/start_kura_background.sh (for production mode).

The -Xms parameter defines the initial size of Java heap and -Xmx defines the maximum size. The JVM will start using Xms as the size of the heap, and then it will grow the heap at runtime up to Xmx if needed, depending on application memory demand.

Resizing the heap has a cost in terms of performance, for this reason Xms and Xmx are set to the same size by default on most platforms.

In order to understand if the heap is large enough, it is advisable to perform a stress test simulating the conditions of maximum memory demand by the applications running inside Kura. For example, if a in-memory database instance is used by a DataService instance, during the test the database can be filled up to the maximum capacity to verify if this causes any issue.

Regarding point 2., it should be noted that heap memory is not necessarily backed by physical memory immediately after JVM startup. Even if the JVM performs an allocation of size Xmx immediately, physical memory will be assigned to the Java process by the kernel only when the memory pages are actually accessed by the JVM.

For this reason the amount of physical memory used by the JVM might appear small right after system boot and grow with time, up to the maximum size. This can happen even if the applications running inside Kura do not have high memory requirements, and can lead to potential issues that show up only after some time.

In order to recreate such issues, the -XX:+AlwaysPreTouch JVM command line option can be used during development to force the JVM to access all heap memory after start, causing the JVM process to use the maximum amount of physical memory immediately.

"},{"location":"java-application-development/ram-usage-considerations/#logging","title":"Logging","text":"

Another aspect that can lead to RAM related issues is logging. As a general rule, it is recommended to reduce the amount of log messages produced by Kura during normal operation.

Kura default logging configuration (/opt/eclipse/kura/log4j/log4j.xml) depends on the platform.

The size of the files in the /var/log directory will be checked periodically and the files will be rotated to the persisted /var/old_logs directory if needed.

"},{"location":"java-application-development/ram-usage-considerations/#external-application-ram-usage","title":"External application RAM usage","text":"

If external applications are installed on the system (e.g. Docker containers), their RAM usage should be analyzed as well.

Stress tests related to Java heap size, log size and external applications can be run simultaneously to simulate a worst case scenario.

"},{"location":"java-application-development/remote-debugging-on-target-platform/","title":"Remote debugging on target platform","text":"

Eclipse Kura can be started with Java Debug Wire Protocol (JDWP) support, allowing the remote debugging of the developed application using Eclipse IDE. The procedure for remote debugging is presented in the following.

  • Connect to the target platform (i.e. RaspberryPi) and stop the Kura application typing sudo systemctl stop kura or sudo /etc/init.d/kura stop.

  • Start Kura with Java Debug Wire Protocol (JDWP) typing sudo /opt/eclipse/kura/bin/start_kura_debug.sh. This will start Kura and open an OSGi console. It will also start listening for socket connections on port 8000.

Warning

Starting from Java 9, the JDWP socket connector accepts only local connections by default (see here for further details). To enable remote debugging on Java 9, the following line in /opt/eclipse/kura/bin/start_kura_debug.sh: -Xdebug -Xrunjdwp:server=y,transport=dt_socket,address=8000,suspend=n \\has to be replaced with the following one: -Xdebug -Xrunjdwp:server=y,transport=dt_socket,address=*:8000,suspend=n \\

  • Open the tcp port 8000 in the firewall. This can be done through the firewall tab in Kura web interface or using iptables.

  • Install your application bundle on the target platform.

  • From Eclipse IDE, set a breakpoint in the application code at a point that will be reached (i.e. activation method, common logging statement, etc.). Then:

  • Go to \"Run -> Debug Configurations\u2026\"
  • Select \u201cRemote Java Application\u201d and click the \u201cNew launch configuration\u201d button
  • For \u201cProject:\u201d, select the bundle project to be debugged
  • For \u201cConnection Type:\u201d, select the default \u201cStandard (Socket Attach)\u201d
  • For \u201cConnection Properties:\u201d, enter the IP address of the target platform and the tcp port 8000

  • Click Debug

  • Eclipse will connect to the target platform VM and switch to the Debug Perspective when the breakpoint will have been hit.

  • To stop the remote debugging, select the \u201cDisconnect\u201d button from the Debug Perspective.

"},{"location":"kura-wires/assets-as-wire-components/","title":"Assets as Wire Components","text":"

An Asset can be used inside a Wire Graph, in this case it is represented as node with two ports an input port and an output port. An Asset used in this way is called WireAsset.

"},{"location":"kura-wires/assets-as-wire-components/#read-mode","title":"Read mode","text":"

Every time a WireAsset receives an envelope on its input port, it will read the values of all of its channels with READ or READ_WRITE type. The result is emitted as a WireEnvelope with a single WireRecord. The WireRecord contains the following properties:

  • a property with key assetName, value type STRING and the emitting asset asset name as value
  • a property with key assetError, value type STRING if emit.errors and emit.connection.errors is enabled and a general connection failure is returned by the Driver. See the description of the emit.connection.errors parameter for more details.
  • a property with key assetTimestamp, value type LONG, reporting a timestamp in milliseconds since Unix epoch (midnight, January 1, 1970 UTC). This property may be present or not depending on the value of the timestamp.mode configuration parameter or in case of general connection exception reported by the Driver, see the configuration parameter description for more details.

For each channel in asset configuration with READ or READ_WRITE type named name:

  • a property with key = name, value type = value.type in channel configuration and value = value obtained from read operation. This property will be present only if the read operation is successful.
  • a property with key = <name>_timestamp value type = LONG reporting a timestamp in milliseconds since UNIX epoch. This property will be present only if the timestamp.mode Asset configuration property is set to PER_CHANNEL
  • a property with key = <name>_error, value type = STRING reporting an error message. This property will be present only if read operation fails and the emit.errors Asset configuration property is set to true.

For example, if an Asset that has the channel configuration shown in the picture below receives a WireEnvelope on its input port, it can emit an envelope with the following content, assuming that the read operation for each channel succeed:

  • WireEnvelope
    • WireRecord[0]
      • assetName: modbusAsset (type = STRING)
      • LED1: true (type = BOOLEAN)
      • LED1_timestamp: 1597925188 (type = LONG)
      • LED2: false (type = BOOLEAN)
      • LED2_timestamp: 1597925188 (type = LONG)
      • LED3: true (type = BOOLEAN)
      • LED3_timestamp: 1597925188 (type = LONG)
      • LED4-RED: false (type = BOOLEAN)
      • LED4-RED_timestamp: 1597925188 (type = LONG)
      • LED4-GREEN: false (type = BOOLEAN)
      • LED4-GREEN_timestamp: 1597925188 (type = LONG)
      • LED4-BLUE: true (type = BOOLEAN)
      • LED4-BLUE_timestamp: 1597925188 (type = LONG)
      • Toggle-4: true (type = BOOLEAN)
      • Toggle-4_timestamp: 1597925188 (type = LONG)
      • Toggle-5: false (type = BOOLEAN)
      • Toggle-5_timestamp: 1597925188 (type = LONG)
      • Toggle-6: true (type = BOOLEAN)
      • Toggle-6_timestamp: 1597925188 (type = LONG)
      • Counter-3: 123 (type = INTEGER)
      • Counter-3_timestamp: 1597925188 (type = LONG)
      • Quad-Counter: 11 (type = INTEGER)
      • Quad-Counter_timestamp: 1597925188 (type = LONG)
      • Reset-Counter3: false (type = BOOLEAN)
      • Reset-Counter3_timestamp: 1597925188 (type = LONG)
      • Reset-Quad-Counter: false (type = BOOLEAN)
      • Reset-Quad-Counter_timestamp: 1597925188 (type = LONG)

The emitted WireEnvelope contains a single record containing the properties described above.

The Logger WireComponent can be used to inspect the messages emitted on a specific output port of a WireComponent by creating a connection between the output port of the component to the input port of the Logger. In this case the content of the received envelopes will be printed on device log (/var/log/kura.log).

As mentioned above, the read operation is performed only if an envelope is received on the input port of the WireAsset. In order to achieve this, another component must be connected to the input port of the WireAsset.

An example of such component can be the Timer, this component can be configured to periodically emit an envelope containing a single wire record with a single property named TIMER reporting the current UNIX timestamp. Connecting this component to a WireAsset allows to implement a simple read polling cycle. The configuration of the timer defines the polling interval.

"},{"location":"kura-wires/assets-as-wire-components/#listen-mode","title":"Listen mode","text":"

Enabling the listen flag allows to enable unsolicited notifications from the driver.

When this happens, the Asset will emit an WireEnvelope containing the updated value for the channel involved in the event. The content of this envelope is the same as the one generated in case of a read operation on the channel.

For example if listen is ticked for LED1 and the driver above detects a value change in that channel, the Asset will emit the following envelope:

  • WireEnvelope
    • WireRecord[0]
      • assetName: modbusAsset (type = STRING)
      • LED1: false (type = BOOLEAN)
      • LED1_timestamp: 1597925200 (type = LONG)

This mode does not require to connect any component to the input port of the driver. The conditions that trigger the events for the channels and their meaning is reported in the Driver specific documentation.

Note: The example above is not completely realistic since the Modbus driver does not support listen mode. In this case ticking the listen flag will have no effect. The support for listen mode is mentioned in driver documentation.

Listen mode and Read mode are not mutually exclusive. If a channel is defined as READ or READ_WRITE and the listen flag is ticked, the driver will emit the channel value when a WireEnvelope is received on its input port or when a driver event is generated.

"},{"location":"kura-wires/assets-as-wire-components/#write-mode","title":"Write mode","text":"

Additionally, the Wire Graph can also be used to update asset values through write operations, according to the following rule.

Every time a WireAsset receives an envelope on its input port, for each property contained in the received WireRecords with key <key>, value type <value type> and value <value>, the driver will perform this operation: If a channel with name <key> is defined in asset configuration whose value.type is equal to <value type> and type is WRITE or READ_WRITE, then the Asset will write <value> to the channel.

For example if the Asset above receives the following envelope:

  • WireEnvelope
    • WireRecord[0]
      • LED1: false (type = BOOLEAN)
      • LED2: 78 (type = LONG)
      • Toggle-4: true (type = BOOLEAN)
      • foo: bar (type = STRING)

The following operations will happen:

  • Since the Asset configuration contains a channel named LED1, with value.type = BOOLEAN, and type = READ_WRITE, the driver will write false to that channel for the rule mentioned above.
  • The LED2: 78 property will have no effect, since the Asset configuration contains a channel named LED2 with type = READ_WRITE, but value.type = BOOLEAN != LONG.
  • The Toggle-4: true property will have no effect, since the asset contains a channel named Toggle-4, with value.type = BOOLEAN but type = READ != WRITE | READ_WRITE
  • The foo: bar property will have no effect, since none of the defined channels has foo as name.
  • The Asset will read and emit all of the channel values with type = READ or READ_WRITE, since a WireEnvelope has been received.
"},{"location":"kura-wires/assets-as-wire-components/#wire-asset-global-configuration-parameters","title":"Wire Asset global configuration parameters","text":"

The WireAsset component provides the following global (non per-channel) configuration parameters that can be used to customize component behavior:

  • emit.all.channels: Specifies whether the values of all READ or READ_WRITE channels should be emitted when a channel event is received in listen mode. If set to true, the values for all channels will be read and emitted, if set to false, only the value for the channel related to the event will be emitted.

  • timestamp.mode: Allows to configure how timestamps are emitted, the following modes are supported:

    • NO_TIMESTAMPS: no timestamp-related properties will be emitted.

    • PER_CHANNEL: the component will emit a driver-generated timestamp property per channel, as the value of the <channel name>_timestamp property.

    • SINGLE_ASSET_GENERATED: the component will emit a single timestamp per request, generated by the Asset itself before emitting the envelope as the value of the assetTimestamp property.

    • SINGLE_DRIVER_GENERATED_MAX and SINGLE_DRIVER_GENERATED_MIN: the component will emit a single driver generated timestamp being respectively the max (most recent) or min (oldest) among the timestamps of the channels as the value of the assetTimestamp property.

  • emit.errors: Specifies whether channel specific errors should be included or not in emitted envelopes. If enabled, the component will add an additional property per channel, named <channel_name>_error. If the channel operation fails, the property value will be an error message reported by the Driver, if the operation succeeds the property value will be the empty string.

  • emit.connection.errors: Specifies whether the component should emit an envelope in case of a general connection exception reported by the Driver (for example due to the fact that the connection with a remote device cannot be established). The error message associated with the exception will be emitted in a property named assetError. In case of connection exception, channel values are not available and no channel related properties will be emitted. If the timestamp.mode property is set to a value other than NO_TIMESTAMPS, the component will also emit a assetTimestamp property reporting current system time. This property will be ignored if emit.errors is disabled. Example of emitted envelope contents:

  • WireEnvelope

    • WireRecord[0]
      • assetName: myAsset (type = STRING)
      • assetError: Connection refused (type = STRING)
      • assetTimestamp: 1597925200 (type = LONG)

  • emit.on.change: If set to true, this component will include a channel value in the output emitted in Kura Wires only if it differs from the last emitted value for that channel. Channel errors will always be emitted if emit.errors is set to true. If as a result of a read operation no changes are detected in any referenced channel, the Asset will emit an envelope containing no channel values, unless emit.empty.envelopes is set to false.

  • emit.empty.envelopes: If set to false, this component will not emit empty envelopes.

"},{"location":"kura-wires/introduction/","title":"Introduction","text":"

The Wires feature aims to simplify the development of IoT Edge Computing Applications leveraging reusable configurable components that can be wired together and which, eventually, allows configurable cooperation between these components.

In the dataflow programming model, the application logic is expressed as a directed graph (flow) where each node can have inputs, outputs, and independent processing units. There are nodes that only produce outputs and ones that only consume inputs, which usually represent the start and the end of the flow. The inner-graph nodes process the inputs and produce outputs for downstream nodes. The processing unit of a node executes independently and does not affect the execution of other nodes. Thus, the nodes are highly reusable and portable.

In this way, the developer can easily prototype its solution without sacrificing flexibility and working at a high level of abstraction: the graph can be extended adding new nodes or drawing new connections. Furthermore, the developer can take advantage of the Eclipse Marketplace integration, being able to use open source or commercial building blocks into the final solution, by simply dragging and dropping a link to the Eclipse Marketplace in the Administrative Web UI.

"},{"location":"kura-wires/introduction/#data-model","title":"Data Model","text":"

The communication over a single graph edge (Wire) is message oriented, messages are called WireEnvelopes. Each WireEnvelope contains a list of WireRecords. Each WireRecord contains a set of key-value pairs, called properties, the property key is always a string and it is unique within the same record, the property value can have one of the following types:

  • BOOLEAN
  • BYTE_ARRAY
  • DOUBLE
  • INTEGER
  • LONG
  • FLOAT
  • STRING
"},{"location":"kura-wires/introduction/#wire-composer","title":"Wire Composer","text":"

The Wire Composer is the main source of interaction with the Wires framework. It is accessible by clicking on the Wires button under System.

The Wires page is composed by a central composer, where the graph can be actually designed, a lower part that is populated when a wire component is clicked and that allows to update the component configuration and a section in the right with the available Wire Components.

"},{"location":"kura-wires/introduction/#wire-components","title":"Wire Components","text":"

The following components are distributed with Kura:

  • Timer ticks every x seconds and starts the graph;
  • Publisher publishes every message received from a Wire (Wire Message). It is configurable in order to use a specific Cloud Service;
  • Subscriber subscribes to a configurable topic via a specific Cloud Service. It receives a message from a Cloud Platform, wraps it as a Wire Message and sends it through the connected wires to the other components that are part of the Wire Graph;
  • Wire Record Store allows the storage of Wire Messages into a specific stored collection. It has rules for message cleanup and retention;
  • Wire Record Query, allows the filtering of messages residing in a store via a specific query. The corresponding messages are sent as Wire Messages to the connected Wire Components;
  • Logger logs the received messages;
  • Asset \u200ballows the definition of Wire Channels that will be used to communicate with a field device through the associated Driver instance.
"},{"location":"kura-wires/introduction/#graph-download","title":"Graph Download","text":"

In the top left part of the Wires page the Download button allows to download the configuration of the graph and of all the components that are part of the graph.

This snapshot can be used to replicate the same configuration across all the fleet of devices.

To upload the stored graph, the user has to access the Settings page and in the Snapshots section click the Upload and Apply button.

Warning

The graph configuration will be actually merged with the one existing. Be careful to Delete the existing graph and apply, if you don't want to merge with the existing Wires configuration.

"},{"location":"kura-wires/wire-graph-service-configuration-format/","title":"WireGraphService Configuration Format","text":"

This document describes the configuration format for the WireGraphService component.

The WireGraphService configuration contains all the information related to the Wire Graph topology and rendering properties. The pid of the WireGraphService configuration is org.eclipse.kura.wire.graph.WireGraphService.

The WireGraphService configuration represents the current graph layout as a single string typed property named WireGraph that represents a serialized JSON representation of a WireGraph object.

"},{"location":"kura-wires/wire-graph-service-configuration-format/#json-definitions","title":"JSON definitions","text":""},{"location":"kura-wires/wire-graph-service-configuration-format/#position","title":"Position","text":"

An object representing a Wire Component position.

Properties:

  • x: number
  • optional If not specified, 0.0 will be used as default value The x coordinate of the Wire Component inside the graph canvas
  • y: number
  • optional If not specified, 0.0 will be used as default value The y coordinate of the Wire Component inside the graph canvas

{\n  \"x\": 40,\n  \"y\": 0\n}\n
{\n  \"x\": 1.5\n}\n
{}\n

"},{"location":"kura-wires/wire-graph-service-configuration-format/#portnamelist","title":"PortNameList","text":"

An object that specifies custom names for Wire Component input and output ports. The properties name for this object must be represented as an integer starting from 0, matching the index of the port whose name needs to be assigned. If the property name is not specified, the default port name will be used.

Properties:

  • _portIndex: string The name for the port of index _portIndex

{\n  \"0\": \"foo\",\n  \"1\": \"bar\"\n}\n
{}\n

"},{"location":"kura-wires/wire-graph-service-configuration-format/#renderingproperties","title":"RenderingProperties","text":"

An object describing some Wire Component rendering parameters like position and custom port names.

Properties:

  • position: object
  • optional If not specified the component coordinates will be set to 0.0.
    • Position
  • inputPortNames: object
  • optional If not specified, the default input port names will be used.
    • PortNameList
  • outputPortNames: object
  • optional If not specified, the default output port names will be used.
    • PortNameList

{\n  \"inputPortNames\": {},\n  \"outputPortNames\": {\n    \"0\": \"foo\",\n    \"1\": \"bar\"\n  },\n  \"position\": {\n    \"x\": 40,\n    \"y\": 0\n  }\n}\n
{\n  \"inputPortNames\": {},\n  \"outputPortNames\": {\n    \"0\": \"foo\",\n    \"1\": \"bar\"\n  }\n}\n
{\n  \"position\": {\n    \"x\": 40,\n    \"y\": 0\n  }\n}\n
{}\n

"},{"location":"kura-wires/wire-graph-service-configuration-format/#wirecomponent","title":"WireComponent","text":"

An object that describes a Wire Component that is part of a Wire Graph

Properties:

  • pid: string The Wire Component pid
  • inputPortCount: number An integer reporting the number of input ports of the Wire Component.
  • outputPortCount: number An integer reporting the number of output ports of the Wire Component.
  • renderingProperties: object
  • optional If not specified, the default rendering properties will be used
    • RenderingProperties

{\n  \"inputPortCount\": 1,\n  \"outputPortCount\": 2,\n  \"pid\": \"cond\",\n  \"renderingProperties\": {\n    \"inputPortNames\": {},\n    \"outputPortNames\": {\n      \"0\": \"foo\",\n      \"1\": \"bar\"\n    },\n    \"position\": {\n      \"x\": 40,\n      \"y\": 0\n    }\n  }\n}\n
{\n  \"inputPortCount\": 0,\n  \"outputPortCount\": 1,\n  \"pid\": \"timer\",\n  \"renderingProperties\": {\n    \"inputPortNames\": {},\n    \"outputPortNames\": {},\n    \"position\": {\n      \"x\": -220,\n      \"y\": -20\n    }\n  }\n}\n

"},{"location":"kura-wires/wire-graph-service-configuration-format/#wire","title":"Wire","text":"

An object that describes a Wire connecting two Wire Components.

Properties:

  • emitter: string The pid of the emitter component.
  • emitterPort: number The index of the output port of the emitter component that is connected to this Wire.
  • receiver: string The pid of the receiver component.
  • receiverPort: number The index of the input port of the receiver component that is connected to this Wire.
{\n  \"emitter\": \"timer\",\n  \"emitterPort\": 0,\n  \"receiver\": \"cond\",\n  \"receiverPort\": 0\n}\n
"},{"location":"kura-wires/wire-graph-service-configuration-format/#wiregraph","title":"WireGraph","text":"

An object that describes the topology and rendering properties of a Wire Graph

Properties:

  • components: array The list of the wire components contained in the Wire Graph
    • array elements: object
    • WireComponent
  • wires: array The list of Wires contained in the Wire Graph
    • array elements: object
    • Wire
{\n  \"components\": [\n    {\n      \"inputPortCount\": 0,\n      \"outputPortCount\": 1,\n      \"pid\": \"timer\",\n      \"renderingProperties\": {\n        \"inputPortNames\": {},\n        \"outputPortNames\": {},\n        \"position\": {\n          \"x\": -220,\n          \"y\": -20\n        }\n      }\n    },\n    {\n      \"inputPortCount\": 1,\n      \"outputPortCount\": 2,\n      \"pid\": \"cond\",\n      \"renderingProperties\": {\n        \"inputPortNames\": {},\n        \"outputPortNames\": {\n          \"0\": \"foo\",\n          \"1\": \"bar\"\n        },\n        \"position\": {\n          \"x\": 40,\n          \"y\": 0\n        }\n      }\n    }\n  ],\n  \"wires\": [\n    {\n      \"emitter\": \"timer\",\n      \"emitterPort\": 0,\n      \"receiver\": \"cond\",\n      \"receiverPort\": 0\n    }\n  ]\n}\n
"},{"location":"kura-wires/wire-service-references/","title":"References","text":"

Additional information about Wires is available at the following resources:

"},{"location":"kura-wires/wire-service-references/#dzone","title":"DZONE","text":"
  • Kura Wires Can Help Overcome Challenges of Industrial IoT.
  • Kura Wires: A Sneak Peek.
  • Kura Wires: A Different Perspective to Develop IIoT Applications.
  • Different Dataflow Programming Approaches and Comparison With Kura Wires.
"},{"location":"kura-wires/wire-service-references/#master-thesis","title":"Master Thesis","text":"
  • Kura Wires: Design and Development of a Component for managing Devices and Drivers in Eclipse Kura 2.0 by Amit Kumar Mondal.
"},{"location":"kura-wires/wire-service-references/#conferences-and-slides","title":"Conferences and slides","text":"
  • Building IoT Mashups for Industry 4.0 with Eclipse Kura and Kura Wires.
  • Industry 4.0 with Eclipse Kura.
"},{"location":"kura-wires/wire-service-references/#youtube","title":"Youtube","text":"
  • Kura Wires - A Mashup in Eclipse Kura for Industry 4.0.
  • Kura Wires: Industry 4.0 with Eclipse Kura - EclipseCon Europe 2016 IoT Day.
"},{"location":"kura-wires/wire-service-rest-v1/","title":"Wire Service V1 REST APIs and MQTT Request Handler","text":"

The WIRE-V1 cloud request handler and the corresponding REST APIs allow to update, delete and get the current Wire Graph status. The request handler also supports creating, updating and deleting Asset and Driver instances and retrieving the metadata required for supporting Wire Graph editing applications.

The GET/graph/shapshot and PUT/graph/snapshot requests use the same format as the Wire Graph snapshot functionality of the Kura Web UI.

A Wire Graph snapshot can be obtained by navigating to the Wires section of Kura Web UI, clicking the Download button and selecting the JSON format.

Accessing the REST APIs requires to use an identity with the rest.wires.admin permission assigned.

  • Wire Service V1 REST APIs and MQTT Request Handler
  • Request definitions
    • GET/graph/shapshot
    • PUT/graph/snapshot
    • DEL/graph
    • GET/drivers/pids
    • GET/assets/pids
    • GET/graph/topology
    • POST/configs/byPid
    • DEL/configs/byPid
    • PUT/configs
    • GET/metadata
    • GET/metadata/wireComponents/factoryPids
    • GET/metadata/wireComponents/definitions
    • POST/metadata/wireComponents/definitions/byFactoryPid
    • GET/metadata/drivers/factoryPids
    • GET/metadata/driver/ocds
    • POST/metadata/drivers/ocds/byFactoryPid
    • GET/metadata/drivers/channelDescriptors
    • POST/metadata/drivers/channelDescriptors/byPid
    • GET/metadata/assets/channelDescriptor
  • JSON definitions
    • WireComponentDefinition
    • DriverChannelDescriptor
    • WireGraphMetadata
  • Wire Graph snapshot example
"},{"location":"kura-wires/wire-service-rest-v1/#request-definitions","title":"Request definitions","text":""},{"location":"kura-wires/wire-service-rest-v1/#getgraphshapshot","title":"GET/graph/shapshot","text":"
  • REST API path : /services/wire/v1/graph/snapshot
  • description : Returns the current Wire Graph Configuration. The received configuration includes the WireGraphService configuration containing the graph layout, the configuration of the components currently referenced by the Wire Graph, and the configuration of the existing Driver instances.
  • responses :
    • 200
    • description : The current wire graph configuration.
    • response body :
      • ComponentConfigurationList
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#putgraphsnapshot","title":"PUT/graph/snapshot","text":"
  • REST API path : /services/wire/v1/graph/snapshot
  • description : Updates the current Wire Graph.
  • request body :
    • ComponentConfigurationList
  • responses :
    • 200
    • description : The current Wire Graph has been updated.
    • 400
    • description : The request body is not valid JSON or it contains invalid parameters.
    • response body :
      • GenericFailureReport
    • 500
    • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: updateGraph for the graph update operation, update:$pid or delete:$pid for update or delete operations performed on configurations not referenced by the Wire Graph, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

    • response body :

      Variants:

      • object
        • GenericFailureReport
      • object
        • BatchFailureReport

This request will replace the current graph topology with the received one. The received configuration must satisfy the following requirements. If any of the requirements is not met, the operation will fail and no changes will be applied to the system: * The configuration of the org.eclipse.kura.wire.graph.WireGraphService component must be specified. * The configuration of the org.eclipse.kura.wire.graph.WireGraphService component must contain a property named WireGraph of STRING type containing the graph layout as described in the WireGraphService document. * The inputPortCount and outputPortCount properties must be specified for all components in WireGraphService configuration. * The configuration of all components referenced by WireGraphService configuration that do not exist on target device must be specified. * The configuration of all components referenced by WireGraphService configuration that do not exist on target device must specify the service.factoryPid configuration property reporting the component factory pid.

If a component already exists on the system and its configuration is supplied as part of the request, the component configuration will be updated. In this case the usual configuration merge semantics will be applied, the set of received properties will be merged with the existing one. The properties in the request body will overwrite the existing ones with the same name.

WireAsset configurations are treated sligtly differently, an update to a WireAsset configuration is performed by deleting the existing component and creating a new instance with the received configuration. This behavior is necessary in order to allow channel removal.

It is also allowed to specify Driver or Asset configurations that are not referenced by the Wire Graph included in the request body.

"},{"location":"kura-wires/wire-service-rest-v1/#delgraph","title":"DEL/graph","text":"
  • REST API path : /services/wire/v1/graph
  • description : Deletes the current Wire Graph.
  • responses :
    • 200
    • description : The current wire graph has been deleted.
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#getdriverspids","title":"GET/drivers/pids","text":"
  • REST API path : /services/wire/v1/drivers/pids
  • description : Returns the list of existing Driver pids.
  • responses :
    • 200
    • description : The list of driver pids
    • response body :
      • PidAndFactoryPidSet
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#getassetspids","title":"GET/assets/pids","text":"
  • REST API path : /services/wire/v1/assets/pids
  • description : Returns the list of existing Asset pids. The returned pids may or may not be referenced by the current Wire Graph.
  • responses :
    • 200
    • description : The list of driver pids
    • response body :
      • PidAndFactoryPidSet
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#getgraphtopology","title":"GET/graph/topology","text":"
  • REST API path : /services/wire/v1/graph/topology
  • description : Returns the current Wire Graph topology as a WireGraph object. The returned object is the current value of the WireGraph property in Wire Graph Service configuration. This request allows to inspect the Wire Graph topology without downloading the entire Wire Graph snapshot with GET/graph/shapshot.
  • responses :
    • 200
    • description : The current wire graph topology.
    • response body :
      • WireGraph
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#postconfigsbypid","title":"POST/configs/byPid","text":"
  • REST API path : /services/wire/v1/configs/byPid
  • description : Returns the list of configurations referenced by the provided pids. This request can only be used to retrieve Wire Component, Driver or Asset configurations.
  • request body :
    • PidSet
  • responses :
    • 200
    • description : The returned configurations. If a configuration cannot be found, it will not be included in the response. The returned configuration list can be empty.
    • response body :
      • ComponentConfigurationList
    • 400
    • description : The request body is not valid JSON or it contains invalid parameters.
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#delconfigsbypid","title":"DEL/configs/byPid","text":"
  • REST API path : /services/wire/v1/configs/byPid
  • description : Deletes the configurations referenced by the provided pids. This request can only be used to delete Wire Component, Driver or Asset configurations. This request does not allow to delete configurations that are referenced by the current Wire Graph.
  • request body :
    • PidSet
  • responses :
    • 200
    • description : The request succeeded.
    • 400
    • description : The request body is not valid JSON or it contains invalid parameters. This status will be returned also if the request references pids that are currenly part of the Wire Graph, or components that are not Wire Components, Driver or Asset instances. If this status is retured, no changes will be applied to the system.
    • response body :
      • GenericFailureReport
    • 500
    • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: delete:$pid for delete operations, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

    • response body :

      Variants:

      • object
        • GenericFailureReport
      • object
        • BatchFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#putconfigs","title":"PUT/configs","text":"
  • REST API path : /services/wire/v1/configs
  • description : Updates or creates the provided configurations. This request can only be used to process Wire Component, Driver or Asset configurations. This request does not allow to create Wire Component configurations that are not referenced by the current Wire Graph, except from WireAsset instances. The component creation/update semantics are the same as PUT/graph/snapshot, this request can be used to perform configuration updates whithout knowing or specifying the Wire Graph topology.
  • request body :
    • ComponentConfigurationList
  • responses :
    • 200
    • description : The request succeeded
    • 400
    • description : The request body is not valid JSON or it contains invalid parameters. This status will be returned also if the request involves the creation of components that are not Wire Components, Driver or Asset instances, or the creation of Wire Components that are not referenced by the current Wire Graph. If this status is retured, no changes will be applied to the system.
    • response body :
      • GenericFailureReport
    • 500
    • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: update:$pid or delete:$pid for update or delete operations, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

    • response body :

      Variants:

      • object
        • GenericFailureReport
      • object
        • BatchFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#getmetadata","title":"GET/metadata","text":"
  • REST API path : /services/wire/v1/metadata
  • description : Returns all available Wire Component, Asset and Driver metadata in a single request.
  • responses :
    • 200
    • description : The request succeeded. Single fields in the response can be missing if the corresponding list is empty (e.g. driverDescriptors can be missing if no Driver instances exist on the system)
    • response body :
      • WireGraphMetadata
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#getmetadatawirecomponentsfactorypids","title":"GET/metadata/wireComponents/factoryPids","text":"
  • REST API path : /services/wire/v1/metadata/wireComponents/factoryPids
  • description : Return the list of available Wire Component factory pids
  • responses :
    • 200
    • description : The request succeeded.
    • response body :
      • PidSet
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#getmetadatawirecomponentsdefinitions","title":"GET/metadata/wireComponents/definitions","text":"
  • REST API path : /services/wire/v1/metadata/wireComponents/definitions
  • description : Returns all available Wire Component definitions
  • responses :
    • 200
    • description : The available Wire Component definitions. All fields except at most wireComponentDefinitions will be missing.
    • response body :
      • WireGraphMetadata
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#postmetadatawirecomponentsdefinitionsbyfactorypid","title":"POST/metadata/wireComponents/definitions/byFactoryPid","text":"
  • REST API path : /services/wire/v1/metadata/wireComponents/definitions/byFactoryPid
  • description : Returns the Wire Component definitions for the given set of factory pids
  • request body :
    • PidSet
  • responses :
    • 200
    • description : The available Wire Component definitions. All fields except at most wireComponentDefinitions will be missing. If the metadata for a given factoryPid is not found, the request will succeed and it will not be included in the list.
    • response body :
      • WireGraphMetadata
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#getmetadatadriversfactorypids","title":"GET/metadata/drivers/factoryPids","text":"
  • REST API path : /services/wire/v1/metadata/drivers/factoryPids
  • description : Return the list of available Driver factory pids
  • responses :
    • 200
    • description : The request succeeded.
    • response body :
      • PidSet
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#getmetadatadriverocds","title":"GET/metadata/driver/ocds","text":"
  • REST API path : /services/wire/v1/metadata/drivers/ocds
  • description : Returns all available Driver OCDs
  • responses :
    • 200
    • description : The available Driver OCDs. All fields except at most driverOCDs will be missing.
    • response body :
      • WireGraphMetadata
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#postmetadatadriversocdsbyfactorypid","title":"POST/metadata/drivers/ocds/byFactoryPid","text":"
  • REST API path : /services/wire/v1/metadata/drivers/ocds/byFactoryPid
  • description : Returns the Driver OCDSs for the given set of factory pids
  • request body :
    • PidSet
  • responses :
    • 200
    • description : The requested Driver OCDs. All fields except at most driverOCDs will be missing. If the metadata for a given factoryPid is not found, the request will succeed and it will not be included in the list.
    • response body :
      • WireGraphMetadata
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#getmetadatadriverschanneldescriptors","title":"GET/metadata/drivers/channelDescriptors","text":"
  • REST API path : /wire/v1/metadata/drivers/channelDescriptors
  • description : Returns the list of all available Driver channel descriptors
  • responses :
    • 200
    • description : The list of Driver channel descriptors. All fields except at most driverChannelDescriptors will be missing.
    • response body :
      • WireGraphMetadata
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#postmetadatadriverschanneldescriptorsbypid","title":"POST/metadata/drivers/channelDescriptors/byPid","text":"
  • REST API path : /services/wire/v1/metadata/drivers/channelDescriptors/byPid
  • description : Returns the Driver channel descriptors for the given set of pids
  • request body :
    • PidSet
  • responses :
    • 200
    • description : The requested Driver channel descriptors. All fields except at most driverChannelDescriptors will be missing. If the metadata for a given pid is not found, the request will succeed and it will not be included in the list.
    • response body :
      • WireGraphMetadata
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#getmetadataassetschanneldescriptor","title":"GET/metadata/assets/channelDescriptor","text":"
  • REST API path : /wire/v1/metadata/assets/channelDescriptor
  • description : Returns the Asset channel descriptor
  • responses :
    • 200
    • description : The Asset channel descriptors. All fields except assetChannelDescriptor will be missing.
    • response body :
      • WireGraphMetadata
    • 500
    • description : An unexpected internal error occurred.
    • response body :
      • GenericFailureReport
"},{"location":"kura-wires/wire-service-rest-v1/#json-definitions","title":"JSON definitions","text":""},{"location":"kura-wires/wire-service-rest-v1/#wirecomponentdefinition","title":"WireComponentDefinition","text":"

A Wire Component definition object

Properties:

  • factoryPid: string The component factory pid
  • minInputPorts: number The minimum input port count
  • maxInputPorts: number The maximum number of input ports
  • defaultInputPorts: number The default number of input ports
  • minOutputPorts: number The minimum number of output ports
  • maxOutputPorts: number The maximum number of output ports
  • defaultOutputPorts: number The default number of output ports
  • inputPortNames: object
  • optional If no custom input port names are defined
    • PortNameList
  • outputPortNames: object
  • optional If no custom output port names are defined
    • PortNameList
  • componentOcd: array
  • optional If the component OCD is empty The component OCD
    • array elements: object
    • AttributeDefinition
{\n  \"componentOCD\": [\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"50\",\n      \"description\": \"The maximum number of envelopes that can be stored in the queue of this FIFO component\",\n      \"id\": \"queue.capacity\",\n      \"isRequired\": true,\n      \"name\": \"queue.capacity\",\n      \"type\": \"INTEGER\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"false\",\n      \"description\": \"Defines the behavior in case of full queue: if set to true new envelopes will be dropped,              otherwise, if an emitter delivers an envelope to this component it will block until the envelope can be successfully enqueued.\",\n      \"id\": \"discard.envelopes\",\n      \"isRequired\": true,\n      \"name\": \"discard.envelopes\",\n      \"type\": \"BOOLEAN\"\n    }\n  ],\n  \"defaultInputPorts\": 1,\n  \"defaultOutputPorts\": 1,\n  \"factoryPid\": \"org.eclipse.kura.wire.Fifo\",\n  \"maxInputPorts\": 1,\n  \"maxOutputPorts\": 1,\n  \"minInputPorts\": 1,\n  \"minOutputPorts\": 1\n}\n
"},{"location":"kura-wires/wire-service-rest-v1/#driverchanneldescriptor","title":"DriverChannelDescriptor","text":"

An object that describes Driver specific channel configuration properties

Properties:

  • pid: string The Driver pid
  • factoryPid: string The Driver factory pid
  • channelDescriptor: array
  • optional If the driver does not define any channel property The list of Driver specific channel configuration properties
    • array elements: object
    • AttributeDefinition
{\n  \"channelDescriptor\": [\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"AA:BB:CC:DD:EE:FF\",\n      \"description\": \"sensortag.address\",\n      \"id\": \"sensortag.address\",\n      \"isRequired\": true,\n      \"name\": \"sensortag.address\",\n      \"type\": \"STRING\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"TEMP_AMBIENT\",\n      \"description\": \"sensor.name\",\n      \"id\": \"sensor.name\",\n      \"isRequired\": true,\n      \"name\": \"sensor.name\",\n      \"option\": [\n        {\n          \"label\": \"TEMP_AMBIENT\",\n          \"value\": \"TEMP_AMBIENT\"\n        },\n        {\n          \"label\": \"TEMP_TARGET\",\n          \"value\": \"TEMP_TARGET\"\n        },\n        {\n          \"label\": \"HUMIDITY\",\n          \"value\": \"HUMIDITY\"\n        },\n        {\n          \"label\": \"ACCELERATION_X\",\n          \"value\": \"ACCELERATION_X\"\n        },\n        {\n          \"label\": \"ACCELERATION_Y\",\n          \"value\": \"ACCELERATION_Y\"\n        },\n        {\n          \"label\": \"ACCELERATION_Z\",\n          \"value\": \"ACCELERATION_Z\"\n        },\n        {\n          \"label\": \"MAGNETIC_X\",\n          \"value\": \"MAGNETIC_X\"\n        },\n        {\n          \"label\": \"MAGNETIC_Y\",\n          \"value\": \"MAGNETIC_Y\"\n        },\n        {\n          \"label\": \"MAGNETIC_Z\",\n          \"value\": \"MAGNETIC_Z\"\n        },\n        {\n          \"label\": \"GYROSCOPE_X\",\n          \"value\": \"GYROSCOPE_X\"\n        },\n        {\n          \"label\": \"GYROSCOPE_Y\",\n          \"value\": \"GYROSCOPE_Y\"\n        },\n        {\n          \"label\": \"GYROSCOPE_Z\",\n          \"value\": \"GYROSCOPE_Z\"\n        },\n        {\n          \"label\": \"LIGHT\",\n          \"value\": \"LIGHT\"\n        },\n        {\n          \"label\": \"PRESSURE\",\n          \"value\": \"PRESSURE\"\n        },\n        {\n          \"label\": \"GREEN_LED\",\n          \"value\": \"GREEN_LED\"\n        },\n        {\n          \"label\": \"RED_LED\",\n          \"value\": \"RED_LED\"\n        },\n        {\n          \"label\": \"BUZZER\",\n          \"value\": \"BUZZER\"\n        },\n        {\n          \"label\": \"KEYS\",\n          \"value\": \"KEYS\"\n        }\n      ],\n      \"type\": \"STRING\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"1000\",\n      \"description\": \"notification.period\",\n      \"id\": \"notification.period\",\n      \"isRequired\": true,\n      \"name\": \"notification.period\",\n      \"type\": \"INTEGER\"\n    }\n  ],\n  \"factoryPid\": \"org.eclipse.kura.driver.ble.sensortag\",\n  \"pid\": \"sensortag\"\n}\n
"},{"location":"kura-wires/wire-service-rest-v1/#wiregraphmetadata","title":"WireGraphMetadata","text":"

An object contiaining metatada describing Wire Components, Drivers and Assets

Properties:

  • wireComponentDefinitions: array
  • optional See request specific documentation The list of Wire Component definitions
    • array elements: object
    • WireComponentDefinition
  • driverOCDs: array
  • optional See request specific documentation The list of Driver factory component OCDs
    • array elements: object
    • ComponentConfiguration
  • driverChannelDescriptors: array
  • optional See request specific documentation The list of Driver channel descriptors
    • array elements: object
    • DriverChannelDescriptor
  • assetChannelDescriptor: array
  • optional See request specific documentation The list of Asset specific channel configuration properties
    • array elements: object
    • AttributeDefinition
{\n  \"assetChannelDescriptor\": [\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"true\",\n      \"description\": \"Determines if the channel is enabled or not\",\n      \"id\": \"+enabled\",\n      \"isRequired\": true,\n      \"name\": \"enabled\",\n      \"type\": \"BOOLEAN\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"Channel-1\",\n      \"description\": \"Name of the Channel\",\n      \"id\": \"+name\",\n      \"isRequired\": true,\n      \"name\": \"name\",\n      \"type\": \"STRING\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"READ\",\n      \"description\": \"Type of the channel\",\n      \"id\": \"+type\",\n      \"isRequired\": true,\n      \"name\": \"type\",\n      \"option\": [\n        {\n          \"label\": \"READ\",\n          \"value\": \"READ\"\n        },\n        {\n          \"label\": \"READ_WRITE\",\n          \"value\": \"READ_WRITE\"\n        },\n        {\n          \"label\": \"WRITE\",\n          \"value\": \"WRITE\"\n        }\n      ],\n      \"type\": \"STRING\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"INTEGER\",\n      \"description\": \"Value type of the channel\",\n      \"id\": \"+value.type\",\n      \"isRequired\": true,\n      \"name\": \"value.type\",\n      \"option\": [\n        {\n          \"label\": \"BOOLEAN\",\n          \"value\": \"BOOLEAN\"\n        },\n        {\n          \"label\": \"BYTE_ARRAY\",\n          \"value\": \"BYTE_ARRAY\"\n        },\n        {\n          \"label\": \"DOUBLE\",\n          \"value\": \"DOUBLE\"\n        },\n        {\n          \"label\": \"INTEGER\",\n          \"value\": \"INTEGER\"\n        },\n        {\n          \"label\": \"LONG\",\n          \"value\": \"LONG\"\n        },\n        {\n          \"label\": \"FLOAT\",\n          \"value\": \"FLOAT\"\n        },\n        {\n          \"label\": \"STRING\",\n          \"value\": \"STRING\"\n        }\n      ],\n      \"type\": \"STRING\"\n    },\n    {\n      \"cardinality\": 0,\n      \"description\": \"Scale to be applied to the numeric value of the channel\",\n      \"id\": \"+scale\",\n      \"isRequired\": false,\n      \"name\": \"scale\",\n      \"type\": \"DOUBLE\"\n    },\n    {\n      \"cardinality\": 0,\n      \"description\": \"Offset to be applied to the numeric value of the channel\",\n      \"id\": \"+offset\",\n      \"isRequired\": false,\n      \"name\": \"offset\",\n      \"type\": \"DOUBLE\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"\",\n      \"description\": \"Unit associated to the value of the channel\",\n      \"id\": \"+unit\",\n      \"isRequired\": false,\n      \"name\": \"unit\",\n      \"type\": \"STRING\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"false\",\n      \"description\": \"Specifies if WireAsset should emit envelopes on Channel events\",\n      \"id\": \"+listen\",\n      \"isRequired\": true,\n      \"name\": \"listen\",\n      \"type\": \"BOOLEAN\"\n    }\n  ],\n  \"driverChannelDescriptors\": [\n    {\n      \"channelDescriptor\": [\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"MyNode\",\n          \"description\": \"node.id\",\n          \"id\": \"node.id\",\n          \"isRequired\": true,\n          \"name\": \"node.id\",\n          \"type\": \"STRING\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"2\",\n          \"description\": \"node.namespace.index\",\n          \"id\": \"node.namespace.index\",\n          \"isRequired\": true,\n          \"name\": \"node.namespace.index\",\n          \"type\": \"INTEGER\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"DEFINED_BY_JAVA_TYPE\",\n          \"description\": \"opcua.type\",\n          \"id\": \"opcua.type\",\n          \"isRequired\": true,\n          \"name\": \"opcua.type\",\n          \"option\": [\n            {\n              \"label\": \"DEFINED_BY_JAVA_TYPE\",\n              \"value\": \"DEFINED_BY_JAVA_TYPE\"\n            },\n            {\n              \"label\": \"BOOLEAN\",\n              \"value\": \"BOOLEAN\"\n            },\n            {\n              \"label\": \"SBYTE\",\n              \"value\": \"SBYTE\"\n            },\n            {\n              \"label\": \"INT16\",\n              \"value\": \"INT16\"\n            },\n            {\n              \"label\": \"INT32\",\n              \"value\": \"INT32\"\n            },\n            {\n              \"label\": \"INT64\",\n              \"value\": \"INT64\"\n            },\n            {\n              \"label\": \"BYTE\",\n              \"value\": \"BYTE\"\n            },\n            {\n              \"label\": \"UINT16\",\n              \"value\": \"UINT16\"\n            },\n            {\n              \"label\": \"UINT32\",\n              \"value\": \"UINT32\"\n            },\n            {\n              \"label\": \"UINT64\",\n              \"value\": \"UINT64\"\n            },\n            {\n              \"label\": \"FLOAT\",\n              \"value\": \"FLOAT\"\n            },\n            {\n              \"label\": \"DOUBLE\",\n              \"value\": \"DOUBLE\"\n            },\n            {\n              \"label\": \"STRING\",\n              \"value\": \"STRING\"\n            },\n            {\n              \"label\": \"BYTE_STRING\",\n              \"value\": \"BYTE_STRING\"\n            },\n            {\n              \"label\": \"BYTE_ARRAY\",\n              \"value\": \"BYTE_ARRAY\"\n            },\n            {\n              \"label\": \"SBYTE_ARRAY\",\n              \"value\": \"SBYTE_ARRAY\"\n            }\n          ],\n          \"type\": \"STRING\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"STRING\",\n          \"description\": \"node.id.type\",\n          \"id\": \"node.id.type\",\n          \"isRequired\": true,\n          \"name\": \"node.id.type\",\n          \"option\": [\n            {\n              \"label\": \"NUMERIC\",\n              \"value\": \"NUMERIC\"\n            },\n            {\n              \"label\": \"STRING\",\n              \"value\": \"STRING\"\n            },\n            {\n              \"label\": \"GUID\",\n              \"value\": \"GUID\"\n            },\n            {\n              \"label\": \"OPAQUE\",\n              \"value\": \"OPAQUE\"\n            }\n          ],\n          \"type\": \"STRING\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"Value\",\n          \"description\": \"attribute\",\n          \"id\": \"attribute\",\n          \"isRequired\": true,\n          \"name\": \"attribute\",\n          \"option\": [\n            {\n              \"label\": \"NodeId\",\n              \"value\": \"NodeId\"\n            },\n            {\n              \"label\": \"NodeClass\",\n              \"value\": \"NodeClass\"\n            },\n            {\n              \"label\": \"BrowseName\",\n              \"value\": \"BrowseName\"\n            },\n            {\n              \"label\": \"DisplayName\",\n              \"value\": \"DisplayName\"\n            },\n            {\n              \"label\": \"Description\",\n              \"value\": \"Description\"\n            },\n            {\n              \"label\": \"WriteMask\",\n              \"value\": \"WriteMask\"\n            },\n            {\n              \"label\": \"UserWriteMask\",\n              \"value\": \"UserWriteMask\"\n            },\n            {\n              \"label\": \"IsAbstract\",\n              \"value\": \"IsAbstract\"\n            },\n            {\n              \"label\": \"Symmetric\",\n              \"value\": \"Symmetric\"\n            },\n            {\n              \"label\": \"InverseName\",\n              \"value\": \"InverseName\"\n            },\n            {\n              \"label\": \"ContainsNoLoops\",\n              \"value\": \"ContainsNoLoops\"\n            },\n            {\n              \"label\": \"EventNotifier\",\n              \"value\": \"EventNotifier\"\n            },\n            {\n              \"label\": \"Value\",\n              \"value\": \"Value\"\n            },\n            {\n              \"label\": \"DataType\",\n              \"value\": \"DataType\"\n            },\n            {\n              \"label\": \"ValueRank\",\n              \"value\": \"ValueRank\"\n            },\n            {\n              \"label\": \"ArrayDimensions\",\n              \"value\": \"ArrayDimensions\"\n            },\n            {\n              \"label\": \"AccessLevel\",\n              \"value\": \"AccessLevel\"\n            },\n            {\n              \"label\": \"UserAccessLevel\",\n              \"value\": \"UserAccessLevel\"\n            },\n            {\n              \"label\": \"MinimumSamplingInterval\",\n              \"value\": \"MinimumSamplingInterval\"\n            },\n            {\n              \"label\": \"Historizing\",\n              \"value\": \"Historizing\"\n            },\n            {\n              \"label\": \"Executable\",\n              \"value\": \"Executable\"\n            },\n            {\n              \"label\": \"UserExecutable\",\n              \"value\": \"UserExecutable\"\n            }\n          ],\n          \"type\": \"STRING\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"1000\",\n          \"description\": \"listen.sampling.interval\",\n          \"id\": \"listen.sampling.interval\",\n          \"isRequired\": true,\n          \"name\": \"listen.sampling.interval\",\n          \"type\": \"DOUBLE\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"10\",\n          \"description\": \"listen.queue.size\",\n          \"id\": \"listen.queue.size\",\n          \"isRequired\": true,\n          \"name\": \"listen.queue.size\",\n          \"type\": \"LONG\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"true\",\n          \"description\": \"listen.discard.oldest\",\n          \"id\": \"listen.discard.oldest\",\n          \"isRequired\": true,\n          \"name\": \"listen.discard.oldest\",\n          \"type\": \"BOOLEAN\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"false\",\n          \"description\": \"listen.subscribe.to.children\",\n          \"id\": \"listen.subscribe.to.children\",\n          \"isRequired\": true,\n          \"name\": \"listen.subscribe.to.children\",\n          \"type\": \"BOOLEAN\"\n        }\n      ],\n      \"factoryPid\": \"org.eclipse.kura.driver.opcua\",\n      \"pid\": \"opcuaDriver\"\n    }\n  ],\n  \"driverOCDs\": [\n    {\n      \"definition\": {\n        \"ad\": [\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"default-server\",\n            \"description\": \"OPC-UA Endpoint IP Address\",\n            \"id\": \"endpoint.ip\",\n            \"isRequired\": true,\n            \"name\": \"Endpoint IP\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"53530\",\n            \"description\": \"OPC-UA Endpoint Port\",\n            \"id\": \"endpoint.port\",\n            \"isRequired\": true,\n            \"min\": \"1\",\n            \"name\": \"Endpoint port\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"OPC-UA-Server\",\n            \"description\": \"OPC-UA Server Name\",\n            \"id\": \"server.name\",\n            \"isRequired\": false,\n            \"name\": \"Server Name\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"false\",\n            \"description\": \"If set to true the driver will use the hostname, port, and server name parameters specified in the configuration instead of the values contained in endpoint descriptions fetched from the server.\",\n            \"id\": \"force.endpoint.url\",\n            \"isRequired\": false,\n            \"name\": \"Force endpoint URL\",\n            \"type\": \"BOOLEAN\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"120\",\n            \"description\": \"Session timeout (in seconds)\",\n            \"id\": \"session.timeout\",\n            \"isRequired\": true,\n            \"name\": \"Session timeout\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"60\",\n            \"description\": \"Request timeout (in seconds)\",\n            \"id\": \"request.timeout\",\n            \"isRequired\": true,\n            \"name\": \"Request timeout\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"40\",\n            \"description\": \"The time to wait for the server response to the 'Hello' message (in seconds)\",\n            \"id\": \"acknowledge.timeout\",\n            \"isRequired\": true,\n            \"name\": \"Acknowledge timeout\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"opc-ua client\",\n            \"description\": \"OPC-UA application name\",\n            \"id\": \"application.name\",\n            \"isRequired\": true,\n            \"name\": \"Application name\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"urn:kura:opcua:client\",\n            \"description\": \"OPC-UA application uri\",\n            \"id\": \"application.uri\",\n            \"isRequired\": true,\n            \"name\": \"Application URI\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"1000\",\n            \"description\": \"The publish interval in milliseconds for the subscription created by the driver.\",\n            \"id\": \"subscription.publish.interval\",\n            \"isRequired\": true,\n            \"name\": \"Subscription publish interval\",\n            \"type\": \"LONG\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"PFX or JKS Keystore\",\n            \"description\": \"Absolute path of the PKCS or JKS keystore that contains the OPC-UA client certificate, private key and trusted server certificates\",\n            \"id\": \"certificate.location\",\n            \"isRequired\": true,\n            \"name\": \"Keystore path\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"0\",\n            \"description\": \"Security Policy\",\n            \"id\": \"security.policy\",\n            \"isRequired\": true,\n            \"name\": \"Security policy\",\n            \"option\": [\n              {\n                \"label\": \"None\",\n                \"value\": \"0\"\n              },\n              {\n                \"label\": \"Basic128Rsa15\",\n                \"value\": \"1\"\n              },\n              {\n                \"label\": \"Basic256\",\n                \"value\": \"2\"\n              },\n              {\n                \"label\": \"Basic256Sha256\",\n                \"value\": \"3\"\n              }\n            ],\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"cardinality\": 0,\n            \"description\": \"OPC-UA server username\",\n            \"id\": \"username\",\n            \"isRequired\": false,\n            \"name\": \"Username\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"description\": \"OPC-UA server password\",\n            \"id\": \"password\",\n            \"isRequired\": false,\n            \"name\": \"Password\",\n            \"type\": \"PASSWORD\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"client-ai\",\n            \"description\": \"Alias for the client certificate in the keystore\",\n            \"id\": \"keystore.client.alias\",\n            \"isRequired\": true,\n            \"name\": \"Client certificate alias\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"false\",\n            \"description\": \"Specifies whether to enable or not server certificate verification\",\n            \"id\": \"authenticate.server\",\n            \"isRequired\": true,\n            \"name\": \"Enable server authentication\",\n            \"type\": \"BOOLEAN\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"PKCS12\",\n            \"description\": \"Keystore type\",\n            \"id\": \"keystore.type\",\n            \"isRequired\": true,\n            \"name\": \"Keystore type\",\n            \"option\": [\n              {\n                \"label\": \"PKCS11\",\n                \"value\": \"PKCS11\"\n              },\n              {\n                \"label\": \"PKCS12\",\n                \"value\": \"PKCS12\"\n              },\n              {\n                \"label\": \"JKS\",\n                \"value\": \"JKS\"\n              }\n            ],\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"password\",\n            \"description\": \"Configurable Property to set keystore password (default set to password)\",\n            \"id\": \"keystore.password\",\n            \"isRequired\": true,\n            \"name\": \"Keystore password\",\n            \"type\": \"PASSWORD\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"200\",\n            \"description\": \"Maximum number of items that will be included in a single request to the server.\",\n            \"id\": \"max.request.items\",\n            \"isRequired\": true,\n            \"name\": \"Max request items\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"BROWSE_PATH\",\n            \"description\": \"The format to be used for channel name for subtree subscriptions.     If set to BROWSE_PATH, the channel name will contain the browse path of the source node relative to the subscription root.     If set to NODE_ID, the name will contain the node id of the source node.\",\n            \"id\": \"subtree.subscription.name.format\",\n            \"isRequired\": true,\n            \"name\": \"Subtree subscription events channel name format\",\n            \"option\": [\n              {\n                \"label\": \"BROWSE_PATH\",\n                \"value\": \"BROWSE_PATH\"\n              },\n              {\n                \"label\": \"NODE_ID\",\n                \"value\": \"NODE_ID\"\n              }\n            ],\n            \"type\": \"STRING\"\n          }\n        ],\n        \"description\": \"OPC-UA Driver\",\n        \"id\": \"org.eclipse.kura.driver.opcua\",\n        \"name\": \"OpcUaDriver\"\n      },\n      \"pid\": \"org.eclipse.kura.driver.opcua\"\n    }\n  ],\n  \"wireComponentDefinitions\": [\n    {\n      \"componentOCD\": [\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"records[0].TIMER !== null && records[0].TIMER.getValue() > 10 && records[0]['TIMER'].getValue() < 30;\\n\",\n          \"description\": \"The boolean expression to be evaluated by this component when a wire envelope is              received.\",\n          \"id\": \"condition\",\n          \"isRequired\": true,\n          \"name\": \"condition\",\n          \"type\": \"STRING\"\n        }\n      ],\n      \"defaultInputPorts\": 1,\n      \"defaultOutputPorts\": 2,\n      \"factoryPid\": \"org.eclipse.kura.wire.Conditional\",\n      \"inputPortNames\": {\n        \"0\": \"if\"\n      },\n      \"maxInputPorts\": 1,\n      \"maxOutputPorts\": 2,\n      \"minInputPorts\": 1,\n      \"minOutputPorts\": 2,\n      \"outputPortNames\": {\n        \"0\": \"then\",\n        \"1\": \"else\"\n      }\n    }\n  ]\n}\n
"},{"location":"kura-wires/wire-service-rest-v1/#wire-graph-snapshot-example","title":"Wire Graph snapshot example","text":"
{\n  \"configs\": [\n    {\n      \"pid\": \"org.eclipse.kura.wire.graph.WireGraphService\",\n      \"properties\": {\n        \"WireGraph\": {\n          \"type\": \"STRING\",\n          \"value\": \"{\\\"components\\\":[{\\\"pid\\\":\\\"timer\\\",\\\"inputPortCount\\\":0,\\\"outputPortCount\\\":1,\\\"renderingProperties\\\":{\\\"position\\\":{\\\"x\\\":-300,\\\"y\\\":-20},\\\"inputPortNames\\\":{},\\\"outputPortNames\\\":{}}},{\\\"pid\\\":\\\"logger\\\",\\\"inputPortCount\\\":1,\\\"outputPortCount\\\":0,\\\"renderingProperties\\\":{\\\"position\\\":{\\\"x\\\":-100,\\\"y\\\":-20},\\\"inputPortNames\\\":{},\\\"outputPortNames\\\":{}}}],\\\"wires\\\":[{\\\"emitter\\\":\\\"timer\\\",\\\"emitterPort\\\":0,\\\"receiver\\\":\\\"logger\\\",\\\"receiverPort\\\":0}]}\"\n        }\n      }\n    },\n    {\n      \"pid\": \"timer\",\n      \"properties\": {\n        \"componentDescription\": {\n          \"type\": \"STRING\",\n          \"value\": \"A wire component that fires a ticking event on every configured interval\"\n        },\n        \"componentId\": {\n          \"type\": \"STRING\",\n          \"value\": \"timer\"\n        },\n        \"componentName\": {\n          \"type\": \"STRING\",\n          \"value\": \"Timer\"\n        },\n        \"cron.interval\": {\n          \"type\": \"STRING\",\n          \"value\": \"0/10 * * * * ?\"\n        },\n        \"emitter.port.count\": {\n          \"type\": \"INTEGER\",\n          \"value\": 1\n        },\n        \"factoryComponent\": {\n          \"type\": \"BOOLEAN\",\n          \"value\": false\n        },\n        \"factoryPid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.wire.Timer\"\n        },\n        \"kura.service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"timer\"\n        },\n        \"receiver.port.count\": {\n          \"type\": \"INTEGER\",\n          \"value\": 0\n        },\n        \"service.factoryPid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.wire.Timer\"\n        },\n        \"service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.wire.Timer-1642493602000-13\"\n        },\n        \"simple.custom.first.tick.interval\": {\n          \"type\": \"INTEGER\",\n          \"value\": 0\n        },\n        \"simple.first.tick.policy\": {\n          \"type\": \"STRING\",\n          \"value\": \"DEFAULT\"\n        },\n        \"simple.interval\": {\n          \"type\": \"INTEGER\",\n          \"value\": 10\n        },\n        \"simple.time.unit\": {\n          \"type\": \"STRING\",\n          \"value\": \"SECONDS\"\n        },\n        \"type\": {\n          \"type\": \"STRING\",\n          \"value\": \"SIMPLE\"\n        }\n      }\n    },\n    {\n      \"pid\": \"logger\",\n      \"properties\": {\n        \"componentDescription\": {\n          \"type\": \"STRING\",\n          \"value\": \"A wire component which logs data as received from upstream connected Wire Components\"\n        },\n        \"componentId\": {\n          \"type\": \"STRING\",\n          \"value\": \"logger\"\n        },\n        \"componentName\": {\n          \"type\": \"STRING\",\n          \"value\": \"Logger\"\n        },\n        \"emitter.port.count\": {\n          \"type\": \"INTEGER\",\n          \"value\": 0\n        },\n        \"factoryComponent\": {\n          \"type\": \"BOOLEAN\",\n          \"value\": false\n        },\n        \"factoryPid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.wire.Logger\"\n        },\n        \"kura.service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"logger\"\n        },\n        \"log.verbosity\": {\n          \"type\": \"STRING\",\n          \"value\": \"QUIET\"\n        },\n        \"receiver.port.count\": {\n          \"type\": \"INTEGER\",\n          \"value\": 1\n        },\n        \"service.factoryPid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.wire.Logger\"\n        },\n        \"service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.wire.Logger-1642493602046-14\"\n        }\n      }\n    }\n  ]\n}\n
"},{"location":"kura-wires/wires-mqtt-namespace/","title":"Wires MQTT Namespace","text":"

The CloudPublisher is a WireComponent that converts a WireEnvelope in a KuraPayload and publishes it over MQTT. Each WireRecord in a WireEnvelope is trivially converted to a KuraPayload and published on a configurable semantic data or control topic. During this process, the emitter PID of the WireEnvelope is discarded.

The CloudPublisher is agnostic with respect to the contents of the WireEnvelope. It does not know for example if a WireEnvelope contains data readings emitted from a WireAsset. On the other hand, WireAssetS are first-class citizens of a Wire graph and the source of the information which is processed by the downstream Wire components. Eventually, the WireEnvelope representing the output of the processing is connected to a CloudPublisher and published to a Cloud platform.

In the simplest case, a WireAsset is directly connected to a CloudPublisher and it would be useful to publish the telemetry data under a well-known topic namespace, for example the following full topic:

<accountName>/<deviceID>/W1/A1/<assetName>\n

In this case ${assetName} matches the emitterPID of the WireEnvelope emitted by the WireAsset and received by a CloudPublisher.

Interested applications can then subscribe to (or query a message datastore for):

  • <accountName>/<deviceID>/W1/# for all Wires (W) topics
  • <accountName>/<deviceID>/W1/A1/# for all WireAsset (W/A) topics
  • <accountName>/<deviceID>/W1/A1/<assetName> for all topics for a specific WireAsset

In a more complex scenario there might be filters between the WireAsset \u201csource\u201d and the CloudPublisher \u201csink\u201d and the emitterPID of the WireEnvelope received by the publisher no longer matches the emitterPID of the WireEnvelope emitted by the WireAsset. However the published data still represents \u201cAsset\u201d (filtered) data and should be published under the topic above.

The Kura Wires model haven\u2019t the notion of source of an WireEnvelope since a given WireEnvelope instance does not move across the graph but only from one WireEmitter to downstream WireReceiverS that are free to emit something semantically different.

To overcome this issue:

  • The CloudPublisher can be configured with a \u201csemantic topic template\u201d like W1/A1/$assetName where tokens prefixed with $ will be expanded to the value of a property with the same name in a WireEnvelope\u2019s WireRecord.
  • Into the WireAsset, it is possible to add an assetName property to the WireEnvelope\u2019s WireRecord.
"},{"location":"kura-wires/multiport-wire-components/join-component/","title":"Join Component","text":"

The Join Component is a Multiport-enabled component that merges into a single Wire Envelope the properties contained in the envelopes received in the input ports. It is provided by default in every Kura installation.

In the image above a simple usage example of the Join component: two timers simulate separate paths in the graph and the envelopes received by the Conditional component are then merged into a single Wire Envelope that is then received by the logger component.

The behaviour of the Join component is specified by the barrier property.

"},{"location":"kura-wires/multiport-wire-components/mathematical-components-example/","title":"Mathematical Components Example","text":"

Mathematical Wire components can be installed from the Eclipse Marketplace. For these examples, the Wire Math Multiport Components DP will be used, but other more specific operators can be found on the marketplace (like trigonometric functions).

The following Multiport-enabled Mathematical examples are provided:

  • Sum
  • Difference
  • Multiplication
  • Division
"},{"location":"kura-wires/multiport-wire-components/mathematical-components-example/#sum","title":"Sum","text":""},{"location":"kura-wires/multiport-wire-components/mathematical-components-example/#difference","title":"Difference","text":""},{"location":"kura-wires/multiport-wire-components/mathematical-components-example/#multiplication","title":"Multiplication","text":""},{"location":"kura-wires/multiport-wire-components/mathematical-components-example/#division","title":"Division","text":""},{"location":"kura-wires/multiport-wire-components/multiport-wire-components/","title":"Multiport Wire Components","text":"

In order to allow a better routing of data through the Wire Graph, Kura introduces a new class of Wire components named Multiport Wire Components.

With the addition of this new functionality, a compatible component instance can be defined with an arbitrary number of input and output ports.

In the example provided, we have two components in the Wire Composer:

  • the Conditional component that implements the if-then-else logic
  • the Join component that joins into a single Wire the data processed by two separate branches of a graph

Those components are available in every default installation of Kura.

In order to show the potentialities of the new APIs, in the Eclipse Kura Marketplace and in the Kura downloads page, are available few more multiport-enabled components for Mathematical processing.

"},{"location":"kura-wires/multiport-wire-components/multiport-wire-components/#convert-a-component-to-a-multiport-component","title":"Convert a Component to a Multiport Component","text":""},{"location":"kura-wires/multiport-wire-components/multiport-wire-components/#component-configuration-changes","title":"Component Configuration Changes","text":"

The following properties need to be specified in the component configuration:

  • input.cardinality.minimum: an integer that specifies the minimum number of input ports that the component can be configured to manage.
  • input.cardinality.maximum: an integer that specifies the maximum number of input ports that the component can be configured to manage.
  • input.cardinality.default: an integer that specifies the default number of input ports that the component will be created with, if not specified in a different way.
  • output.cardinality.minimum: an integer that specifies the minimum number of output ports that the component can be configured to manage.
  • output.cardinality.maximum: an integer that specifies the maximum number of output ports that the component can be configured to manage.
  • output.cardinality.default: an integer that specifies the default number of output ports that the component will be created with, if not specified in a different way.
  • input.port.names: optional mapping between input ports and friendly names
  • output.port.names: optional mapping between output ports and friendly names

The component should also provide service interface org.eclipse.kura.wire.WireComponent

"},{"location":"kura-wires/multiport-wire-components/multiport-wire-components/#code-changes","title":"Code Changes","text":"

To leverage all the new Multiport functionalities, a Multiport-enabled component must use the newly introduced MultiportWireSupport APIs that provide support to get the list of Emitter and Receiver Ports, as well as to create a new Wire Envelope from a list of Wire Records.

For the conditional component, that has two output ports, the following code allows to get the proper Wire Support from the Wire Helper Service and to get the then and else ports to be used to push the processed envelopes.

this.wireSupport = (MultiportWireSupport) this.wireHelperService.newWireSupport(this);\n        final List<EmitterPort> emitterPorts = this.wireSupport.getEmitterPorts();\n        this.thenPort = emitterPorts.get(0);\n        this.elsePort = emitterPorts.get(1);\n

To emit the result, the code has to be adapted to use the Wire Support to create the Wire Envelope that has to be sent. Effectively, the envelope is sent to the corresponding wire invoking the emit method of the corresponding Port, as shown below.

final WireEnvelope outputEnvelope = this.wireSupport.createWireEnvelope(inputRecords);\n\nif ((Boolean) decision) {\n    this.thenPort.emit(outputEnvelope);\n} else {\n    this.elsePort.emit(outputEnvelope);\n}\n
"},{"location":"kura-wires/script-components/graalvm-conditional-component/","title":"GraalVM\u2122 Conditional Component","text":"

The Conditional Component is a multiport-enabled component that implements the if-then-else logic in the Wire Composer.

In the image above a simple usage example of the conditional component: a timer ticks and the envelope is received by the conditional component. If the timer has an even number of seconds, then it will evaluate to true and forward the received envelope to the then port: the 'verbose' logger will receive the input.

The choice between the two ports is performed based on a condition expressed in the component configuration as in the image below.

"},{"location":"kura-wires/script-components/graalvm-filter-component/","title":"GraalVM\u2122 Filter Component","text":"

The Filter Component provides scripting functionalities in Kura Wires using the GraalVM\u2122 JavaScript engine:

  • The script execution is triggered when a wire envelope is received by the filter component.
  • It is possible to access the received envelope and inspect the wire records contained in it from the script.
  • The script can optionally emit a wire envelope containing one or more wire records for each wire envelope received.
  • The script context is persisted across multiple executions, allowing to perform stateful computations like running a counter, performing time averages etc.
  • A slf4j Logger is available to the script for debugging purposes.
  • The script context is restricted to allow only Wires-related processing. Any attempt to load additional Java classes will fail.
  • The default configuration contains an example script describing the component usage, it can be executed connecting a Timer and a Logger component.
"},{"location":"kura-wires/script-components/graalvm-filter-component/#usage","title":"Usage","text":"

The following global variables are available to the script:

  • input: an object that represents the received wire envelope.
  • output: an object that allows to emit wire records.
  • logger: a slf4j logger.

The following utility functions are available (see Creating and emitting wire records for usage):

  • newWireRecord(Map<String, TypedValue<?>) -> WireRecord
  • newByteArray(int) -> byte[]
  • newBooleanValue(boolean) -> TypedValue
  • newByteArrayValue(byte[]) -> TypedValue
  • newDoubleValue(number) -> TypedValue
  • newIntegerValue(number) -> TypedValue
  • newLongValue(number) -> TypedValue
  • newStringValue(object) -> TypedValue

The following global constants expose the org.eclipse.kura.type.DataType enum variants:

  • BOOLEAN
  • BYTE_ARRAY
  • DOUBLE
  • FLOAT
  • INTEGER
  • LONG
  • STRING
"},{"location":"kura-wires/script-components/graalvm-filter-component/#received-envelope","title":"Received envelope","text":"

The received envelope is represented by the input global variable and is mapped in Javascript as a WireEnvelope object.

GraalVM Javascript Engine allows a 1:1 mapping of Java Objects to JavaScript ones. Hence, it is possible to access the WireRecords of the envelope and the emitter pid using the methods specified in the WireEnvelope Kura API:

logger.info('Emitter pid is {}', input.getEmitterPid())\nvar records = input.getRecords()\n

The records array can be iterated to extract the WireRecord properties (reference the WireRecord Kura API):

for(let i=0; i<records.length; i++) {\n // WireRecord.getProperties() returns a map of String - TypedValue\n for (const [keyString, typedValue] of records[i].getProperties()) {\n logger.info('The {}-th record contains:'\\, String(i))\n logger.info('{}={}\\n', keyString, typedValue.getValue())\n }\n}\n

As in the example above, wireRecord.getProperties returns a map of String, TypedValue. Refer to the TypedValue Kura API for the accessible public methods list.

"},{"location":"kura-wires/script-components/graalvm-filter-component/#creating-and-emitting-wire-records","title":"Creating and emitting wire records","text":"

New mutable WireRecord instances can be created using the newWireRecord(Map<String, TypedValue<?>) function. The properties of a mutable WireRecord can be modified by setting Javascript object properties. The properties of a WireRecord object must be instances of the TypedValue class created using the new<type>Value() family of functions. Setting different kind of objects as properties of a WireRecord will result in an exception.

The output global variable is an object that can be used for emitting WireRecords. This object contains a list of WireRecords that will be emitted when the script execution finishes if no exceptions are thrown. The following code is an example of how to emit a list containing a single WireRecord:

var output = new Array()\nvar outputMap = new Object()\n\nvar byteArray = newByteArray(4)\nbyteArray[0] = 1\nbyteArray[1] = 2\nbyteArray[2] = 0xaa\nbyteArray[3] = 0xbb\n\noutputMap['example.integer'] = newIntegerValue(10)\noutputMap['example.long'] = newLongValue(100)\noutputMap['example.float'] = newFloatValue(1.014)\noutputMap['example.double'] = newDoubleValue(10.12)\noutputMap['example.boolean'] = newBooleanValue(true)\noutputMap['example.string'] = newStringValue('Hello World!')\noutputMap['example.byte.array'] = newByteArrayValue(byteArray)\n\noutput[0] = newWireRecord(outputMap)\n
"},{"location":"kura-wires/script-components/graalvm-filter-component/#script-context","title":"Script context","text":"

The script.context.drop option allows to reset the script context. If set to true the script context will be dropped every time the component configuration is updated, resetting the value of any persisted variable.

In the example below, with script.context.drop=false the following script will preserve the value of counter across executions. Setting script.context.drop=true will cause counter to be undefined every time the component is triggered.

counter = typeof(counter) === 'undefined'\n ? 0 // counter is undefined, initialise it to zero\n : counter; // counter is already defined, keep the previous value\n
"},{"location":"kura-wires/script-components/introduction/","title":"Introduction to the Script Components","text":"

The Script Components allow for performing more complex operations on the received Wire Envelopes using a JavaScript Engine.

Depending if the target device is running on Java 8 or Java 17, there are several components to choose from.

For devices running a JRE with Nashorn JS Engine (Java < 15), a Script Filter and a Conditional Component are provided:

  • Nashorn-based Script Filter
  • Nashorn-based Conditional Component

The above components will run only on Java < 15 since the Nashorn dependency is not included in the DP. The two components are available in the Eclipse Marketplace as two separate entries. These components are deprecated as of Kura version 5.3.

The following components instead have the GraalVM\u2122 JavaScript Engine included in the DP and therefore do not require a JRE with Nashorn JS Engine:

  • GraalVM\u2122 Filter Component
  • GraalVM\u2122 Conditional Component

The input scripts for these components are not compatible with the Nashorn implementations Script Filter and Conditional Component. Both components are shipped as a single DP named org.eclipse.kura.wire.script.tools. Since the JS engine dependency is shipped along with the DP, these components will work on both Java 8 and Java 17 devices but the DP is bigger in size (~18,6 MB).

"},{"location":"kura-wires/script-components/nashorn-conditional-component/","title":"Nashorn Conditional Component","text":"

Warning

This component is deprecated as of Kura version 5.3 since no more available on Java 17.

The Conditional component is a multiport-enabled component that implements the if-then-else logic in the Wire Composer. It is provided by default in every Kura installation.

In the image above a simple usage example of the Conditional component: a timer ticks and the envelope is received by the Conditional component. The message is then processed and can be sent downstream to the logger component (then port) or to a publisher (else port).

The choice between the two ports is performed based on a condition expressed in the Conditional component configuration.

"},{"location":"kura-wires/script-components/nashorn-script-filter/","title":"Nashorn Script Filter","text":"

Warning

This component is deprecated as of Kura version 5.3 since no more available on Java 17.

The Script Filter Component provides scripting functionalities in Kura Wires using the Nashorn Javascript engine:

  • The script execution is triggered when a wire envelope is received by the filter component.
  • It is possible to access to the received envelope and inspect the wire records contained in it form the script.
  • The script can optionally emit a wire envelope containing one or more wire records for each wire envelope received.
  • The script context is persisted across multiple executions, allowing to perform stateful computations like running a counter, performing time averages etc.
  • A slf4j Logger is available to the script for debug purposes.
  • The script context is restricted in order to allow only Wires related processing. Any attempt to load additional Java classes will fail.
  • The default configuration contains an example script describing the component usage, it can be executed connecting a Timer and a Logger component.
"},{"location":"kura-wires/script-components/nashorn-script-filter/#usage","title":"Usage","text":"

The following global variables are available to the script:

  • input: an object that represents the received wire envelope.
  • output: an object that allows to emit wire records.
  • logger: a slf4j logger

The following utility functions are available (see Creating and emitting wire records for usage):

  • newWireRecord(void) -> WireRecordWrapper
  • newByteArray(void) -> byte[]
  • newBooleanValue(boolean) -> TypedValue
  • newByteArrayValue(byte[]) -> TypedValue
  • newDoubleValue(number) -> TypedValue
  • newFloatValue(number) -> TypedValue
  • newIntegerValue(number) -> TypedValue
  • newLongValue(number) -> TypedValue
  • newStringValue(object) -> TypedValue

The following global constants expose the org.eclipse.kura.type.DataType enum variants:

  • BOOLEAN
  • BYTE_ARRAY
  • DOUBLE
  • FLOAT
  • INTEGER
  • LONG
  • STRING
"},{"location":"kura-wires/script-components/nashorn-script-filter/#received-envelope","title":"Received envelope","text":"

The received envelope is represented by the input global variable and it has the following properties:

  • emitterPid: the emitter pid of the received envelope as a String.
  • records: an immutable array that represents the Wire Records contained in the Wire Envelope.

Each element of the records array is an immutable object that represents a received wire record. Wire record properties are directly mapped to Javascript object properties, and are instances of the org.eclipse.kura.type.TypedValue class. Each Wire Record property has the following methods available:

  • getType(void) -> DataType: Returns the type of the value, as a DataType enum variant. Can be matched against the data type constants described above.
  • getValue(void) -> Object: Returns the actual value.

The javascript objects referred as WireRecords in this guide are not instances of the org.eclipse.kura.wire.WireRecord class, but are wrappers that map WireRecord properties into javascript properties. The following code is a simple example script that show how to use the filter:

// get the first record from the envelope\nvar record = input.records[0]\n// let's assume it contains the LED boolean property and the TEMPERATURE double property\nrecord.LED1.getType() === BOOLEAN // evaluates to true\nif (record.LED1.getValue()) {\n    // LED1 is on\n}\nrecord.LED1.getType() === DOUBLE // evaluates to true\nif (record.TEMPERATURE.getValue() > 50) {\n    // temperature is high, do something\n}\n
"},{"location":"kura-wires/script-components/nashorn-script-filter/#creating-and-emitting-wire-records","title":"Creating and emitting wire records","text":"

New mutable WireRecord instances can be created using the newWireRecord(void) -> WireRecordWrapper function. The properties of a mutable WireRecord can be modified by setting Javascript object properties. The properties of a WireRecord object must be instances of the TypedValue class created using the new<type>Value() family of functions. Setting different kind of objects as properties of a WireRecord will result in an exception.

The output global variable is an object that can be used for emitting WireRecords. This object contains a list of WireRecords that will be emitted when the script execution finishes, if no exceptions are thrown. New records can be added to the list using the add(WireRecordWrapper) function. It is also possible to emit records contained in the received WireEnvelope.

The script filter will emit a wire envelope only if the WireRecord list is not empty when the script execution completes. The following code is an example about how to emit a value:

var record = newWireRecord()\n\nvar byteArray = newByteArray()\nbyteArray[0] = 1\nbyteArray[1] = 2\nbyteArray[2] = 0xaa\nbyteArray[3] = 0xbb\n\nrecord.LED1 = newBooleanValue(true)\nrecord.foo = newStringValue('bar')\nrecord['myprop'] = newDoubleValue(123.456)\nrecord['example.long'] = newLongValue(100)\nrecord['example.float'] = newFloatValue(1.014)\nrecord['example.byte.array'] = newByteArrayValue(byteArray)\n\noutput.add(record)\n
"},{"location":"kura-wires/script-components/nashorn-script-filter/#script-context","title":"Script context","text":"

The script.context.drop option allows to reset the script context. If set to true the script context will be dropped every time the component configuration is updated, resetting the value of any persisted variable.

In the example below, with script.context.drop=false the following script will preserve the value of counter across executions. Setting script.context.drop=true will cause counter to be undefined every time the component is triggered.

counter = typeof(counter) === 'undefined'\n ? 0 // counter is undefined, initialise it to zero\n : counter; // counter is already defined, keep the previous value\n
"},{"location":"kura-wires/single-port-wire-components/ai-wire-component/","title":"AI Wire Component","text":"

The component allows interacting with an InferenceEngineService to perform machine learning-related operations. For boards that are not explicitly made for AI, the component can be installed from the Eclipse Marketplace at this link.

An InferenceEngineService is a Kura service that implements a simple API to interface with an Inference Engine. The Inference Engine allows to perform inference on trained Artificial Intelligence models commonly described by a file and some configuration for explaining its input and outputs. An example of Inference Engine implementation is the Nvidia\u2122 Triton Server inference engine.

In a normal machine learning flow, the input is preprocessed before it is given to the machine learning algorithm, and the result is processed again to be adapted to the rest of the pipeline.

Once these models are loaded in the engine, the AI wire component allows to specify the name of the models that are used in the pre-processing, infer, and post-processing steps. Only the infer model name is mandatory so that it is possible to just use the strictly necessary steps in case the pre/post-processing is performed directly by the infer step.

"},{"location":"kura-wires/single-port-wire-components/ai-wire-component/#models-input-and-output-formats","title":"Models Input and Output formats","text":"

The AI wire component takes a WireEnvelope as an input, it processes its records and feeds them to the specified preprocessing or inference model. The outputs of the inference or the post-processing step are then reconverted into a wire record. This section explains the inputs and output formats that the wire component is expecting. Not specifying the models according to this contract will result in a non-functioning inference.

The 3 inference steps are applied on each WireRecord contained in the input WireEnvelope.

The inputs and outputs will have assigned the corresponding Kura DataType, which can be one of:

  • BOOLEAN
  • DOUBLE
  • FLOAT
  • INTEGER
  • LONG
  • STRING
  • BYTE_ARRAY

Reference to Introduction for the data types that are allowed to flow through the wires.

The models that manage the input and the output must expect a list of inputs such that:

  • each input corresponds to an entry of the WireRecord properties
  • the entry key will become the input name (e.g. in the case of an asset, the channel name becomes the tensor name)
  • input shape will be [1]

In the following, two example configurations for Triton Inference Engine models are provided. A complete usage example that implements an Anomaly Detector using a RaspberryPi SenseHat is provided in the Kura examples repository.

"},{"location":"kura-wires/single-port-wire-components/ai-wire-component/#input-specification-example","title":"Input Specification Example","text":"

Following, an example of a model configuration for the Nvidia\u2122 Triton Inference Engine. It expects the input from the WireEnvelope that contains a record with properties:

  • ACCELERATION of type Float
  • CHANNEL_0 of type Integer
  • STREAM of type byte[]
  • GYRO of type Boolean

This record can be generated from an asset with channel names as above. The output will be a single tensor of type Float, of shape 1x13, and name OUT_PRE.

Note that each input will have shape 1.

name: \"preprocessor\"\nbackend: \"python\"\n\ninput [\n  {\n    name: \"ACCELERATION\"\n    data_type: FP32\n    dims: [ 1 ]\n  }\n]\ninput [\n  {\n    name: \"CHANNEL_0\"\n    data_type: INT32\n    dims: [ 1 ]\n  }\n]\ninput [\n  {\n    name: \"STREAM\"\n    data_type: BYTES\n    dims: [ 1 ]\n  }\n]\ninput [\n  {\n    name: \"GYRO\"\n    data_type: BOOL\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"OUT_PRE\"\n    data_type: FP32\n    dims: [ 13 ]\n  }\n]\ninstance_group [{ kind: KIND_CPU }]\n
"},{"location":"kura-wires/single-port-wire-components/ai-wire-component/#output-specification-example","title":"Output Specification Example","text":"

Following, an example of a Nvidia\u2122 Triton Inference Engine configuration that takes input IN_POST and produces outputs that will be mapped to a WireRecord with the properties as follows: - RESULT0 of type Boolean - RESULT1 of type Integer - RESULT2 of type byte[] - RESULT3 of type Float

Note that each output will have shape 1.

name: \"postprocessor\"\nbackend: \"python\"\n\ninput [\n  {\n    name: \"IN_POST\"\n    data_type: FP32\n    dims: [ 1, 5 ]\n  }\n]\noutput [\n  {\n    name: \"RESULT0\"\n    data_type: BOOL\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"RESULT1\"\n    data_type: INT32\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"RESULT2\"\n    data_type: BYTES\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"RESULT3\"\n    data_type: FP32\n    dims: [ 1 ]\n  }\n]\ninstance_group [{ kind: KIND_CPU }]\n
"},{"location":"kura-wires/single-port-wire-components/db-store-and-filter/","title":"Wire Record Store and Wire Record Query","text":"

This tutorial will present how to use Wire Record Store and Wire Record Query components and provide an example based on the OPC-UA simulated server already used in OPC-UA Application.

The Wire Record Store component allows the wire graphs to interact with a persistend Wire Record store implementation, for example a SQL database. It stores in a user-defined collection all the envelopes received by the component.

The Wire Record Query component, instead, can run a custom query on the attached store and emit the result on the wire.

Note

The Wire Record Store and Wire Record Query components have been introduced in Kura 5.3.0 as a replacement of the Db Store and Db Filter, that have been deprecated.

The reason of the deprecation is the fact that Db Store and Db Filter only support databases that provide a JDBC interface. Moreover, the old Db Store interacts with the database using a set of hardcoded SQL queries. This fact makes it difficult to use it with different databases since the syntax of the queries is usually database-specific.

The new components use the org.eclipse.kura.wire.store.provider.WireRecordStoreProvider and org.eclipse.kura.wire.store.provider.QueryableWireRecordStoreProvider APIs introduced in 5.3.0 allowing to use them with generic data store implementations.

Please note that Wire Record Query component is not portable by nature, since it allows to execute an arbitrary user defined query. The new APIs allows to use it with non-JDBC data stores.

The Wire Record Store component can be configured as follows:

  • Record Collection Name: The name of the record collection that should be used. The implementation of the collection depends on the Wire Record Store implementation, if it is a SQL database, the collection will likely be a table.
  • Maximum Record Collection Size: The maximum number of records that is possible to store in the collection.
  • Cleanup Records Keep: The number of records in the collection to keep while performing a cleanup operation (if set to 0 all the records will be deleted). The cleanup operation is performed when a new record is inserted and the current size of the record collection is greater than the configured Maximum Record Collection Size.
  • WireRecordStoreProvider Target Filter : Specifies, as an OSGi target filter, the pid of the of the Wire Record Store instance to be used.

The Wire Record Query component can be configured as follows:

  • Query: Query to be executed. The query syntax depends on the Queryable Wire Record Store implementation.
  • Cache Expiration Interval (Seconds): This component is capable of maintaining a cache of the records produced by the last query execution and emitting its contents on the Wire until it expires. This value specifies the cache validity interval in seconds. When cache expires, it will cause a new query execution. The query will be executed for every trigger received if the value is set to 0.
  • QueryableWireRecordStoreProvider Target Filter : Specifies, as an OSGi target filter, the pid of the of the Queryable Wire Record Store instance to be used.
  • Emit On Empty Result : Defines the behavior of the component if the result of the performed query is empty. If set to true, an empty envelope will be emitted in this case, if set to false no envelopes will be emitted.

The following procedure will create a wire graph that collects data from a simulated OPC-UA Server, stores it in a table in the database, using the Wire Record Store component, and publishes it in the cloud platform. Moreover, the Wire Record Query component is used to read from the database and write data to the OPC-UA Server based on the values read.

"},{"location":"kura-wires/single-port-wire-components/db-store-and-filter/#configure-opc-ua-server-simulator","title":"Configure OPC-UA server simulator","text":"
  1. Download the OPC-UA server simulator bundle and install it on your Kura instance. It will create a simulated OPC-UA server that exposes some sensors (light, temperature and water sensor) and some actuators (buzzer, led and fan).
  2. In the Kura Administrative Web Interface, select \u201cOPCUA Server demo\u201d in \u201cServices\u201d and set server.port to 1234. Click the Apply button. This will start an OPC-UA\u200b server on port 1234.
"},{"location":"kura-wires/single-port-wire-components/db-store-and-filter/#configure-wires-opc-ua-application","title":"Configure Wires OPC-UA application","text":"
  1. Install the OPC-UA Driver from Eclipse Kura Marketplace.
  2. Use the local Kura Administrative Web Interface to create a new OPC-UA driver instance:
    • Select Drivers and Assets, click the New Driver button
    • Select org.eclipse.kura.driver.opcua, type in a name, and click Apply: a new service will show up under Services.

  3. Configure the new service as follows:

    • endpoint.ip: localhost
    • endpoint.port: 1234
    • server.name: leave blank

  4. Click on Wires under System

  5. Add a new Timer component and configure the interval at which the OPC-UA server will be sampled
  6. Add a new Asset with the previously added OPC-UA Driver

  7. Configure the new OPC-UA asset, adding new Channels as shown in the following image. Make sure that all the channels are set to READ.

  8. Add a new Wire Record Store named DBStore component and configure it as follows:

    • Record Collection Name: WR_data
    • Maximum Record Collection Size: 10000
    • Cleanup Records Keep: 0
    • WireRecordStoreProvider Target Filter : the Wire Record Store Provider pid to be used
  9. Add a new Publisher component and configure the chosen cloud platform stack in cloud.service.pid option
  10. Add Logger component
  11. Add another instance of Timer
  12. Add a new Wire Record Query component named DBFilter component and configure it as follows. The query will get the values from the light sensor and if they are less than 200, the fan is activated.
    • Query: SELECT (CASE WHEN \u201clight\u201d < 200 THEN 1 ELSE 0 END) AS \u201cled\u201d FROM \u201cWR_data\u201d ORDER BY TIMESTAMP DESC LIMIT 1;
    • Cache Expiration Interval (Seconds): 0
    • QueryableWireRecordStoreProvider Target Filter : the Queryable Wire Record Store Provider pid to be used

  13. Add another Asset with the OPC-UA Driver, configured as shown in the following image. Be sure that all the channels are set to WRITE.

    Note

    Be aware that the Query syntax can vary accordingly to the dialect used by the database. For example, the MySQL dialect doesn't allow to surround the table or columns names with double-quotes. In the H2DB, this is mandatory instead.

  14. Connect the components as shown in the following image, then click on \u201cApply\u201d and check the logs and the cloud platform that the data is correctly published.

"},{"location":"kura-wires/single-port-wire-components/fifo-component/","title":"FIFO Component","text":"

This page describes the usage of the FIFO component in Wires.

The current Wires threading model allows any component to perform potentially blocking operations when a wire envelope is received.

The fact that the wire envelopes are delivered synchronously implies that if a wire component performs blocking operations, other components in the same subgraph might be blocked as well, introducing delays in the processing of the graph.

The FIFO component can be used for decoupling blocking or slow wire components from other parts of the graph that cannot tolerate delays.

In the graph above, the NODELAY component cannot tolerate potential delays introduced by the DB component, adding a FIFO component allows to decouple the two components.

This component implements a FIFO queue that operates as follows:

  • The received envelopes are added to the queue. Adding an envelope to the queue is usually (see below) a non-blocking operation.
  • A dedicated thread pops the envelopes from the queue and delivers them to downstream components.

In this way, the threads running the upstream components are not affected by blocking operations performed by the downstream components.

In the example above there will be two threads that manage the processing of the graph:

  1. A thread from the TIMER Quartz scheduler pool handles the processing for the NODELAY component and submits the envelopes produced by it to the queue of the FIFO component.

  2. A second thread introduced by the FIFO component pops the received envelopes from the queue and dispatches them to the DB component, performing the processing required by it.

In this way, the NODELAY and DB components are decoupled because they are managed by different threads.

"},{"location":"kura-wires/single-port-wire-components/fifo-component/#configuration","title":"Configuration","text":"

The FIFO component configuration is composed of the following properties:

  • queue.capacity: The size of the queue in terms of the number of storable wire envelopes.

  • discard.envelopes : Configures the behavior of the component in case of a full queue.

  • If set to true, envelopes received when the queue is full will be dropped. In this mode, submitting an envelope to the queue is always a non-blocking operation. It should be used if occasionally losing wire envelopes is acceptable for the application, but introducing delays for upstream components is not.

  • If set to false, adding an envelope when the queue is full will block the submitting thread until there is space in the queue. Submitting an envelope to the FIFO component can be a blocking operation if the queue is full. This mode should be used if dropping wire envelopes is unacceptable for upstream components.

The probability of dropping envelopes in discard.envelopes=true mode or the probability of blocking upstream components in discard.envelopes=false mode can be controlled by setting a proper queue size.

"},{"location":"kura-wires/usage-examples/eddystone-driver-application/","title":"Eddystone\u2122 Driver Application with RuuviTag+","text":"

As presented in Eddystone Driver, Kura provides a specific driver that can be used to listen for Eddystone\u2122 beacons.

This tutorial will explain how to configure an Eddystone\u2122 driver and put it into a Wire graph that retrieves data from a RuuviTag+. For further information about RuuviTag see here.

"},{"location":"kura-wires/usage-examples/eddystone-driver-application/#configure-kura-wires-eddystone-application","title":"Configure Kura Wires Eddystone application","text":"

  1. Install the Eddystone\u2122 driver from the Eclipse Kura Marketplace.

  2. On the Kura Web Interface, instantiate an Eddystone\u2122 Driver:

    • Under System, select Drivers and Assets and click on the New Driver button.
    • Select org.eclipse.kura.driver.eddystone as Driver Factory, type a name in to Driver Name and click Apply: a new driver will be instantiated and shown up under the Drivers and Assets tab.
    • Configure the new driver setting the bluetooth interface name (e.g. hci0).

  3. From the Drivers and Assets tab, add a new asset bound to the Eddystone\u2122 driver:

    • Click on the New Asset button and fill the form with the Asset Name and selecting the driver created in step 2. as Driver Name. Click Apply and a new asset will be listed under the Eddystone\u2122 driver.

    • Click on the new asset and configure it, adding the channels. Each channel represents a type of frame the Driver is interested to. Please note that in the above picture two channels are created: one for the UID type and the second for the URL. In this example only the URL will be used.
    • Check the listen checkbox for both channels.
    • Click \"Apply\".

  4. Click on Wires under System.

  5. Add a new Asset with the previously added Eddystone asset.

  6. Add a new Javascript Filter component. The filter will be configured to parse the URL frames coming from the RuuviTag+ and extract the environmental data from the on-board sensors. In the script window write the following code:

    function toHexString(str) {\n    var hex = '';\n    for ( i = 0; i < str.length; i++ ) {\n        var hexTemp = str.charCodeAt(i).toString(16)\n        hex += (hexTemp.length==2?hexTemp:'0'+hexTemp);\n}\nreturn hex;\n};\n\nfunction decodeValues(rawSensors) {\n    var rawSensorsDecoded = Base64.decode(rawSensors)\n    logger.info(toHexString(rawSensorsDecoded))\n    var sensorsValues = new Array();\n    // Data Format Definition (4)\n    var format = parseInt(rawSensorsDecoded[0].charCodeAt(0));\n    if (format == 4) {\n        sensorsValues.push(format)\n        // Humidity\n        sensorsValues.push(rawSensorsDecoded[1].charCodeAt(0) * 0.5)\n        // Temperature\n        sensorsValues.push(rawSensorsDecoded[2].charCodeAt(0) & 0x7f)\n        // Pressure\n        sensorsValues.push(parseInt(rawSensorsDecoded[4].charCodeAt(0) << 8 )+ parseInt(rawSensorsDecoded[5].charCodeAt(0) & 0xff) + 50000)\n        // Random id of tag\n        sensorsValues.push(rawSensorsDecoded[6].charCodeAt(0))\n    }\n    return sensorsValues;\n};\n\nload(\"https://gist.githubusercontent.com/jarus/948005/raw/524bea3b4e0b74c06c9cfd2a8e54429dda1918fe/base64.js\")\nvar record = input.records[0]\nif (record.URLEddystone != null) {\n    var values = record.URLEddystone.getValue().split(\";\")\n\n    if (values.length == 5 && values[1].split(\"#\").length == 2) {\n        var outRecord = newWireRecord()\n        var sensorsValues = decodeValues(values[1].split(\"#\")[1])\n        if (sensorsValues.length == 5) {\n            outRecord.format = newIntegerValue(sensorsValues[0])\n            outRecord.humidity = newDoubleValue(sensorsValues[1])\n            outRecord.temperature = newDoubleValue(sensorsValues[2])\n            outRecord.pressure = newIntegerValue(sensorsValues[3])\n            outRecord.id = newIntegerValue(sensorsValues[4])\n        }\n        outRecord.txPower = newIntegerValue(parseInt(values[2]))\n        outRecord.rssi = newIntegerValue(parseInt(values[3]))\n        outRecord.distance = newDoubleValue(parseFloat(values[4]))\n\n        output.add(outRecord)\n    }\n}\n

  7. Add Logger component and set the log.verbosity to VERBOSE.

  8. Connect the Asset to the Filter and this to the Logger.

  9. Click on Apply and check on the logs that the environmental data are correctly logged.

    INFO  o.e.k.w.s.f.p.ScriptFilter - 04541a00c35078\nINFO  o.e.k.i.w.l.Logger - Received WireEnvelope from org.eclipse.kura.wire.ScriptFilter-1537884418687-2\nINFO  o.e.k.i.w.l.Logger - Record List content:\nINFO  o.e.k.i.w.l.Logger -   Record content:\nINFO  o.e.k.i.w.l.Logger -     txPower : -7\nINFO  o.e.k.i.w.l.Logger -     rssi : -55\nINFO  o.e.k.i.w.l.Logger -     distance : 251.18864315095797\nINFO  o.e.k.i.w.l.Logger -     format : 4\nINFO  o.e.k.i.w.l.Logger -     temperature : 26.0\nINFO  o.e.k.i.w.l.Logger -     humidity : 42.0\nINFO  o.e.k.i.w.l.Logger -     pressure : 100000\nINFO  o.e.k.i.w.l.Logger -     id : 120\nINFO  o.e.k.i.w.l.Logger -\nINFO  o.e.k.w.s.f.p.ScriptFilter - 04401a00c35078\nINFO  o.e.k.i.w.l.Logger - Received WireEnvelope from org.eclipse.kura.wire.ScriptFilter-1537884418687-2\nINFO  o.e.k.i.w.l.Logger - Record List content:\nINFO  o.e.k.i.w.l.Logger -   Record content:\nINFO  o.e.k.i.w.l.Logger -     txPower : -7\nINFO  o.e.k.i.w.l.Logger -     rssi : -39\nINFO  o.e.k.i.w.l.Logger -     distance : 39.810717055349734\nINFO  o.e.k.i.w.l.Logger -     format : 4\nINFO  o.e.k.i.w.l.Logger -     temperature : 26.0\nINFO  o.e.k.i.w.l.Logger -     humidity : 32.0\nINFO  o.e.k.i.w.l.Logger -     pressure : 100000\nINFO  o.e.k.i.w.l.Logger -     id : 120\nINFO  o.e.k.i.w.l.Logger -\n
"},{"location":"kura-wires/usage-examples/gpio-driver-application/","title":"GPIO Driver Application","text":"

In this section a simple but effective example of the GPIO Driver on Wires will be presented. This example will implement a Wire graph that toggles a digital GPIO. A listener will be attached to an input GPIO externally connected to the first one.

Setup a Raspberry Pi as shown in GPIO Driver section. Add a cable from the LED contact near the red cable to pin 37 (gpio 26) on the RaspberryPi.

"},{"location":"kura-wires/usage-examples/gpio-driver-application/#configure-kura-wires-gpio-driver-application","title":"Configure Kura Wires GPIO Driver Application","text":"

  1. Install the GPIO Driver from the Eclipse Kura Marketplace.

  2. On the Kura web interface, instantiate a GPIO Driver:

    • Under \"System\", select \"Drivers and Assets\" and click on the \"New Driver\" button.
    • Select \"org.eclipse.kura.driver.gpio\" as \"Driver Factory\", type a name in to \"Driver Name\" and click \"Apply\": a new driver will be instantiated and shown up under the \"Drivers and Assets\" tab.

  3. From the \"Drivers and Assets\" tab, add a new asset bound to the GPIO driver:

    • Click on the \"New Asset\" button and fill the form with the \"Asset Name\" and selecting the driver created in step 2. as \"Driver Name\". Click \"Apply\" and a new asset will be listed under the GPIO driver.
    • Click on the new asset and configure it, adding only one channel called LED as shown in the following picture:

    • Click \"Apply\".

  4. As in point 3., create a new asset as shown below:

    • Click \"Apply\".

  5. Click on \"Wires\" under \"System\".

  6. Add a new \"Timer\" component and configure the interval at which the LED will be toggled.

  7. Add a new \"Script Filter\" (it can be downloaded from the Eclipse Marketplace and configure it with the following script:

    // create a persistent counter\ncounter = typeof(counter) === 'undefined' ? 0 : counter\ncounter++\n\n// emit the counter value in a different WireRecord\nvar counterRecord = newWireRecord()\ncounterRecord.LED = newBooleanValue(counter%2==0)\noutput.add(counterRecord)\n

  8. Add the \"Asset\" created at point 3 and connect the \"Timer\" to the \"Filter\" and the latter to the \"Asset\".

  9. Add the \"Asset\" created at point 4.

  10. Add \"Logger\" component and set log.verbosity to \"VERBOSE\".

  11. Connect the latter \"Asset\" to the \"Logger\". The resulting Wire Graph should be as below:

  12. Click on \"Apply\". After a while, the led on the breadboard should start to blink at a rate defined by the \"Timer\" as shown below:

    Moreover, the kura.log file should show a long sequencce of messages reporting that the value from the input gpio is changed:

    2018-04-09 13:08:42,990 [Thread-3289] INFO  o.e.k.i.w.l.Logger - Received WireEnvelope from org.eclipse.kura.wire.WireAsset-1523276074484-23\n2018-04-09 13:08:42,991 [Thread-3289] INFO  o.e.k.i.w.l.Logger - Record List content: \n2018-04-09 13:08:42,992 [Thread-3289] INFO  o.e.k.i.w.l.Logger -   Record content: \n2018-04-09 13:08:42,993 [Thread-3289] INFO  o.e.k.i.w.l.Logger -     LED_Feedback : false\n2018-04-09 13:08:42,993 [Thread-3289] INFO  o.e.k.i.w.l.Logger -     assetName : GPIOAssetFeedback\n2018-04-09 13:08:42,994 [Thread-3289] INFO  o.e.k.i.w.l.Logger -     LED_Feedback_timestamp : 1523279322990\n2018-04-09 13:08:42,994 [Thread-3289] INFO  o.e.k.i.w.l.Logger - \n2018-04-09 13:08:44,988 [Thread-3291] INFO  o.e.k.i.w.l.Logger - Received WireEnvelope from org.eclipse.kura.wire.WireAsset-1523276074484-23\n2018-04-09 13:08:44,989 [Thread-3291] INFO  o.e.k.i.w.l.Logger - Record List content: \n2018-04-09 13:08:44,989 [Thread-3291] INFO  o.e.k.i.w.l.Logger -   Record content: \n2018-04-09 13:08:44,989 [Thread-3291] INFO  o.e.k.i.w.l.Logger -     LED_Feedback : true\n2018-04-09 13:08:44,989 [Thread-3291] INFO  o.e.k.i.w.l.Logger -     assetName : GPIOAssetFeedback\n2018-04-09 13:08:44,989 [Thread-3291] INFO  o.e.k.i.w.l.Logger -     LED_Feedback_timestamp : 1523279324988\n
"},{"location":"kura-wires/usage-examples/ibeacon-driver-application/","title":"iBeacon\u2122 Driver Application","text":"

As presented in the iBeacon\u2122 Driver, Kura provides a specific driver that can be used to listen for iBeacons packets.

This tutorial will explain how to configure a Wire graph that get iBeacon\u2122 data and show them to a logger.

"},{"location":"kura-wires/usage-examples/ibeacon-driver-application/#configure-the-wires-ibeacontm-application","title":"Configure the Wires iBeacon\u2122 Application","text":"

  1. Install the iBeacon driver from the Eclipse Kura Marketplace.

  2. On the Web Interface, instantiate the iBeacon Driver:

    • Under \"System\", select \"Drivers and Assets\" and click on the \"New Driver\" button.
    • Select \"org.eclipse.kura.driver.ibeacon\" as \"Driver Factory\", type a name in to \"Driver Name\" and click \"Apply\": a new driver will be instantiated and shown up under the \"Drivers and Assets\" tab.
    • Configure the new driver setting the bluetooth interface name (e.g. hci0).

  3. From the \"Drivers and Assets\" tab, add a new asset binded to the iBeacon driver:

    • Click on the \"New Asset\" button and fill the form with the \"Asset Name\" and selecting the driver created in step 2. as \"Driver Name\". Click \"Apply\" and a new asset will be listed under the iBeacon driver.

    • Click on the new asset and configure it, adding a single channel that represents a listener for iBeacon\u2122 advertising packets. Check the listen checkbox for the channel.

    • Click \"Apply\".

  4. Click on \"Wires\" under \"System\".

  5. Add a new \"Asset\" with the previously added iBeacon asset.

  6. Add a new \"Javascript Filter\" component. The filter will be configured to parse the iBeacon packets and extract relevant data from it. In the script window write the following code:

    var record = input.records[0]\nif (record.ibeacon != null) {\n    var values = record.ibeacon.getValue().split(\";\")\n\n    if (values.length == 6) {\n        var outRecord = newWireRecord()\n        outRecord.uuid = newStringValue(values[0])  \n        outRecord.txPower = newIntegerValue(parseInt(values[1]))\n        outRecord.rssi = newIntegerValue(parseInt(values[2]))\n        outRecord.major = newIntegerValue(parseInt(values[3]))\n        outRecord.minor = newIntegerValue(parseInt(values[4]))\n        outRecord.distance = newDoubleValue(parseFloat(values[5]))\n\n        output.add(outRecord)\n    }\n}\n

  7. Add \"Logger\" component and set the log.verbosity to VERBOSE

  8. Connect the \"Asset\" to the \"Filter\" and this to the \"Logger\".

  9. Click on \"Apply\".

    Using this graph, every iBeacon packet will be detected and reported to the log, as shown below. To simulate an iBeacon device, it is possible to use another gateway with the iBeacon advertiser example.

    INFO  o.e.k.i.w.l.Logger - Received WireEnvelope from org.eclipse.kura.wire.WireAsset-1537886139797-15\nINFO  o.e.k.i.w.l.Logger - Record List content:\nINFO  o.e.k.i.w.l.Logger -   Record content:\nINFO  o.e.k.i.w.l.Logger -     assetName : iBeaconAsset\nINFO  o.e.k.i.w.l.Logger -     iBeacon : aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee;0;-38;0;0;79.43282347242814\nINFO  o.e.k.i.w.l.Logger -     iBeacon_timestamp : 1537886424085\nINFO  o.e.k.i.w.l.Logger -\nINFO  o.e.k.i.w.l.Logger - Received WireEnvelope from org.eclipse.kura.wire.WireAsset-1537886139797-15\nINFO  o.e.k.i.w.l.Logger - Record List content:\nINFO  o.e.k.i.w.l.Logger -   Record content:\nINFO  o.e.k.i.w.l.Logger -     assetName : iBeaconAsset\nINFO  o.e.k.i.w.l.Logger -     iBeacon : aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee;0;-42;0;0;125.89254117941674\nINFO  o.e.k.i.w.l.Logger -     iBeacon_timestamp : 1537886425086\nINFO  o.e.k.i.w.l.Logger -\n
"},{"location":"kura-wires/usage-examples/opcua-application/","title":"OPC-UA Application","text":"

This tutorial will describe how to collect data from an OPC-UA device and publish them on a cloud platform using Wires. The OPC-UA server device will be emulated using a bundle running on Kura.

"},{"location":"kura-wires/usage-examples/opcua-application/#configure-opc-ua-server-simulator","title":"Configure OPC-UA server simulator","text":"
  1. Download the OPC-UA server simulator bundle and install it on Kura. It will create a simulated OPC-UA server that exposes some sensors (light, temperature and water sensor) and some actuators (buzzer, led and fan).
  2. On the Kura web interface, select OPCUA Server demo in Services and set server.port to 1234. Click the Apply button. This will start an OPC-UA server on port 1234.
"},{"location":"kura-wires/usage-examples/opcua-application/#configure-wires-opc-ua-application","title":"Configure Wires OPC-UA application","text":"
  1. Install the OPC-UA driver from Eclipse Kura Marketplace.
  2. Use the local Kura Administrative Web Interface to create a new OPC-UA driver instance:
    • Select Drivers and Assets, click the New Driver button
    • Select org.eclipse.kura.driver.opcua, type in a name, and click Apply: a new service will show up under Services.
  3. Configure the new service as follows:
    • endpoint.ip: localhost
    • endpoint.port: 1234
    • server.name: leave blank
  4. Click on Wires under System
  5. Add a new Timer component and configure the interval at which the OPC-UA server will be sampled
  6. Add a new Asset with the previously added OPC-UA driver
  7. Configure the new OPC-UA asset, adding new Channels as shown in the following image.
  8. Add a new Publisher component and configure the chosen cloud platform stack in cloud.service.pid option
  9. Add a Logger component
  10. Connect the Timer to the Asset, and the Asset to the Publisher and Logger as shown in the image below.
  11. Click on Apply and check the logs and the cloud platform in order to verify that the data is correctly published.
"},{"location":"kura-wires/usage-examples/ti-sensortag-application/","title":"TI SensorTag Application","text":"

As presented in the Ti SensorTag Driver, Kura provides a specific driver that can be used to interact with Texas Instruments SensorTag devices.

This tutorial will explain how to configure a Wire graph that connects with a SensorTag, reads sensor values and publishes data to a cloud platform.

Warning

The SensorTag driver can be used only with TI SensorTags with firmware version >1.20. If your device has an older firmware, please update it.

"},{"location":"kura-wires/usage-examples/ti-sensortag-application/#configure-the-ti-sensortag-application","title":"Configure the TI SensorTag Application","text":"

  1. Install the TI SensorTag driver from the Eclipse Kura Marketplace

  2. On the Kura Administrative Web Interface, instantiate a SensorTag Driver:

    • Under System, select Drivers and Assets and click on the New Driver button.
    • Select org.eclipse.kura.driver.ble.sensortag as Driver Factory, type a name in Driver Name and click the Apply button: a new driver will be instantiated and listed in the page.
    • Select the newly created Driver instance and configure the Bluetooth interface name (i.e. hci0).

  3. In the Drivers and Assets tab add a new asset and associate it to the SensorTag driver:

  4. Click on the New Asset button and fill the form with the Asset Name, selecting the driver created at point 2. Click Apply and a new asset will be listed.
  5. Click on the new asset and configure it, adding the channels. Each channel represents a single sensor on the SensorTag and it can be chosen from the sensor.name menu. Fill the sensortag.address with the DB address of the SensorTag you want to connect to. The value.type should be set to double, but also the other choices are possible.

  6. Click Apply.

  7. Apply the following configuration for the Asset instance:

  8. Create a Wire Graph as in the following picture.

    Please note that the driver supports also unsolicited inputs, setting up a notification for the given channel. In this case, it is sufficient to check the listen option for the chosen channel. The Timer is not needed because the SensorTag will automatically emit the values every notification.period milliseconds.

"},{"location":"quality-assurance/intro/","title":"Introduction","text":""},{"location":"quality-assurance/intro/#eclipsetm-kura-qa","title":"Eclipse\u2122 Kura QA","text":"

Kura QA activities focused on two main areas:

  • unit and integration tests that are executed each time the project builds and
  • manual tests, most of which are executed in the weeks before releases.

More on the unit and integration tests can be read in unit testing. More about manual system testing can be read in system testing.

"},{"location":"quality-assurance/system-testing/","title":"System Testing","text":""},{"location":"quality-assurance/system-testing/#qa-procedure","title":"QA Procedure","text":"

A set of automated and manual test are performed before releasing a new Eclipse\u2122 Kura version to ensure software follows our quality standards.

Once a Release Candidate (RC) is tagged on its maintenance branch the QA process starts. The QA process involves a set of automated and manual tests performed on the target environment listed below. These tests are updated continuosly to follow the large amount of features added in each release. The QA process continues with new Release Candidate builds until the amount of defects in the software is reduced. When this happens the RC is promoted to final release and tagged on the maintenance branch.

"},{"location":"quality-assurance/system-testing/#environment","title":"Environment","text":""},{"location":"quality-assurance/system-testing/#hardware","title":"Hardware","text":"
  • Raspberry Pi 3/4
  • Intel Up2
  • Nvidia Jetson Nano
  • Docker
"},{"location":"quality-assurance/system-testing/#os","title":"OS","text":"
  • Raspberry Pi OS
  • Ubuntu 20.04
  • Ubuntu 18.04
  • CentOS 7
"},{"location":"quality-assurance/system-testing/#java","title":"Java","text":"
  • Eclipse Adoptium Temurin\u2122 JDK 1.8
"},{"location":"quality-assurance/unit-testing/","title":"Unit Testing","text":""},{"location":"quality-assurance/unit-testing/#build-time-testing","title":"Build-time testing","text":"

Build-time testing is further divided into unit testing and integration testing.

Unit testing is focused on testing separate methods or groups of methods, preferably in a single class. This way it can verify the correct operation of difficult-to-reach corner cases.

Integration testing is a more-high-level testing that tests certain functionality on a group of connected services in an approximation of the real environment. It verifies that the services can successfully register in the environment and connect to other services as well as perform their tasks.

Code coverage of the develop branch can be observed in Jenkins.

For some tips on running the tests also check Kura GitHub Wiki.

"},{"location":"quality-assurance/unit-testing/#unit-testing_1","title":"Unit Testing","text":"

Unit tests should try to cover as many corner cases in the code as possible. Add them for (all) the new code you decide to contribute.

"},{"location":"quality-assurance/unit-testing/#test-location","title":"Test Location","text":"

Kura discourages to introduce test-only dependencies on the implementation level, so all tests are located in their own projects under test/. The proper folder to put the tests in is src/test/java.

"},{"location":"quality-assurance/unit-testing/#code-conventions","title":"Code Conventions","text":"
  • Preferably use <package name>.test as the name of the test project. Add it as a module in test/pom.xml that also serves as maven artifact's parent.
  • Only add src/main/java to build.properties' source...
  • Make the bundle a fragment of the class-under-test's bundle so that you gain access to its internal packages.
  • Use the same package for the test as the class under test. Subpackages are OK.
  • Use the same coding style as Kura. Try to incorporate the suggestions SonarLint may have for your tests.
"},{"location":"quality-assurance/unit-testing/#running-the-tests","title":"Running the Tests","text":"

The basic flow is to build your implementation using maven and then also build and run the unit tests using mvn clean test (or some other phase e.g. install, which also runs integration tests).

Advanced test running and running them in IDE is described in Kura GitHub Wiki.

"},{"location":"quality-assurance/unit-testing/#integration-testing","title":"Integration Testing","text":"

These test proper behavior in the OSGi environment. Some additional configuration is therefore necessary.

"},{"location":"quality-assurance/unit-testing/#test-location_1","title":"Test Location","text":"

We don't want to mess with the implementation code here, either, so all tests are again located in the test projects under test/. It can be the same project as for unit tests. The proper folder to put the tests in is src/main/java.

"},{"location":"quality-assurance/unit-testing/#code-conventions_1","title":"Code Conventions","text":"
  • Preferably use <package name>.test as the name of the test project. Add it as a module in test/pom.xml that also serves as maven artifact's parent.
  • Only add src/main/java to build.properties' source...
  • Make the bundle a fragment of the class-under-test's bundle so that you gain access to its internal packages.
  • Use the <package name>.test as the package to put the test in. Also add .test suffix to any subpackages that are also under test.
  • Use the same coding style as Kura. Try to incorporate the suggestions SonarLint may have for your tests.
"},{"location":"quality-assurance/unit-testing/#running-the-tests_1","title":"Running the Tests","text":"

The basic flow is to build your implementation using maven and then also build and run the integration tests using mvn clean install.

Advanced test running and running them in IDE is described in Kura GitHub Wiki.

"},{"location":"references/javadoc/","title":"Javadoc","text":"
  • Kura API Documentation.
  • Java Communications API (javax.comm).
  • Java USB (javax.usb).
  • Java HIDAPI Javadoc.
  • OpenJDK Device I/O API Documentation.
  • CANBus API Documentation.
"},{"location":"references/mqtt-namespace/","title":"MQTT Namespace","text":"

This section provides guidelines on how to structure the MQTT topic namespace for messaging interactions with applications running on IoT gateway devices.

Interactions may be solicited by a remote server to the gateway using a request/response messaging model, or unsolicited when the gateway simply reports messages or events to a remote server based on periodic or event-driven patterns.

The table below defines some basic terms used in this document:

Term Description account_name Identifies a group of devices and users. It can be seen as partition of the MQTT topic namespace. For example, access control lists can be defined so that users are only given access to the child topics of a given account_name. client_id Identifies a single gateway device within an account (typically the MAC address of a gateway\u2019s primary network interface). The client_id maps to the Client Identifier (Client ID) as defined in the MQTT specifications. app_id Unique string identifier for application (e.g., \u201cCONF-V1\u201d, \u201cCONF-V2\u201d, etc.). resource_id Identifies a resource(s) that is owned and managed by a particular application. Management of resources (e.g., sensors, actuators, local files, or configuration options) includes listing them, reading the latest value, or updating them to a new value. A resource_id may be a hierarchical topic, where, for example, \u201csensors/temp\u201d may identify a temperature sensor and \u201csensor/hum\u201d a humidity sensor.

A gateway, as identified by a specific client_id and belonging to a particular account_name, may have one or more applications running on it (e.g., \u201capp_id1\u201d, \u201capp_id2\u201d, etc.). Each application can manage one or more resources identified by a distinct resource_id(s).

Based on this criterion, an IoT application running on an IoT gateway may be viewed in terms of the resources it owns and manages as well as the unsolicited events it reports.

"},{"location":"references/mqtt-namespace/#mqtt-requestresponse-conversations","title":"MQTT Request/Response Conversations","text":"

Solicited interactions require a request/response message pattern to be established over MQTT. To initiate a solicited conversation, a remote server first sends a request message to a given application running on a specific device and then waits for a response.

To ensure the delivery of request messages, applications that support request/response conversations via MQTT should subscribe to the following topic on startup:

$EDC/account_name/client_id/app_id/#\n

The $EDC prefix is used to mark topics that are used as control topics for remote management. This prefix distinguishes control topics from data topics that are used in unsolicited reports and marks the associated messages as transient (not to be stored in the historical data archive, if present).

Note

While Kura currently requires \u201c$EDC\u201d as the prefix for control topics, this prefix may change in the future for the following reasons:

  • MQTT 3.1.1 discourages the use of topic starting with \u201c$\u201d for application purposes.

  • As a binding of LWM2M over MQTT is taking shape, it would make sense to use a topic prefix for management messages like \u201cLWM2M\u201d or similar abbreviations (e.g. \"LW2\u201d, \u201cLWM\u201d).

A requester (i.e., the remote server) initiates a request/response conversation through the following events:

  1. Generating a conversation identifier known as a request.id (e.g., by concatenating a random number to a timestamp)

  2. Subscribing to the topic where the response message will be published, where requester.client.id is the client ID of the requester, such as:

    $EDC/account_name/requester.client.id/app_id/REPLY/request.id\n

  3. Sending the request message to the appropriate application-specific topic with the following fields in the payload:

    • request.id (identifier used to match a response with a request)
    • requester.client.id (client ID of the requester)

The application receives the request, processes it, and responds on a REPLY topic structured as:

$EDC/account_name/requester.client.id/app_id/REPLY/request.id\n

Note

While this recommendation does not mandate the format of the message payload, which is application-specific, it is important that the request.id and requester.client.id fields are included in the payload. Kura leverages an MQTT payload encoded through Google Protocol Buffers. Kura includes the request.id and the requester.client.id as two named metrics of the Request messages. The Kura payload definition can be found here.

Once the response for a given request is received, the requester unsubscribes from the REPLY topic.

"},{"location":"references/mqtt-namespace/#mqtt-requestresponse-example","title":"MQTT Request/Response Example","text":"

The following sample request/response conversation shows the device configuration being provided for an application:

account_name: guest\ndevice client_id: F0:D2:F1:C4:53:DB\napp_id: CONF-V1\nRemote Service Requester client_id: 00:E0:C7:01:02:03\n

The remote server publishes a request message similar to the following:

  • Request Topic:

    • $EDC/guest/F0:D2:F1:C4:53:DB/CONF-V1/GET/configurations

  • Request Payload:

    • request.id: 1363603920892-8078887174204257595
    • requester.client.id: 00:E0:C7:01:02:03

The gateway device replies with a response message similar to the following:

  • Response Topic:

    • $EDC/guest/00:E0:C7:01:02:03/CONF-V1/REPLY/1363603920892-8078887174204257595

  • Response Payload, where the following properties are mandatory:

    • response.code Possible response code values include:
      • 200 (RESPONSE_CODE_OK)
      • 400 (RESPONSE_CODE_BAD_REQUEST)
      • 404 (RESPONSE_CODE_NOTFOUND)
      • 500 (RESPONSE_CODE_ERROR)
      • response.exception.message (value is null or an exception message) response.exception.message (value is null or an exception stack trace)

Note

In addition to the mandatory properties, the response payload may also have custom properties whose description is beyond the scope of this document.

It is recommended that the requester server employs a timeout to control the length of time that it waits for a response from the gateway device. If a response is not received within the timeout interval, the server can expect that either the device or the application is offline.

"},{"location":"references/mqtt-namespace/#mqtt-remote-resource-management","title":"MQTT Remote Resource Management","text":"

A remote server interacts with the application\u2019s resources through read, create and update, delete, and execute operations. These operations are based on the previously described request/response conversations.

"},{"location":"references/mqtt-namespace/#read-resources","title":"Read Resources","text":"

An MQTT message published on the following topic is a read request for the resource identified by the resource_id:

$EDC/account_name/client_id/app_id/GET/resource_id\n

The receiving application responds with a REPLY message containing the latest value of the requested resource.

The resource_id is application specific and may be a hierarchical topic. It is recommended to design resource identifiers following the best practices established for REST API.

For example, if an application is managing a set of sensors, a read request issued to the topic \"$EDC/account_name/client_id/app_id/GET/sensors\" will reply with the latest values for all sensors.

Similarly, a read request issued to the topic \"$EDC/account_name/client_id/app_id/GET/sensors/temp\" will reply with the latest value for only a temperature sensor that is being managed by the application.

"},{"location":"references/mqtt-namespace/#create-or-update-resources","title":"Create or Update Resources","text":"

An MQTT message published on the following topic is a create or update request for the resource identified by the resource_id:

$EDC/account_name/client_id/app_id/PUT/resource_id\n

The receiving application creates the specified resource (or updates it if it already exists) with the value supplied in the message payload and responds with a REPLY message.

As in the read operations, the resource_id is application specific and may be a hierarchical topic. It is recommended to design resource identifiers following the best practices established for REST API. For example, to set the value for an actuator, a message can be published to the topic \"$EDC/account_name/client_id/app_id/PUT/actuator/1\" with the new value suplliied in the message payload.

"},{"location":"references/mqtt-namespace/#delete-resources","title":"Delete Resources","text":"

An MQTT message published on the following topic is a delete request for the resource identified by the resource_id:

$EDC/account_name/client_id/app_id/DEL/resource_id\n

The receiving application deletes the specified resource, if it exists, and responds with a REPLY message.

"},{"location":"references/mqtt-namespace/#execute-resources","title":"Execute Resources","text":"

An MQTT message published on the following topic is an execute request for the resource identified by the resource_id:

$EDC/account_name/client_id/app_id/EXEC/resource_id\n

The receiving application executes the specified resource, if it exists, and responds with a REPLY message. The semantics of the execute operation is application specific.

"},{"location":"references/mqtt-namespace/#other-operations","title":"Other Operations","text":"

The IoT application may respond to certain commands, such as taking a snapshot of its configuration or executing an OS-level command. The following topic namespace is recommended for command operations:

$EDC/account_name/client_id/app_id/EXEC/command_name\n

An MQTT message published with this topic triggers the execution of the associated command. The EXEC message may contain properties in the MQTT payload that can be used to parameterize the command execution.

"},{"location":"references/mqtt-namespace/#mqtt-unsolicited-events","title":"MQTT Unsolicited Events","text":"

IoT applications have the ability to send unsolicited messages to a remote server using events to periodically report data readings from their resources, or to report special events and observed conditions.

Tip

It is recommended to not use MQTT control topics for unsolicited events, and subsequently, to avoid the $EDC topic prefix.

Event MQTT topics generally follow the pattern shown below to report unsolicited data observations for a given resource:

account_name/client_id/app_id/resource_id\n
"},{"location":"references/mqtt-namespace/#discoverability","title":"Discoverability","text":"

The MQTT namespace guidelines in this document do not address remote discoverability of a given device\u2019s applications and its resources. The described interaction pattern can be easily adopted to define an application whose only responsibility is reporting the device profile in terms of installed applications and available resources.

"},{"location":"references/mqtt-namespace/#remote-osgi-management-via-mqtt","title":"Remote OSGi Management via MQTT","text":"

The concepts previously described have been applied to develop a solution that allows for the remote management of certain aspects of an OSGi container through the MQTT protocol, including:

  • Remote deployment of application bundles

  • Remote start and stop of services

  • Remote read and update of service configurations

The following sections describe the MQTT topic namespaces and the application payloads used to achieve the remote management of an OSGi container via MQTT.

Note

For the scope of this document, some aspects concerning the encoding and compressing of the payload are not included.

The applicability of the remote management solution, as inspired by the OSGi component model, can be extended beyond OSGi as the contract with the managing server based on MQTT topics and XML payloads.

"},{"location":"references/mqtt-namespace/#remote-osgi-configurationadmin-interactions-via-mqtt","title":"Remote OSGi ConfigurationAdmin Interactions via MQTT","text":"

An application bundle is installed in the gateway to allow for remote management of the configuration properties of the services running in the OSGi container.

For information about the OSGi Configuration Admin Service and the OSGi Meta Type Service, please refer to the OSGi Service Platform Service R7 Specifications.

The app_id for the remote configuration service of an MQTT application is \u201cCONF-V1\u201d. The resources it manages are the configuration properties of the OSGi services. Service configurations are represented in XML format.

The following service configuration XML message is an example of a watchdog service:

<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>\n<ns2:configuration xmlns:ns2=<http://eurotech.com/esf/2.0\n  xmlns=<http://www.osgi.org/xmlns/metatype/v1.2.0>\n  pid=\"org.eclipse.kura.watchdog.WatchdogService\">\n\n  <OCD id=\"org.eclipse.kura.watchdog.WatchdogService\"\n    name=\"WatchdogService\"\n    description=\"WatchdogService Configuration\">\n\n    <Icon resource=\"WatchdogService\"/>\n\n    <AD id=\"watchdog.timeout\"\n      name=\"watchdog.timeout\"\n      required=\"true\"\n      default=\"10000\"\n      cardinality=\"0\"\n      type=\"Integer\"\n      description=\"\"/>\n  </OCD>\n\n  <ns2:properties>\n    <ns2:property type=\"Integer\" array=\"false\" name=\"watchdog.timeout\">\n      <ns2:value>10000</ns2:value>\n    </ns2:property>\n  </ns2:properties>\n</ns2:configuration>\n

The service configuration XML message is comprised of the following parts:

  • The Object Class Definition (OCD), which describes the service attributes that may be configured. (The syntax of the OCD element is described in the OSGi Service Platform Service R7 Specifications)

  • The properties element, which contains one or more properties with their associated type and values. The type name must match the name provided in the corresponding attribute definition identifier (AD id) contained in the OCD.

The \u201cCONF-V1\u201d application supports the read and update resource operations as described in the following sections.

"},{"location":"references/mqtt-namespace/#read-all-configurations","title":"Read All Configurations","text":"

This operation provides all service configurations for which remote administration is supported.

  • Request Topic:

    • $EDC/account_name/client_id/CONF-V1/GET/configurations

  • Request Payload:

    • Nothing application-specific beyond the request ID and requester client ID

  • Response Payload:

    • Configurations of all the registered services serialized in XML format
"},{"location":"references/mqtt-namespace/#read-configuration-for-a-given-service","title":"Read Configuration for a Given Service","text":"

This operation provides configurations for a specific service that is identified by an OSGi service persistent identifier pid.

  • Request Topic:

    • $EDC/account_name/client_id/CONF-V1/GET/configurations/pid

  • Request Payload:

    • Nothing application-specific beyond the request ID and requester client ID

  • Response Payload:

    • Configurations of the registered service identified by a pid serialized in XML format
"},{"location":"references/mqtt-namespace/#update-all-configurations","title":"Update All Configurations","text":"

This operation remotely updates the configuration of a set of services.

  • Request Topic:

    • $EDC/account_name/client_id/CONF-V1/PUT/configurations

  • Request Payload:

    • Service configurations serialized in XML format

  • Response Payload:

    • Nothing application-specific beyond the response code
"},{"location":"references/mqtt-namespace/#update-the-configuration-of-a-given-service","title":"Update the Configuration of a Given Service","text":"

This operation remotely updates the configuration of the service identified by a pid.

  • Request Topic:

    • $EDC/account_name/client_id/CONF-V1/PUT/configurations/pid

  • Request Payload:

    • Service configurations serialized in XML format

  • Response Payload:

    • Nothing application-specific
"},{"location":"references/mqtt-namespace/#example-management-web-application","title":"Example Management Web Application","text":"

The previously described read and update resource operations can be leveraged to develop a web application that allows for remote OSGi service configuration updates via MQTT though a web user-interface.

The screen capture that follows shows an example administration application where, for a given IoT gateway, a list of all configurable services is presented to the administrator.

When one such service is selected, a form is dynamically generated based on the metadata provided in the service OCD. This form includes logic to handle different attribute types, validate acceptable value ranges, and render optional values as drop-downs. When the form is submitted, the new values are communicated to the device through an MQTT resource update message.

"},{"location":"references/mqtt-namespace/#remote-osgi-deploymentadmin-interactions-via-mqtt","title":"Remote OSGi DeploymentAdmin Interactions via MQTT","text":"

An application is installed in the gateway to allow for the remote management of the deployment packages installed in the OSGi container.

For information about the OSGi Deployment Admin Service, please refer to the OSGi Service Platform Service Compendium 4.3 Specifications.

The app_id for the remote deployment service of an MQTT application is \u201cDEPLOY-V2\u201d. It allows to perform the following operations:

  • Download, install and uninstall OSGi Deployment Packages
  • Download and execute system updates based on shell scripts
  • Get the list of bundles currently in the runtime
  • Start and stop bundles
"},{"location":"references/mqtt-namespace/#deploy-v2","title":"DEPLOY-V2","text":""},{"location":"references/mqtt-namespace/#download-and-install-messages","title":"Download and Install Messages","text":"

The download request allows to download and optionally install a software package. The installation procedure will be performed after the download completes if the dp.install metric is set to true. If the metric is set to false, the installation step will not be performed.

The package type must be specified using the dp.install.system.update request metric, the supported types are the following:

  • OSGi Deployment Package: An OSGi deployment package. Selected with dp.install.system.update = false.
  • Executable Shell Script: A shell script that applies a system level update. Selected with dp.install.system.update = true.

The device will report the download progress and result of the installation to the cloud platform by sending asynchronous download notification messages and install notification messages.

The completion notification logic differs depending on the package type.

  • OSGi Deployment Package: The completion notification will be sent immediately after that the Deployment Package is installed on the system.

  • Executable Shell Script: The completion notification will not be sent immediately after that the shell script is executed, but is determined by the execution of an additional verifier script. The verifier script will be executed at next framework startup. A install notification message will be sent afterwards, with dp.install.status = COMPLETED if the exit status is 0 or dp.install.status = FAILED otherwise. This is based on the assumption that a system level update will typically require a device restart.

The verifier script can be provided in the following ways:

  • By specifying a download URL as the value of the dp.install.verifier.uri request metric. In this case the framework will download the verifier script from the provided URL.

  • By installing it during the execution of the main shell script. In this case the file must be placed in the /opt/eclipse/kura/data/persistance/verification directory. The installed verifier file name must have the ${name}-${version}.sh_verifier.sh structure where ${name} and ${version} must be replaced with the values of the dp.name and dp.version request metrics.

Warning

As said above, in case of Executable Shell Script, the completion notification will not be sent if the verifier script is not provided and/or the framework is not restarted.

Request:

  • Request Topic:

    • $EDC/[account_name]/[client_id]/DEPLOY-V2/EXEC/download

  • Payload:

    • metrics:
      • dp.job.id (Long). Mandatory. Represents a unique Job ID for the download.
      • dp.uri (String). Mandatory. Represents the URI of the deployment package.
      • dp.name (String). Mandatory. The value of the header DeploymentPackage-SymbolicName in the DP MANIFEST.
      • dp.version (String). Mandatory. The value of the header DeploymentPackage-Version in the DP MANIFEST. The file will be saved in the temporary directory as -.jar possibly overwriting an existing file.
      • dp.download.protocol (String) Mandatory. Specifies the protocol to be used to download the bundles/shell scripts. Must be set to HTTP or HTTPS.
      • dp.download.block.size (Integer). Optional (if not specified by the cloud platform, it is estimated by the device, depending on the total file size. In this case it is fixed at 1% of the total file size). The size in kBi of the blocks used to download the DP.
      • dp.download.block.delay (Integer). Optional (default: 0). Delay in ms between block transfers.
      • dp.download.notify.block.size (Integer). Optional (if not specified by the cloud platform, it is estimated by the device, depending on the total file size. In this case it is fixed at 5% of the total file size). The size in kBi between the notification messages sent to the cloud platform.
      • dp.download.timeout (Integer). Optional (default: 60000). The timeout in seconds for each block that has to be downloaded.
      • dp.download.resume (Bool). Optional (default: true). Resume download transfer if supported by the server.
      • dp.download.force (Bool). Optional (default: true). Specifies if the download forces to download again the file, if already exists on target device.
      • dp.download.username (String). Optional. Username for password protected download. No authentication will be tried if username is not present.
      • dp.download.password (String). Optional. Password for password protected download. No authentication will be tried if password is not present
      • dp.download.hash (String). Optional. The algorithm and value of the hash of the file used to verify the integrity of the download. The format is of this property is: {algorithm}:{hash value}
      • dp.install (Bool). Optional (default: true). Whether the package should be immediately installed after being downloaded.
      • dp.install.system.update (Bool). Optional (default: false). Sets whether or not this is a system update, rather than a bundle/package update.
      • dp.install.verifier.uri (String). Optional. The verifier script URI to run after the installation of the system update.
      • dp.reboot (Bool). Optional (default: false). Whether the system should be rebooted as part of the package installation process. This property is ignored if dp.install.system.update is true. In such case the reboot must be implemented as part of the script.
      • dp.reboot.delay (Integer). Optional (default: 0 - immediately). Delay after which the device will be rebooted. Only meaningful if\u00a0dp.reboot is true and dp.install.system.update is false.

        • Response:

        The client will reply immediately with an appropriate response.code. If the platform retries the request but the download is in progress, the client will reply that the request is already in progress with a 500 error code. If the DP has already been downloaded, the client will reply that the request has been accepted. If the dp.download.force flag is set to true, the client will start the download from the beginning, if false the device will proceed with the installation.

        Payload: no application-specific metrics or body.

        Request:

        • Request Topic:
          • $EDC/[account_name]/[client_id]/DEPLOY-V2/GET/download
        • Payload: no application-specific metrics or body.

        Response:

        • Payload:
          • metrics:
            • dp.http.transfer.size (Integer). The size in kBi of the DP being downloaded
            • dp.http.transfer.progress (Integer). The estimated progress of the download in percentage (0-100%). Do not rely on this indicator to detect the download completion.
            • dp.http.transfer.status (String). An enum specifying the download status (IN_PROGRESS, COMPLETED, FAILED...).
            • job.id (Long) Optional. The ID of the job to notify status

        Request:

        • Request Topic:
          • $EDC/[account_name]/[client_id]/DEPLOY-V2/DEL/download
        • Payload: no application-specific metrics or body.

        Response:

        • Response Payload:
          • Nothing application-specific beyond the response code. Unsolicited messages will report the status of the cancel operation.
        "},{"location":"references/mqtt-namespace/#unsolicited-messages-for-download-progress","title":"Unsolicited messages for download progress","text":"

        The client will start downloading the DP and will compute the size of the transfer from the HTTP header. This size will be used to estimate the download progress using the request parameter dp.download.block.size. Next, the client will report the download progress to the platform by publishing, with QoS==2, one or more unsolicited messages. If HTTP header is not available, the device will report 50% as dp.download.progress for all the download processes. The value of requester.client.id is one of the last downloads or install request received.

        Download Notification:

        • $EDC/account_name/requester.client.id/DEPLOY-V2/NOTIFY/client-id/download
        • Payload:
          • metrics:
            • job.id (Long). The ID of the job to notify status
            • dp.download.size (Integer). The size in kBi of the DP being downloaded
            • dp.download.progress (Integer). The estimated progress of the download in percentage (0-100%). Do not rely on this indicator to detect the download completion.
            • dp.download.status (String). An enum specifying the download status (IN_PROGRESS, COMPLETED, FAILED, CANCELLED...).
            • dp.download.error.message (String). In case of FAILED status, this metric will contain information about the error.
            • dp.download.index (Integer). The index of the file that is currently downloaded. This is supposed to support multiple file downloads.
        "},{"location":"references/mqtt-namespace/#install-messages","title":"Install Messages","text":"

        Request:

        • Request Topic:
          • $EDC/[account_name]/[client_id]/DEPLOY-V2/EXEC/install
        • Payload:
          • metrics:
            • dp.name (String). Mandatory. The value of the header DeploymentPackage-SymbolicName in the DP MANIFEST.
            • dp.version (String). Mandatory. The value of the header DeploymentPackage-Version in the DP MANIFEST. The basename of the DP file will to install is derived as -.jar. The file is assumed to reside in the temporary directory.
            • dp.install.system.update (Bool). Mandatory. Specifies if the specified resource is a system update or not. It can be applied to the system immediately or after a system reboot.
            • dp.install.verifier.uri (String). Optional. The verifier script URI to run after the installation of the system update.
            • dp.reboot (Bool). Optional (default: false). Whether the system should be rebooted as part of the package installation process. There might be DPs requiring a post-installation (from the standpoint of the OSGi Deployment Admin) step requiring a system reboot. Note that the post-install phase is not handled by the Deployment Admin. The installation in this case is complete (and can fail) after the reboot. This property is ignored if dp.install.system.update is true. In such case the reboot must be implemented as part of the script.
            • dp.reboot.delay (Integer). Optional (default: 0 - immediately). Delay after which the device will be rebooted. Only meaningful if\u00a0dp.reboot is true and dp.install.system.update is false.

              • Note

              This operation can be retried. Anyway, if it fails once it's likely to fail again.

              Response:

              • Payload: Nothing application-specific beyond the response code. Unsolicited messages will report the status of the install operation.

              Request:

              • Request Topic:
                • $EDC/[account_name]/[client_id]/DEPLOY-V2/GET/install
              • Payload: no application-specific metrics or body.

              Response:

              • Payload:
                • metrics:
                  • dp.install.status (String). An enum specifying the install status
                    • IDLE
                    • INSTALLING BUNDLE
                  • dp.name (String). Optional. If installing: the value of the header DeploymentPackage-SymbolicName in the DP MANIFEST.
                  • dp.version (String). Optional. If installing: the value of the header DeploymentPackage-Version in the DP MANIFEST.
              "},{"location":"references/mqtt-namespace/#unsolicited-messages-for-install-progress","title":"Unsolicited messages for install progress","text":"

              If the value of dp.install in the original download request is true the client will start installing the DP. Due to the limitations of the OSGi DeploymentAdmin, it's not possible to have feedback on the install progress. However, these operations should normally complete in a few seconds, even for an upgrade. Otherwise (dp.install==false), the platform can request the installation of an already downloaded package through the following message:

              Install notification:

              • $EDC/account_name/requester.client.id/DEPLOY-V2/NOTIFY/client-id/install
              • Payload:
                • metrics:
                  • job.id (Long). The ID of the job to notify status
                  • dp.name (String). The name of the package that is installing.
                  • dp.install.progress (Integer). The estimated progress of the install in percentage (0-100%). Due to limitations of the OSGi DeploymentAdmin, it's not possible to have a linear progress. It will go from 0% to 100% in one step. Do not rely on this indicator to detect the download completion.
                  • dp.install.status (String). An enum specifying the install status (IN_PROGRESS, COMPLETED, FAILED...).
                  • dp.install.error.message (String) Optional. In case of FAILED status, this metric will contain information about the error.
              "},{"location":"references/mqtt-namespace/#uninstall-messages","title":"Uninstall Messages","text":"

              Request:

              • Request Topic:
                • $EDC/[account_name]/[client_id]/DEPLOY-V2/EXEC/uninstall
              • Payload:
                • metrics:
                  • dp.name (String). Mandatory. The value of the header DeploymentPackage-SymbolicName in the DP MANIFEST.
                  • job.id (Long) Mandatory. The ID of the job to notify status
                  • dp.version (String). Mandatory. The value of the header DeploymentPackage-Version in the DP MANIFEST. The basename of the DP file will to install is derived as -.jar. The file is assumed to reside in the temporary directory.
                  • dp.reboot (Bool). Optional (default: false). Whether the system should be rebooted as part of the package uninstall process.
                  • dp.reboot.delay (Integer). Optional (default: 0 - immediately). Delay after which the device will be rebooted. Only meaningful if dp.reboot==true.

                    • Response: The client will reply immediately with an appropriate response.code. If the platform retries the request but the uninstall operation is in progress, the client will reply that the request is already in progress with a 500 error code. At the end of the uninstall operation, an unsolicited message is sent to the cloud platform to report the operation status. If a reboot was requested in the received uninstall request, it will be executed with the specified delay.

                    "},{"location":"references/mqtt-namespace/#unsolicited-messages-for-uninstall-progress","title":"Unsolicited messages for uninstall progress","text":"

                    Uninstall notification:

                    • $EDC/account_name/requester.client.id/DEPLOY-V2/NOTIFY/client-id/uninstall
                    • Payload:
                      • metrics:
                        • job.id (Long). The ID of the job to notify status
                        • dp.name (String). The name of the package that is uninstalling.
                        • dp.uninstall.progress (Integer). The estimated progress of the install in percentage (0-100%). Due to limitations of the OSGi DeploymentAdmin, it's not possible to have a linear progress. It will go from 0% to 100% in one step. Do not rely on this indicator to detect the download completion.
                        • dp.uninstall.status (String). An enum specifying the uninstall status (IN_PROGRESS, COMPLETED, FAILED...).
                        • dp.uninstall.error.message (String) Optional. In case of FAILED status, this metric will contain information about the error.
                    "},{"location":"references/mqtt-namespace/#read-all-bundles","title":"Read All Bundles","text":"

                    This operation provides all the bundles installed in the OSGi framework.

                    • Request Topic:
                      • $EDC/account_name/client_id/DEPLOY-V2/GET/bundles
                    • Request Payload:
                      • Nothing application-specific beyond the request ID and requester client ID
                    • Response Payload:
                      • Installed bundles serialized in XML format

                    The following XML message is an example of a bundle:

                    <?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>\n<bundles>\n    <bundle>\n        <name>org.eclipse.osgi</name>\n        <version>3.8.1.v20120830-144521</version>\n        <id>0</id>\n        <state>ACTIVE</state>\n    </bundle>\n    <bundle>\n        <name>org.eclipse.equinox.cm</name>\n        <version>1.0.400.v20120522-1841</version>\n        <id>1</id>\n        <state>ACTIVE</state>\n    </bundle>\n</bundles>\n

                    The bundle XML message is comprised of the following bundle elements:

                    • Symbolic name
                    • Version
                    • ID
                    • State
                    "},{"location":"references/mqtt-namespace/#start-a-bundle","title":"Start a Bundle","text":"

                    This operation starts a bundle identified by its ID.

                    • Request Topic:
                      • $EDC/account_name/client_id/DEPLOY-V2/EXEC/start/bundle_id
                    • Request Payload:
                      • Nothing application-specific beyond the request ID and requester client ID
                    • Response Payload:
                      • Nothing application-specific beyond the response code
                    "},{"location":"references/mqtt-namespace/#stop-a-bundle","title":"Stop a Bundle","text":"

                    This operation stops a bundle identified by its ID.

                    • Request Topic:
                      • $EDC/account_name/client_id/DEPLOY-V2/EXEC/stop/bundle_id
                    • Request Payload:
                      • Nothing application-specific beyond the request ID and requester client ID
                    • Response Payload:
                      • Nothing application-specific beyond the response code
                    "},{"location":"references/mqtt-namespace/#example-management-web-application_1","title":"Example Management Web Application","text":"

                    The previously described read, start/stop, and install/uninstall resources can be used to implement a remote management application. An example of such application is Eclipse Kapua. In particular it is possible to use the download and install resources from the following sections in Eclipse Kapua console:

                    • Devices section:

                    Selecting the Devices section, a target device, and then clicking on the Install button in the Packages tab will allow to send download and install requests.

                    • Batch Jobs section

                    It is possible to create a batch job with the Package Download / Install definition to perform a download / install request on a set of target devices.

                    "},{"location":"references/mqtt-namespace/#remote-gateway-inventory-via-mqtt","title":"Remote Gateway Inventory via MQTT","text":"

                    An application is installed in the gateway to allow for the remote query of the resources installed in the OSGi container and the underlying OS.

                    The app_id for the remote inventory service of an MQTT application is \u201cINVENTORY-V1\u201d. The service allows retrieving all the different resources available/installed on the gateway. The service supports the following resources:

                    • BUNDLES : represents a OSGi Bundle
                    • DP : represents a OSGi Deployment Package
                    • DEB : represents a Linux Debian package
                    • RPM : represents a Linux RPM package
                    • APK : represents a Linux Alpine APK package
                    • DOCKER : represents a container
                    • CONTAINER IMAGE : represents a container image

                    The resources are represented in JSON format. The following message is an example of a service deployment:

                    {\n    \"inventory\":[\n        {\n            \"name\":\"adduser\",\n            \"version\":\"3.118\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"io.netty.transport-native-unix-common\",\n            \"version\":\"4.1.34.Final\",\n            \"type\":\"BUNDLE\"\n        },\n    ]\n}\n

                    The inventory JSON message is comprised of the following package elements:

                    • Name

                    • Version

                    • Type

                    The \u201cINVENTORY-V1\u201d application supports only the read resource operations as described in the following sections.

                    "},{"location":"references/mqtt-namespace/#inventory-bundles","title":"Inventory Bundles","text":""},{"location":"references/mqtt-namespace/#read-all-bundles_1","title":"Read All Bundles","text":"

                    This operation provides all the bundles installed in the OSGi framework.

                    • Request Topic:

                      • $EDC/account_name/client_id/INVENTORY-V1/GET/bundles

                    • Request Payload:

                      • Nothing application-specific beyond the request ID and requester client ID

                    • Response Payload:

                      • Installed bundles serialized in JSON format

                    The following JSON message is an example of a bundle:

                    {\n    \"bundles\":[\n        {\n            \"name\":\"org.eclipse.osgi\",\n            \"version\":\"3.16.0.v20200828-0759\",\n            \"id\":0,\n            \"state\":\"ACTIVE\",\n            \"signed\":true\n        },\n        {\n            \"name\":\"org.eclipse.equinox.cm\",\n            \"version\":\"1.4.400.v20200422-1833\",\n            \"id\":1,\n            \"state\":\"ACTIVE\",\n            \"signed\":false\n        }\n    ]\n}\n

                    The bundle JSON message is comprised of the following bundle elements:

                    • Symbolic name

                    • Version

                    • ID

                    • State

                    • Signed

                    "},{"location":"references/mqtt-namespace/#start-bundle","title":"Start Bundle","text":"

                    This operation allows to start a bundles installed in the OSGi framework.

                    • Request Topic:

                      • $EDC/account_name/client_id/INVENTORY-V1/EXEC/bundles/_start

                    • Request Payload:

                      • A JSON object that identifies the target bundle must be specified in payload body.

                    • Response Payload:

                      • Nothing application specific
                    "},{"location":"references/mqtt-namespace/#stop-bundle","title":"Stop Bundle","text":"

                    • Request Topic:

                      • $EDC/account_name/client_id/INVENTORY-V1/EXEC/bundles/_stop

                    • Request Payload:

                      • A JSON object that identifies the target bundle must be specified in payload body.

                    • Response Payload:

                      • Nothing application specific
                    "},{"location":"references/mqtt-namespace/#json-identifier-for-start-and-stop-requests","title":"JSON identifier for start and stop requests","text":"

                    The requests for starting and stopping a bundle require the application to include a JSON object in request payload for selecting the target bundle, the defined properties are the following:

                    • name: The symbolic name of the bundle to be started/stopped. This parameter must be of string type and it is mandatory.
                    • version: The version of the bundle to be stopped. This parameter must be of string type and it is optional.

                    If multiple bundles match the selection criteria, only one of them will be stopped/started, which one is not defined.

                    Examples:

                    {\n    \"name\":\"org.eclipse.kura.example.beacon\"\n}\n
                    {\n    \"name\":\"org.eclipse.kura.example.beacon\",\n    \"version\":\"1.0.500\"\n}\n
                    "},{"location":"references/mqtt-namespace/#inventory-deployment-packages","title":"Inventory Deployment Packages","text":""},{"location":"references/mqtt-namespace/#read-all-deployment-packages","title":"Read All Deployment Packages","text":"

                    This operation provides the deployment packages installed in the OSGi framework.

                    • Request Topic:

                      • $EDC/account_name/client_id/INVENTORY-V1/GET/packages

                    • Request Payload:

                      • Nothing application-specific beyond the request ID and requester client ID

                    • Response Payload:

                      • Installed deployment packages serialized in JSON format

                    The following JSON message is an example of a bundle:

                    {\n    \"deploymentPackages\":[\n        {\n            \"name\":\"org.eclipse.kura.example.beacon\",\n            \"version\":\"1.0.500\",\n            \"signed\":false,\n            \"bundles\":[\n                {\n                    \"name\":\"org.eclipse.kura.example.beacon\",\n                    \"version\":\"1.0.500\",\n                    \"id\": 171,\n                    \"state\": \"ACTIVE\",\n                    \"signed\": false\n                }\n            ]\n        }\n    ]\n}\n

                    The deployment package JSON message is comprised of the following package elements:

                    • Symbolic name

                    • Version

                    • Signature: true if all the bundles in the deployment package are signed

                    • Bundles that are managed by the deployment package along with their symbolic name and version

                    "},{"location":"references/mqtt-namespace/#inventory-system-packages-debrpmapk","title":"Inventory System Packages (DEB/RPM/APK)","text":""},{"location":"references/mqtt-namespace/#read-all-system-packages","title":"Read All System Packages","text":"

                    This operation provides the Linux packages installed in OS.

                    • Request Topic:

                      • $EDC/account_name/client_id/INVENTORY-V1/GET/systemPackages

                    • Request Payload:

                      • Nothing application-specific beyond the request ID and requester client ID

                    • Response Payload:

                      • Installed Linux Packages serialized in JSON format

                    The following JSON message is an example of a bundle:

                    {\n    \"systemPackages\":[\n        {\n            \"name\":\"adduser\",\n            \"version\":\"3.118\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"alsa-utils\",\n            \"version\":\"1.1.8-2\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"ansible\",\n            \"version\":\"2.7.7+dfsg-1\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apparmor\",\n            \"version\":\"2.13.2-10\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt\",\n            \"version\":\"1.8.2.1\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt-listchanges\",\n            \"version\":\"3.19\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt-transport-https\",\n            \"version\":\"1.8.2.2\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt-utils\",\n            \"version\":\"1.8.2.1\",\n            \"type\":\"DEB\"\n        }\n    ]\n}\n

                    The bundle JSON message is comprised of the following bundle elements:

                    • Name

                    • Version

                    • Type

                    "},{"location":"references/mqtt-namespace/#inventory-containers","title":"Inventory Containers","text":""},{"location":"references/mqtt-namespace/#list-all-containers","title":"List All Containers","text":"

                    Using the API exposed by Inventory-V1, the user can manage containers via external applications such as Eclipse Kapua. This operation lists all the containers installed in the gateway.

                    • Request Topic:
                      • $EDC/account_name/client_id/INVENTORY-V1/GET/containers
                    • Request Payload:
                      • Nothing application-specific beyond the request ID and requester client ID
                    • Response Payload:
                      • Installed containers serialized in JSON format

                    The following JSON message is an example of what this request outputs:

                    {\n  \"containers\":\n  [\n    {\n      \"name\":\"container_1\",\n      \"version\":\"nginx:latest\",\n      \"type\":\"DOCKER\",\n      \"state\":\"active\"\n    }\n  ]\n}\n

                    The container JSON message is comprised of the following elements:

                    • Name: The name of the docker container.

                    • Version: describes both the container's respective image and tag separated by a colon.

                    • Type: denotes the type of inventory payload

                    • State: describes the container's current state

                      • active: Container is running
                      • installed: Container is starting
                      • uninstalled: Container has failed, or is stopped
                      • unknown: Container state can not be determined
                    "},{"location":"references/mqtt-namespace/#start-a-container","title":"Start a Container","text":"

                    This operation allows starting a container installed on the gateway. * Request Topic * $EDC/account_name/client_id/INVENTORY-V1/EXEC/containers/_start * Request Payload * A JSON object that identifies the target container must be specified in the payload body. This payload will be described in the following section * Response Payload * Nothing application-specific

                    "},{"location":"references/mqtt-namespace/#stop-a-container","title":"Stop a Container","text":"
                    • Request Topic
                      • $EDC/account_name/client_id/INVENTORY-V1/EXEC/containers/_stop
                    • Request Payload
                      • A JSON object that identifies the target container must be specified in the payload body. This payload will be described in the following section.
                    • Response Payload
                      • Nothing application-specific
                    "},{"location":"references/mqtt-namespace/#json-identifierpayload-for-container-start-and-stop-requests","title":"JSON identifier/payload for container start and stop requests","text":"

                    The requests for starting and stopping a container require the application to include a JSON object in the request payload for selecting the target container. Docker enforces unique container names on a gateway, and thus they can reliably be used as an identifier.

                    Examples:

                    {\n    \"name\":\"container_1\",\n    \"version\":\"nginx:latest\",\n    \"type\":\"DOCKER\",\n    \"state\":\"active\"\n}\n
                    {\n    \"name\":\"container_1\",\n}\n
                    "},{"location":"references/mqtt-namespace/#inventory-container-images","title":"Inventory Container Images","text":""},{"location":"references/mqtt-namespace/#list-all-images","title":"List All Images","text":"

                    Using the API exposed by Inventory-V1, the user can manage container images via external applications such as Eclipse Kapua. This operation lists all the images in the gateway.

                    • Request Topic:
                      • $EDC/account_name/client_id/INVENTORY-V1/GET/images
                    • Request Payload:
                      • Nothing application-specific beyond the request ID and requester client ID
                    • Response Payload:
                      • Installed containers serialized in JSON format

                    The following JSON message is an example of what this request outputs:

                    {\n  \"images\":\n  [\n    {\n        \"name\":\"nginx\",\n        \"version\":\"latest\",\n        \"type\":\"CONTAINER_IMAGE\"\n    }\n  ]\n}\n

                    The container JSON message is comprised of the following elements:

                    • Name: The name of the container image.

                    • Version: describes the container image's version.

                    • Type: denotes the type of inventory payload

                    "},{"location":"references/mqtt-namespace/#delete-a-container-image","title":"Delete a Container Image","text":"

                    This operation allows deleting a container image not in use on the gateway. * Request Topic * $EDC/account_name/client_id/INVENTORY-V1/EXEC/images/_delete * Request Payload * A JSON object that identifies the target image must be specified in the payload body. This payload will be described in the following section * Response Payload * Nothing application-specific

                    "},{"location":"references/mqtt-namespace/#json-identifierpayload-for-container-image-delete-requests","title":"JSON identifier/payload for container image delete requests","text":"

                    The requests for deleting a container image require the application to include a JSON object in the request payload for selecting the target. The JSON requires both name and version fields to be populated.

                    Examples:

                    {\n    \"name\":\"nginx\",\n    \"version\":\"latest\",\n    \"type\":\"CONTAINER_IMAGE\"\n}\n
                    {\n    \"name\":\"nginx\",\n    \"version\":\"latest\",\n}\n
                    "},{"location":"references/mqtt-namespace/#inventory-summary","title":"Inventory Summary","text":""},{"location":"references/mqtt-namespace/#read-all-resources","title":"Read All Resources","text":"

                    This operation provides a list of all the resources installed on the gateway

                    • Request Topic:

                      • $EDC/account_name/client_id/INVENTORY-V1/GET/inventory

                    • Request Payload:

                      • Nothing application-specific beyond the request ID and requester client ID

                    • Response Payload:

                      • Installed Linux Packages serialized in JSON format

                    The following JSON message is an example of a bundle:

                    {\n    \"inventory\":[\n        {\n            \"name\":\"adduser\",\n            \"version\":\"3.118\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"com.eclipsesource.jaxrs.provider.gson\",\n            \"version\":\"2.3.0.201602281253\",\n            \"type\":\"BUNDLE\"\n        },\n              {\n            \"name\":\"org.eclipse.kura.example.beacon\",\n            \"version\":\"1.0.500\",\n            \"type\":\"DP\"\n        }\n    ]\n}\n

                    The bundle JSON message is comprised of the following bundle elements:

                    • Name

                    • Version

                    • Type

                    "},{"location":"references/mqtt-namespace/#remote-certificates-and-keys-management-via-mqtt-keys-v1-and-keys-v2","title":"Remote Certificates and Keys management via MQTT (KEYS-V1 and KEYS-V2)","text":""},{"location":"references/mqtt-namespace/#keys-v1","title":"KEYS-V1","text":"

                    The KEYS-V1 app-id is exposed by the org.eclipse.kura.core.keystore bundle. This request handler allows the remote management platform to get a list of all the KeystoreService instances and corresponding keys managed by the framework in a given device.

                    The request handler allows, also, to install new trusted certificate and to generate new key pairs directly in the device. Finally, the remote platform can request, from a defined key pair, the generation of a CSR that can be countersigned remotely by a trusted CA.

                    "},{"location":"references/mqtt-namespace/#read-all-the-kestoreservices","title":"Read All the KestoreServices","text":"

                    This operation returns the list of all the KeystoreServices instantiated in the framework.

                    • Request Topic:

                      • $EDC/account_name/client_id/KEYS-V1/GET/keystores

                    • Request Payload:

                      • Nothing application-specific beyond the request ID and requester client ID

                    • Response Payload:

                      • List of all the managed KeystoreService instances with number of entries stored

                    The following JSON message is an example of an output provided:

                    [\n    {\n        \"id\": \"org.eclipse.kura.core.keystore.SSLKeystore\",\n        \"type\": \"jks\",\n        \"size\": 4\n    },\n    {\n        \"id\": \"org.eclipse.kura.crypto.CryptoService\",\n        \"type\": \"jks\",\n        \"size\": 3\n    },\n    {\n        \"id\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n        \"type\": \"jks\",\n        \"size\": 1\n    },\n    {\n        \"id\": \"org.eclipse.kura.core.keystore.DMKeystore\",\n        \"type\": \"jks\",\n        \"size\": 1\n    }\n]\n
                    Each entry of the array is specified by the following values:

                    • id: the KeystoreService PID
                    • type: the type of keystore managed by the given instance
                    • size: the number of entries in a given KeystoreService instance
                    "},{"location":"references/mqtt-namespace/#read-key-entries","title":"Read Key Entries","text":"

                    This operation returns the list of all the key entries managed by the framework. If a request payload is specified, the list of entries is filtered based on the parameters in the request

                    • Request Topic:

                      • $EDC/account_name/client_id/KEYS-V1/GET/keystores/entries

                    • Request Payload:

                      • Nothing application-specific beyond the request ID and requester client ID. In this case the response will contain all the entries in all the managed keystoreService instances.
                      • A JSON object with one of the following:
                      {\n    \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.SSLKeystore\"\n}\n
                      {\n\"alias\": \"ca-godaddyclass2ca\"\n}\n

                    • Response Payload:

                      • List of all the key entries managed by the framework eventually filtered based on the parameters in the request.

                    The following JSON message is an example of an output provided in the response body:

                    [\n    {\n        \"subjectDN\": \"OU=Go Daddy Class 2 Certification Authority, O=\\\"The Go Daddy Group, Inc.\\\", C=US\",\n        \"issuer\": \"OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\\\\, Inc.,C=US\",\n        \"startDate\": \"Tue, 29 Jun 2004 17:06:20 GMT\",\n        \"expirationDate\": \"Thu, 29 Jun 2034 17:06:20 GMT\",\n        \"algorithm\": \"SHA1withRSA\",\n        \"size\": 2048,\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.SSLKeystore\",\n        \"alias\": \"ca-godaddyclass2ca\",\n        \"type\": \"TRUSTED_CERTIFICATE\"\n    },\n    {\n        \"algorithm\": \"RSA\",\n        \"size\": 4096,\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n        \"alias\": \"localhost\",\n        \"type\": \"PRIVATE_KEY\"\n    }\n]\n
                    "},{"location":"references/mqtt-namespace/#read-key-details","title":"Read Key Details","text":"

                    This operation returns the details associated to a specified key in a keystore

                    • Request Topic:

                      • $EDC/account_name/client_id/KEYS-V1/GET/keystores/entries/entry

                    • Request Payload:

                      • A JSON with the keystoreServicePid and the alias of the desired key 

                    {\n  \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\"\n  \"alias\": \"localhost\"\n}\n
                    * Response Payload: * List of all the details associated to a key managed by the framework

                    The following JSON message is an example of an output provided:

                    {\n    \"algorithm\": \"RSA\",\n    \"size\": 4096,\n    \"certificateChain\": [\n        \"-----BEGIN CERTIFICATE-----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\\nru+07QriQQxK8V7AdPr6bhmKPxbbFenvSQmsmgjAY93qtanbNg==\\n-----END CERTIFICATE-----\"\n    ],\n    \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n    \"alias\": \"localhost\",\n    \"type\": \"PRIVATE_KEY\"\n}\n
                    "},{"location":"references/mqtt-namespace/#create-csr","title":"Create CSR","text":"

                    This operation returns the CSR for a specific key pair managed by the framework

                    • Request Topic:

                      • $EDC/account_name/client_id/KEYS-V1/POST/keystores/entries/csr

                    • Request Payload:

                      • A JSON with the all the details necessary to generate the CSR 
                      { \n    \"keystoreServicePid\":\"org.eclipse.kura.core.keystore.HttpsKeystore\",\n    \"alias\":\"localhost\",\n    \"signatureAlgorithm\" : \"SHA256withRSA\",\n    \"attributes\" : \"CN=Kura, OU=IoT, O=Eclipse, C=US\"\n}\n

                    • Response Payload:

                      • The generated CSR in the body of the message
                      -----BEGIN CERTIFICATE REQUEST-----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\nZ0Vd1nM=\n-----END CERTIFICATE REQUEST-----\n
                    "},{"location":"references/mqtt-namespace/#store-trusted-certificate","title":"Store Trusted Certificate","text":"

                    This operation stores the provided certificate as a Trusted Certificate Entry managed by the framework

                    • Request Topic:

                      • $EDC/account_name/client_id/KEYS-V1/POST/keystores/entries/certificate

                    • Request Payload:

                      • A JSON with the all the details necessary to generate create the new entry
                      {\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"myCertTest99\",\n    \"certificate\":\"-----BEGIN CERTIFICATE-----\n        MIIDdzCCAl+gAwIBAgIEQsO0gDANBgkqhkiG9w0BAQsFADBsMRAwDgYDVQQGEwdV\n        bmtub3duMRAwDgYDVQQIEwdVbmtub3duMRAwDgYDVQQHEwdVbmtub3duMRAwDgYD\n        VQQKEwdVbmtub3duMRAwDgYDVQQLEwdVbmtub3duMRAwDgYDVQQDEwdVbmtub3du\n        MB4XDTIxMDQxNDA4MDIyOFoXDTIxMDcxMzA4MDIyOFowbDEQMA4GA1UEBhMHVW5r\n        bm93bjEQMA4GA1UECBMHVW5rbm93bjEQMA4GA1UEBxMHVW5rbm93bjEQMA4GA1UE\n        ChMHVW5rbm93bjEQMA4GA1UECxMHVW5rbm93bjEQMA4GA1UEAxMHVW5rbm93bjCC\n        ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJSWJDxu8UNC4JGOgK31WCvz\n        NKy2ONH+jTVKnBY7Ckb1hljJY0sKO55aG1HNDfkev2lJTsPIz0nJjNsqBvB1flvf\n        r6XVCxdN0yxvU5g9SpRxE/iiPX0Qt7463OfzyKW97haJrrhF005RHYNcORMY/Phj\n        hFDnZhtAwpbQLzq2UuIZ7okJsx0IgRbjH71ZZuvYCqG7Ct/bp1D7w3tT7gTbIKYH\n        ppQyG9rJDEh9+cr9Hyk8Gz7aAbPT/wMH+/vXDjH2j/M1Tmed0ajuGCJumaTQ4eHs\n        9xW3B3ugycb6e7Osl/4ESRO5RQL1k2GBONv10OrKDoZ5b66xwSJmC/w3BRWQ1cMC\n        AwEAAaMhMB8wHQYDVR0OBBYEFPospETb5HNeD/DmS9mwt+v/AYq/MA0GCSqGSIb3\n        DQEBCwUAA4IBAQBxMe1xQVQKt36A5qVlEZyxI9eb6eQRlYzorOgP2tFaOsvDPpRI\n        CALhPmxgQl/5QvKFfCXKoxWj1Spg4sF6fJp6jhSjLpmChS9lf5fRaWS20/pxIddM\n        10diq3r6HxLKSxCYK7Pf5scOeZquvwfo8Kxye01bvCMFf1s1K3ZEZszk5Oo2MnWU\n        U22YnXfZm1C0h2WMUcou35A7CeVAHPWI0Rvefojv1qYlQScJOkCN5lO6C/1qvRhq\n        nDQdQN/m1HQbpfh2DD6F33nBjkyLQyMRF8uMnspLrLLj8lecSTJZO4fGJOaIXh3O\n        44da9A02FAf5nRRQpwP2x/4IZ5RTRBzrqbqD\n        -----END CERTIFICATE-----\"\n}\n

                    • Response Payload:

                      • Nothing
                    "},{"location":"references/mqtt-namespace/#generate-keypair","title":"Generate KeyPair","text":"

                    This operation will generate a new key pair directly in the device, based on the parameters received from the request

                    • Request Topic:

                      • $EDC/account_name/client_id/KEYS-V1/POST/keystores/entries/keypair

                    • Request Payload:

                      • A JSON with the all the details necessary to create the new key pair
                      {\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"keypair1\",\n    \"algorithm\" : \"RSA\",\n    \"size\": 1024,\n    \"signatureAlgorithm\" : \"SHA256WithRSA\",\n    \"attributes\" : \"CN=Kura, OU=IoT, O=Eclipse, C=US\"\n}\n

                    • Response Payload:

                      • Nothing
                    "},{"location":"references/mqtt-namespace/#delete-entry","title":"Delete Entry","text":"

                    This operation will delete the specified entry from the framework managed keystores

                    • Request Topic:

                      • $EDC/account_name/client_id/KEYS-V1/DEL/keystores/entries

                    • Request Payload:

                      • A JSON with the all the details necessary to identify the entry to be deleted
                      {\n    \"keystoreServicePid\" : \"MyKeystore\",\n    \"alias\" : \"mycerttestec\"\n}\n

                    • Response Payload:

                      • Nothing
                    "},{"location":"references/mqtt-namespace/#keys-v2","title":"KEYS-V2","text":"

                    Starting from Kura 5.4.0, the KEYS-V2 request handler is also available, it supports all of the request endpoints of KEYS-V1 plus an additional endpoint that allows to upload and modify private key entries:

                    "},{"location":"references/mqtt-namespace/#uploading-a-private-key-entry","title":"Uploading a Private Key Entry","text":"

                    • Request Topic:

                      • $EDC/account_name/client_id/KEYS-V2/POST/keystores/entries/privatekey

                    • Request Payload:

                      The request should include the private key in unencrypted PEM format and the certificate chain in PEM format, the first certificate in the certificateChain list must use the public key associated with the private key supplied as the privateKey parameter.

                      The device will overwrite the entry with the provided alias if it already exists.

                      {\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"keypair1\",\n    \"privateKey\":\"-----BEGIN RSA PRIVATE KEY-----\\n...\\n-----END RSA PRIVATE KEY-----\",\n    \"certificateChain\":[\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n    ]\n}\n

                    • Response Payload:

                      • Nothing
                    "},{"location":"references/mqtt-namespace/#updating-a-private-key-entry","title":"Updating a Private Key Entry","text":"

                    • Request Topic:

                      • $EDC/account_name/client_id/KEYS-V2/POST/keystores/entries/privatekey

                    • Request Payload:

                      In order to update the certificate chain associated to a specific private key entry it is possible to use the same format as previous request and omit the privateKey parameter.

                      In this case the certificate chain of the existing entry will be replaced with the one specified in the request and the existing private key will be retained.

                      This request can be useful for example to create a CSR on the device, sign it externally and then updating the corresponding entry with the resulting certificate.

                      {\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"keypair1\",\n    \"certificateChain\":[\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n    ]\n}\n

                    • Response Payload:

                      • Nothing
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/","title":"Rest CloudConnection v1 API","text":"

                    Note

                    This API can also be accessed via the RequestHandler with app-id: CLD-V1.

                    The CloudConnectionRestService APIs provides methods to manage cloud connection related components like CloudEndpoint, CloudPublisher and CloudSubscriber instances.

                    Identities with rest.cloudconnection permissions can access these APIs.

                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#get-methods","title":"GET methods","text":""},{"location":"references/rest-apis/rest-cloudconnection-api/#find-cloud-component-instances","title":"Find Cloud Component Instances","text":"
                    • Description: This method returns all the Cloud Component instances, including CloudEndpoint, CloudPublisher and CloudSubscriber instances.
                    • Method: GET
                    • API PATH: services/cloudconnection/v1/instances
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses","title":"Responses","text":"
                    • 200 Ok Status 
                      {\n    \"cloudEndpointInstances\": [\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"state\": \"DISCONNECTED\",\n            \"cloudEndpointType\": \"CLOUD_CONNECTION_MANAGER\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService-todelete\",\n            \"state\": \"DISCONNECTED\",\n            \"cloudEndpointType\": \"CLOUD_CONNECTION_MANAGER\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService-2\",\n            \"state\": \"DISCONNECTED\",\n            \"cloudEndpointType\": \"CLOUD_CONNECTION_MANAGER\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService-3\",\n            \"state\": \"DISCONNECTED\",\n            \"cloudEndpointType\": \"CLOUD_CONNECTION_MANAGER\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService-test\",\n            \"state\": \"DISCONNECTED\",\n            \"cloudEndpointType\": \"CLOUD_CONNECTION_MANAGER\"\n        }\n    ],\n    \"pubsubInstances\": [\n        {\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"pid\": \"testPub\",\n            \"factoryPid\": \"org.eclipse.kura.cloud.publisher.CloudPublisher\",\n            \"type\": \"PUBLISHER\"\n        },\n        {\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"pid\": \"testPub\",\n            \"factoryPid\": \"org.eclipse.kura.cloud.publisher.CloudPublisher\",\n            \"type\": \"SUBSCRIBER\"\n        }\n    ]\n}\n

                    • cloudEndpointType: The possible values are:

                      • CLOUD_CONNECTION_MANAGER if the component implements CloudConnectionManager

                      • CLOUD_ENDPOINT otherwise.

                    If cloudEndpointType is CLOUD_CONNECTION_MANAGER, it is possible to use the cloudEndpoint/connect, cloudEndpoint/disconnect and cloudEndpoint/isConnected methods to manage the connection state.

                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#get-cloudcomponent-factories","title":"Get CloudComponent Factories","text":"
                    • Description: This method returns all the Factories able to create Component for CloudEndpoint, including CloudConnectionFactory, CloudPublisher, CloudSubscriber
                    • Method: GET
                    • API PATH: services/cloudconnection/v1/factories
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_1","title":"Responses","text":"
                    • 200 Ok Status 
                      {\n    \"cloudConnectionFactories\": [\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"defaultCloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService-2\",\n            \"cloudEndpointPidRegex\": \"^org.eclipse.kura.cloud.CloudService\\\\-[a-zA-Z0-9]+$\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\",\n            \"defaultCloudEndpointPid\": \"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\",\n            \"cloudEndpointPidRegex\": \"^org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager(\\\\-[a-zA-Z0-9]+)?$\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloudconnection.raw.mqtt.cloud.RawMqttCloudEndpoint\",\n            \"defaultCloudEndpointPid\": \"org.eclipse.kura.cloudconnection.raw.mqtt.CloudEndpoint\",\n            \"cloudEndpointPidRegex\": \"^org.eclipse.kura.cloudconnection.raw.mqtt.CloudEndpoint(\\\\-[a-zA-Z0-9]+)?$\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.camel.cloud.factory.CamelFactory\",\n            \"defaultCloudEndpointPid\": \"org.eclipse.kura.camel.cloud.factory.CamelFactory\",\n            \"cloudEndpointPidRegex\": \"^org.eclipse.kura.camel.cloud.factory.CamelFactory(\\\\-[a-zA-Z0-9]+)?$\"\n        }\n    ],\n    \"pubSubFactories\": [\n        {\n            \"factoryPid\": \"org.eclipse.kura.cloudconnection.raw.mqtt.subscriber.RawMqttSubscriber\",\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloudconnection.raw.mqtt.cloud.RawMqttCloudEndpoint\"\n        },\n        {\n            \"factoryPid\": \"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher\",\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\",\n            \"defaultPid\": \"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher\",\n            \"defaultPidRegex\": \"^org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher(\\\\-[a-zA-Z0-9]+)?$\"\n        },\n        {\n            \"factoryPid\": \"org.eclipse.kura.cloud.subscriber.CloudSubscriber\",\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\"\n        },\n        {\n            \"factoryPid\": \"org.eclipse.kura.cloud.publisher.CloudPublisher\",\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\"\n        },\n        {\n            \"factoryPid\": \"org.eclipse.kura.cloudconnection.raw.mqtt.publisher.RawMqttPublisher\",\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloudconnection.raw.mqtt.cloud.RawMqttCloudEndpoint\"\n        },\n        {\n            \"factoryPid\": \"org.eclipse.kura.event.publisher.EventPublisher\",\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\"\n        }\n    ]\n}\n

                    For cloudConnectionFactories elements:

                    • cloudConnectionFactoryPid: the PID of the cloud connection factory
                    • defaultCloudEndpointPid: If set, it represents the default PID for an instance of a new component suggested by the factory. This can be used by an user interface as a suggestion/placeholder for the name of a new cloud endpoint.
                    • cloudEndpointPidRegex: If set, its value represents a regular expression that the PID of a new component must match.

                    For pubSubFactories elements:

                    • factoryPid: The factory PID of the publisher/subscripter component. It identifies the component type. It can be used for example to create a new component using the pubSub POST method.
                    • cloudConnectionFactoryPid: Specifies the cloudConnectionFactoryPid of the CloudConnectionFactory associated with this component. Each publisher/subscriber component is only compatible with CloudEndpoint instances created by the factory having this cloudConnectionFactoryPid.
                    • defaultPid: If set, it represents the default PID for an instance of a new component suggested by the factory. This can be used by an user interface as a suggestion/placeholder for the name of a new publisher/subscriber.

                    • defaultPidRegex: If set, its value represents a regular expression that the PID of a new component must match.

                    • 500 Internal Server error

                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#post-methods","title":"POST methods","text":""},{"location":"references/rest-apis/rest-cloudconnection-api/#get-stackcomponents-pids","title":"Get StackComponents Pids","text":"
                    • Description: This method retrieves all all PIDs of Component instances that make up the stack for a specific CloudEndpoint. Examples of such components can be CloudService, DataService, DataTransportService.
                    • Method: POST
                    • API PATH: services/cloudconnection/v1/cloudEndpoint/stackComponentPids
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#request","title":"Request","text":"
                    {\n    \"cloudConnectionFactoryPid\" : \"org.eclipse.kura.cloud.CloudService\",\n    \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService\"\n}\n
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_2","title":"Responses","text":"
                    • 200 Ok Status 
                      {\n    \"pids\": [\n        \"org.eclipse.kura.cloud.CloudService\",\n        \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\",\n        \"org.eclipse.kura.data.DataService\"\n    ]\n}\n
                    • 404 if cloudConnectionFactoryPid or cloudEndpointPid are not found
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#create-cloud-endpoint","title":"Create Cloud Endpoint","text":"
                    • Description: This method create a new CloudEndpoint. The CloudConnectionFactory will always create a CloudEndpoint instance with the given cloudEndpointPid and optionally other associated stack components, for example CloudService, DataService, DataTransportService.
                    • Method: POST
                    • API PATH: services/cloudconnection/v1/cloudEndpoint
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_1","title":"Request","text":"
                    {\n    \"cloudConnectionFactoryPid\" : \"org.eclipse.kura.cloud.CloudService\",\n    \"cloudEndpointPid\" : \"org.eclipse.kura.cloud.CloudService-1\"\n}\n
                    • cloudEndpointPid: The cloudEndpointPid of the new instance that will be created. If the associated factory specifies the cloudEndpointPidRegex property, this parameter must match the provided regex.
                    • cloudConnectionFactoryPid: The cloudConnectionFactoryPid of the factory that should be used to create the new component.
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_3","title":"Responses","text":"
                    • 204 Ok Status
                    • 400 malformed cloudConnectionFactoryPid or cloudEndpointPid.
                    • 404 Wrong cloudConnectionFactoryPid
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#create-publishersubscriber-instance","title":"Create Publisher/Subscriber instance","text":"
                    • Description: his method create a new CloudPublisher or a CloudSubscriber instance for a specific CloudEndpoint CloudEndpoint. The type of the instance depends from the type of the specified factory.
                    • Method: POST
                    • API PATH: services/cloudconnection/v1/pubSub
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_2","title":"Request","text":"
                    {\n    \"pid\" : \"testPub\",\n    \"factoryPid\" : \"org.eclipse.kura.cloud.publisher.CloudPublisher\",\n    \"cloudEndpointPid\" : \"org.eclipse.kura.cloud.CloudService\"\n}\n
                    • pid: The PID of the new publisher/subscriber component. If the publisher/subscriber factory specifies the defaultPidRegex property, this parameter must match the provided regex.
                    • factoryPid: The factoryPid of the publisher/subscriber factory.
                    • cloudEndpointPid: The PID of the CloudEndpoint that the new publisher/subscriber component will be associated with. The associated CloudEndpoint must have been created by the CloudConnectionFactory with the cloudConnectionFactoryPid specified by the publisher/subscriber factory.
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_4","title":"Responses","text":"
                    • 204 Ok Status
                    • 400 malformed pid, factoryPid or cloudEndpointPid
                    • 404 If factoryPid or cloudEndpointPid are wrong.
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#get-configurations","title":"Get Configurations","text":"
                    • Description: This method retrieves the complete configuration, including the metatype description, of a cloud component instance. This method will return the configuration of CloudPublisher instances, CloudSubscriber instances, or the configuration of components that are part of a cloud stack, whose pids are returned by the cloudEndpoint/stackComponentPids method.
                    • Method: POST
                    • API PATH: services/cloudconnection/v1/configurations
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_3","title":"Request","text":"
                    {\n    \"pids\" : [\"testPub\", \"org.eclipse.kura.cloud.CloudService\"]\n}\n
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_5","title":"Responses","text":"

                    {\n    \"configs\": [\n        {\n            \"pid\": \"testPub\",\n            \"definition\": {\n                \"ad\": [\n                    {\n                        \"name\": \"Application Id\",\n                        \"description\": \"The application id used to publish messages.\",\n                        \"id\": \"appId\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"W1\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Application Topic\",\n                        \"description\": \"Follows the application Id and specifies the rest of the publishing topic. Wildcards can be defined in the topic by specifing a $value in the field. The publisher will try to match \\\"value\\\" with a corresponding property in the received KuraMessage. If possible, the $value placeholder will be substituted with the real value specified in the KuraMessage received from the user application.\",\n                        \"id\": \"app.topic\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"A1/$assetName\",\n                        \"isRequired\": false\n                    },\n                    {\n                        \"option\": [\n                            {\n                                \"label\": \"0\",\n                                \"value\": \"0\"\n                            },\n                            {\n                                \"label\": \"1\",\n                                \"value\": \"1\"\n                            }\n                        ],\n                        \"name\": \"Qos\",\n                        \"description\": \"The desired quality of service for the messages that have to be published. If Qos is 0, the message is delivered at most once, or it is not delivered at all. If Qos is set to 1, the message is always delivered at least once.\",\n                        \"id\": \"qos\",\n                        \"type\": \"INTEGER\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"0\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Retain\",\n                        \"description\": \"Default retaing flag for the published messages.\",\n                        \"id\": \"retain\",\n                        \"type\": \"BOOLEAN\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"false\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"option\": [\n                            {\n                                \"label\": \"Data\",\n                                \"value\": \"data\"\n                            },\n                            {\n                                \"label\": \"Control\",\n                                \"value\": \"control\"\n                            }\n                        ],\n                        \"name\": \"Kind of Message\",\n                        \"description\": \"Type of message to be published.\",\n                        \"id\": \"message.type\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"data\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Priority\",\n                        \"description\": \"Message priority. Priority level 0 (highest) should be used sparingly and reserved for messages that should be sent with the minimum latency. Default is set to 7.\",\n                        \"id\": \"priority\",\n                        \"type\": \"INTEGER\",\n                        \"cardinality\": 0,\n                        \"min\": \"0\",\n                        \"defaultValue\": \"7\",\n                        \"isRequired\": true\n                    }\n                ],\n                \"name\": \"CloudPublisher\",\n                \"description\": \"The CloudPublisher allows to define publishing parameters and provide a simple endpoint where the applications can attach to publish their messages.\",\n                \"id\": \"org.eclipse.kura.cloud.publisher.CloudPublisher\"\n            },\n            \"properties\": {\n                \"app.topic\": {\n                    \"value\": \"A1/$assetName\",\n                    \"type\": \"STRING\"\n                },\n                \"message.type\": {\n                    \"value\": \"data\",\n                    \"type\": \"STRING\"\n                },\n                \"qos\": {\n                    \"value\": 0,\n                    \"type\": \"INTEGER\"\n                },\n                \"appId\": {\n                    \"value\": \"W1\",\n                    \"type\": \"STRING\"\n                },\n                \"retain\": {\n                    \"value\": false,\n                    \"type\": \"BOOLEAN\"\n                },\n                \"priority\": {\n                    \"value\": 7,\n                    \"type\": \"INTEGER\"\n                },\n                \"service.factoryPid\": {\n                    \"value\": \"org.eclipse.kura.cloud.publisher.CloudPublisher\",\n                    \"type\": \"STRING\"\n                },\n                \"cloud.endpoint.service.pid\": {\n                    \"value\": \"org.eclipse.kura.cloud.CloudService\",\n                    \"type\": \"STRING\"\n                },\n                \"kura.service.pid\": {\n                    \"value\": \"testPub\",\n                    \"type\": \"STRING\"\n                },\n                \"service.pid\": {\n                    \"value\": \"org.eclipse.kura.cloud.publisher.CloudPublisher-1699623980455-20\",\n                    \"type\": \"STRING\"\n                }\n            }\n        },\n        {\n            \"pid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"definition\": {\n                \"ad\": [\n                    {\n                        \"option\": [\n                            {\n                                \"label\": \"Set display name as device name\",\n                                \"value\": \"device-name\"\n                            },\n                            {\n                                \"label\": \"Set display name from hostname\",\n                                \"value\": \"hostname\"\n                            },\n                            {\n                                \"label\": \"Custom\",\n                                \"value\": \"custom\"\n                            },\n                            {\n                                \"label\": \"Server defined\",\n                                \"value\": \"server\"\n                            }\n                        ],\n                        \"name\": \"Device Display-Name\",\n                        \"description\": \"Friendly name of the device. Device name is the common name of the device (eg: Reliagate 20-25, Raspberry Pi, etc.). Hostname will use the linux hostname utility.                  Custom allows for defining a unique string. Server defined relies on the remote management server to define a name.\",\n                        \"id\": \"device.display-name\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"device-name\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Device Custom-Name\",\n                        \"description\": \"Custom name for the device. This value is applied ONLY if device.display-name is set to \\\"Custom\\\"\",\n                        \"id\": \"device.custom-name\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"isRequired\": false\n                    },\n                    {\n                        \"name\": \"Topic Control-Prefix\",\n                        \"description\": \"Topic prefix for system and device management messages.\",\n                        \"id\": \"topic.control-prefix\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"$EDC\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Encode gzip\",\n                        \"description\": \"Compress message payloads before sending them to the remote server to reduce the network traffic.\",\n                        \"id\": \"encode.gzip\",\n                        \"type\": \"BOOLEAN\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"true\",\n                        \"isRequired\": false\n                    },\n                    {\n                        \"name\": \"Republish Mqtt Birth Cert On Gps Lock\",\n                        \"description\": \"Whether or not to republish the MQTT Birth Certificate on GPS lock event\",\n                        \"id\": \"republish.mqtt.birth.cert.on.gps.lock\",\n                        \"type\": \"BOOLEAN\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"false\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Republish Mqtt Birth Cert On Modem Detect\",\n                        \"description\": \"Whether or not to republish the MQTT Birth Certificate on modem detection event\",\n                        \"id\": \"republish.mqtt.birth.cert.on.modem.detect\",\n                        \"type\": \"BOOLEAN\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"false\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Republish Mqtt Birth Cert On Tamper Event\",\n                        \"description\": \"Whether or not to republish the MQTT Birth Certificate on a tamper event. This has effect only if a TamperDetectionService is available in the framework.\",\n                        \"id\": \"republish.mqtt.birth.cert.on.tamper.event\",\n                        \"type\": \"BOOLEAN\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"true\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Enable Default Subscriptions\",\n                        \"description\": \"Manages the default subscriptions to the gateway management MQTT topics. When disabled, the gateway will not be remotely manageable.\",\n                        \"id\": \"enable.default.subscriptions\",\n                        \"type\": \"BOOLEAN\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"true\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"option\": [\n                            {\n                                \"label\": \"Kura Protobuf\",\n                                \"value\": \"kura-protobuf\"\n                            },\n                            {\n                                \"label\": \"Simple JSON\",\n                                \"value\": \"simple-json\"\n                            }\n                        ],\n                        \"name\": \"Payload Encoding\",\n                        \"description\": \"Specify the message payload encoding.\",\n                        \"id\": \"payload.encoding\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"kura-protobuf\",\n                        \"isRequired\": true\n                    }\n                ],\n                \"icon\": [\n                    {\n                        \"resource\": \"CloudService\",\n                        \"size\": 32\n                    }\n                ],\n                \"name\": \"CloudService\",\n                \"description\": \"The CloudService allows for setting a user friendly name for the current device. It also provides the option to compress message payloads to reduce network traffic.\",\n                \"id\": \"org.eclipse.kura.cloud.CloudService\"\n            },\n            \"properties\": {\n                \"topic.control-prefix\": {\n                    \"value\": \"$EDC\",\n                    \"type\": \"STRING\"\n                },\n                \"republish.mqtt.birth.cert.on.tamper.event\": {\n                    \"value\": true,\n                    \"type\": \"BOOLEAN\"\n                },\n                \"device.custom-name\": {\n                    \"value\": \"Intel UP\u00b2\",\n                    \"type\": \"STRING\"\n                },\n                \"device.display-name\": {\n                    \"value\": \"device-name\",\n                    \"type\": \"STRING\"\n                },\n                \"payload.encoding\": {\n                    \"value\": \"kura-protobuf\",\n                    \"type\": \"STRING\"\n                },\n                \"republish.mqtt.birth.cert.on.modem.detect\": {\n                    \"value\": false,\n                    \"type\": \"BOOLEAN\"\n                },\n                \"service.factoryPid\": {\n                    \"value\": \"org.eclipse.kura.cloud.CloudService\",\n                    \"type\": \"STRING\"\n                },\n                \"kura.service.pid\": {\n                    \"value\": \"org.eclipse.kura.cloud.CloudService\",\n                    \"type\": \"STRING\"\n                },\n                \"service.pid\": {\n                    \"value\": \"org.eclipse.kura.cloud.CloudService-1699623980404-13\",\n                    \"type\": \"STRING\"\n                },\n                \"enable.default.subscriptions\": {\n                    \"value\": true,\n                    \"type\": \"BOOLEAN\"\n                },\n                \"republish.mqtt.birth.cert.on.gps.lock\": {\n                    \"value\": false,\n                    \"type\": \"BOOLEAN\"\n                },\n                \"encode.gzip\": {\n                    \"value\": true,\n                    \"type\": \"BOOLEAN\"\n                },\n                \"DataService.target\": {\n                    \"value\": \"(kura.service.pid=org.eclipse.kura.data.DataService)\",\n                    \"type\": \"STRING\"\n                },\n                \"kura.cloud.service.factory.pid\": {\n                    \"value\": \"org.eclipse.kura.core.cloud.factory.DefaultCloudServiceFactory\",\n                    \"type\": \"STRING\"\n                }\n            }\n        }\n    ]\n}\n
                    - 200 Status OK - 500 Internal Error

                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#connect-cloudendpoint","title":"Connect CloudEndpoint","text":"
                    • Description: This method allows to trigger the connection of the specified CloudEndpoint
                    • Method: POST
                    • API PATH: services/cloudconnection/v1/cloudEndpoint/connect
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_4","title":"Request","text":"
                    {\n    \"cloudEndpointPid\" : \"org.eclipse.kura.cloud.CloudService\"\n}\n
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_6","title":"Responses","text":"
                    • 204 Status OK
                    • 404 Wrong cloudEndpointPid
                    • 500 Internal Server Error in case of connection problems.
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#disconnect-cloudendpoint","title":"Disconnect CloudEndpoint","text":"
                    • Description: This method allows to trigger the disconnection of the specified CloudEndpoint
                    • Method: POST
                    • API PATH: services/cloudconnection/v1/cloudEndpoint/disconnect
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_5","title":"Request","text":"
                    {\n    \"cloudEndpointPid\" : \"org.eclipse.kura.cloud.CloudService\"\n}\n
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_7","title":"Responses","text":"
                    • 204 Status OK
                    • 404 Wrong cloudEndpointPid
                    • 500 Internal Server Error in case of connection problems.
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#check-cloudendpoint-connection-status","title":"Check CloudEndpoint connection status","text":"
                    • Description: This method allows to check the status of the connection of the specified CloudEndpoint
                    • Method: POST
                    • API PATH: services/cloudconnection/v1/cloudEndpoint/isConnected
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_6","title":"Request","text":"
                    {\n    \"cloudEndpointPid\" : \"org.eclipse.kura.cloud.CloudService\"\n}\n
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_8","title":"Responses","text":"

                    {\n    \"connected\": false\n}\n
                    - 200 Status OK - 404 Wrong cloudEndpointPid - 500 Internal Server Error

                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#put-methods","title":"PUT methods","text":""},{"location":"references/rest-apis/rest-cloudconnection-api/#update-cloudendpoint-stack-component-configurations","title":"Update CloudEndpoint stack component configurations","text":"
                    • Description: This method allows to update the configuration of a cloud component instance. This method can be used to update the configuration of CloudPublisher instances, CloudSubscriber instances, or the configuration of components that are part of a cloud stack, whose pids are returned by the cloudEndpoint/stackComponentPids method.
                    • Method: PUT
                    • API PATH: services/cloudconnection/v1/configurations
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_7","title":"Request","text":"
                    • takeSnapshot set to true o false to specify if the ConfigurationService must save a snapshot with the updated configuration.
                    {\n    \"configs\": [\n        {\n            \"pid\": \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\",\n            \"properties\": {\n                \"broker-url\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"mqtt://mqtt.eclipseprojects.io:1883\"\n                },\n                \"topic.context.account-name\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"account-name-testX2\"\n                },\n                \"username\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"username\"\n                },\n                \"password\": {\n                    \"type\": \"PASSWORD\",\n                    \"value\": \"Placeholder\"\n                },\n                \"client-id\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"\"\n                },\n                \"keep-alive\": {\n                    \"type\": \"INTEGER\",\n                    \"value\": 30\n                },\n                \"timeout\": {\n                    \"type\": \"INTEGER\",\n                    \"value\": 20\n                },\n                \"clean-session\": {\n                    \"type\": \"BOOLEAN\",\n                    \"value\": true\n                },\n                \"lwt.topic\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"$EDC/#account-name/#client-id/MQTT/LWT\"\n                },\n                \"lwt.payload\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"\"\n                },\n                \"lwt.qos\": {\n                    \"type\": \"INTEGER\",\n                    \"value\": 0\n                },\n                \"lwt.retain\": {\n                    \"type\": \"BOOLEAN\",\n                    \"value\": false\n                },\n                \"in-flight.persistence\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"memory\"\n                },\n                \"protocol-version\": {\n                    \"type\": \"INTEGER\",\n                    \"value\": 4\n                },\n                \"SslManagerService.target\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"(kura.service.pid=org.eclipse.kura.ssl.SslManagerService)\"\n                }\n            }\n        }\n    ],\n    \"takeSnapshot\" : true\n}\n
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_9","title":"Responses","text":"
                    • 204 Status OK
                    • 400 Bad request if pid is wrong or non existent.
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#delete-methods","title":"DELETE methods","text":""},{"location":"references/rest-apis/rest-cloudconnection-api/#delete-cloudendpoint","title":"Delete CloudEndpoint","text":"
                    • Description: This method allow to delete a CloudEndpoint instance.
                    • Method: DELETE
                    • API PATH: services/cloudconnection/v1/cloudEndpoint
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_8","title":"Request","text":"
                    {\n    \"cloudConnectionFactoryPid\" : \"org.eclipse.kura.cloud.CloudService\",\n    \"cloudEndpointPid\" : \"org.eclipse.kura.cloud.CloudService-1\"\n}\n
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_10","title":"Responses","text":"
                    • 204 Status OK
                    • 404 if cloudConnectionFactoryPid or cloudEndpointPid are not found
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#delete-publishersubscriber-instance","title":"Delete Publisher/Subscriber instance","text":"
                    • Description: This method allows to delete a CloudPublisher or CloudSubscriber instance.
                    • Method: DELETE
                    • API PATH: services/cloudconnection/v1/pubSub
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_9","title":"Request","text":"
                    {\n    \"pid\" : \"testPub\"\n}\n
                    "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_11","title":"Responses","text":"
                    • 204 Status OK
                    • 404 Wrong cloudConnectionFactoryPid or cloudEndpointPid.
                    "},{"location":"references/rest-apis/rest-command-api/","title":"Rest Command v1 API","text":""},{"location":"references/rest-apis/rest-command-api/#execute-command","title":"Execute Command","text":"
                    • Method: POST
                    • API PATH: /services/command/v1/command/
                    "},{"location":"references/rest-apis/rest-command-api/#request-body","title":"Request Body","text":"
                    {\n    //Command to be executed on gateway\n    \"command\":\"printenv TextEnvVarName1\",\n\n    //Service Password for command Service\n    \"password\":\"s3curePassw0rd\",\n\n    //String base64 encoding of a zip file to transfer to gateway\n    \"zipBytes\": \"UEsDBAoACAAAAIyD1lYAA AAAAAAAAAAAAAAJACAAdGVzdGZpbGUxVVQNAAfprpRk6a6UZOmulGR1eAsAAQT1AQAABBQAAABQSwcIAAAAAAAAAAAAAAAAUEsBAgoDCgAIAAAAjIPWVgAAAAAAAAAAAAAAAAkAIAAAAAAAAAAAAKSBAAAAAHRlc3RmaWxlMVVUDQAH6a6UZOmulGTprpRkdXgLAAEE9QEAAAQUAAAAUEsFBgAAAAABAAEAVwAAAFcAAAAAAA==\",\n\n    //Command argument String array\n    \"arguments\":[\"arg 1\"],\n\n    //Shell environment Pairs Map\n    \"environmentPairs\": \n    {\n        \"TextEnvVarName1\":\"TextEnvVarValue1\",\n        \"TextEnvVarName2\":\"TextEnvVarValue2\"\n    },\n    //Working directory of command to be executed\n    \"workingDirectory\":\"/tmp\",\n\n}\n
                    "},{"location":"references/rest-apis/rest-command-api/#responses","title":"Responses","text":"
                    • 200 OK status
                    {\n    \"stdout\": \"Command error output is displayed in this field\",\n    \"stderr\": \"Command output is displayed in this field\",\n    \"exitCode\": 0,\n    \"isTimeOut\": false\n}\n
                    • 400 Bad Request (Malformed Client JSON)
                    • 404 Resource Not Found
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-command-api/#execute-asynchronous-command","title":"Execute Asynchronous Command","text":"
                    • Method: POST
                    • API PATH: /services/command/v1/command/async
                    "},{"location":"references/rest-apis/rest-command-api/#request-body_1","title":"Request Body","text":"
                    {\n    //Command to be executed on gateway\n    \"command\":\"printenv TextEnvVarName1\",\n\n    //Service Password for command Service\n    \"password\":\"s3curePassw0rd\",\n\n    //String base64 encoding of a zip file to transfer to gateway\n    \"zipBytes\": \"UEsDBAoACAAAAIyD1lYAA AAAAAAAAAAAAAAJACAAdGVzdGZpbGUxVVQNAAfprpRk6a6UZOmulGR1eAsAAQT1AQAABBQAAABQSwcIAAAAAAAAAAAAAAAAUEsBAgoDCgAIAAAAjIPWVgAAAAAAAAAAAAAAAAkAIAAAAAAAAAAAAKSBAAAAAHRlc3RmaWxlMVVUDQAH6a6UZOmulGTprpRkdXgLAAEE9QEAAAQUAAAAUEsFBgAAAAABAAEAVwAAAFcAAAAAAA==\",\n\n    //Command argument String array\n    \"arguments\":[\"arg 1\"],\n\n    //Shell environment Pairs Map\n    \"environmentPairs\": \n    {\n        \"TextEnvVarName1\":\"TextEnvVarValue1\",\n        \"TextEnvVarName2\":\"TextEnvVarValue2\"\n    },\n    //Working directory of command to be executed\n    \"workingDirectory\":\"/tmp\",\n\n}\n
                    "},{"location":"references/rest-apis/rest-command-api/#responses_1","title":"Responses","text":"
                    • 202 Accepted
                    • 400 Bad Request (Malformed Client JSON)
                    • 404 Resource Not Found
                    • 500 Internal Server Error

                    Note

                    Use the following command to retrieve the base64 representation of a zip file. base64 -i <filename.zip>

                    "},{"location":"references/rest-apis/rest-configuration-service-v1/","title":"Configuration V1 REST APIs","text":"

                    This page describes the configuration V1 rest APIs.

                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#rest-apis","title":"REST APIs","text":"

                    The Configuration Service REST APIs are exposed by the org.eclipse.kura.rest.configuration bundle, providing the following REST APIs under the /configuration/v1 path.

                    Method Path Allowed roles Encoding Request parameters Description GET /factoryComponents configuration JSON None The method lists all the FactoryComponents Pids tracked by the ConfigurationService POST /factoryComponents configuration JSON FactoryComponentConfiguration object Creates a new ConfigurableComponent instance by creating a new configuration from a Configuration Admin factory. The FactoryComponentConfiguration object passed as request parameter will provide all the information needed to generate the instance. It links the factory Pid to be used, the target instance Pid, the properties to be used when creating the instance, and if the request should be persisted with a snapshot DELETE /factoryComponents/{pid}?takeSnapshot={takeSnapshot} configuration JSON pid = A String representing the pid of the instance generated by a Factory Component that needs to deleted; takeSnapshot = an optional (default false) boolean to specify if a new snapshot needs to be created after the delete operation For the specified Pid and optional takeSnapshot query parameter, the ConfigurationService instance will delete the corresponding ConfigurableComponent instance GET /configurableComponents configuration JSON None Lists the tracked configurable component Pids GET /configurableComponents/configurations configuration JSON None Lists all the component configurations of all the ConfigurableComponents tracked by the ConfigurationService GET /configurableComponents/configurations/byFilter/{filter} configuration JSON filter = A String representing an OSGi filter. Lists the component configurations of all the ConfigurableComponents tracked by the ConfigurationService that match the filter specified GET /configurableComponents/configurations/byPid/{pid} configuration JSON pid = A String representing the pid of a configurable component instance Provides the ComponentConfiguration of the ConfigurableComponent matching the specified Pid GET /configurableComponents/configurations/byPid/{pid}/_default configuration JSON pid = A String representing the pid of a configurable component instance Provides the default Component Configuration for the component identified by the specified Pid POST /configurableComponents/configurations/byPid/{pid}/_update configuration JSON pid = A String representing the pid of a configurable component instance; ComponentConfigurationUpdateRequest = the updated configuration provided in the request body Allows to update the component configuration identified by the provided PID POST /configurableComponents/configurations/_update configuration JSON componentConfigurations = the list of updated configurations provided in the request body Allows to update the configuration of multiple configurable components GET /snapshots configuration JSON None Lists all the available snapshot IDs managed by the framework GET /snapshots/{id} configuration JSON id = the snapshot Id Returns the content of a given snapshot tracked by the framework POST /snapshots/_write configuration JSON None Triggers the framework to take and persist a snapshot POST /snapshots/_rollback configuration JSON None Rollbacks the framework to the last saved snapshot if available. POST /snapshots/{id}/_rollback configuration JSON id = the snapshot Id Rollbacks the framework to the snapshot identified by the provided ID POST /snapshots/_upload configuration Consumes: XML Framework snapshot in XML form provided in the request body Uploads a snapshot. The framework will update the component(s) configuration accordingly to the configurations received"},{"location":"references/rest-apis/rest-configuration-service-v1/#get-all-the-factory-components-pids","title":"Get all the factory components pids","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/factoryComponents

                    Response: 

                    [\n    \"org.eclipse.kura.wire.Conditional\",\n    \"org.eclipse.kura.cloudconnection.raw.mqtt.publisher.RawMqttPublisher\",\n    \"org.eclipse.kura.misc.cloudcat.CloudCat\",\n    \"org.eclipse.kura.core.db.H2DbServer\",\n    \"org.eclipse.kura.wire.Fifo\",\n    \"org.eclipse.kura.cloudconnection.raw.mqtt.cloud.RawMqttCloudEndpoint\",\n    \"org.eclipse.kura.core.keystore.FilesystemKeystoreServiceImpl\",\n    \"org.eclipse.kura.cloud.publisher.CloudPublisher\",\n    \"org.eclipse.kura.core.db.H2DbService\",\n    \"org.eclipse.kura.wire.CloudSubscriber\",\n    \"org.eclipse.kura.wire.RegexFilter\",\n    \"org.eclipse.kura.wire.Logger\",\n    \"org.eclipse.kura.wire.Timer\",\n    \"com.eurotech.framework.log.manager.LogManager\",\n    \"com.eurotech.framework.log.journald.wire.JournaldWireComponent\",\n    \"org.eclipse.kura.cloudconnection.raw.mqtt.subscriber.RawMqttSubscriber\",\n    \"org.eclipse.kura.cloud.subscriber.CloudSubscriber\",\n    \"org.eclipse.kura.ssl.SslManagerService\",\n    \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\",\n    \"com.eurotech.framework.log.journald.JournaldLogReader\",\n    \"org.eclipse.kura.provisioning.ProvisioningService\",\n    \"org.eclipse.kura.wire.CloudPublisher\",\n    \"org.eclipse.kura.wire.H2DbWireRecordFilter\",\n    \"org.eclipse.kura.cloud.CloudService\",\n    \"org.eclipse.kura.data.DataService\",\n    \"org.eclipse.kura.wire.H2DbWireRecordStore\",\n    \"org.eclipse.kura.wire.Join\",\n    \"com.eurotech.framework.log.publisher.LogPublisher\"\n]\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#create-component-from-factory","title":"Create component from factory","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/factoryComponents

                    Request body: 

                    {\n    \"factoryPid\": \"org.eclipse.kura.core.db.H2DbServer\",\n    \"pid\": \"myH2DbServer\",\n    \"properties\" : [],\n    \"takeSnapshot\" : false\n}\n

                    The request must be provided with the following elements:

                    • factoryPid: the factory used to generate the new instance
                    • pid: the new instance process id
                    • properties: eventual properties that will be used to instantiate the new instance and will override the defaults. A list of string, object pair is needed and can be optionally empty.
                    • takeSnapshot: specifies if after the creation of a new component a snapshot needs to be taken.
                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#delete-a-component-and-optionally-take-a-snapshot","title":"Delete a component and optionally take a snapshot","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/factoryComponents/{pid}?takeSnapshot={takeSnapshot}

                    • takeSnapshot: can be either true or false. If set to true, after the deletion, the framework will take a snapshot.
                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#list-the-tracked-configurable-component-pids","title":"List the tracked configurable component Pids","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents

                    Response: 

                    [\n    \"org.eclipse.kura.clock.ClockService\",\n    \"org.eclipse.kura.net.admin.NetworkConfigurationService\",\n    \"org.eclipse.kura.position.PositionService\",\n    \"com.eurotech.framework.internal.ansible.provider.AnsibleServiceImpl\",\n    \"org.eclipse.kura.internal.useradmin.store.RoleRepositoryStoreImpl\",\n    \"com.eurotech.framework.internal.ansible.cloud.AnsibleActivityHandler\",\n    \"default.diagnostic.publisher\",\n    \"org.eclipse.kura.net.admin.FirewallConfigurationService\",\n    \"com.eurotech.framework.internal.fail2ban.Fail2BanConfigurator\",\n    \"default.log.publisher\",\n    \"org.eclipse.kura.wire.graph.WireGraphService\",\n    \"com.eurotech.framework.internal.floodingprotection.FloodingProtectionConfigurator\",\n    \"org.eclipse.kura.ssl.SslManagerService\",\n    \"org.eclipse.kura.http.server.manager.HttpService\",\n    \"org.eclipse.kura.cloud.app.command.CommandCloudApp\",\n    \"default.ping.publisher\",\n    \"org.eclipse.kura.db.H2DbService\",\n    \"com.eurotech.framework.diagnostics.DiagnosticsService\",\n    \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\",\n    \"org.eclipse.kura.deployment.agent\",\n    \"DMKeystore\",\n    \"LogReaderJournald\",\n    \"default.alert.publisher\",\n    \"org.eclipse.kura.core.deployment.CloudDeploymentHandlerV2\",\n    \"HttpsKeystore\",\n    \"com.eurotech.framework.security.aide.AideTamperDetectionServiceConfigurator\",\n    \"org.eclipse.kura.provisioning.ProvisioningService\",\n    \"LogManagerAuth\",\n    \"com.eurotech.framework.security.journald.fss.FssTamperDetectionServiceConfigurator\",\n    \"org.eclipse.kura.watchdog.WatchdogService\",\n    \"org.eclipse.kura.cloud.CloudService\",\n    \"LogManagerActivity\",\n    \"org.eclipse.kura.data.DataService\",\n    \"LogManagerDefault\",\n    \"org.eclipse.kura.web.Console\",\n    \"SSLKeystore\",\n    \"com.eurotech.framework.net.vpn.client.VpnClient\",\n    \"org.eclipse.kura.internal.rest.provider.RestService\",\n    \"com.eurotech.framework.reboot.RebootService\"\n]\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#lists-all-the-component-configurations-of-all-the-configurablecomponents","title":"Lists all the component configurations of all the ConfigurableComponents","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents/configurations

                    Response: 

                    [\n    {\n        \"pid\": \"org.eclipse.kura.clock.ClockService\",\n        \"definition\": {\n            \"ad\": [\n                {\n                    \"option\": [],\n                    \"name\": \"enabled\",\n                    \"description\": \"Whether or not to enable the ClockService\",\n                    \"id\": \"enabled\",\n                    \"type\": \"BOOLEAN\",\n                    \"cardinality\": 0,\n                    \"_default\": \"true\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.set.hwclock\",\n                    \"description\": \"Whether or not to sync the system hardware clock after the system time gets set\",\n                    \"id\": \"clock.set.hwclock\",\n                    \"type\": \"BOOLEAN\",\n                    \"cardinality\": 0,\n                    \"_default\": \"true\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [\n                        {\n                            \"label\": \"java-ntp\",\n                            \"value\": \"java-ntp\",\n                            \"otherAttributes\": {}\n                        },\n                        {\n                            \"label\": \"ntpd\",\n                            \"value\": \"ntpd\",\n                            \"otherAttributes\": {}\n                        },\n                        {\n                            \"label\": \"chrony-advanced\",\n                            \"value\": \"chrony-advanced\",\n                            \"otherAttributes\": {}\n                        }\n                    ],\n                    \"name\": \"clock.provider\",\n                    \"description\": \"Source for setting the system clock. Verify the availabiliy of the selected provider before activate it.\",\n                    \"id\": \"clock.provider\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"_default\": \"java-ntp\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.host\",\n                    \"description\": \"The hostname that provides the system time via NTP\",\n                    \"id\": \"clock.ntp.host\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"_default\": \"0.pool.ntp.org\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.port\",\n                    \"description\": \"The port number that provides the system time via NTP\",\n                    \"id\": \"clock.ntp.port\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"1\",\n                    \"max\": \"65535\",\n                    \"_default\": \"123\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.timeout\",\n                    \"description\": \"The NTP timeout in milliseconds\",\n                    \"id\": \"clock.ntp.timeout\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"1000\",\n                    \"_default\": \"10000\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.max-retry\",\n                    \"description\": \"The maximum number of retries for the initial synchronization (with interval clock.ntp.retry.interval). If set to 0 the service will retry forever.\",\n                    \"id\": \"clock.ntp.max-retry\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"0\",\n                    \"_default\": \"0\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.retry.interval\",\n                    \"description\": \"When sync fails, interval in seconds between each retry.\",\n                    \"id\": \"clock.ntp.retry.interval\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"1\",\n                    \"_default\": \"5\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.refresh-interval\",\n                    \"description\": \"Whether or not to sync the clock and if so, the frequency in seconds.  If less than zero - no update, if equal to zero - sync once at startup, if greater than zero - the frequency in seconds to perform a new clock sync\",\n                    \"id\": \"clock.ntp.refresh-interval\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"_default\": \"3600\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"RTC File Name\",\n                    \"description\": \"The RTC File Name. It defaults to /dev/rtc0. This option is not used if chrony-advanced option is selected in clock.provider.\",\n                    \"id\": \"rtc.filename\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"_default\": \"/dev/rtc0\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"Chrony Configuration\",\n                    \"description\": \"Chrony configuration file.|TextArea\",\n                    \"id\": \"chrony.advanced.config\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"required\": false,\n                    \"otherAttributes\": {}\n                }\n            ],\n            \"icon\": [\n                {\n                    \"resource\": \"ClockService\",\n                    \"size\": 32,\n                    \"otherAttributes\": {}\n                }\n            ],\n            \"name\": \"ClockService\",\n            \"description\": \"ClockService Configuration\",\n            \"id\": \"org.eclipse.kura.clock.ClockService\",\n            \"otherAttributes\": {}\n        },\n        \"properties\": {\n            \"clock.ntp.host\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"0.pool.ntp.org\"\n            },\n            \"clock.ntp.max-retry\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 0\n            },\n            \"clock.set.hwclock\": {\n                \"array\": false,\n                \"type\": \"Boolean\",\n                \"value\": true\n            },\n            \"clock.ntp.timeout\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 10000\n            },\n            \"enabled\": {\n                \"array\": false,\n                \"type\": \"Boolean\",\n                \"value\": false\n            },\n            \"clock.ntp.retry.interval\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 5\n            },\n            \"kura.service.pid\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"org.eclipse.kura.clock.ClockService\"\n            },\n            \"service.pid\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"org.eclipse.kura.clock.ClockService\"\n            },\n            \"clock.ntp.port\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 123\n            },\n            \"clock.provider\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"java-ntp\"\n            },\n            \"clock.ntp.refresh-interval\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 3600\n            },\n            \"rtc.filename\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"/dev/rtc1\"\n            },\n            \"chrony.advanced.config\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"\"\n            }\n        }\n    },\n  ...\n]\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#list-the-configurations-of-all-the-configurablecomponents-that-match-a-filter","title":"List the configurations of all the ConfigurableComponents that match a filter","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents/configurations/byFilter/(service.pid=org.eclipse.kura.clock.ClockService)

                    Response: 

                    [\n    {\n        \"pid\": \"org.eclipse.kura.clock.ClockService\",\n        \"definition\": {\n            \"ad\": [\n                {\n                    \"option\": [],\n                    \"name\": \"enabled\",\n                    \"description\": \"Whether or not to enable the ClockService\",\n                    \"id\": \"enabled\",\n                    \"type\": \"BOOLEAN\",\n                    \"cardinality\": 0,\n                    \"_default\": \"true\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.set.hwclock\",\n                    \"description\": \"Whether or not to sync the system hardware clock after the system time gets set\",\n                    \"id\": \"clock.set.hwclock\",\n                    \"type\": \"BOOLEAN\",\n                    \"cardinality\": 0,\n                    \"_default\": \"true\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [\n                        {\n                            \"label\": \"java-ntp\",\n                            \"value\": \"java-ntp\",\n                            \"otherAttributes\": {}\n                        },\n                        {\n                            \"label\": \"ntpd\",\n                            \"value\": \"ntpd\",\n                            \"otherAttributes\": {}\n                        },\n                        {\n                            \"label\": \"chrony-advanced\",\n                            \"value\": \"chrony-advanced\",\n                            \"otherAttributes\": {}\n                        }\n                    ],\n                    \"name\": \"clock.provider\",\n                    \"description\": \"Source for setting the system clock. Verify the availabiliy of the selected provider before activate it.\",\n                    \"id\": \"clock.provider\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"_default\": \"java-ntp\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.host\",\n                    \"description\": \"The hostname that provides the system time via NTP\",\n                    \"id\": \"clock.ntp.host\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"_default\": \"0.pool.ntp.org\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.port\",\n                    \"description\": \"The port number that provides the system time via NTP\",\n                    \"id\": \"clock.ntp.port\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"1\",\n                    \"max\": \"65535\",\n                    \"_default\": \"123\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.timeout\",\n                    \"description\": \"The NTP timeout in milliseconds\",\n                    \"id\": \"clock.ntp.timeout\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"1000\",\n                    \"_default\": \"10000\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.max-retry\",\n                    \"description\": \"The maximum number of retries for the initial synchronization (with interval clock.ntp.retry.interval). If set to 0 the service will retry forever.\",\n                    \"id\": \"clock.ntp.max-retry\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"0\",\n                    \"_default\": \"0\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.retry.interval\",\n                    \"description\": \"When sync fails, interval in seconds between each retry.\",\n                    \"id\": \"clock.ntp.retry.interval\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"1\",\n                    \"_default\": \"5\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.refresh-interval\",\n                    \"description\": \"Whether or not to sync the clock and if so, the frequency in seconds.  If less than zero - no update, if equal to zero - sync once at startup, if greater than zero - the frequency in seconds to perform a new clock sync\",\n                    \"id\": \"clock.ntp.refresh-interval\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"_default\": \"3600\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"RTC File Name\",\n                    \"description\": \"The RTC File Name. It defaults to /dev/rtc0. This option is not used if chrony-advanced option is selected in clock.provider.\",\n                    \"id\": \"rtc.filename\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"_default\": \"/dev/rtc0\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"Chrony Configuration\",\n                    \"description\": \"Chrony configuration file.|TextArea\",\n                    \"id\": \"chrony.advanced.config\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"required\": false,\n                    \"otherAttributes\": {}\n                }\n            ],\n            \"icon\": [\n                {\n                    \"resource\": \"ClockService\",\n                    \"size\": 32,\n                    \"otherAttributes\": {}\n                }\n            ],\n            \"name\": \"ClockService\",\n            \"description\": \"ClockService Configuration\",\n            \"id\": \"org.eclipse.kura.clock.ClockService\",\n            \"otherAttributes\": {}\n        },\n        \"properties\": {\n            \"clock.ntp.host\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"0.pool.ntp.org\"\n            },\n            \"clock.ntp.max-retry\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 0\n            },\n            \"clock.set.hwclock\": {\n                \"array\": false,\n                \"type\": \"Boolean\",\n                \"value\": true\n            },\n            \"clock.ntp.timeout\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 10000\n            },\n            \"enabled\": {\n                \"array\": false,\n                \"type\": \"Boolean\",\n                \"value\": false\n            },\n            \"clock.ntp.retry.interval\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 5\n            },\n            \"kura.service.pid\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"org.eclipse.kura.clock.ClockService\"\n            },\n            \"service.pid\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"org.eclipse.kura.clock.ClockService\"\n            },\n            \"clock.ntp.port\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 123\n            },\n            \"clock.provider\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"java-ntp\"\n            },\n            \"clock.ntp.refresh-interval\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 3600\n            },\n            \"rtc.filename\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"/dev/rtc1\"\n            },\n            \"chrony.advanced.config\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"\"\n            }\n        }\n    }\n]\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#get-the-configuration-of-the-configurablecomponent-matching-a-pid","title":"Get the configuration of the ConfigurableComponent matching a pid","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents/configurations/byPid/org.eclipse.kura.clock.ClockService

                    Response: 

                    {\n    \"pid\": \"org.eclipse.kura.clock.ClockService\",\n    \"definition\": {\n        \"ad\": [\n            {\n                \"option\": [],\n                \"name\": \"enabled\",\n                \"description\": \"Whether or not to enable the ClockService\",\n                \"id\": \"enabled\",\n                \"type\": \"BOOLEAN\",\n                \"cardinality\": 0,\n                \"_default\": \"true\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.set.hwclock\",\n                \"description\": \"Whether or not to sync the system hardware clock after the system time gets set\",\n                \"id\": \"clock.set.hwclock\",\n                \"type\": \"BOOLEAN\",\n                \"cardinality\": 0,\n                \"_default\": \"true\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [\n                    {\n                        \"label\": \"java-ntp\",\n                        \"value\": \"java-ntp\",\n                        \"otherAttributes\": {}\n                    },\n                    {\n                        \"label\": \"ntpd\",\n                        \"value\": \"ntpd\",\n                        \"otherAttributes\": {}\n                    },\n                    {\n                        \"label\": \"chrony-advanced\",\n                        \"value\": \"chrony-advanced\",\n                        \"otherAttributes\": {}\n                    }\n                ],\n                \"name\": \"clock.provider\",\n                \"description\": \"Source for setting the system clock. Verify the availabiliy of the selected provider before activate it.\",\n                \"id\": \"clock.provider\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"_default\": \"java-ntp\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.host\",\n                \"description\": \"The hostname that provides the system time via NTP\",\n                \"id\": \"clock.ntp.host\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"_default\": \"0.pool.ntp.org\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.port\",\n                \"description\": \"The port number that provides the system time via NTP\",\n                \"id\": \"clock.ntp.port\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"1\",\n                \"max\": \"65535\",\n                \"_default\": \"123\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.timeout\",\n                \"description\": \"The NTP timeout in milliseconds\",\n                \"id\": \"clock.ntp.timeout\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"1000\",\n                \"_default\": \"10000\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.max-retry\",\n                \"description\": \"The maximum number of retries for the initial synchronization (with interval clock.ntp.retry.interval). If set to 0 the service will retry forever.\",\n                \"id\": \"clock.ntp.max-retry\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"0\",\n                \"_default\": \"0\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.retry.interval\",\n                \"description\": \"When sync fails, interval in seconds between each retry.\",\n                \"id\": \"clock.ntp.retry.interval\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"1\",\n                \"_default\": \"5\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.refresh-interval\",\n                \"description\": \"Whether or not to sync the clock and if so, the frequency in seconds.  If less than zero - no update, if equal to zero - sync once at startup, if greater than zero - the frequency in seconds to perform a new clock sync\",\n                \"id\": \"clock.ntp.refresh-interval\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"_default\": \"3600\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"RTC File Name\",\n                \"description\": \"The RTC File Name. It defaults to /dev/rtc0. This option is not used if chrony-advanced option is selected in clock.provider.\",\n                \"id\": \"rtc.filename\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"_default\": \"/dev/rtc0\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"Chrony Configuration\",\n                \"description\": \"Chrony configuration file.|TextArea\",\n                \"id\": \"chrony.advanced.config\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"required\": false,\n                \"otherAttributes\": {}\n            }\n        ],\n        \"icon\": [\n            {\n                \"resource\": \"ClockService\",\n                \"size\": 32,\n                \"otherAttributes\": {}\n            }\n        ],\n        \"name\": \"ClockService\",\n        \"description\": \"ClockService Configuration\",\n        \"id\": \"org.eclipse.kura.clock.ClockService\",\n        \"otherAttributes\": {}\n    },\n    \"properties\": {\n        \"clock.ntp.host\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"0.pool.ntp.org\"\n        },\n        \"clock.ntp.max-retry\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 0\n        },\n        \"clock.set.hwclock\": {\n            \"array\": false,\n            \"type\": \"Boolean\",\n            \"value\": true\n        },\n        \"clock.ntp.timeout\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 10000\n        },\n        \"enabled\": {\n            \"array\": false,\n            \"type\": \"Boolean\",\n            \"value\": false\n        },\n        \"clock.ntp.retry.interval\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 5\n        },\n        \"kura.service.pid\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"org.eclipse.kura.clock.ClockService\"\n        },\n        \"service.pid\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"org.eclipse.kura.clock.ClockService\"\n        },\n        \"clock.ntp.port\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 123\n        },\n        \"clock.provider\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"java-ntp\"\n        },\n        \"clock.ntp.refresh-interval\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 3600\n        },\n        \"rtc.filename\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"/dev/rtc1\"\n        },\n        \"chrony.advanced.config\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"\"\n        }\n    }\n}\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#get-the-default-configuration-of-the-configurablecomponent-matching-a-pid","title":"Get the default configuration of the ConfigurableComponent matching a pid","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents/configurations/byPid/org.eclipse.kura.clock.ClockService/_default

                    Response: 

                    {\n    \"pid\": \"org.eclipse.kura.clock.ClockService\",\n    \"definition\": {\n        \"ad\": [\n            {\n                \"option\": [],\n                \"name\": \"enabled\",\n                \"description\": \"Whether or not to enable the ClockService\",\n                \"id\": \"enabled\",\n                \"type\": \"BOOLEAN\",\n                \"cardinality\": 0,\n                \"_default\": \"true\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.set.hwclock\",\n                \"description\": \"Whether or not to sync the system hardware clock after the system time gets set\",\n                \"id\": \"clock.set.hwclock\",\n                \"type\": \"BOOLEAN\",\n                \"cardinality\": 0,\n                \"_default\": \"true\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [\n                    {\n                        \"label\": \"java-ntp\",\n                        \"value\": \"java-ntp\",\n                        \"otherAttributes\": {}\n                    },\n                    {\n                        \"label\": \"ntpd\",\n                        \"value\": \"ntpd\",\n                        \"otherAttributes\": {}\n                    },\n                    {\n                        \"label\": \"chrony-advanced\",\n                        \"value\": \"chrony-advanced\",\n                        \"otherAttributes\": {}\n                    }\n                ],\n                \"name\": \"clock.provider\",\n                \"description\": \"Source for setting the system clock. Verify the availabiliy of the selected provider before activate it.\",\n                \"id\": \"clock.provider\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"_default\": \"java-ntp\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.host\",\n                \"description\": \"The hostname that provides the system time via NTP\",\n                \"id\": \"clock.ntp.host\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"_default\": \"0.pool.ntp.org\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.port\",\n                \"description\": \"The port number that provides the system time via NTP\",\n                \"id\": \"clock.ntp.port\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"1\",\n                \"max\": \"65535\",\n                \"_default\": \"123\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.timeout\",\n                \"description\": \"The NTP timeout in milliseconds\",\n                \"id\": \"clock.ntp.timeout\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"1000\",\n                \"_default\": \"10000\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.max-retry\",\n                \"description\": \"The maximum number of retries for the initial synchronization (with interval clock.ntp.retry.interval). If set to 0 the service will retry forever.\",\n                \"id\": \"clock.ntp.max-retry\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"0\",\n                \"_default\": \"0\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.retry.interval\",\n                \"description\": \"When sync fails, interval in seconds between each retry.\",\n                \"id\": \"clock.ntp.retry.interval\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"1\",\n                \"_default\": \"5\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.refresh-interval\",\n                \"description\": \"Whether or not to sync the clock and if so, the frequency in seconds.  If less than zero - no update, if equal to zero - sync once at startup, if greater than zero - the frequency in seconds to perform a new clock sync\",\n                \"id\": \"clock.ntp.refresh-interval\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"_default\": \"3600\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"RTC File Name\",\n                \"description\": \"The RTC File Name. It defaults to /dev/rtc0. This option is not used if chrony-advanced option is selected in clock.provider.\",\n                \"id\": \"rtc.filename\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"_default\": \"/dev/rtc0\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"Chrony Configuration\",\n                \"description\": \"Chrony configuration file.|TextArea\",\n                \"id\": \"chrony.advanced.config\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"required\": false,\n                \"otherAttributes\": {}\n            }\n        ],\n        \"icon\": [\n            {\n                \"resource\": \"ClockService\",\n                \"size\": 32,\n                \"otherAttributes\": {}\n            }\n        ],\n        \"name\": \"ClockService\",\n        \"description\": \"ClockService Configuration\",\n        \"id\": \"org.eclipse.kura.clock.ClockService\",\n        \"otherAttributes\": {}\n    },\n    \"properties\": {\n        \"clock.ntp.host\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"0.pool.ntp.org\"\n        },\n        \"clock.provider\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"java-ntp\"\n        },\n        \"clock.ntp.port\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 123\n        },\n        \"clock.ntp.max-retry\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 0\n        },\n        \"clock.ntp.refresh-interval\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 3600\n        },\n        \"rtc.filename\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"/dev/rtc0\"\n        },\n        \"clock.set.hwclock\": {\n            \"array\": false,\n            \"type\": \"Boolean\",\n            \"value\": true\n        },\n        \"enabled\": {\n            \"array\": false,\n            \"type\": \"Boolean\",\n            \"value\": true\n        },\n        \"clock.ntp.timeout\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 10000\n        },\n        \"clock.ntp.retry.interval\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 5\n        }\n    }\n}\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#update-the-component-configuration-identified-matching-a-pid","title":"Update the component configuration identified matching a pid","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents/configurations/byPid/org.eclipse.kura.clock.ClockService/_update

                    Request body: 

                    {\n    \"takeSnapshot\":true,\n    \"componentConfigurationRequest\": {\n        \"properties\": {\n            \"enabled\": {\n                \"type\": \"boolean\",\n                \"value\": false,\n                \"array\": false\n            }\n        }\n    }\n}\n

                    Warning

                    Every service may need a different set of parameters and combination of them to reach the desired result. For the NetworkAdminService, for example, the following configuration is required to disable a specific network interface (enp2s0) and prevent re-enabling at reboot. Please verify offline the REST APIs executed and the different deploying scenarios before distributing updates to the fleet of devices.

                    {\n    \"takeSnapshot\":true,\n    \"componentConfigurationRequest\": {\n        \"properties\": {\n            \"net.interface.enp2s0.config.ip4.status\": {\n                \"type\": \"string\",\n                \"value\": \"netIPv4StatusDisabled\",\n                \"array\": false\n            },\n            \"net.interface.enp2s0.config.autoconnect\": {\n                \"type\": \"boolean\",\n                \"value\": false,\n                \"array\": false\n            }\n        }\n    }\n}\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#update-the-configuration-of-multiple-configurable-components","title":"Update the configuration of multiple configurable components","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents/configurations/_update

                    Request body: 

                    {\n    \"takeSnapshot\": true,\n    \"componentConfigurations\": [\n        {\n            \"pid\": \"org.eclipse.kura.clock.ClockService\",\n            \"properties\": {\n                \"enabled\": {\n                    \"type\": \"boolean\",\n                    \"value\": false,\n                    \"array\": false\n                }\n            }\n        }\n    ]\n}\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#list-all-the-available-snapshot-ids","title":"List all the available snapshot IDs","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/snapshots

                    Response: 

                    [\n    0,\n    1630930775789,\n    1630930776355,\n    1630930776839,\n    1630930797402,\n    1630930805305\n]\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#get-the-content-of-a-given-snapshot","title":"Get the content of a given snapshot","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/snapshots/{id}

                    Response: 

                    [\n    {\n        \"pid\": \"org.eclipse.kura.clock.ClockService\",\n        \"properties\": {\n            \"clock.ntp.host\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"0.pool.ntp.org\"\n            },\n            \"clock.ntp.port\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 123\n            },\n            \"clock.provider\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"java-ntp\"\n            },\n            \"clock.ntp.max-retry\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 0\n            },\n            \"clock.ntp.refresh-interval\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 3600\n            },\n            \"rtc.filename\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"/dev/rtc1\"\n            },\n            \"clock.set.hwclock\": {\n                \"array\": false,\n                \"type\": \"Boolean\",\n                \"value\": true\n            },\n            \"clock.ntp.timeout\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 10000\n            },\n            \"enabled\": {\n                \"array\": false,\n                \"type\": \"Boolean\",\n                \"value\": true\n            },\n            \"clock.ntp.retry.interval\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 5\n            },\n            \"kura.service.pid\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"org.eclipse.kura.clock.ClockService\"\n            },\n            \"service.pid\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"org.eclipse.kura.clock.ClockService\"\n            }\n        }\n    },\n  ...\n]\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#trigger-the-framework-to-take-and-persist-a-snapshot","title":"Trigger the framework to take and persist a snapshot","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/snapshots/_write

                    Response: 

                    1631095409516\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#rollbacks-to-the-snapshot-identified-by-the-provided-id","title":"Rollbacks to the snapshot identified by the provided ID","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/snapshots/_rollback Response: 

                    1631093011618\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v1/#upload-a-snapshot-as-xml","title":"Upload a snapshot as XML","text":"

                    Request: URL - https://<gateway-ip>/services/configuration/v1/snapshots/_upload

                    Request body: 

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?><esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.clock.ClockService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.ntp.host\" type=\"String\">\n                <esf:value>0.pool.ntp.org</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.ntp.port\" type=\"Integer\">\n                <esf:value>123</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.provider\" type=\"String\">\n                <esf:value>java-ntp</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.ntp.max-retry\" type=\"Integer\">\n                <esf:value>0</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.ntp.refresh-interval\" type=\"Integer\">\n                <esf:value>3600</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"rtc.filename\" type=\"String\">\n                <esf:value>/dev/rtc1</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.set.hwclock\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.ntp.timeout\" type=\"Integer\">\n                <esf:value>10000</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.ntp.retry.interval\" type=\"Integer\">\n                <esf:value>5</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"kura.service.pid\" type=\"String\">\n                <esf:value>org.eclipse.kura.clock.ClockService</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"service.pid\" type=\"String\">\n                <esf:value>org.eclipse.kura.clock.ClockService</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v2/","title":"Configuration V2 REST APIs and CONF-V2 Request Handler","text":"

                    This page describes the CONF-V2 request handler and configuration/v2 rest APIs. Accessing the REST APIs requires to use an identity with the rest.configuration permission assigned.

                    • Request definitions
                      • GET/snapshots
                      • GET/factoryComponents
                      • POST/factoryComponents
                      • DEL/factoryComponents/byPid
                      • GET/factoryComponents/ocd
                      • POST/factoryComponents/ocd/byFactoryPid
                      • GET/configurableComponents
                      • GET/configurableComponents/pidsWithFactory
                      • GET/configurableComponents/configurations
                      • POST/configurableComponents/configurations/byPid
                      • POST/configurableComponents/configurations/byPid/_default
                      • PUT/configurableComponents/configurations/_update
                      • EXEC/snapshots/_write
                      • EXEC/snapshots/_rollback
                      • EXEC/snapshots/byId/_rollback
                    • JSON definitions
                      • PidAndFactoryPidSet
                      • SnapshotIdSet
                      • PropertyType
                      • ConfigurationProperty
                      • ConfigurationProperties
                      • Option
                      • AttributeDefinition
                      • ObjectClassDefinition
                      • ComponentConfiguration
                      • ComponentConfigurationList
                      • CreateFactoryComponentConfigurationsRequest
                      • UpdateComponentConfigurationRequest
                      • DeleteFactoryComponentConfigurationsRequest
                      • PidSet
                      • SnaphsotId
                      • GenericFailureReport
                      • BatchFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#request-definitions","title":"Request definitions","text":""},{"location":"references/rest-apis/rest-configuration-service-v2/#getsnapshots","title":"GET/snapshots","text":"
                    • REST API path : /services/configuration/v2/snapshots
                    • description : Returns the ids of the snapshots currently stored on the device.
                    • responses :
                      • 200
                      • description : The snapshot id set.
                      • response body :
                        • SnapshotIdSet
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#getfactorycomponents","title":"GET/factoryComponents","text":"
                    • REST API path : /services/configuration/v2/factoryComponents
                    • description : Returns the ids of the component factories available on the device.
                    • responses :
                      • 200
                      • description : The factory pid set.
                      • response body :
                        • PidSet
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#postfactorycomponents","title":"POST/factoryComponents","text":"
                    • REST API path : /services/configuration/v2/factoryComponents
                    • description : This is a batch request that allows to create one or more factory component instances and optionally create a new snapshot.
                    • request body :
                      • CreateFactoryComponentConfigurationsRequest
                    • responses :
                      • 200
                      • description : The request succeeded.
                      • 400
                      • description : The request body is not valid JSON or it contains invalid parameters.
                      • response body :
                        • GenericFailureReport
                      • 500
                      • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: create:$pid for component creation operations, where $pid is the pid of the instance, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

                      • response body :

                        Variants:

                        • object
                          • GenericFailureReport
                        • object
                          • BatchFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#delfactorycomponentsbypid","title":"DEL/factoryComponents/byPid","text":"
                    • REST API path : /services/configuration/v2/factoryComponents/byPid
                    • description : This is a batch request that allows to delete one or more factory component instances and optionally create a new snapshot.
                    • request body :
                      • DeleteFactoryComponentConfigurationsRequest
                    • responses :
                      • 200
                      • description : The request succeeded.
                      • 400
                      • description : The request body is not valid JSON or it contains invalid parameters.
                      • response body :
                        • GenericFailureReport
                      • 500
                      • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: delete:$pid for component delete operations, where $pid is the pid of the instance, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

                      • response body :

                        Variants:

                        • object
                          • GenericFailureReport
                        • object
                          • BatchFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#getfactorycomponentsocd","title":"GET/factoryComponents/ocd","text":"
                    • REST API path : /services/configuration/v2/factoryComponents/ocd
                    • description : Returns the OCD of the components created by the factories available on the device without the need of creating an instance. This request returns the information related to all available factories.
                    • responses :
                      • 200
                      • description : The request succeeded. The pid property of the received configurations will report the factory pid, the ocd field will contain the definition, the properties field will not be present.
                      • response body :
                        • ComponentConfigurationList
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#postfactorycomponentsocdbyfactorypid","title":"POST/factoryComponents/ocd/byFactoryPid","text":"
                    • REST API path : /services/configuration/v2/factoryComponents/ocd/byFactoryPid
                    • description : Returns the OCD of the components created by the factories available on the device without the need of creating an instance. This request returns the information related to a user selected set of factories.
                    • request body :
                      • PidSet
                    • responses :
                      • 200
                      • description : The request succeeded. The pid property of the received configurations will report the factory pid, the ocd field will contain the definition, the properties field will not be present. If the OCD for a given factory pid cannot be found, it will not be included in the result.
                      • response body :
                        • ComponentConfigurationList
                      • 400
                      • description : The request body is not valid JSON or it contains invalid parameters.
                      • response body :
                        • GenericFailureReport
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#getconfigurablecomponents","title":"GET/configurableComponents","text":"
                    • REST API path : /services/configuration/v2/configurableComponents
                    • description : Returns the list of the pids available on the system.
                    • responses :
                      • 200
                      • description : The request succeeded.
                      • response body :
                        • PidSet
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#getconfigurablecomponentspidswithfactory","title":"GET/configurableComponents/pidsWithFactory","text":"
                    • REST API path : /services/configuration/v2/configurableComponents/pidsWithFactory
                    • description : Returns the list of the pids available on the system, reporting also the factory pid where applicable.
                    • responses :
                      • 200
                      • description : The request succeeded.
                      • response body :
                        • PidAndFactoryPidSet
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#getconfigurablecomponentsconfigurations","title":"GET/configurableComponents/configurations","text":"
                    • REST API path : /services/configuration/v2/configurableComponents/configurations
                    • description : Returns all of component configurations available on the system. This request will return the pid, ocd and properties.
                    • responses :
                      • 200
                      • description : The request succeeded.
                      • response body :
                        • ComponentConfigurationList
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#postconfigurablecomponentsconfigurationsbypid","title":"POST/configurableComponents/configurations/byPid","text":"
                    • REST API path : /services/configuration/v2/configurableComponents/configurations/byPid
                    • description : Returns a user selected set of configurations. This request will return the pid, ocd and properties.
                    • request body :
                      • PidSet
                    • responses :
                      • 200
                      • description : The request succeeded. If the configuration for a given pid cannot be found, it will not be included in the result.
                      • response body :
                        • ComponentConfigurationList
                      • 400
                      • description : The request body is not valid JSON or it contains invalid parameters.
                      • response body :
                        • GenericFailureReport
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#postconfigurablecomponentsconfigurationsbypid_default","title":"POST/configurableComponents/configurations/byPid/_default","text":"
                    • REST API path : /services/configuration/v2/configurableComponents/configurations/byPid/_default
                    • description : Returns the default configuration for a given set of component pids. The default configurations are generated basing on component definition only, user applied modifications will not be taken into account. This request will return the pid, ocd and properties.
                    • request body :
                      • PidSet
                    • responses :
                      • 200
                      • description : The request succeeded. If the configuration for a given pid cannot be found, it will not be included in the result.
                      • response body :
                        • ComponentConfigurationList
                      • 400
                      • description : The request body is not valid JSON or it contains invalid parameters.
                      • response body :
                        • GenericFailureReport
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#putconfigurablecomponentsconfigurations_update","title":"PUT/configurableComponents/configurations/_update","text":"
                    • REST API path : /services/configuration/v2/configurableComponents/configurations/_update
                    • description : Updates a given set of component configurations. This request can be also used to apply a configuration snapshot.
                    • request body :
                      • UpdateComponentConfigurationRequest
                    • responses :
                      • 200
                      • description : The request succeeded.
                      • 400
                      • description : The request body is not valid JSON or it contains invalid parameters.
                      • response body :
                        • GenericFailureReport
                      • 500
                      • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: update:$pid for component update operations, where $pid is the pid of the instance, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

                      • response body :

                        Variants:

                        • object
                          • GenericFailureReport
                        • object
                          • BatchFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#execsnapshots_write","title":"EXEC/snapshots/_write","text":"
                    • REST API path : /services/configuration/v2/snapshots/_write
                    • description : Requests the device to create a new snasphot based on the current defice configuration. If this request is used through REST API, the POST method must be used.
                    • responses :
                      • 200
                      • description : The request succeeded. The result is the identifier of the new snsapsot
                      • response body :
                        • SnaphsotId
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#execsnapshots_rollback","title":"EXEC/snapshots/_rollback","text":"
                    • REST API path : /services/configuration/v2/snapshots/_rollback
                    • description : Rollbacks the framework to the last saved snapshot if available. If this request is used through REST API, the POST method must be used.
                    • responses :
                      • 200
                      • description : The request succeeded. The result contains the id of the snapshot used for rollback.
                      • response body :
                        • SnaphsotId
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#execsnapshotsbyid_rollback","title":"EXEC/snapshots/byId/_rollback","text":"
                    • REST API path : /services/configuration/v2/snapshots/byId/_rollback
                    • description : Performs a rollback to the snapshot id specified by the user.
                    • responses :
                      • 200
                      • description : The request succeeded.
                      • 400
                      • description : The request body is not valid JSON or it contains invalid parameters.
                      • response body :
                        • GenericFailureReport
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#json-definitions","title":"JSON definitions","text":""},{"location":"references/rest-apis/rest-configuration-service-v2/#pidandfactorypidset","title":"PidAndFactoryPidSet","text":"

                    Represents a set of pids with the corresponding factory pid. Properties:

                    • components: array The set of pids and factory pids

                      • array elements: object The pid and factory pid Properties:

                      • pid: string The component pid.

                      • factoryPid: string
                        • optional Can be missing if the described component is not a factory instance. The factory pid
                    {\n  \"components\": [\n    {\n      \"factoryPid\": \"org.eclipse.kura.core.db.H2DbService\",\n      \"pid\": \"org.eclipse.kura.db.H2DbService\"\n    },\n    {\n      \"factoryPid\": \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\",\n      \"pid\": \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\"\n    },\n    {\n      \"pid\": \"org.eclipse.kura.web.Console\"\n    }\n  ]\n}\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#snapshotidset","title":"SnapshotIdSet","text":"

                    An object decribing a set of configuration snapshot ids Properties:

                    • ids: array The set of snapshot ids.
                      • array elements: number A snapshot id.
                    {\n  \"ids\": [\n    0,\n    1638438049921,\n    1638438146960,\n    1638439710944,\n    1638439717931,\n    1638439734077,\n    1638439767252,\n    1638521986953,\n    1638521993692,\n    1638522572822\n  ]\n}\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#propertytype","title":"PropertyType","text":"

                    A string that describes the type of a configuration property. * Possible values * STRING * LONG * DOUBLE * FLOAT * INTEGER * BYTE * CHAR * BOOLEAN * SHORT * PASSWORD

                    \"STRING\"\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#configurationproperty","title":"ConfigurationProperty","text":"

                    An object describing a configuration property. Properties:

                    • type: string (enumerated)
                      • PropertyType
                    • value: variant

                    • optional In requests, this field can be omitted or set to null to assign the null value to a non required configuration property. Describes the property value. The value type depends on the type property. Variants:

                      • number If type is LONG, DOUBLE, FLOAT, INTEGER, BYTE or SHORT and the property does not represent an array.
                      • string If type is STRING, PASSWORD or CHAR and the property is not an array. In case of CHAR type, the value must have a length of 1.
                      • bool If type is BOOLEAN and the property is not an array
                      • array If type is LONG, DOUBLE, FLOAT, INTEGER, BYTE or SHORT and the property represents an array.
                        • array elements: number The property values as numbers.
                      • array If type is STRING, PASSWORD or CHAR and the property is an array.
                        • array elements: string The property values as strings. In case of CHAR type, the values must have a length of 1.
                      • array If type is BOOLEAN and the property is an array
                        • array elements: bool The property values as booleans.

                    {\n  \"type\": \"STRING\",\n  \"value\": \"foo\"\n}\n
                    {\n  \"type\": \"STRING\",\n  \"value\": [\n    \"foo\",\n    \"bar\"\n  ]\n}\n
                    {\n  \"type\": \"INTEGER\",\n  \"value\": 12\n}\n
                    {\n  \"type\": \"LONG\",\n  \"value\": [\n    1,\n    2,\n    3,\n    4\n  ]\n}\n
                    {\n  \"type\": \"PASSWORD\",\n  \"value\": \"myPassword\"\n}\n
                    {\n  \"type\": \"PASSWORD\",\n  \"value\": [\n    \"my\",\n    \"password\",\n    \"array\"\n  ]\n}\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#configurationproperties","title":"ConfigurationProperties","text":"

                    An object representing a set of configuration properties. The members of this object represent configuration property, the member names represent the configuration property ids. This object can have a variable number of members. Properties:

                    • propertyName: object
                      • ConfigurationProperty
                    {\n  \"KeystoreService.target\": {\n    \"type\": \"STRING\",\n    \"value\": \"(kura.service.pid=HttpsKeystore)\"\n  },\n  \"https.client.auth.ports\": {\n    \"type\": \"INTEGER\",\n    \"value\": [\n      4443\n    ]\n  },\n  \"https.client.revocation.soft.fail\": {\n    \"type\": \"BOOLEAN\",\n    \"value\": false\n  },\n  \"https.ports\": {\n    \"type\": \"INTEGER\",\n    \"value\": [\n      443\n    ]\n  },\n  \"https.revocation.check.enabled\": {\n    \"type\": \"BOOLEAN\",\n    \"value\": false\n  },\n  \"kura.service.pid\": {\n    \"type\": \"STRING\",\n    \"value\": \"org.eclipse.kura.http.server.manager.HttpService\"\n  },\n  \"service.pid\": {\n    \"type\": \"STRING\",\n    \"value\": \"org.eclipse.kura.http.server.manager.HttpService\"\n  },\n  \"ssl.revocation.mode\": {\n    \"type\": \"STRING\",\n    \"value\": \"PREFER_OCSP\"\n  }\n}\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#option","title":"Option","text":"

                    An object describing an allowed element for a multi choiche field. Properties:

                    • label: string
                    • optional This parameter may not be specified by component configuration. An user friendly label for the option.
                    • value: string The option value encoded as a string.

                    {\n  \"label\": \"Value 1\",\n  \"value\": \"1\"\n}\n
                    {\n  \"value\": \"foo\"\n}\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#attributedefinition","title":"AttributeDefinition","text":"

                    A descriptor of a configuration property. Properties:

                    • id: string The id of the attribute definition. This field corresponds to the configuration property name.
                    • type: string (enumerated)
                      • PropertyType
                    • name: string
                    • optional This parameter may not be specified by component configuration. An user friendly name for the property.
                    • description: string
                    • optional This parameter may not be specified by component configuration. An user friendly description for the property.
                    • cardinality: number An integer describing the property cardinality. If the value is 0, then the property is a singleton value (not an array), if it is > 0, then the configuration property is an array and this property specifies the maximum allowed array length.
                    • min: string
                    • optional This parameter may not be specified by component configuration. If not specified, the property does not have a minimum value. Specifies the minimum value for this property as a string.
                    • max: string
                    • optional This parameter may not be specified by component configuration. If not specified, the property does not have a maximum value. Specifies the maximum value for this property as a string.
                    • isRequired: bool Specifies whether the configuration parameter is required or not.
                    • defaultValue: string
                    • optional This parameter may not be specified by component configuration. Specifies the default value for this property as a string.
                    • option: array
                    • optional If specified, describes a set of allowed values for the configuration property. The allowed values for this configuration properties
                      • array elements: object
                      • Option

                    {\n  \"defaultValue\": \"false\",\n  \"description\": \"Specifies whether the DB server is enabled or not.\",\n  \"id\": \"db.server.enabled\",\n  \"isRequired\": true,\n  \"name\": \"db.server.enabled\",\n  \"type\": \"BOOLEAN\"\n}\n
                    {\n  \"defaultValue\": \"TCP\",\n  \"description\": \"Specifies the server type, see http://www.h2database.com/javadoc/org/h2/tools/Server.html for more details.\",\n  \"id\": \"db.server.type\",\n  \"isRequired\": true,\n  \"name\": \"db.server.type\",\n  \"option\": [\n    {\n      \"label\": \"WEB\",\n      \"value\": \"WEB\"\n    },\n    {\n      \"label\": \"TCP\",\n      \"value\": \"TCP\"\n    },\n    {\n      \"label\": \"PG\",\n      \"value\": \"PG\"\n    }\n  ],\n  \"type\": \"STRING\"\n}\n

                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#objectclassdefinition","title":"ObjectClassDefinition","text":"

                    Provides some metadata information about a component configuration. Properties:

                    • ad: array The metadata about the configuration properties.
                      • array elements: object
                      • AttributeDefinition
                    • icon: array

                    • optional Can be missing if the OCD does not define icons. A list of icons that visually represent the configuration.

                      • array elements: object

                      Properties:

                      • resource: string An identifier of the icon image resource.
                      • size: number The icon width and height in pixels.
                      • name: string A user friendly name for the component configuration.
                      • description: string A user friendly description of the component configuration.
                      • id: string An identifier of the component configuration.
                    {\n  \"ad\": [\n    {\n      \"defaultValue\": \"false\",\n      \"description\": \"The WatchdogService monitors CriticalComponents and reboots the system if one of them hangs. Once enabled the WatchdogService starts refreshing the watchdog device, which will reset the system if WatchdogService hangs.\",\n      \"id\": \"enabled\",\n      \"isRequired\": true,\n      \"name\": \"Watchdog enable\",\n      \"type\": \"BOOLEAN\"\n    },\n    {\n      \"defaultValue\": \"10000\",\n      \"description\": \"WatchdogService's refresh interval in ms of the Watchdog device. The value can be set between 1 and 60 seconds and should not be set to a value greater or equal to the Watchdog device's timeout value\",\n      \"id\": \"pingInterval\",\n      \"isRequired\": true,\n      \"max\": \"60000\",\n      \"name\": \"Watchdog refresh interval\",\n      \"type\": \"INTEGER\"\n    },\n    {\n      \"defaultValue\": \"/dev/watchdog\",\n      \"description\": \"Watchdog device path e.g. /dev/watchdog.\",\n      \"id\": \"watchdogDevice\",\n      \"isRequired\": true,\n      \"name\": \"Watchdog device path\",\n      \"type\": \"STRING\"\n    },\n    {\n      \"defaultValue\": \"/opt/eclipse/kura/data/kura-reboot-cause\",\n      \"description\": \"The path for the file that will contain the reboot cause information.\",\n      \"id\": \"rebootCauseFilePath\",\n      \"isRequired\": true,\n      \"name\": \"Reboot Cause File Path\",\n      \"type\": \"STRING\"\n    }\n  ],\n  \"description\": \"The WatchdogService handles the hardware watchdog of the platform.  The parameter define the ping periodicity of the hardware watchdog to ensure it does not reboot. The WatchdogService will reset the watchdog timeout, can disable it (where supported) with the Magic Character, but cannot set the refresh rate of a watchdog device.\",\n  \"icon\": [\n    {\n      \"resource\": \"WatchdogService\",\n      \"size\": 32\n    }\n  ],\n  \"id\": \"org.eclipse.kura.watchdog.WatchdogService\",\n  \"name\": \"WatchdogService\"\n}\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#componentconfiguration","title":"ComponentConfiguration","text":"

                    Describes a component configuration. Properties:

                    • pid: string The identifier of this configuration.
                    • ocd: object
                    • optional Can be omitted in some requests and responses, see request documentation for more information.
                      • ObjectClassDefinition
                    • properties: object
                    • optional Can be omitted in some requests and responses, see request documentation for more information.
                      • ConfigurationProperties
                    {\n  \"definition\": {\n    \"ad\": [\n      {\n        \"cardinality\": 3,\n        \"description\": \"If set to a non empty list, REST API access will be allowed only on the specified ports. If set to an empty list, access will be allowed on all ports. Please make sure that the allowed ports are open in HttpService and Firewall configuration.\",\n        \"id\": \"allowed.ports\",\n        \"isRequired\": false,\n        \"max\": \"65535\",\n        \"min\": \"1\",\n        \"name\": \"Allowed ports\",\n        \"type\": \"INTEGER\"\n      }\n    ],\n    \"description\": \"This service allows to configure settings related to Kura REST APIs\",\n    \"id\": \"org.eclipse.kura.internal.rest.provider.RestService\",\n    \"name\": \"RestService\"\n  },\n  \"pid\": \"org.eclipse.kura.internal.rest.provider.RestService\",\n  \"properties\": {\n    \"kura.service.pid\": {\n      \"type\": \"STRING\",\n      \"value\": \"org.eclipse.kura.internal.rest.provider.RestService\"\n    },\n    \"service.pid\": {\n      \"type\": \"STRING\",\n      \"value\": \"org.eclipse.kura.internal.rest.provider.RestService\"\n    }\n  }\n}\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#componentconfigurationlist","title":"ComponentConfigurationList","text":"

                    Represents a list of component configurations. Properties:

                    • configs: array The component configurations
                      • array elements: object
                      • ComponentConfiguration
                    {\n  \"configs\": [\n    {\n      \"definition\": {\n        \"ad\": [\n          {\n            \"defaultValue\": \"true\",\n            \"description\": \"Whether or not to enable the ClockService\",\n            \"id\": \"enabled\",\n            \"isRequired\": true,\n            \"name\": \"enabled\",\n            \"type\": \"BOOLEAN\"\n          },\n          {\n            \"defaultValue\": \"true\",\n            \"description\": \"Whether or not to sync the system hardware clock after the system time gets set\",\n            \"id\": \"clock.set.hwclock\",\n            \"isRequired\": true,\n            \"name\": \"clock.set.hwclock\",\n            \"type\": \"BOOLEAN\"\n          },\n          {\n            \"defaultValue\": \"java-ntp\",\n            \"description\": \"Source for setting the system clock. Verify the availabiliy of the selected provider before activate it.\",\n            \"id\": \"clock.provider\",\n            \"isRequired\": true,\n            \"name\": \"clock.provider\",\n            \"option\": [\n              {\n                \"label\": \"java-ntp\",\n                \"value\": \"java-ntp\"\n              },\n              {\n                \"label\": \"ntpd\",\n                \"value\": \"ntpd\"\n              },\n              {\n                \"label\": \"chrony-advanced\",\n                \"value\": \"chrony-advanced\"\n              }\n            ],\n            \"type\": \"STRING\"\n          },\n          {\n            \"defaultValue\": \"0.pool.ntp.org\",\n            \"description\": \"The hostname that provides the system time via NTP\",\n            \"id\": \"clock.ntp.host\",\n            \"isRequired\": true,\n            \"name\": \"clock.ntp.host\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"defaultValue\": \"123\",\n            \"description\": \"The port number that provides the system time via NTP\",\n            \"id\": \"clock.ntp.port\",\n            \"isRequired\": true,\n            \"max\": \"65535\",\n            \"min\": \"1\",\n            \"name\": \"clock.ntp.port\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"defaultValue\": \"10000\",\n            \"description\": \"The NTP timeout in milliseconds\",\n            \"id\": \"clock.ntp.timeout\",\n            \"isRequired\": true,\n            \"min\": \"1000\",\n            \"name\": \"clock.ntp.timeout\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"defaultValue\": \"0\",\n            \"description\": \"The maximum number of retries for the initial synchronization (with interval clock.ntp.retry.interval). If set to 0 the service will retry forever.\",\n            \"id\": \"clock.ntp.max-retry\",\n            \"isRequired\": true,\n            \"min\": \"0\",\n            \"name\": \"clock.ntp.max-retry\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"defaultValue\": \"5\",\n            \"description\": \"When sync fails, interval in seconds between each retry.\",\n            \"id\": \"clock.ntp.retry.interval\",\n            \"isRequired\": true,\n            \"min\": \"1\",\n            \"name\": \"clock.ntp.retry.interval\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"defaultValue\": \"3600\",\n            \"description\": \"Whether or not to sync the clock and if so, the frequency in seconds.  If less than zero - no update, if equal to zero - sync once at startup, if greater than zero - the frequency in seconds to perform a new clock sync\",\n            \"id\": \"clock.ntp.refresh-interval\",\n            \"isRequired\": true,\n            \"name\": \"clock.ntp.refresh-interval\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"defaultValue\": \"/dev/rtc0\",\n            \"description\": \"The RTC File Name. It defaults to /dev/rtc0. This option is not used if chrony-advanced option is selected in clock.provider.\",\n            \"id\": \"rtc.filename\",\n            \"isRequired\": true,\n            \"name\": \"RTC File Name\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"description\": \"Chrony configuration file.|TextArea\",\n            \"id\": \"chrony.advanced.config\",\n            \"isRequired\": false,\n            \"name\": \"Chrony Configuration\",\n            \"type\": \"STRING\"\n          }\n        ],\n        \"description\": \"ClockService Configuration\",\n        \"icon\": [\n          {\n            \"resource\": \"ClockService\",\n            \"size\": 32\n          }\n        ],\n        \"id\": \"org.eclipse.kura.clock.ClockService\",\n        \"name\": \"ClockService\"\n      },\n      \"pid\": \"org.eclipse.kura.clock.ClockService\",\n      \"properties\": {\n        \"clock.ntp.host\": {\n          \"type\": \"STRING\",\n          \"value\": \"0.pool.ntp.org\"\n        },\n        \"clock.ntp.max-retry\": {\n          \"type\": \"INTEGER\",\n          \"value\": 0\n        },\n        \"clock.ntp.port\": {\n          \"type\": \"INTEGER\",\n          \"value\": 123\n        },\n        \"clock.ntp.refresh-interval\": {\n          \"type\": \"INTEGER\",\n          \"value\": 3600\n        },\n        \"clock.ntp.retry.interval\": {\n          \"type\": \"INTEGER\",\n          \"value\": 5\n        },\n        \"clock.ntp.timeout\": {\n          \"type\": \"INTEGER\",\n          \"value\": 10000\n        },\n        \"clock.provider\": {\n          \"type\": \"STRING\",\n          \"value\": \"java-ntp\"\n        },\n        \"clock.set.hwclock\": {\n          \"type\": \"BOOLEAN\",\n          \"value\": true\n        },\n        \"enabled\": {\n          \"type\": \"BOOLEAN\",\n          \"value\": true\n        },\n        \"kura.service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.clock.ClockService\"\n        },\n        \"rtc.filename\": {\n          \"type\": \"STRING\",\n          \"value\": \"/dev/rtc0\"\n        },\n        \"service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.clock.ClockService\"\n        }\n      }\n    },\n    {\n      \"definition\": {\n        \"ad\": [\n          {\n            \"defaultValue\": \"(kura.service.pid=org.eclipse.kura.ssl.SslManagerService)\",\n            \"description\": \"Specifies, as an OSGi target filter, the pid of the SslManagerService used to create SSL connections for downloading packages.\",\n            \"id\": \"SslManagerService.target\",\n            \"isRequired\": true,\n            \"name\": \"SslManagerService Target Filter\",\n            \"type\": \"STRING\"\n          }\n        ],\n        \"description\": \"This service is responsible of managing the deployment packages installed on the system.\",\n        \"id\": \"org.eclipse.kura.deployment.agent\",\n        \"name\": \"DeploymentAgent\"\n      },\n      \"pid\": \"org.eclipse.kura.deployment.agent\",\n      \"properties\": {\n        \"SslManagerService.target\": {\n          \"type\": \"STRING\",\n          \"value\": \"(kura.service.pid=org.eclipse.kura.ssl.SslManagerService)\"\n        },\n        \"kura.service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.deployment.agent\"\n        },\n        \"service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.deployment.agent\"\n        }\n      }\n    }\n  ]\n}\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#createfactorycomponentconfigurationsrequest","title":"CreateFactoryComponentConfigurationsRequest","text":"

                    An object describing a factory component instance creation request. Properties:

                    • configs: array The set of configurations to be created

                      • array elements: object An object describing a factory component confguration. Properties:

                      • pid: string The component pid.

                      • factoryPid: string The component factory pid
                      • properties: object
                        • optional If omitted, the component innstance will be created with default configuration.
                        • ConfigurationProperties
                      • takeSnapshot: bool
                      • optional The true value will be used as default if not explicitly specified Defines whether a new snapshot should be created after that the factory component configuration instances have been created.
                    {\n  \"configs\": [\n    {\n      \"factoryPid\": \"org.eclipse.kura.core.db.H2DbServer\",\n      \"pid\": \"testComponent\",\n      \"properties\": {\n        \"db.server.type\": {\n          \"type\": \"STRING\",\n          \"value\": \"WEB\"\n        }\n      }\n    },\n    {\n      \"factoryPid\": \"org.eclipse.kura.core.db.H2DbServer\",\n      \"pid\": \"thirdComponent\"\n    }\n  ],\n  \"takeSnapshot\": true\n}\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#updatecomponentconfigurationrequest","title":"UpdateComponentConfigurationRequest","text":"

                    An object that describes a set of configurations that need to be updated. Properties:

                    • configs: array The configurations to be updated. The ocd field can be omitted, it will be ignored if specified.
                      • array elements: object
                      • ComponentConfiguration
                    • takeSnapshot: bool
                    • optional The true value will be used as default if not explicitly specified Defines whether a new snapshot should be created after that the component configurations have been applied.
                    {\n  \"configs\": [\n    {\n      \"pid\": \"org.eclipse.kura.cloud.app.command.CommandCloudApp\",\n      \"properties\": {\n        \"command.enable\": {\n          \"type\": \"BOOLEAN\",\n          \"value\": true\n        },\n        \"command.timeout\": {\n          \"type\": \"INTEGER\",\n          \"value\": 60\n        }\n      }\n    },\n    {\n      \"pid\": \"org.eclipse.kura.position.PositionService\",\n      \"properties\": {\n        \"parity\": {\n          \"type\": \"STRING\",\n          \"value\": 0\n        }\n      }\n    }\n  ],\n  \"takeSnapshot\": true\n}\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#deletefactorycomponentconfigurationsrequest","title":"DeleteFactoryComponentConfigurationsRequest","text":"

                    An object describing a factory component instance delete request. Properties:

                    • pids: array The list of the pids of the factory component instances to be deleted.
                      • array elements: string The component pid.
                    • takeSnapshot: bool
                    • optional The true value will be used as default if not explicitly specified Defines whether a new snapshot should be created after that the factory component configuration instances have been deleted.
                    {\n  \"pids\": [\n    \"testComponent\",\n    \"otherComponent\"\n  ],\n  \"takeSnapshot\": true\n}\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#pidset","title":"PidSet","text":"

                    Represents a set of pids or factory pids. Properties:

                    • pids: array The set of pids
                      • array elements: string The pid
                    {\n  \"pids\": [\n    \"org.eclipse.kura.deployment.agent\",\n    \"org.eclipse.kura.clock.ClockService\"\n  ]\n}\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#snaphsotid","title":"SnaphsotId","text":"

                    An object describing the identifier of a configuration snapshot. Properties:

                    • id: number The snapshot id
                    {\n  \"id\": 163655959932\n}\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#genericfailurereport","title":"GenericFailureReport","text":"

                    An object reporting a failure message. Properties:

                    • message: string A message describing the failure.
                    {\n  \"message\": \"An unexpected error occurred.\"\n}\n
                    "},{"location":"references/rest-apis/rest-configuration-service-v2/#batchfailurereport","title":"BatchFailureReport","text":"

                    An object that is returned by requests that involve multiple operations, when at least one operation failed. This object report an error message for each of the operations that failed. The operations are identified by an id, see request documentation for more details. If an operation is not listed by this object, then the operation succeeded. Properties:

                    • failures: array The list of operations that failed.

                      • array elements: object An object reporting details about an operation failure. Properties:

                      • id: string An identifier of the failed operation.

                      • message: string A message describing the failure.
                    {\n  \"failures\": [\n    {\n      \"id\": \"create:testComponent\",\n      \"message\": \"Invalid parameter. pid testComponent already exists\"\n    },\n    {\n      \"id\": \"create:otherComponent\",\n      \"message\": \"Invalid parameter. pid otherComponent already exists\"\n    }\n  ]\n}\n
                    "},{"location":"references/rest-apis/rest-deploy-api/","title":"Rest Deploy v2 API","text":"

                    The DeploymentRestService APIs provides methods to manage the installed deployment packages. Identities with rest.deploy permissions can access these APIs.

                    "},{"location":"references/rest-apis/rest-deploy-api/#get-installed-packages","title":"Get installed packages","text":"
                    • Description: Provides the list of all the deployment packages installed and tracked by the framework.
                    • Method: GET
                    • API PATH: /deploy/v2/
                    "},{"location":"references/rest-apis/rest-deploy-api/#responses","title":"Responses","text":"
                    • 200 OK status
                    [{ \"name\": \"packageName\", \"version\": \"packageVersion\"}]\n
                    "},{"location":"references/rest-apis/rest-deploy-api/#install-package-from-url","title":"Install package from URL","text":"
                    • Description: Installs the deployment package specified in the InstallRequest. If the request was already issued for the same InstallRequest, it returns the status of the installation process.
                    • Method: POST
                    • API PATH: /deploy/v2/_install
                    "},{"location":"references/rest-apis/rest-deploy-api/#request-body","title":"Request Body","text":"
                    {\n  \"url\": \"deploymentPackageUrl\"\n}\n

                    Example:

                    {\n  \"url\": \"http://download.eclipse.org/kura/releases/4.1.0/org.eclipse.kura.demo.heater_1.0.500.dp\"\n}\n

                    Please note that the url can refer to a .dp already in the device filesystem.

                    "},{"location":"references/rest-apis/rest-deploy-api/#responses_1","title":"Responses","text":"
                    • 200 OK status
                    • 400 Bad request
                    \"REQUEST_RECEIVED\"\n
                    "},{"location":"references/rest-apis/rest-deploy-api/#install-package-from-upload","title":"Install package from upload","text":"
                    • Description: Upload and install a Deployment Package.
                    • Method: POST
                    • API PATH: /deploy/v2/_upload
                    "},{"location":"references/rest-apis/rest-deploy-api/#request-body_1","title":"Request Body","text":"

                    The POST request body should be encoded in the multipart/form-data enctype, thus allowing for the upload of the Deployment Package file. The uploaded file is expected to be added in the file field of the form.

                    "},{"location":"references/rest-apis/rest-deploy-api/#headers","title":"Headers","text":"
                    • Content-Type: multipart/form-data
                    "},{"location":"references/rest-apis/rest-deploy-api/#body-formdata","title":"Body (formdata)","text":"
                    • file
                    "},{"location":"references/rest-apis/rest-deploy-api/#example","title":"Example","text":"

                    Example using curl:

                    curl -X POST -k -u $USERNAME:$PASSWORD \\\n    --header 'Content-Type: multipart/form-data' \\\n    --form 'file=@\"/path/to/your/file.dp\"' \\\n    https://$ADDRESS/services/deploy/v2/_upload\n
                    "},{"location":"references/rest-apis/rest-deploy-api/#responses_2","title":"Responses","text":"
                    • 200 OK status
                    • 400 Bad request
                    \"REQUEST_RECEIVED\"\n
                    "},{"location":"references/rest-apis/rest-deploy-api/#uninstall-a-package","title":"Uninstall a package","text":"
                    • Description: Uninstalls the deployment package identified by the specified name. If the request was already issued, it reports the status of the uninstallation operation.
                    • Method: DELETE
                    • API PATH: /deploy/v2/{name}
                    "},{"location":"references/rest-apis/rest-deploy-api/#responses_3","title":"Responses","text":"
                    • 200 OK status
                    \"REQUEST_RECEIVED\"\n
                    "},{"location":"references/rest-apis/rest-deploy-api/#get-eclipse-marketplace-package-descriptor","title":"Get Eclipse Marketplace Package Descriptor","text":"
                    • Description: Provides the Eclipse Marketplace Package Descriptor information of the deployment package identified by URL passed in the request.
                    • Method: PUT
                    • API PATH: /deploy/v2/_packageDescriptor
                    "},{"location":"references/rest-apis/rest-deploy-api/#request-body_2","title":"Request Body","text":"
                    {\n  \"url\": \"deploymentPackageUrl\"\n}\n

                    Example:

                    {\n  \"url\": \"http://marketplace.eclipse.org/marketplace-client-intro?mpc_install=5514714\"\n}\n
                    "},{"location":"references/rest-apis/rest-deploy-api/#responses_4","title":"Responses","text":"
                    • 200 OK status
                    • 400 Bad request
                    {\n   \"nodeId\":\"5514714\",\n   \"url\":\"https://marketplace.eclipse.org/content/ai-wire-component-eclipse-kura-5\",\n   \"dpUrl\":\"https://download.eclipse.org/kura/releases/5.3.0/org.eclipse.kura.wire.ai.component.provider-1.2.0.dp\",\n   \"minKuraVersion\":\"5.1.0\",\n   \"maxKuraVersion\":\"\",\n   \"currentKuraVersion\":\"5.4.0\",\n   \"isCompatible\":true\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v1/","title":"Rest Identity V1 API","text":"

                    Warning

                    This API id deprecated and superseded by the Identity V2 REST APIs.

                    Note

                    This API can also be accessed via the RequestHandler with app-id: IDN-V1.

                    The IdentityRestService APIs provides methods to manage the system identities. Unless otherwise specified, identities with rest.identity permissions can access these APIs.

                    "},{"location":"references/rest-apis/rest-identity-api-v1/#post-methods","title":"POST methods","text":""},{"location":"references/rest-apis/rest-identity-api-v1/#create-user","title":"Create User","text":"
                    • Description: This method allows to create a new user in the system.
                    • Method: POST
                    • API PATH: services/identity/v1/identities
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#request","title":"Request","text":"
                    {\n    \"userName\": \"username\",\n    \"password\": \"password\",\n    \"passwordChangeNeeded\": false,\n    \"passwordAuthEnabled\": true,\n    \"permissions\": [\n        \"rest.identity\"\n    ]\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#responses","title":"Responses","text":"
                    • 200 OK status
                    • 400 Bad Request (Password strenght requirements not satisfied)
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#get-user-by-name","title":"Get User by Name","text":"
                    • Description: This method allows to get data about an user in the system. The only considered field is the userName.
                    • Method: POST
                    • API PATH: services/identity/v1/identities/byName
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#request_1","title":"Request","text":"
                    {\n    \"userName\": \"username\"\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#responses_1","title":"Responses","text":"
                    {\n    \"userName\": \"kura.user.username\",\n    \"passwordAuthEnabled\": false,\n    \"passwordChangeNeeded\": false,\n    \"permissions\": []\n}\n
                    • 200 OK status
                    • 404 userName does not exist
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#get-methods","title":"GET methods","text":""},{"location":"references/rest-apis/rest-identity-api-v1/#get-defined-permissions","title":"Get defined permissions","text":"
                    • Description: This method allows you to get the list of the permissions defined in the system
                    • Method: GET
                    • API PATH: services/identity/v1/definedPermissions

                    No specific permission is required to access this resource.

                    "},{"location":"references/rest-apis/rest-identity-api-v1/#responses_2","title":"Responses","text":"
                    {\n    \"permissions\": [\n        \"rest.command\",\n        \"rest.inventory\",\n        \"rest.configuration\",\n        \"rest.tamper.detection\",\n        \"rest.security\",\n        \"kura.cloud.connection.admin\",\n        \"rest.position\",\n        \"kura.packages.admin\",\n        \"kura.device\",\n        \"rest.wires.admin\",\n        \"kura.admin\",\n        \"rest.keystores\",\n        \"rest.assets\",\n        \"rest.system\",\n        \"kura.maintenance\",\n        \"kura.wires.admin\",\n        \"rest.identity\"\n    ]\n}\n
                    • 200 OK status
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#get-users-configuration","title":"Get users configuration","text":"
                    • Description: This method allows you to get the list of the users and their configuration on the system.
                    • Method: GET
                    • API PATH: services/identity/v1/identities
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#responses_3","title":"Responses","text":"
                    {\n    \"userConfig\": [\n        {\n            \"userName\": \"admin\",\n            \"passwordAuthEnabled\": true,\n            \"passwordChangeNeeded\": false,\n            \"permissions\": [\n                \"kura.admin\"\n            ]\n        },\n        {\n            \"userName\": \"appadmin\",\n            \"passwordAuthEnabled\": true,\n            \"passwordChangeNeeded\": true,\n            \"permissions\": [\n                \"kura.cloud.connection.admin\",\n                \"kura.packages.admin\",\n                \"kura.wires.admin\"\n            ]\n        }\n    ]\n}\n
                    • 200 OK status
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#get-password-requirements","title":"Get password requirements","text":"
                    • Description: This method allows you to get the password requirements.
                    • Method: GET
                    • API PATH: services/identity/v1/passwordRequirements

                    No specific permission is required to access this resource.

                    "},{"location":"references/rest-apis/rest-identity-api-v1/#responses_4","title":"Responses","text":"
                    {\n    \"passwordMinimumLength\": 8,\n    \"passwordRequireDigits\": false,\n    \"passwordRequireSpecialChars\": false,\n    \"passwordRequireBothCases\": false\n}\n
                    • 200 OK status
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#put-methods","title":"PUT methods","text":""},{"location":"references/rest-apis/rest-identity-api-v1/#update-user","title":"Update User","text":"
                    • Description: This method allows to update an existing user in the system.
                    • Method: PUT
                    • API PATH: services/identity/v1/identities
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#request_2","title":"Request","text":"
                    {\n    \"userName\": \"username\",\n    \"password\": \"password\",\n    \"passwordChangeNeeded\": false,\n    \"passwordAuthEnabled\": true,\n    \"permissions\": [\n        \"rest.identity\"\n    ]\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#responses_5","title":"Responses","text":"
                    • 200 OK status
                    • 400 Bad Request (Password strenght requirements not satisfied)
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#delete-methods","title":"DELETE methods","text":""},{"location":"references/rest-apis/rest-identity-api-v1/#delete-user","title":"Delete User","text":"
                    • Description: This method allows to delete an existing user in the system. The only considered field is the userName.
                    • Method: DELETE
                    • API PATH: services/identity/v1/identities
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#request_3","title":"Request","text":"
                    {\n    \"userName\": \"username\"\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v1/#responses_6","title":"Responses","text":"
                    • 200 OK status
                    • 404 userName does not exist
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v2/","title":"Rest Identity V2 API","text":"

                    Note

                    This API can also be accessed via the RequestHandler with app-id: IDN-V2.

                    The IdentityRestService APIs provides methods to manage the system identities. Unless otherwise specified, identities with rest.identity permissions can access these APIs.

                    "},{"location":"references/rest-apis/rest-identity-api-v2/#post-methods","title":"POST methods","text":""},{"location":"references/rest-apis/rest-identity-api-v2/#create-user","title":"Create User","text":"
                    • Description: This method allows to create a new identity in the system. Identity name must respect the requirements enforced by the IdentityService.
                    • Method: POST
                    • API PATH: services/identity/v2/identities
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#request","title":"Request","text":"
                    {\n    \"name\": \"username\"\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#responses","title":"Responses","text":"
                    • 200 OK status
                    • 400 Missing or mispelled field name (eg: nme)
                    • 409 Conflict (Identity already exists)
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#get-user-by-name","title":"Get User by Name","text":"
                    • Description: This method allows to get data about an identity in the system. The request body's identity field is used to get only the name of specific identity. It is also possible to retrieve information about the specific user's component configuration, specifying the type of interest.
                    • Method: POST
                    • API PATH: services/identity/v2/identities/byName
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#request_1","title":"Request","text":"
                    {\n    \"identity\": {\n        \"name\": \"test\"\n    }\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#response","title":"Response","text":"
                    {\n    \"identity\": {\n        \"name\": \"username\"\n    }\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#request_2","title":"Request","text":"
                    {\n    \"identity\": {\n        \"name\": \"username\"\n    }, \n    \"configurationComponents\": [\"AdditionalConfigurations\", \"AssignedPermissions\", \"PasswordConfiguration\"]\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#response_1","title":"Response","text":"
                    {\n    \"identity\": {\n        \"name\": \"username\"\n    },\n    \"permissionConfiguration\": {\n        \"permissions\": [\n            {\n                \"name\": \"rest.identity\"\n            }\n        ]\n    },\n    \"passwordConfiguration\": {\n        \"passwordChangeNeeded\": false,\n        \"passwordAuthEnabled\": true\n    },\n    \"additionalConfigurations\": {\n        \"configurations\": []\n    }\n}\n
                    • 200 OK status
                    • 400 Missing or mispelled field name (eg: nme)
                    • 404 Identity does not exist
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#get-user-default-configuration-by-name","title":"Get User Default Configuration by Name","text":"
                    • Description: This method allows to get the default configuration data about an identity in the system. The request body's identity field is used to get only the name of specific identity. It is also possible to retrieve information about the specific user's component default configuration, specifying the type of interest. This method accepts also non-existing user's name as input: in this way it's possible to retrieve which is the default configuration applied when a user is created with the name field only.
                    • Method: POST
                    • API PATH: services/identity/v2/identities/default/byName
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#request_3","title":"Request","text":"
                    {\n\"identity\": {\n        \"name\": \"username\"\n    }\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#response_2","title":"Response","text":"
                    {\n    \"identity\": {\n        \"name\": \"username\"\n    }\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#request_4","title":"Request","text":"
                    {\n    \"identity\": {\n        \"name\": \"username\"\n    }, \n    \"configurationComponents\": [\"AdditionalConfigurations\", \"AssignedPermissions\", \"PasswordConfiguration\"]\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#response_3","title":"Response","text":"
                    {\n    \"identity\": {\n        \"name\": \"username\"\n    },\n    \"permissionConfiguration\": {\n        \"permissions\": []\n    },\n    \"passwordConfiguration\": {\n        \"passwordChangeNeeded\": false,\n        \"passwordAuthEnabled\": false\n    },\n    \"additionalConfigurations\": {\n        \"configurations\": []\n    }\n}\n
                    • 200 OK status
                    • 400 Missing or mispelled field name (eg: nme)
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#create-permission","title":"Create Permission","text":"
                    • Description: This method allows to create a new permission in the system. Permission name must respect the requirements enforced by the IdentityService.
                    • Method: POST
                    • API PATH: services/identity/v2/permissions
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#request_5","title":"Request","text":"
                    {\n    \"name\": \"permission\"\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_1","title":"Responses","text":"
                    • 200 OK status
                    • 400 Bad Request (Permission name not valid)
                    • 409 Conflict (Permission already exists)
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#validate-identity-configuration","title":"Validate Identity Configuration","text":"
                    • Description: Validates the provided list of identity configurations without performing any change to the system. It is possible to specify only the identity body field, or also the configurationComponents one.
                    • Method: POST
                    • API PATH: services/identity/v2/identities/validate
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#request_6","title":"Request","text":"
                    {\n    \"identity\": {\n        \"name\": \"username\"\n    }, \n    \"configurationComponents\": [\"AdditionalConfigurations\", \"AssignedPermissions\", \"PasswordConfiguration\"]\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_2","title":"Responses","text":"
                    • 200 OK status
                    • 400 Missing or mispelled field name (eg: nme)
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#get-methods","title":"GET methods","text":""},{"location":"references/rest-apis/rest-identity-api-v2/#get-defined-permissions","title":"Get defined permissions","text":"
                    • Description: This method allows you to get the list of the permissions defined in the system
                    • Method: GET
                    • API PATH: services/identity/v2/definedPermissions

                    No specific permission is required to access this resource.

                    "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_3","title":"Responses","text":"
                    [\n    {\n        \"name\": \"rest.identity\"\n    },\n    {\n        \"name\": \"rest.wires.admin\"\n    },\n    {\n        \"name\": \"kura.wires.admin\"\n    },\n    {\n        \"name\": \"kura.network.admin\"\n    },\n    {\n        \"name\": \"rest.network.status\"\n    },\n    {\n        \"name\": \"test-permission\"\n    },\n    {\n        \"name\": \"rest.keystores\"\n    },\n    {\n        \"name\": \"rest.assets\"\n    },\n    {\n        \"name\": \"rest.network.configuration\"\n    },\n    {\n        \"name\": \"kura.admin\"\n    },\n    {\n        \"name\": \"rest.cloudconnection\"\n    },\n    {\n        \"name\": \"kura.device\"\n    },\n    {\n        \"name\": \"rest.system\"\n    },\n    {\n        \"name\": \"kura.maintenance\"\n    },\n    {\n        \"name\": \"kura.packages.admin\"\n    },\n    {\n        \"name\": \"rest.tamper.detection\"\n    },\n    {\n        \"name\": \"rest.deploy\"\n    },\n    {\n        \"name\": \"rest.configuration\"\n    },\n    {\n        \"name\": \"kura.cloud.connection.admin\"\n    },\n    {\n        \"name\": \"rest.command\"\n    },\n    {\n        \"name\": \"rest.inventory\"\n    },\n    {\n        \"name\": \"rest.position\"\n    },\n    {\n        \"name\": \"rest.security\"\n    }\n]\n
                    • 200 OK status
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#get-users-configuration","title":"Get users configuration","text":"
                    • Description: This method allows you to get the list of the users and their configuration on the system.
                    • Method: GET
                    • API PATH: services/identity/v2/identities
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_4","title":"Responses","text":"
                    [\n    {\n        \"identity\": {\n            \"name\": \"admin\"\n        },\n        \"permissionConfiguration\": {\n            \"permissions\": [\n                {\n                    \"name\": \"kura.admin\"\n                }\n            ]\n        },\n        \"passwordConfiguration\": {\n            \"passwordChangeNeeded\": false,\n            \"passwordAuthEnabled\": true\n        },\n        \"additionalConfigurations\": {\n            \"configurations\": []\n        }\n    },\n    {\n        \"identity\": {\n            \"name\": \"appadmin\"\n        },\n        \"permissionConfiguration\": {\n            \"permissions\": [\n                {\n                    \"name\": \"kura.packages.admin\"\n                },\n                {\n                    \"name\": \"kura.cloud.connection.admin\"\n                },\n                {\n                    \"name\": \"kura.wires.admin\"\n                }\n            ]\n        },\n        \"passwordConfiguration\": {\n            \"passwordChangeNeeded\": true,\n            \"passwordAuthEnabled\": true\n        },\n        \"additionalConfigurations\": {\n            \"configurations\": []\n        }\n    },\n    {\n        \"identity\": {\n            \"name\": \"netadmin\"\n        },\n        \"permissionConfiguration\": {\n            \"permissions\": [\n                {\n                    \"name\": \"kura.device\"\n                },\n                {\n                    \"name\": \"kura.network.admin\"\n                },\n                {\n                    \"name\": \"kura.cloud.connection.admin\"\n                }\n            ]\n        },\n        \"passwordConfiguration\": {\n            \"passwordChangeNeeded\": true,\n            \"passwordAuthEnabled\": true\n        },\n        \"additionalConfigurations\": {\n            \"configurations\": []\n        }\n    }\n]\n
                    • 200 OK status
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#get-password-strenght-requirements","title":"Get Password Strenght Requirements","text":"
                    • Description: This method allows you to get the password requirements.
                    • Method: GET
                    • API PATH: services/identity/v2/passwordStrenghtRequirements

                    No specific permission is required to access this resource.

                    "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_5","title":"Responses","text":"
                    {\n    \"passwordMinimumLength\": 8,\n    \"digitsRequired\": false,\n    \"specialCharactersRequired\": false,\n    \"bothCasesRequired\": false\n}\n
                    • 200 OK status
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#put-methods","title":"PUT methods","text":""},{"location":"references/rest-apis/rest-identity-api-v2/#update-identity","title":"Update Identity","text":"
                    • Description: This method allows to update an existing identity in the system. New passwords must respect the requirements enforced by the IdentityService.
                    • Method: PUT
                    • API PATH: services/identity/v2/identities
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#request_7","title":"Request","text":"
                    {\n    \"identity\": {\n        \"name\": \"username\"\n    },\n    \"permissionConfiguration\": {\n        \"permissions\": [\n            {\n                \"name\": \"rest.identity\"\n            }\n        ]\n    },\n    \"passwordConfiguration\": {\n        \"passwordChangeNeeded\": false,\n        \"passwordAuthEnabled\": true,\n        \"password\": \"password123\"\n    }\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_6","title":"Responses","text":"
                    • 200 OK status
                    • 400 Missing or mispelled field name (eg: nme)
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#delete-methods","title":"DELETE methods","text":""},{"location":"references/rest-apis/rest-identity-api-v2/#delete-user","title":"Delete User","text":"
                    • Description: This method allows to delete an existing user in the system. The only considered field is the name.
                    • Method: DELETE
                    • API PATH: services/identity/v2/identities
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#request_8","title":"Request","text":"
                    {\n    \"name\": \"username\"\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_7","title":"Responses","text":"
                    • 200 OK status
                    • 404 username does not exist
                    • 400 Missing or mispelled field name (eg: nme)
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#delete-permission","title":"Delete Permission","text":"
                    • Description: This method allows to delete an existing permission in the system. The only considered field is the name.
                    • Method: DELETE
                    • API PATH: services/identity/v2/permissions
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#request_9","title":"Request","text":"
                    {\n    \"name\": \"permission\"\n}\n
                    "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_8","title":"Responses","text":"
                    • 200 OK status
                    • 404 permission does not exist
                    • 400 Missing or mispelled field name (eg: nme)
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-inventory-api/","title":"Rest Inventory v1 API","text":""},{"location":"references/rest-apis/rest-inventory-api/#global","title":"Global","text":""},{"location":"references/rest-apis/rest-inventory-api/#get-inventory-summary","title":"GET Inventory Summary","text":"
                    • Method: GET
                    • Description: returns a list of All Inventory Items
                    • API PATH: /services/inventory/v1/inventory
                    "},{"location":"references/rest-apis/rest-inventory-api/#response","title":"Response","text":"
                    • 200 OK 
                      {\n    \"inventory\":[\n        {\n            \"name\":\"adduser\",\n            \"version\":\"3.118\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"com.eclipsesource.jaxrs.provider.gson\",\n            \"version\":\"2.3.0.201602281253\",\n            \"type\":\"BUNDLE\"\n        },\n              {\n            \"name\":\"org.eclipse.kura.example.beacon\",\n            \"version\":\"1.0.500\",\n            \"type\":\"DP\"\n        }\n    ]\n}\n
                    "},{"location":"references/rest-apis/rest-inventory-api/#bundles","title":"Bundles","text":""},{"location":"references/rest-apis/rest-inventory-api/#get-bundles","title":"GET bundles","text":"
                    • Method: GET
                    • Description: returns a list of bundles.
                    • API PATH: /services/inventory/v1/bundles
                    "},{"location":"references/rest-apis/rest-inventory-api/#response_1","title":"Response","text":"
                    • 200 OK 
                      {\n    \"bundles\":[\n        {\n            \"name\":\"org.eclipse.osgi\",\n            \"version\":\"3.16.0.v20200828-0759\",\n            \"id\":0,\n            \"state\":\"ACTIVE\",\n            \"signed\":true\n        },\n        {\n            \"name\":\"org.eclipse.equinox.cm\",\n            \"version\":\"1.4.400.v20200422-1833\",\n            \"id\":1,\n            \"state\":\"ACTIVE\",\n            \"signed\":false\n        }\n    ]\n}\n
                    "},{"location":"references/rest-apis/rest-inventory-api/#start-bundle","title":"Start bundle","text":"
                    • Method: POST
                    • API PATH: /services/inventory/v1/bundles/_start
                    "},{"location":"references/rest-apis/rest-inventory-api/#request-body","title":"Request Body","text":"
                    { \n\"name\":\"org.eclipse.osgi\",\n}\n
                    "},{"location":"references/rest-apis/rest-inventory-api/#responses","title":"Responses","text":"
                    • 200 OK status
                    • 400 Bad Request (Malformed Client JSON)
                    • 404 Resource Not Found
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-inventory-api/#stop-bundle","title":"Stop bundle","text":"
                    • Method: POST
                    • API PATH: /services/inventory/v1/bundles/_stop
                    "},{"location":"references/rest-apis/rest-inventory-api/#request-body_1","title":"Request Body","text":"
                    { \n\"name\":\"org.eclipse.osgi\",\n}\n
                    "},{"location":"references/rest-apis/rest-inventory-api/#responses_1","title":"Responses","text":"
                    • 200 OK status
                    • 400 Bad Request (Malformed Client JSON)
                    • 404 Resource Not Found
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-inventory-api/#deployment-packages","title":"Deployment Packages","text":""},{"location":"references/rest-apis/rest-inventory-api/#get-packages","title":"GET packages","text":"
                    • Method: GET
                    • Description: returns a list of deployment packages.
                    • API PATH: /services/inventory/v1/deploymentPackages
                    "},{"location":"references/rest-apis/rest-inventory-api/#response_2","title":"Response","text":"
                    • 200 OK 
                      {\n    \"deploymentPackages\":[\n        {\n            \"name\":\"org.eclipse.kura.example.beacon\",\n            \"version\":\"1.0.500\",\n            \"signed\":false,\n            \"bundles\":[\n                {\n                    \"name\":\"org.eclipse.kura.example.beacon\",\n                    \"version\":\"1.0.500\",\n                    \"id\": 171,\n                    \"state\": \"ACTIVE\",\n                    \"signed\": false\n                }\n            ]\n        }\n    ]\n}\n
                    "},{"location":"references/rest-apis/rest-inventory-api/#system-packages-debrpmapk","title":"System Packages (DEB/RPM/APK)","text":""},{"location":"references/rest-apis/rest-inventory-api/#get-system-packages","title":"GET System Packages","text":"
                    • Method: GET
                    • Description: returns a list of system packages.
                    • API PATH: /services/inventory/v1/systemPackages
                    "},{"location":"references/rest-apis/rest-inventory-api/#response_3","title":"Response","text":"
                    • 200 OK 
                      {\n    \"systemPackages\":[\n        {\n            \"name\":\"adduser\",\n            \"version\":\"3.118\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"alsa-utils\",\n            \"version\":\"1.1.8-2\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"ansible\",\n            \"version\":\"2.7.7+dfsg-1\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apparmor\",\n            \"version\":\"2.13.2-10\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt\",\n            \"version\":\"1.8.2.1\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt-listchanges\",\n            \"version\":\"3.19\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt-transport-https\",\n            \"version\":\"1.8.2.2\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt-utils\",\n            \"version\":\"1.8.2.1\",\n            \"type\":\"DEB\"\n        }\n    ]\n}\n
                    "},{"location":"references/rest-apis/rest-inventory-api/#containers","title":"Containers","text":""},{"location":"references/rest-apis/rest-inventory-api/#get-containers","title":"GET Containers","text":"
                    • Method: Get
                    • Description: returns a list of Containers.
                    • API PATH: /services/inventory/v1/containers
                    "},{"location":"references/rest-apis/rest-inventory-api/#response_4","title":"Response","text":"
                    • 200 OK 
                      {\n  \"containers\":\n  [\n    {\n      \"name\":\"container_1\",\n      \"version\":\"nginx:latest\",\n      \"type\":\"DOCKER\",\n      \"state\":\"active\"\n    }\n  ]\n}\n
                    "},{"location":"references/rest-apis/rest-inventory-api/#start-container","title":"Start container","text":"
                    • Method: POST
                    • API PATH: /services/inventory/v1/containers/_start
                    "},{"location":"references/rest-apis/rest-inventory-api/#request-body_2","title":"Request Body","text":"
                    {\n    \"name\":\"container_1\",\n    \"version\": \"nginx:latest\",\n}\n
                    "},{"location":"references/rest-apis/rest-inventory-api/#responses_2","title":"Responses","text":"
                    • 200 OK
                    • 400 Bad Request (Malformed Client JSON)
                    • 404 Resource Not Found
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-inventory-api/#stop-container","title":"Stop container","text":"
                    • Method: POST
                    • API PATH: /services/inventory/v1/containers/_stop
                    "},{"location":"references/rest-apis/rest-inventory-api/#request-body_3","title":"Request Body","text":"
                    {\n    \"name\":\"container_1\",\n    \"version\": \"nginx:latest\",\n}\n
                    "},{"location":"references/rest-apis/rest-inventory-api/#responses_3","title":"Responses","text":"
                    • 200 OK
                    • 400 Bad Request (Malformed Client JSON)
                    • 404 Resource Not Found
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-inventory-api/#images","title":"Images","text":""},{"location":"references/rest-apis/rest-inventory-api/#images-images","title":"Images Images","text":"
                    • Method: Get
                    • Description: returns a list of Images.
                    • API PATH: /services/inventory/v1/images
                    "},{"location":"references/rest-apis/rest-inventory-api/#response_5","title":"Response","text":"
                    • 200 OK 
                      {\n  \"containers\":\n  [\n    {\n      \"name\":\"nginx\",\n      \"version\":\"latest\",\n      \"type\":\"ContainerImage\",\n    }\n  ]\n}\n
                    "},{"location":"references/rest-apis/rest-inventory-api/#delete-image","title":"Delete Image","text":"
                    • Method: POST
                    • API PATH: /services/inventory/v1/images/_delete
                    "},{"location":"references/rest-apis/rest-inventory-api/#request-body_4","title":"Request Body","text":"
                    {\n      \"name\":\"nginx\",\n      \"version\":\"latest\",\n}\n
                    "},{"location":"references/rest-apis/rest-inventory-api/#responses_4","title":"Responses","text":"
                    • 200 OK
                    • 400 Bad Request (Malformed Client JSON)
                    • 404 Resource Not Found
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-inventory-api/#states","title":"States","text":""},{"location":"references/rest-apis/rest-inventory-api/#bundle-states","title":"Bundle States","text":"
                    -   `ACTIVE`: Container is running\n-   `INSTALLED`: Container is starting\n-   `UNINSTALLED`: Container has failed, or is stopped\n-   `UNKNOWN`: Container state can not be determined\n
                    "},{"location":"references/rest-apis/rest-inventory-api/#container-states","title":"Container States","text":"
                    -   `active`: Container is running\n-   `installed`: Container is starting\n-   `uninstalled`: Container has failed, or is stopped\n-   `unknown`: Container state can not be determined\n
                    "},{"location":"references/rest-apis/rest-network-configuration-api/","title":"Network Configuration V1 REST APIs","text":"

                    This section describes the networkConfiguration/v1 REST APIs, that allow to retrieve information about the network configuration of the running system. The services pid for which it's possible to obtain and update the configurations are:

                    • org.eclipse.kura.net.admin.NetworkConfigurationService: which manages the network configuration of the system, so the network interfaces along with their network configuration (Ip4/Ip6 settings, DHCP, Nat, and so on)
                    • org.eclipse.kura.net.admin.FirewallConfigurationService: which manages the Ip4 firewall configurations (open ports, port forwarding and masquerading for IPv4 protocol)
                    • org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6: which manages the Ip6 firewall configurations (open ports, port forwarding and masquerading for IPv6 protocol)

                    To access these REST APIs, an identity with rest.network.configuration permission assigned is required.

                    • Request definitions
                      • GET/configurableComponents
                      • GET/configurableComponents/configurations
                      • POST/configurableComponents/configurations/byPid
                      • POST/configurableComponents/configurations/byPid/_default
                      • PUT/configurableComponents/configurations/_update
                      • GET/factoryComponents
                      • POST/factoryComponents
                      • DEL/factoryComponents/byPid
                      • GET/factoryComponents/ocd
                      • POST/factoryComponents/ocd/byFactoryPid
                    • JSON definitions
                      • BatchFailureReport
                      • ComponentConfigurationList
                      • GenericFailureReport
                      • PidSet
                      • UpdateComponentConfigurationRequest
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#request-definitions","title":"Request definitions","text":""},{"location":"references/rest-apis/rest-network-configuration-api/#getconfigurablecomponents","title":"GET/configurableComponents","text":"
                    • REST API path : /services/networkConfiguration/v1/configurableComponents
                    • description : Returns the list of the available services that manages the network configurations on the system.
                    • responses :
                      • 200
                        • description : The request succeeded.
                        • response body :
                          • PidSet
                      • 500
                        • description : An unexpected internal error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#getconfigurablecomponentsconfigurations","title":"GET/configurableComponents/configurations","text":"
                    • REST API path : /services/networkConfiguration/v1/configurableComponents/configurations
                    • description : Returns all of network component configurations available on the system. This request will return the pid, ocd and properties.
                    • responses :
                      • 200
                        • description : The request succeeded.
                        • response body :
                          • ComponentConfigurationList
                      • 500
                        • description : An unexpected internal error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#postconfigurablecomponentsconfigurationsbypid","title":"POST/configurableComponents/configurations/byPid","text":"
                    • REST API path : /services/networkConfiguration/v1/configurableComponents/configurations/byPid
                    • description : Returns a user selected set of network configurations. This request will return the pid, ocd and properties.
                    • request body :
                      • PidSet
                    • responses :
                      • 200
                        • description : The request succeeded. If the network configuration for a given pid cannot be found, it will not be included in the result.
                        • response body :
                          • ComponentConfigurationList
                      • 400
                        • description : The request body is not valid JSON or it contains invalid parameters.
                        • response body :
                          • GenericFailureReport
                      • 500
                        • description : An unexpected internal error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#postconfigurablecomponentsconfigurationsbypid_default","title":"POST/configurableComponents/configurations/byPid/_default","text":"
                    • REST API path : /services/networkConfiguration/v1/configurableComponents/configurations/byPid/_default
                    • description : Returns the default network configuration for a given set of network component pids. The default configurations are generated basing on component definition only, user applied modifications will not be taken into account. This request will return the pid, ocd and properties.
                    • request body :
                      • PidSet
                    • responses :
                      • 200
                        • description : The request succeeded. If the network configuration for a given pid cannot be found, it will not be included in the result.
                        • response body :
                          • ComponentConfigurationList
                      • 400
                        • description : The request body is not valid JSON or it contains invalid parameters.
                        • response body :
                          • GenericFailureReport
                      • 500
                        • description : An unexpected internal error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#putconfigurablecomponentsconfigurations_update","title":"PUT/configurableComponents/configurations/_update","text":"
                    • REST API path : /services/networkConfiguration/v1/configurableComponents/configurations/_update
                    • description : Updates a given set of network component configurations. This request can be also used to apply a network configuration snapshot.
                    • request body :
                      • UpdateComponentConfigurationRequest
                    • responses :
                      • 200
                        • description : The request succeeded.
                      • 400
                        • description : The request body is not valid JSON or it contains invalid parameters.
                        • response body :
                          • GenericFailureReport
                      • 500
                        • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: update:$pid for component update operations, where $pid is the pid of the instance, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.
                        • response body :
                          • Variants:
                            • object
                              • GenericFailureReport
                            • object
                              • BatchFailureReport

                    Warning

                    factoryComponents endopoints are available in the current version of Kura for future compatibility. Currently, as of Kura 5.4.0, there are no network related components that are factory components.

                    The endopoints that should return a list of pids will always return an empty array, while those that should create, delete or update a component will always return a 500 error.

                    "},{"location":"references/rest-apis/rest-network-configuration-api/#getfactorycomponents","title":"GET/factoryComponents","text":"
                    • REST API path : /services/networkConfiguration/v1/factoryComponents
                    • description : Returns the ids of the network component factories available on the device.
                    • responses :
                      • 200
                        • description : The factory pid set.
                        • response body :
                          • PidSet
                      • 500
                        • description : An unexpected internal error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#postfactorycomponents","title":"POST/factoryComponents","text":"
                    • REST API path : /services/networkConfiguration/v1/factoryComponents
                    • description : This is a batch request that allows to create one or more network factory component instances and optionally create a new snapshot.
                    • request body :
                      • CreateFactoryComponentConfigurationsRequest
                    • responses :
                      • 200
                        • description : The request succeeded.
                      • 400
                        • description : The request body is not valid JSON or it contains invalid parameters.
                        • response body :
                          • GenericFailureReport

                      • 500

                        • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: create:$pid for component creation operations, where $pid is the pid of the instance, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

                        • response body :

                          • Variants:
                            • object
                              • GenericFailureReport
                            • object
                              • BatchFailureReport
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#delfactorycomponentsbypid","title":"DEL/factoryComponents/byPid","text":"
                    • REST API path : /services/networkConfiguration/v1/factoryComponents/byPid
                    • description : This is a batch request that allows to delete one or more network factory component instances and optionally create a new snapshot.
                    • request body :
                      • DeleteFactoryComponentConfigurationsRequest
                    • responses :
                      • 200
                        • description : The request succeeded.
                      • 400
                        • description : The request body is not valid JSON or it contains invalid parameters.
                        • response body :
                          • GenericFailureReport
                      • 500
                        • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: delete:$pid for component delete operations, where $pid is the pid of the instance, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.
                        • response body :
                          • Variants:
                            • object
                              • GenericFailureReport
                            • object
                              • BatchFailureReport
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#getfactorycomponentsocd","title":"GET/factoryComponents/ocd","text":"
                    • REST API path : /services/networkConfiguration/v1/factoryComponents/ocd
                    • description : Returns the OCD of the network components created by the factories available on the device without the need of creating an instance. This request returns the information related to all available network factories.
                    • responses :
                      • 200
                        • description : The request succeeded. The pid property of the received configurations will report the factory pid, the ocd field will contain the definition, the properties field will not be present.
                        • response body :
                          • ComponentConfigurationList
                      • 500
                        • description : An unexpected internal error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#postfactorycomponentsocdbyfactorypid","title":"POST/factoryComponents/ocd/byFactoryPid","text":"
                    • REST API path : /services/networkConfiguration/v1/factoryComponents/ocd/byFactoryPid
                    • description : Returns the OCD of the components created by the factories available on the device without the need of creating an instance. This request returns the information related to a user selected set of factories.
                    • request body :
                      • PidSet
                    • responses :
                      • 200
                        • description : The request succeeded. The pid property of the received configurations will report the factory pid, the ocd field will contain the definition, the properties field will not be present. If the OCD for a given factory pid cannot be found, it will not be included in the result.
                        • response body :
                          • ComponentConfigurationList
                      • 400
                        • description : The request body is not valid JSON or it contains invalid parameters.
                        • response body :
                          • GenericFailureReport
                      • 500
                        • description : An unexpected internal error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#json-definitions","title":"JSON definitions","text":""},{"location":"references/rest-apis/rest-network-configuration-api/#batchfailurereport","title":"BatchFailureReport","text":"

                    An object that is returned by requests that involve multiple operations, when at least one operation failed. This object report an error message for each of the operations that failed. The operations are identified by an id, see request documentation for more details. If an operation is not listed by this object, then the operation succeeded. Properties:

                    • failures: array The list of operations that failed.

                      • array elements: object An object reporting details about an operation failure. Properties:

                      • id: string An identifier of the failed operation.

                      • message: string A message describing the failure.
                    {\n  \"failures\": [\n    {\n      \"id\": \"create:testComponent\",\n      \"message\": \"Invalid parameter. pid testComponent already exists\"\n    },\n    {\n      \"id\": \"create:otherComponent\",\n      \"message\": \"Invalid parameter. pid otherComponent already exists\"\n    }\n  ]\n}\n
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#componentconfigurationlist","title":"ComponentConfigurationList","text":"

                    Represents a list of component configurations. Properties:

                    • configs: array The component configurations
                      • array elements: object
                      • ComponentConfiguration
                    {\n    \"configs\": [\n        {\n            \"pid\": \"org.eclipse.kura.net.admin.FirewallConfigurationService\",\n            \"definition\": {\n                \"ad\": [\n                    {\n                        \"name\": \"firewall.open.ports\",\n                        \"description\": \"The list of firewall opened ports.\",\n                        \"id\": \"firewall.open.ports\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"firewall.port.forwarding\",\n                        \"description\": \"The list of firewall port forwarding rules.\",\n                        \"id\": \"firewall.port.forwarding\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"firewall.nat\",\n                        \"description\": \"The list of firewall NAT rules.\",\n                        \"id\": \"firewall.nat\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"\",\n                        \"isRequired\": true\n                    }\n                ],\n                \"name\": \"FirewallConfigurationService\",\n                \"description\": \"Firewall Configuration Service\",\n                \"id\": \"org.eclipse.kura.net.admin.FirewallConfigurationService\"\n            },\n            \"properties\": {\n                \"firewall.open.ports\": {\n                    \"value\": \"22,tcp,0.0.0.0/0,eth0,,,,#;22,tcp,0.0.0.0/0,wlan0,,,,#;443,tcp,0.0.0.0/0,eth0,,,,#;443,tcp,0.0.0.0/0,wlan0,,,,#;4443,tcp,0.0.0.0/0,eth0,,,,#;4443,tcp,0.0.0.0/0,wlan0,,,,#;1450,tcp,0.0.0.0/0,eth0,,,,#;1450,tcp,0.0.0.0/0,wlan0,,,,#;5002,tcp,127.0.0.1/32,,,,,#;53,udp,0.0.0.0/0,eth0,,,,#;53,udp,0.0.0.0/0,wlan0,,,,#;67,udp,0.0.0.0/0,eth0,,,,#;67,udp,0.0.0.0/0,wlan0,,,,#;8000,tcp,0.0.0.0/0,eth0,,,,#;8000,tcp,0.0.0.0/0,wlan0,,,,#\",\n                    \"type\": \"STRING\"\n                },\n                \"firewall.port.forwarding\": {\n                    \"value\": \"\",\n                    \"type\": \"STRING\"\n                },\n                \"firewall.nat\": {\n                    \"value\": \"\",\n                    \"type\": \"STRING\"\n                },\n                \"kura.service.pid\": {\n                    \"value\": \"org.eclipse.kura.net.admin.FirewallConfigurationService\",\n                    \"type\": \"STRING\"\n                },\n                \"service.pid\": {\n                    \"value\": \"org.eclipse.kura.net.admin.FirewallConfigurationService\",\n                    \"type\": \"STRING\"\n                }\n            }\n        },\n        {\n            \"pid\": \"org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6\",\n            \"definition\": {\n                \"ad\": [\n                    {\n                        \"name\": \"firewall.ipv6.open.ports\",\n                        \"description\": \"The list of firewall opened ports.\",\n                        \"id\": \"firewall.ipv6.open.ports\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"firewall.ipv6.port.forwarding\",\n                        \"description\": \"The list of firewall port forwarding rules.\",\n                        \"id\": \"firewall.ipv6.port.forwarding\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"firewall.ipv6.nat\",\n                        \"description\": \"The list of firewall NAT rules.\",\n                        \"id\": \"firewall.ipv6.nat\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"\",\n                        \"isRequired\": true\n                    }\n                ],\n                \"name\": \"FirewallConfigurationServiceIPv6\",\n                \"description\": \"Firewall Configuration Service IPV6\",\n                \"id\": \"org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6\"\n            },\n            \"properties\": {\n                \"firewall.ipv6.port.forwarding\": {\n                    \"value\": \"\",\n                    \"type\": \"STRING\"\n                },\n                \"firewall.ipv6.nat\": {\n                    \"value\": \"\",\n                    \"type\": \"STRING\"\n                },\n                \"firewall.ipv6.open.ports\": {\n                    \"value\": \"1234,tcp,0:0:0:0:0:0:0:0/0,,,,,#\",\n                    \"type\": \"STRING\"\n                },\n                \"kura.service.pid\": {\n                    \"value\": \"org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6\",\n                    \"type\": \"STRING\"\n                },\n                \"service.pid\": {\n                    \"value\": \"org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6\",\n                    \"type\": \"STRING\"\n                }\n            }\n        }\n    ]\n}\n
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#genericfailurereport","title":"GenericFailureReport","text":"

                    An object reporting a failure message. Properties:

                    • message: string A message describing the failure.
                    {\n  \"message\": \"An unexpected error occurred.\"\n}\n
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#pidset","title":"PidSet","text":"

                    Represents a set of pids or factory pids. Properties:

                    • pids: array The set of pids
                      • array elements: string The pid
                    {\n    \"pids\": [\n        \"org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6\",\n        \"org.eclipse.kura.net.admin.NetworkConfigurationService\",\n        \"org.eclipse.kura.net.admin.FirewallConfigurationService\"\n    ]\n}\n
                    "},{"location":"references/rest-apis/rest-network-configuration-api/#updatecomponentconfigurationrequest","title":"UpdateComponentConfigurationRequest","text":"

                    An object that describes a set of configurations that need to be updated. Properties:

                    • configs: array The configurations to be updated. The ocd field can be omitted, it will be ignored if specified.
                      • array elements: object
                      • ComponentConfiguration
                    • takeSnapshot: bool
                    • optional The true value will be used as default if not explicitly specified Defines whether a new snapshot should be created after that the component configurations have been applied.
                    {\n    \"configs\": [\n        {\n            \"pid\": \"org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6\",\n            \"properties\": {\n                \"firewall.ipv6.open.ports\": {\n                    \"value\": \"1234,tcp,0:0:0:0:0:0:0:0/0,,,,,#\",\n                    \"type\": \"STRING\"\n                }\n            }\n        },\n        {\n            \"pid\": \"org.eclipse.kura.net.admin.NetworkConfigurationService\",\n            \"properties\": {\n                \"net.interface.eth0.config.ip6.status\": {\n                    \"value\": \"netIPv6StatusUnmanaged\",\n                    \"type\": \"STRING\"\n                }\n            }\n        }\n    ],\n    \"takeSnapshot\": true\n}\n
                    "},{"location":"references/rest-apis/rest-position-api/","title":"Position","text":"

                    Note

                    This API can also be accessed via the RequestHandler with app-id: POS-V1.

                    "},{"location":"references/rest-apis/rest-position-api/#get-position","title":"Get Position","text":"
                    • Method: GET
                    • API PATH: /services/position/v1/position
                    "},{"location":"references/rest-apis/rest-position-api/#responses","title":"Responses","text":"
                    • 200 OK status
                    {\n    //longitude of this position in degrees.\n    \"longitude\": 7.729571119959449,\n\n    //latitude of this position in degrees.\n    \"latitude\": 50.45345802194789,\n\n    //altitude of this position in meters.\n    \"altitude\": 1000.0,\n\n    //the ground speed of this position in meters per second.\n    \"speed\": 1000.0,\n\n    //the track of this position in degrees as a compass heading.\n    \"track\": 1000.0\n\n    //the gnss system used to retrieve position information\n    \"gnssType\": [\n        \"Gps\"\n    ]\n}\n
                    • 500 Internal Server Error
                      • will also occur when GPS Position is not locked 
                        {\n    \"message\": \"Service unavailable. Position is not locked.\"\n}\n
                    "},{"location":"references/rest-apis/rest-position-api/#get-date-time","title":"Get Date Time","text":"
                    • Method: GET
                    • API PATH: /services/position/v1/dateTime
                    "},{"location":"references/rest-apis/rest-position-api/#responses_1","title":"Responses","text":"
                    • 200 OK status
                    {\n    //The dateTime string is formatted according to the ISO 8601 standard, and will always be in the UTC timezone. \n    \"dateTime\": \"2023-07-19T18:26:38Z\"\n}\n
                    • 500 Internal Server Error
                      • will also occur when GPS Position is not locked 
                        {\n    \"message\": \"Service unavailable. Position is not locked.\"\n}\n
                    "},{"location":"references/rest-apis/rest-position-api/#get-is-position-locked","title":"Get Is Position Locked","text":"
                    • Method: GET
                    • API PATH: /services/position/v1/isLocked
                    "},{"location":"references/rest-apis/rest-position-api/#responses_2","title":"Responses","text":"
                    • 200 OK status

                    {\n    \"islocked\": false\n}\n
                    - 500 Internal Server Error

                    "},{"location":"references/rest-apis/rest-security-api-v1/","title":"Rest Security V1 API","text":"

                    Warning

                    This API id deprecated and superseded by the Security V2 REST APIs.

                    Note

                    This API can also be accessed via the RequestHandler with app-id: SEC-V1.

                    This REST API requires a SecurityService implementation to be registered on the framework, which is not provided by the standard Kura distribution.

                    The SecurityRestService APIs provides methods to manage the system security. Identities with rest.security permissions can access these APIs.

                    "},{"location":"references/rest-apis/rest-security-api-v1/#post-methods","title":"POST methods","text":""},{"location":"references/rest-apis/rest-security-api-v1/#security-policy-fingerprint-reload","title":"Security policy fingerprint reload","text":"
                    • Description: This method allows the reload of the security policy's fingerprint
                    • Method: POST
                    • API PATH: services/security/v1/security-policy-fingerprint/reload
                    "},{"location":"references/rest-apis/rest-security-api-v1/#responses","title":"Responses","text":"
                    • 200 OK status
                    • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                    "},{"location":"references/rest-apis/rest-security-api-v1/#reload-command-line-fingerprint","title":"Reload command line fingerprint","text":"
                    • Description: This method allows the reload of the command line fingerprint
                    • Method: POST
                    • API PATH: services/security/v1/command-line-fingerprint/reload
                    "},{"location":"references/rest-apis/rest-security-api-v1/#responses_1","title":"Responses","text":"
                    • 200 OK status
                    • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                    "},{"location":"references/rest-apis/rest-security-api-v1/#get-methods","title":"GET methods","text":""},{"location":"references/rest-apis/rest-security-api-v1/#debug-enabled","title":"Debug enabled","text":"

                    Note

                    Access to this resource doesn't require the rest.security permission.

                    • Description: This method allows you to check whether debug mode is enabled in the system.
                    • Method: GET
                    • API PATH: services/security/v1/debug-enabled
                    "},{"location":"references/rest-apis/rest-security-api-v1/#responses_2","title":"Responses","text":"
                    • 200 OK status 
                      {\n    \"enabled\":true\n}\n
                    • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                    "},{"location":"references/rest-apis/rest-security-api-v2/","title":"Rest Security V2 API","text":"

                    Note

                    This API can also be accessed via the RequestHandler with app-id: SEC-V2.

                    This REST API requires a SecurityService implementation to be registered on the framework, which is not provided by the standard Kura distribution.

                    The SecurityRestService APIs provides methods to manage the system security. Identities with rest.security permissions can access these APIs.

                    "},{"location":"references/rest-apis/rest-security-api-v2/#post-methods","title":"POST methods","text":""},{"location":"references/rest-apis/rest-security-api-v2/#security-policy-fingerprint-reload","title":"Security policy fingerprint reload","text":"
                    • Description: This method allows the reload of the security policy's fingerprint
                    • Method: POST
                    • API PATH: services/security/v2/security-policy-fingerprint/reload
                    "},{"location":"references/rest-apis/rest-security-api-v2/#responses","title":"Responses","text":"
                    • 200 OK status
                    • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                    "},{"location":"references/rest-apis/rest-security-api-v2/#reload-command-line-fingerprint","title":"Reload command line fingerprint","text":"
                    • Description: This method allows the reload of the command line fingerprint
                    • Method: POST
                    • API PATH: services/security/v2/command-line-fingerprint/reload
                    "},{"location":"references/rest-apis/rest-security-api-v2/#responses_1","title":"Responses","text":"
                    • 200 OK status
                    • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                    "},{"location":"references/rest-apis/rest-security-api-v2/#apply-default-production-security-policy","title":"Apply default production security policy","text":"
                    • Description: This method allows to apply the default production security policy available in the system
                    • Method: POST
                    • API PATH: services/security/v2/security-policy/apply-default-production
                    "},{"location":"references/rest-apis/rest-security-api-v2/#responses_2","title":"Responses","text":"
                    • 200 OK status
                    • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                    "},{"location":"references/rest-apis/rest-security-api-v2/#apply-security-policy","title":"Apply security policy","text":"
                    • Description: This method allows to apply the user provided security policy. The maximum allowed security policy size is 1MB.
                    • Method: POST
                    • API PATH: services/security/v2/security-policy/apply
                    "},{"location":"references/rest-apis/rest-security-api-v2/#request","title":"Request","text":"
                    <plain text security policy>\n
                    "},{"location":"references/rest-apis/rest-security-api-v2/#responses_3","title":"Responses","text":"
                    • 200 OK status
                    • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                    "},{"location":"references/rest-apis/rest-security-api-v2/#get-methods","title":"GET methods","text":""},{"location":"references/rest-apis/rest-security-api-v2/#debug-enabled","title":"Debug enabled","text":"

                    Note

                    Access to this resource doesn't require the rest.security permission.

                    • Description: This method allows you to check whether debug mode is enabled in the system.
                    • Method: GET
                    • API PATH: services/security/v2/debug-enabled
                    "},{"location":"references/rest-apis/rest-security-api-v2/#responses_4","title":"Responses","text":"
                    • 200 OK status 
                      {\n    \"enabled\":true\n}\n
                    • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                    "},{"location":"references/rest-apis/rest-service-listing-api/","title":"Service Listing V1 REST APIs","text":"

                    Note

                    This API can also be accessed via the RequestHandler with app-id: SVCLIST-V1.

                    The SVCLIST-V1 cloud request handler and the corresponding REST APIs allow to retrieve the identifiers (kura.service.pid) of the service running on the system that match user provided search criteria.

                    • Request definitions
                      • GET/servicePids
                      • POST/servicePids/byInterface
                      • POST/servicePids/byProperty
                      • POST/servicePids/satisfyingReference
                      • GET/factoryPids
                      • POST/factoryPids/byInterface
                      • POST/factoryPids/byProperty
                    • JSON definitions
                      • InterfaceNames
                      • Reference
                      • Filter
                      • PropertyFilter
                      • NotFilter
                      • AndFilter
                      • OrFilter
                      • PidSet
                      • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-service-listing-api/#request-definitions","title":"Request definitions","text":""},{"location":"references/rest-apis/rest-service-listing-api/#getservicepids","title":"GET/servicePids","text":"
                    • REST API path : /services/serviceListing/v1/servicePids
                    • description : Returns the pid of all services running in the framework.
                    • responses :
                      • 200
                        • description : An object reporting the pid of all services running in the framework
                        • response body :
                          • PidSet
                      • 500
                        • description : If an unexpected failure occurs while retrieving the service pid list.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-service-listing-api/#postservicepidsbyinterface","title":"POST/servicePids/byInterface","text":"
                    • REST API path : /services/serviceListing/v1/servicePids/byInterface
                    • description : Returns the pid of the services providing all of the service interfaces specified in the request
                    • request body :
                      • InterfaceNames
                    • responses :
                      • 200
                        • description : An object reporting the pid of the matching services.
                        • response body :
                          • PidSet
                      • 400
                        • description : If the request body is not syntactically correct.
                        • response body :
                          • GenericFailureReport
                      • 500
                        • description : If an unexpected failure occurs while retrieving the service pid list.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-service-listing-api/#postservicepidsbyproperty","title":"POST/servicePids/byProperty","text":"
                    • REST API path : /services/serviceListing/v1/servicePids/byProperty
                    • description : Returns the pid of the services whose properties match the specified filter.
                    • request body :
                      • Filter
                    • responses :
                      • 200
                        • description : An object reporting the pid of the matching services.
                        • response body :
                          • PidSet
                      • 400
                        • description : If the request body is not syntactically correct.
                        • response body :
                          • GenericFailureReport
                      • 500
                        • description : If an unexpected failure occurs while retrieving the service pid list.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-service-listing-api/#postservicepidssatisfyingreference","title":"POST/servicePids/satisfyingReference","text":"
                    • REST API path : /services/serviceListing/v1/servicePids/satisfyingReference
                    • description : Returns the pid of the services that provide an interface compatible with a Declarative Service reference. Reference examples are KeystoreService and TruststoreKeystoreService defined by the org.eclipse.kura.ssl.SslManagerService component.
                    • request body :
                      • Reference
                    • responses :
                      • 200
                        • description : An object reporting the pid of the matching services.
                        • response body :
                          • PidSet
                      • 400
                        • description : If the request body is not syntactically correct.
                        • response body :
                          • GenericFailureReport
                      • 500
                        • description : If an unexpected failure occurs while retrieving the service pid list.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-service-listing-api/#getfactorypids","title":"GET/factoryPids","text":"
                    • REST API path : /services/serviceListing/v1/factoryPids
                    • description : Returns the factory pids defined in the framework.
                    • responses :
                      • 200
                        • description : An object reporting the factory pids defined in the framework.
                        • response body :
                          • PidSet
                      • 500
                        • description : If an unexpected failure occurs while retrieving the factory pid list.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-service-listing-api/#postfactorypidsbyinterface","title":"POST/factoryPids/byInterface","text":"
                    • REST API path : /services/serviceListing/v1/factoryPids/byInterface
                    • description : Returns the factory pid of the services that provide all of the specified interfaces.
                    • request body :
                      • InterfaceNames
                    • responses :
                      • 200
                        • description : An object reporting the matching factory pids.
                        • response body :
                          • PidSet
                      • 400
                        • description : If the request body is not syntactically correct.
                        • response body :
                          • GenericFailureReport
                      • 500
                        • description : If an unexpected failure occurs while retrieving the factory pid list.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-service-listing-api/#postfactorypidsbyproperty","title":"POST/factoryPids/byProperty","text":"
                    • REST API path : /services/serviceListing/v1/factoryPids/byProperty
                    • description : Returns the list of factory pids whose properties match the specified filter.
                    • request body :
                      • Filter
                    • responses :
                      • 200
                        • description : An object reporting the matching factory pids.
                        • response body :
                          • PidSet
                      • 400
                        • description : If the request body is not syntactically correct.
                        • response body :
                          • GenericFailureReport
                      • 500
                        • description : If an unexpected failure occurs while retrieving the factory pid list.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-service-listing-api/#json-definitions","title":"JSON definitions","text":""},{"location":"references/rest-apis/rest-service-listing-api/#interfacenames","title":"InterfaceNames","text":"

                    A list of serviceinterface names.

                    Properties:

                    • interfaceNames: array The list of service interface names.

                      • array element type: string A service interface name.
                    {\n  \"interfaceNames\": [\n    \"org.eclipse.kura.security.keystore.KeystoreService\",\n    \"org.eclipse.kura.configuration.ConfigurableComponent\"\n  ]\n}\n
                    "},{"location":"references/rest-apis/rest-service-listing-api/#reference","title":"Reference","text":"

                    A object specifying a service pid and a reference name.

                    Properties:

                    • pid: string The pid of the service containing the reference

                    • referenceName: string The reference name

                    {\n  \"pid\": \"org.eclipse.kura.ssl.SslManagerService\",\n  \"referenceName\": \"KeystoreService\"\n}\n
                    "},{"location":"references/rest-apis/rest-service-listing-api/#propertyfilter","title":"PropertyFilter","text":"

                    A filter matching property keys and values. If the value property omitted, the filter will match if the property is set, regardless of the value. If the service property value is of array or list type, the filter will match if at least one of the elements match.

                    Properties:

                    • name: string The property name that should be matched, it must not contain spaces

                    • value: string (optional) The property value that should be matched.

                    {\n  \"name\": \"foo\",\n  \"value\": \"bar\"\n}\n
                    {\n  \"name\": \"foo\"\n}\n

                    "},{"location":"references/rest-apis/rest-service-listing-api/#notfilter","title":"NotFilter","text":"

                    A filter that negates the result returned by the filter specified as the \"not\" propertiy.

                    Properties:

                    • not: object
                      • Filter
                    {\n  \"not\": {\n    \"name\": \"foo\",\n    \"value\": \"bar\"\n  }\n}\n
                    "},{"location":"references/rest-apis/rest-service-listing-api/#andfilter","title":"AndFilter","text":"

                    A filter that matches if all filters specified by the \"and\" propertiy match.

                    Properties:

                    • and: array A list of filters that should be combined with the and operator

                      • array element type: object
                        • Filter
                    {\n  \"and\": [\n    {\n      \"name\": \"foo\",\n      \"value\": \"bar\"\n    },\n    {\n      \"name\": \"baz\"\n    }\n  ]\n}\n
                    "},{"location":"references/rest-apis/rest-service-listing-api/#orfilter","title":"OrFilter","text":"

                    A filter that matches if any of the filters specified by the \"or\" propertiy match.

                    Properties:

                    • or: array A list of filters that should be combined with the or operator

                      • array element type: object
                        • Filter
                    {\n  \"or\": [\n    {\n      \"name\": \"foo\",\n      \"value\": \"bar\"\n    },\n    {\n      \"name\": \"baz\"\n    }\n  ]\n}\n
                    "},{"location":"references/rest-apis/rest-service-listing-api/#filter","title":"Filter","text":"

                    A filter that operates on service properties. This object allows to specify basic property key/value matchers and the and or and not operators.

                    • Variants:
                    • object
                      • PropertyFilter
                    • object
                      • NotFilter
                    • object
                      • AndFilter
                    • object
                      • OrFilter
                    "},{"location":"references/rest-apis/rest-service-listing-api/#pidset","title":"PidSet","text":"

                    Represents a set of pids or factory pids.

                    Properties:

                    • pids: array The set of pids

                      • array element type: string The pid
                    {\n  \"pids\": [\n    \"org.eclipse.kura.cloud.app.command.CommandCloudApp\",\n    \"org.eclipse.kura.cloud.CloudService\",\n    \"org.eclipse.kura.cloud.publisher.CloudNotificationPublisher\",\n    \"org.eclipse.kura.container.orchestration.provider.ContainerOrchestrationService\",\n    \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\",\n    \"org.eclipse.kura.core.deployment.CloudDeploymentHandlerV2\",\n    \"org.eclipse.kura.crypto.CryptoService\",\n    \"org.eclipse.kura.data.DataService\",\n    \"org.eclipse.kura.db.H2DbService\",\n    \"org.eclipse.kura.deployment.agent\"\n  ]\n}\n
                    "},{"location":"references/rest-apis/rest-service-listing-api/#genericfailurereport","title":"GenericFailureReport","text":"

                    An object reporting a failure message.

                    Properties:

                    • message: string A message describing the failure.
                    "},{"location":"references/rest-apis/rest-session-api/","title":"Session V1 Rest APIs","text":"

                    The session management REST APIs allow to authenticate and establish an HTTP session. Using this APIs and creating a session is the recommended way for interact with Kura rest APIs from a browser based application.

                    The supported workflows are the following:

                    "},{"location":"references/rest-apis/rest-session-api/#login-and-resource-access-workflow","title":"Login and resource access workflow","text":"

                    1. Try calling the GET/xsrfToken to get an XSRF token, if the request succeeds a vaild session is already available, it is possible to proceed to step 4.

                      • It is not necessary to call GET/xsrfToken again until the current session expires, the obtained token is valid as long as the current session is valid.

                    2. Call the POST/login/password or POST/login/certificate providing the credentials to create a new session.

                      • This request will return a session cookie with the response. The session cookie name is currently JSESSIONID. It is important to provide the received cookies in successive requests using the Cookie HTTP request header. If this is not done, requests will fail with 401 code. If the request is performed by a browser, cookie management should be performed automatically.

                      • If password authentication has been used and the response object reports that a password change is needed, perform the Update password workflow

                    3. Repeat step 1. to get an XSRF token.

                    4. Access the desired resources, set the XSRF token previously obtained as the value of the X-XSRF-Token HTTP header on each request. If a reuqest fails with error code 401, proceed to step 2.

                    "},{"location":"references/rest-apis/rest-session-api/#login-example-with-curl","title":"Login example with curl","text":""},{"location":"references/rest-apis/rest-session-api/#1-login-with-usernamepassword-and-collect-the-session-cookie","title":"1. Login with username/password and collect the session cookie","text":"
                    curl -k -X POST \\\n    -H 'Content-Type: application/json' \\\n    https://$ADDRESS/services/session/v1/login/password \\\n    -d '{\"password\": \"$KURA_PASS\", \"username\": \"$KURA_USER\"}' -v\n

                    where:

                    • $ADDRESS: is the address of the Kura instance
                    • $KURA_USER: is the Kura username
                    • $KURA_PASS: is the Kura password

                    in the log you should find a JSESSIONID you'll use in subsequent requests

                    ...\n< HTTP/1.1 200 OK\n< Date: Tue, 14 Nov 2023 08:17:26 GMT\n< Set-Cookie: JSESSIONID=myawesomecookie; Path=/; Secure; HttpOnly\n< Expires: Thu, 01 Jan 1970 00:00:00 GMT\n< Content-Type: application/json\n< Content-Length: 30\n<\n* Connection #0 to host 192.168.1.111 left intact\n{\"passwordChangeNeeded\":false}%\n
                    "},{"location":"references/rest-apis/rest-session-api/#2-retrieve-the-xsrf-token","title":"2. Retrieve the XSRF token","text":"
                    curl -k -X GET \\\n    -b \"JSESSIONID=myawesomecookie\" \\\n    https://$ADDRESS/services/session/v1/xsrfToken\n

                    in the response you'll find your XSRF token you'll need to use in subsequent requests

                    {\"xsrfToken\":\"myawesometoken\"}%\n
                    "},{"location":"references/rest-apis/rest-session-api/#3-access-the-resource","title":"3. Access the resource","text":"

                    Using the Cookie and the XSRF token you just retrieved you can access your desired resource

                    curl -k -X GET \\\n    -H 'X-XSRF-Token: myawesometoken' \\\n    -b \"JSESSIONID=myawesomecookie\" \\\n    https://$ADDRESS/services/deploy/v2/\n
                    "},{"location":"references/rest-apis/rest-session-api/#update-password-workflow","title":"Update password workflow","text":"

                    1. Get an XSRF token using the GET/xsrfToken endpoint.

                    2. Call the POST/changePassword, providing both the new and old password, make sure to include the X-XSRF-Token HTTP header.

                    3. Repeat the Authentication and resource access workflow, starting from step 1.

                    Sessions will expire after an inactivity interval that can be configured using the Session Inactivity Interval (Seconds) RestService configuration parameter. After session expiration, a new login will be necessary.

                    In order to add protection against XSRF attacks, it is necessary to provide an token using the X-XSRF-Token HTTP header in all requests. The token can be obtained using the GET/xsrfToken endpoint after a successful login.

                    Session will be invalidated if the current identity credentials are changed, in this case a new login will be necessary.

                    If a password change is required for the current identity, it will be necessary to perform the Update password workflow before being able to access the other resources.

                    "},{"location":"references/rest-apis/rest-session-api/#reference","title":"Reference","text":"
                    • Request definitions
                      • POST/login/password
                      • POST/login/certificate
                      • GET/xsrfToken
                      • POST/logout
                      • POST/changePassword
                      • GET/currentIdentity
                      • GET/authenticationMethods
                    • JSON definitions
                      • AuthenticationResponse
                      • UsernamePassword
                      • XSRFToken
                      • PasswordChangeRequest
                      • IdentityInfo
                      • AuthenticationInfo
                      • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-session-api/#request-definitions","title":"Request definitions","text":""},{"location":"references/rest-apis/rest-session-api/#postloginpassword","title":"POST/login/password","text":"
                    • REST API path : /services/session/v1/login/password
                    • description : Creates a new session by providing identity name and password. If the response reports that a password change is needed, it is necessary to update the current password in order to be able to access other REST APIs.
                    • request body :
                      • UsernamePassword
                    • responses :
                      • 200
                        • description : Request succeeded.
                        • response body :
                          • AuthenticationResponse
                      • 401
                        • description : The provided credentials are not correct.
                      • 500
                        • description : An unexpected error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-session-api/#postlogincertificate","title":"POST/login/certificate","text":"
                    • REST API path : /services/session/v1/login/certificate
                    • description : Creates a new session using certificate based authentication. The response will report if the current identity needs a password change for informational purposes only. If authentication is performed using this endpoint, access to other REST APIs will be allowd even if password change is required for the current identity.
                    • responses :
                      • 200
                        • description : Request succeeded.
                        • response body :
                          • AuthenticationResponse
                      • 401
                        • description : The provided credentials are not correct.
                      • 500
                        • description : An unexpected error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-session-api/#getxsrftoken","title":"GET/xsrfToken","text":"
                    • REST API path : /services/session/v1/xsrfToken
                    • description : Gets the XSRF token associated with the current session. It is not necessary to call this method again until the current session expires, the obtained token is valid as long as the current session is valid.
                    • responses :
                      • 200
                        • description : Request succeeded, the XSRF token is returned in response body.
                        • response body :
                          • XSRFToken
                      • 401
                        • description : The current session is not valid.
                      • 500
                        • description : An unexpected error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-session-api/#postlogout","title":"POST/logout","text":"
                    • REST API path : /services/session/v1/logout
                    • description : Terminates the current session.
                    • responses :
                      • 204
                        • description : Request succeeded, the session is no longer valid.
                      • 401
                        • description : The current session is not valid
                      • 500
                        • description : An unexpected error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-session-api/#postchangepassword","title":"POST/changePassword","text":"
                    • REST API path : /services/session/v1/changePassword
                    • description : Changes the password associated with the current identity. The new password will be validated against the currently configured password strength requirements. The current password strenght requirements can be retrieved using the identity/v1/passwordRequirements endpoint.
                    • request body :
                      • PasswordChangeRequest
                    • responses :
                      • 204
                        • description : Request succeeded. The current password has been changed. The session is no longer valid, a new login is required.
                      • 400
                        • description : The new password is not valid. This can be due to the fact that it does not fullfill the current password strenght requirements.
                      • 401
                        • description : The current session is not valid.
                      • 500
                        • description : An unexpected error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-session-api/#getcurrentidentity","title":"GET/currentIdentity","text":"
                    • REST API path : /services/session/v1/currentIdentity
                    • description : Provides information about the currently authenticated identity.
                    • responses :
                      • 200
                        • description : Request succeeded
                        • response body :
                          • IdentityInfo
                      • 401
                        • description : The current session is not valid.
                      • 500
                        • description : An unexpected error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-session-api/#getauthenticationmethods","title":"GET/authenticationMethods","text":"
                    • REST API path : /services/session/v1/authenticationInfo
                    • description : Provides information about the available authentication methods.
                    • responses :
                      • 200
                        • description : Request succeeded
                        • response body :
                          • AuthenticationInfo
                      • 401
                        • description : The current session is not valid.
                      • 500
                        • description : An unexpected error occurred.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"references/rest-apis/rest-session-api/#json-definitions","title":"JSON definitions","text":""},{"location":"references/rest-apis/rest-session-api/#authenticationresponse","title":"AuthenticationResponse","text":"

                    Represents the response for a successful authentication request.

                    Properties:

                    • passwordChangeNeeded: bool Determines whether a password change is required for the current identity.
                    {\n  \"passwordChangeNeeded\": true\n}\n
                    "},{"location":"references/rest-apis/rest-session-api/#usernamepassword","title":"UsernamePassword","text":"

                    Contains an username and password.

                    Properties:

                    • username: string The user name.

                    • password: string The user password.

                    {\n  \"password\": \"bar\",\n  \"username\": \"foo\"\n}\n
                    "},{"location":"references/rest-apis/rest-session-api/#xsrftoken","title":"XSRFToken","text":"

                    An object containing an XSRF token.

                    Properties:

                    • xsrfToken: string The XSRF token.
                    {\n  \"xsrfToken\": \"d2b68613-152f-41d5-8b5b-a19448ed0e4e\"\n}\n
                    "},{"location":"references/rest-apis/rest-session-api/#passwordchangerequest","title":"PasswordChangeRequest","text":"

                    An object containing the current password and a new password.

                    Properties:

                    • currentPassword: string The current password.

                    • newPassword: string The new password.

                    {\n  \"currentPassword\": \"foo\",\n  \"newPassword\": \"bar\"\n}\n
                    "},{"location":"references/rest-apis/rest-session-api/#identityinfo","title":"IdentityInfo","text":"

                    An object containing information about the current identity

                    Properties:

                    • name: string The name of the current identity.

                    • passwordChangeNeeded: bool Determines whether a password change is required for the current identity.

                    • permissions: array The list of permissions assigned to the current identity.

                      • array element type: string The permission name.
                    {\n  \"name\": \"foo\",\n  \"passwordChangeNeeded\": false,\n  \"permissions\": [\n    \"rest.bar\",\n    \"rest.assets\",\n    \"rest.foo\"\n  ]\n}\n
                    "},{"location":"references/rest-apis/rest-session-api/#authenticationinfo","title":"AuthenticationInfo","text":"

                    An object containing information about the enabled authentication methods.

                    Properties:

                    • passwordAuthenticationEnabled: bool Reports whether authentication using the login/password endpoint is enabled.

                    • certificateAuthenticationEnabled: bool Reports whether authentication using the login/certificate endpoint is enabled.

                    • certificateAuthenticationPorts: array (optional) The list of ports available for certificate based authentication. This property will be present only if certificateAuthenticationEnabled is true

                      • array element type: string A port that can be used for certificate based authentication.

                    • message: string (optional) Reports the content of the Login Banner, if configured on the device. A browser based application should display this message to the user before login if this property is set. This property will be missing if the login banner is not enabled.

                    {\n  \"certificateAuthenticationEnabled\": false,\n  \"passwordAuthenticationEnabled\": true\n}\n
                    {\n  \"certificateAuthenticationEnabled\": true,\n  \"certificateAuthenticationPorts\": [\n    4443,\n    4444\n  ],\n  \"passwordAuthenticationEnabled\": true\n}\n
                    {\n  \"certificateAuthenticationEnabled\": false,\n  \"message\": \"login banner content\",\n  \"passwordAuthenticationEnabled\": true\n}\n

                    "},{"location":"references/rest-apis/rest-session-api/#genericfailurereport","title":"GenericFailureReport","text":"

                    An object reporting a failure message.

                    Properties:

                    • message: string A message describing the failure.
                    "},{"location":"references/rest-apis/rest-system-api/","title":"System","text":"

                    Note

                    This API can also be accessed via the RequestHandler with app-id: SYS-V1.

                    The SystemService APIs return properties that are divided into 3 categories:

                    • framework properties,
                    • extended properties, and
                    • kura properties.

                    Identities with rest.system permissions can access these APIs.

                    "},{"location":"references/rest-apis/rest-system-api/#framework-properties","title":"Framework properties","text":"Property name Type biosVersion String cpuVersion String deviceName String modelId String modelName String partNumber String platform String numberOfProcessors Integer totalMemory Integer freeMemory Integer serialNumber String javaHome String javaVendor String javaVersion String javaVmInfo String javaVmName String javaVmVersion String javaVmVendor String jdkVendorVersion String osArch String osDistro String osDistroVersion String osName String osVersion String isLegacyBluetoothBeaconScan Boolean isLegacyPPPLoggingEnabled Boolean primaryMacAddress String primaryNetworkInterfaceName String fileSeparator String firmwareVersion String kuraDataDirectory String kuraFrameworkConfigDirectory String kuraHomeDirectory String kuraMarketplaceCompatibilityVersion String kuraSnapshotsCount Integer kuraSnapshotsDirectory String kuraStyleDirectory String kuraTemporaryConfigDirectory String kuraUserConfigDirectory String kuraVersion String kuraHaveWebInterface Boolean kuraHaveNetAdmin Boolean kuraWifiTopChannel Integer kuraDefaultNetVirtualDevicesConfig String osgiFirmwareName String osgiFirmwareVersion String commandUser String commandZipMaxUploadNumber Integer commandZipMaxUploadSize Integer"},{"location":"references/rest-apis/rest-system-api/#kura-properties","title":"Kura properties","text":"Property name Type kura.platform String org.osgi.framework.version String kura.user.config String java.vm.vendor String kura.name String file.command.zip.max.number String kura.legacy.ppp.logging.enabled String kura.tmp String kura.packages String build.version String kura.log.download.journal.fields String kura.data String os.name String dpa.read.timeout String file.upload.size.max String console.device.management.service.ignore String kura.command.user String kura.device.name String kura.partNumber String kura.project String kura.company String java.home String version String kura.style.dir String kura.model.id String file.separator String jdk.vendor.version String kura.model.name String kura.serialNumber.provider String kura.have.web.inter String kura.legacy.bluetooth.beacon.scan String java.runtime.version String kura.bios.version String kura.marketplace.compatibility.version String kura.framework.config String kura.firmware.version String kura.plugins String os.version String kura.version String org.osgi.framework.vendor String java.runtime.name String kura.log.download.sources String os.distribution String java.vm.name String kura.primary.network.interface String kura.home String file.command.zip.max.size String os.arch String os.distribution.version String file.upload.in.memory.size.threshold String kura.net.virtual.devices.config String kura.snapshots String kura.have.net.admin String java.vm.info String java.vm.version String dpa.connection.timeout String build.number String ccs.status.notification.url String

                    Note

                    Some of the listed properties, depending on the device, might not be available.

                    "},{"location":"references/rest-apis/rest-system-api/#get-methods","title":"GET methods","text":""},{"location":"references/rest-apis/rest-system-api/#get-framework-properties","title":"Get framework properties","text":"
                    • Method: GET
                    • API PATH: /services/system/v1/properties/framework
                    "},{"location":"references/rest-apis/rest-system-api/#responses","title":"Responses","text":"
                    • 200 OK status
                    {\n    \"biosVersion\": \"N/A\",\n    \"cpuVersion\": \"unknown\",\n    \"deviceName\": \"raspberry\",\n    \"modelId\": \"raspberry\",\n    \"modelName\": \"raspberry\",\n    \"partNumber\": \"raspberry\",\n    \"platform\": \"aarch64\",\n    \"numberOfProcessors\": 4,\n    \"totalMemory\": 506816,\n    \"freeMemory\": 380379,\n    \"serialNumber\": \"10000000ba7c7bfd\",\n    \"javaHome\": \"/usr/lib/jvm/java-8-openjdk-armhf/jre\",\n    \"javaVendor\": \"OpenJDK Runtime Environment\",\n    \"javaVersion\": \"1.8.0_312-8u312-b07-1+rpi1-b07\",\n    \"javaVmInfo\": \"mixed mode\",\n    \"javaVmName\": \"OpenJDK Client VM\",\n    \"javaVmVersion\": \"25.312-b07\",\n    \"javaVmVendor\": \"Temurin\",\n    \"jdkVendorVersion\": \"Zulu 8.70.0.24-SA-linux64\",\n    \"osArch\": \"arm\",\n    \"osDistro\": \"Linux\",\n    \"osDistroVersion\": \"N/A\",\n    \"osName\": \"Linux\",\n    \"osVersion\": \"6.1.21-v8+ #1642 SMP PREEMPT Mon Apr  3 17:24:16 BST 2023\",\n    \"isLegacyBluetoothBeaconScan\": false,\n    \"isLegacyPPPLoggingEnabled\": true,\n    \"primaryMacAddress\": \"E4:5F:01:35:7F:F4\",\n    \"primaryNetworkInterfaceName\": \"eth0\",\n    \"fileSeparator\": \"/\",\n    \"firmwareVersion\": \"N/A\",\n    \"kuraDataDirectory\": \"/opt/eclipse/kura/data\",\n    \"kuraFrameworkConfigDirectory\": \"/opt/eclipse/kura/framework\",\n    \"kuraHomeDirectory\": \"/opt/eclipse/kura\",\n    \"kuraMarketplaceCompatibilityVersion\": \"5.4.0.SNAPSHOT\",\n    \"kuraSnapshotsCount\": 10,\n    \"kuraSnapshotsDirectory\": \"/opt/eclipse/kura/user/snapshots\",\n    \"kuraStyleDirectory\": \"/opt/eclipse/kura/console/skin\",\n    \"kuraTemporaryConfigDirectory\": \"/tmp/.kura\",\n    \"kuraUserConfigDirectory\": \"/opt/eclipse/kura/user\",\n    \"kuraVersion\": \"KURA_5.4.0-SNAPSHOT\",\n    \"kuraHaveWebInterface\": true,\n    \"kuraHaveNetAdmin\": true,\n    \"kuraWifiTopChannel\": 2147483647,\n    \"kuraDefaultNetVirtualDevicesConfig\": \"netIPv4StatusUnmanaged\",\n    \"osgiFirmwareName\": \"Eclipse\",\n    \"osgiFirmwareVersion\": \"1.10.0\",\n    \"commandUser\": \"kura\",\n    \"commandZipMaxUploadNumber\": 1024,\n    \"commandZipMaxUploadSize\": 100\n}\n
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-system-api/#get-extended-properties","title":"Get extended properties","text":"
                    • Method: GET
                    • API PATH: /services/system/v1/properties/extended
                    "},{"location":"references/rest-apis/rest-system-api/#responses_1","title":"Responses","text":"
                    • 200 OK status
                    {\n    \"version\": \"1.0\",\n    \"extendedProperties\": {\n        \"Device Info 1\": {\n            \"exampleKey1\": \"value1\",\n            \"exampleKey2\": \"value2\"\n        },\n        \"Device Info 2\": {\n            \"key1\": \"val1\",\n            \"key2\": \"val2\"\n        }\n    }\n}\n
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-system-api/#get-kura-properties","title":"Get Kura properties","text":"
                    • Method: GET
                    • API PATH: /services/system/v1/properties/kura
                    "},{"location":"references/rest-apis/rest-system-api/#responses_2","title":"Responses","text":"
                    • 200 OK status
                    {\n    \"kuraProperties\": {\n        \"kura.platform\": \"aarch64\",\n        \"org.osgi.framework.version\": \"1.10.0\",\n        \"kura.user.config\": \"/opt/eclipse/kura/user\",\n        \"java.vm.vendor\": \"Temurin\",\n        \"kura.name\": \"Eclipse Kura\",\n        \"file.command.zip.max.number\": \"1024\",\n        \"kura.legacy.ppp.logging.enabled\": \"true\",\n        \"kura.tmp\": \"/tmp/.kura\",\n        \"kura.packages\": \"/opt/eclipse/kura/packages\",\n        \"build.version\": \"buildNumber\",\n        \"kura.log.download.journal.fields\": \"SYSLOG_IDENTIFIER,PRIORITY,MESSAGE,STACKTRACE\",\n        \"kura.data\": \"/opt/eclipse/kura/data\",\n        \"os.name\": \"Linux\",\n        \"dpa.read.timeout\": \"60000\",\n        \"file.upload.size.max\": \"-1\",\n        \"console.device.management.service.ignore\": \"org.eclipse.kura.net.admin.NetworkConfigurationService,org.eclipse.kura.net.admin.FirewallConfigurationService\",\n        \"kura.command.user\": \"kura\",\n        \"kura.device.name\": \"raspberry\",\n        \"kura.partNumber\": \"raspberry\",\n        \"kura.project\": \"generic-arm32\",\n        \"kura.company\": \"EUROTECH\",\n        \"java.home\": \"/usr/lib/jvm/java-8-openjdk-armhf/jre\",\n        \"version\": \"5.4.0-SNAPSHOT\",\n        \"kura.style.dir\": \"/opt/eclipse/kura/console/skin\",\n        \"kura.model.id\": \"raspberry\",\n        \"file.separator\": \"/\",\n        \"jdk.vendor.version\": \"Zulu 8.70.0.24-SA-linux64\",\n        \"kura.model.name\": \"raspberry\",\n        \"kura.serialNumber.provider\": \"cat /proc/cpuinfo | grep Serial | cut -d ' ' -f 2\",\n        \"kura.have.web.inter\": \"true\",\n        \"kura.legacy.bluetooth.beacon.scan\": \"false\",\n        \"java.runtime.version\": \"1.8.0_312-8u312-b07-1+rpi1-b07\",\n        \"kura.bios.version\": \"N/A\",\n        \"kura.marketplace.compatibility.version\": \"KURA_5.4.0-SNAPSHOT\",\n        \"kura.framework.config\": \"/opt/eclipse/kura/framework\",\n        \"kura.firmware.version\": \"N/A\",\n        \"kura.plugins\": \"/opt/eclipse/kura/plugins\",\n        \"os.version\": \"6.1.21-v8+ #1642 SMP PREEMPT Mon Apr  3 17:24:16 BST 2023\",\n        \"kura.version\": \"KURA_5.4.0-SNAPSHOT\",\n        \"org.osgi.framework.vendor\": \"Eclipse\",\n        \"java.runtime.name\": \"OpenJDK Runtime Environment\",\n        \"kura.log.download.sources\": \"/var/log\",\n        \"os.distribution\": \"Linux\",\n        \"java.vm.name\": \"OpenJDK Client VM\",\n        \"kura.primary.network.interface\": \"eth0\",\n        \"kura.home\": \"/opt/eclipse/kura\",\n        \"file.command.zip.max.size\": \"100\",\n        \"os.arch\": \"arm\",\n        \"os.distribution.version\": \"N/A\",\n        \"file.upload.in.memory.size.threshold\": \"10240\",\n        \"kura.net.virtual.devices.config\": \"unmanaged\",\n        \"kura.snapshots\": \"/opt/eclipse/kura/user/snapshots\",\n        \"kura.have.net.admin\": \"true\",\n        \"java.vm.info\": \"mixed mode\",\n        \"java.vm.version\": \"25.312-b07\",\n        \"dpa.connection.timeout\": \"60000\",\n        \"build.number\": \"generic-arm32-buildNumber\",\n        \"ccs.status.notification.url\": \"ccs:log\"\n    }\n}\n
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-system-api/#post-methods","title":"POST methods","text":""},{"location":"references/rest-apis/rest-system-api/#filter-framework-properties","title":"Filter framework properties","text":"

                    This method allows to retrieve framework-related properties by their name. Available properties are in table Framework properties.

                    • Method: POST
                    • API PATH: /services/system/v1/properties/framework/filter
                    "},{"location":"references/rest-apis/rest-system-api/#request-body","title":"Request Body","text":"
                    {\n    \"names\": [\"deviceName\", \"numberOfProcessors\", \"kuraHaveNetAdmin\"]\n}\n
                    "},{"location":"references/rest-apis/rest-system-api/#responses_3","title":"Responses","text":"
                    • 200 OK status
                    {\n    \"deviceName\": \"RASBPERRY PI 4\",\n    \"numberOfProcessors\": 4,\n    \"kuraHaveNetAdmin\": true\n}\n
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-system-api/#filter-extended-properties","title":"Filter extended properties","text":"

                    This method allows to retrieve the extended properties and to filter them by group name.

                    • Method: POST
                    • API PATH: /services/system/v1/properties/extended/filter
                    "},{"location":"references/rest-apis/rest-system-api/#request-body_1","title":"Request Body","text":"
                    {\n    \"groupNames\": [\"Device Info 1\"]\n}\n
                    "},{"location":"references/rest-apis/rest-system-api/#responses_4","title":"Responses","text":"
                    • 200 OK status
                    {\n    \"extendedProperties\": {\n        \"Device Info 1\": {\n            \"exampleKey1\": \"value1\",\n            \"exampleKey2\": \"value2\"\n        }\n    }\n}\n
                    • 500 Internal Server Error
                    "},{"location":"references/rest-apis/rest-system-api/#filter-kura-properties","title":"Filter kura properties","text":"

                    This method allows to retrieve Kura-related properties (derived from the kura.properties file) and filter by their name. Available properties are listed in the table Kura properties.

                    • Method: POST
                    • API PATH: /services/system/v1/properties/kura/filter
                    "},{"location":"references/rest-apis/rest-system-api/#request-body_2","title":"Request Body","text":"
                    {\n    \"names\": [\"kura.platform\", \"file.upload.size.max\", \"kura.have.net.admin\"]\n}\n
                    "},{"location":"references/rest-apis/rest-system-api/#responses_5","title":"Responses","text":"
                    • 200 OK status
                    {\n    \"kuraProperties\": {\n        \"kura.platform\": \"aarch64\",\n        \"kura.have.net.admin\": \"true\",\n        \"file.upload.size.max\": \"-1\"\n    }\n}\n
                    • 500 Internal Server Error
                    "},{"location":"tutorials/AD-EdgeAI/","title":"Edge AI Anomaly Detection","text":"In\u00a0[1]: Copied! 
                    !wget https://raw.githubusercontent.com/mattdibi/eclipsecon-edgeAI-talk/master/notebook/train-data-raw.csv\n
                    !wget https://raw.githubusercontent.com/mattdibi/eclipsecon-edgeAI-talk/master/notebook/train-data-raw.csv 
                    --2022-10-18 15:32:34--  https://raw.githubusercontent.com/mattdibi/eclipsecon-edgeAI-talk/master/notebook/train-data-raw.csv\nResolving raw.githubusercontent.com (raw.githubusercontent.com)... 185.199.110.133, 185.199.111.133, 185.199.108.133, ...\nConnecting to raw.githubusercontent.com (raw.githubusercontent.com)|185.199.110.133|:443... connected.\nHTTP request sent, awaiting response... 200 OK\nLength: 13288126 (13M) [text/plain]\nSaving to: \u2018train-data-raw.csv.1\u2019\n\ntrain-data-raw.csv. 100%[===================>]  12,67M  4,56MB/s    in 2,8s    \n\n2022-10-18 15:32:38 (4,56 MB/s) - \u2018train-data-raw.csv.1\u2019 saved [13288126/13288126]\n\n
                    In\u00a0[2]: Copied! 
                    !ls *.csv\n
                    !ls *.csv 
                    train-data-raw.csv\n

                    Let's start taking a look at the content of this dataset, we'll use pandas (Python Data Analysis library) for this.

                    In\u00a0[3]: Copied! 
                    import pandas as pd\n\nraw_data = pd.read_csv(\"./train-data-raw.csv\")\n\nraw_data.head()\n
                    import pandas as pd raw_data = pd.read_csv(\"./train-data-raw.csv\") raw_data.head() Out[3]: ID TIMESTAMP MAGNET_X TEMP_HUM_timestamp MAGNET_Z MAGNET_Y ACC_Y ACC_X GYRO_Y_timestamp ACC_Z ... PRESSURE_timestamp MAGNET_X_timestamp ACC_X_timestamp GYRO_Z_timestamp HUMIDITY_timestamp assetName ACC_Z_timestamp GYRO_X GYRO_Y GYRO_Z 0 1 1645778791786 -2.680372 1645778791413 5.036951 8.646852 0.004364 0.080122 1645778791413 0.984048 ... 1645778791413 1645778791413 1645778791413 1645778791413 1645778791413 asset-sensehat 1645778791413 0.053243 0.028920 0.036950 1 2 1645778792381 -3.110756 1645778792378 5.952562 10.521458 0.005091 0.080122 1645778792378 0.992090 ... 1645778792378 1645778792378 1645778792378 1645778792378 1645778792378 asset-sensehat 1645778792378 -0.051105 -0.028920 -0.037256 2 3 1645778793412 -3.482263 1645778793408 6.719675 11.944528 0.005334 0.080122 1645778793408 0.986729 ... 1645778793408 1645778793408 1645778793408 1645778793408 1645778793408 asset-sensehat 1645778793408 -0.025253 0.025560 0.038478 3 4 1645778794411 -3.813552 1645778794407 7.375115 13.093461 0.006061 0.080122 1645778794407 0.990384 ... 1645778794407 1645778794407 1645778794407 1645778794407 1645778794407 asset-sensehat 1645778794407 0.100695 -0.023422 -0.037867 4 5 1645778795411 -4.050513 1645778795407 7.854155 14.029530 0.004849 0.080607 1645778795407 0.988922 ... 1645778795407 1645778795407 1645778795407 1645778795407 1645778795407 asset-sensehat 1645778795407 -0.100389 0.021895 0.038172

                    5 rows \u00d7 29 columns

                    In\u00a0[4]: Copied! 
                    features = ['ACC_Y', 'ACC_X', 'ACC_Z',\n            'PRESSURE', 'TEMP_PRESS', 'TEMP_HUM',\n            'HUMIDITY', 'GYRO_X', 'GYRO_Y', 'GYRO_Z']\n\ndata = raw_data[features]\n\ndata.head()\n
                    features = ['ACC_Y', 'ACC_X', 'ACC_Z', 'PRESSURE', 'TEMP_PRESS', 'TEMP_HUM', 'HUMIDITY', 'GYRO_X', 'GYRO_Y', 'GYRO_Z'] data = raw_data[features] data.head() Out[4]: ACC_Y ACC_X ACC_Z PRESSURE TEMP_PRESS TEMP_HUM HUMIDITY GYRO_X GYRO_Y GYRO_Z 0 0.004364 0.080122 0.984048 992.322998 38.724998 40.330822 19.487146 0.053243 0.028920 0.036950 1 0.005091 0.080122 0.992090 992.288330 38.772915 40.385788 19.465750 -0.051105 -0.028920 -0.037256 2 0.005334 0.080122 0.986729 992.275635 38.795834 40.349144 19.572731 -0.025253 0.025560 0.038478 3 0.006061 0.080122 0.990384 992.279053 38.797916 40.330822 19.358767 0.100695 -0.023422 -0.037867 4 0.004849 0.080607 0.988922 992.333008 38.845833 40.385788 19.390862 -0.100389 0.021895 0.038172 In\u00a0[5]: Copied! 
                    %matplotlib inline\nimport matplotlib.pyplot as plt\n\ndata.hist(bins=50, figsize=(20,15))\nplt.show()\n
                    %matplotlib inline import matplotlib.pyplot as plt data.hist(bins=50, figsize=(20,15)) plt.show()

                    Note: Some of you might notice that this is a really simple dataset: some of the input data (like GYRO_* and ACC_*) do not change much over time. Such a dataset is not very challenging and a few, well-placed, thresholds might be sufficient to spot anomalous behaviour. For this tutorial we decided to keep things simple and easy to replicate. Anomalies can be simply triggered by moving the Raspberry Pi around.

                    Keep in mind that this approach is generic: any dataset from any appliance/connected device can be processed in the same way we're showing here. That's the magic of neural networks!

                    In\u00a0[6]: Copied! 
                    print(\"Data used in the Triton preprocessor\")\nprint(\"-----------Min-----------\")\nprint(data.min())\nprint(\"-----------Max-----------\")\nprint(data.max())\nprint(\"-------------------------\")\n
                    print(\"Data used in the Triton preprocessor\") print(\"-----------Min-----------\") print(data.min()) print(\"-----------Max-----------\") print(data.max()) print(\"-------------------------\") 
                    Data used in the Triton preprocessor\n-----------Min-----------\nACC_Y          -0.132551\nACC_X          -0.049693\nACC_Z           0.759847\nPRESSURE      976.001709\nTEMP_PRESS     38.724998\nTEMP_HUM       40.220890\nHUMIDITY       13.003981\nGYRO_X         -1.937896\nGYRO_Y         -0.265019\nGYRO_Z         -0.250647\ndtype: float64\n-----------Max-----------\nACC_Y            0.093099\nACC_X            0.150289\nACC_Z            1.177543\nPRESSURE      1007.996338\nTEMP_PRESS      46.093750\nTEMP_HUM        48.355824\nHUMIDITY        23.506138\nGYRO_X           1.923712\nGYRO_Y           0.219204\nGYRO_Z           0.671759\ndtype: float64\n-------------------------\n
                    In\u00a0[7]: Copied! 
                    from sklearn.preprocessing import MinMaxScaler\n\nscaler = MinMaxScaler()\nscaled_data = scaler.fit_transform(data.to_numpy())\n
                    from sklearn.preprocessing import MinMaxScaler scaler = MinMaxScaler() scaled_data = scaler.fit_transform(data.to_numpy()) In\u00a0[8]: Copied! 
                    pd.DataFrame(scaled_data).describe()\n
                    pd.DataFrame(scaled_data).describe() Out[8]: 0 1 2 3 4 5 6 7 8 9 count 25278.000000 25278.000000 25278.000000 25278.000000 25278.000000 25278.000000 25278.000000 25278.000000 25278.000000 25278.000000 mean 0.603124 0.674196 0.550454 0.526446 0.605576 0.552252 0.466400 0.501160 0.545457 0.271295 std 0.049333 0.015135 0.031627 0.054050 0.288300 0.256587 0.176293 0.062908 0.067678 0.014665 min 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 25% 0.597087 0.667343 0.544924 0.481917 0.501060 0.441442 0.325637 0.501348 0.544670 0.270709 50% 0.603534 0.673413 0.551342 0.521377 0.655357 0.608108 0.511715 0.501841 0.547096 0.271685 75% 0.611055 0.680698 0.555426 0.552892 0.819339 0.734234 0.575212 0.502407 0.549386 0.272577 max 1.000000 1.000000 1.000000 1.000000 1.000000 1.000000 1.000000 1.000000 1.000000 1.000000 In\u00a0[9]: Copied! 
                    from sklearn.model_selection import train_test_split\nimport numpy as np\n\nx_train, x_test = train_test_split(scaled_data, test_size=0.3, random_state=42)\nx_train = x_train.astype(np.float32)\nx_test = x_test.astype(np.float32)\n
                    from sklearn.model_selection import train_test_split import numpy as np x_train, x_test = train_test_split(scaled_data, test_size=0.3, random_state=42) x_train = x_train.astype(np.float32) x_test = x_test.astype(np.float32) In\u00a0[10]: Copied! 
                    import os\nos.environ['TF_CPP_MIN_LOG_LEVEL']='2' # Avoid AVX2 error\n\nfrom tensorflow.keras.models import Model\nfrom tensorflow.keras.layers import Input, Dense, Dropout\n\ndef create_model(input_dim):\n    # The encoder will consist of a number of dense layers that decrease in size\n    # as we taper down towards the bottleneck of the network, the latent space\n    input_data = Input(shape=(input_dim,), name='INPUT0')\n\n    # hidden layers\n    encoder = Dense(9, activation='tanh', name='encoder_1')(input_data)\n    encoder = Dropout(.15)(encoder)\n    encoder = Dense(6, activation='tanh', name='encoder_2')(encoder)\n    encoder = Dropout(.15)(encoder)\n\n    # bottleneck layer\n    latent_encoding = Dense(3, activation='linear', name='latent_encoding')(encoder)\n\n    # The decoder network is a mirror image of the encoder network\n    decoder = Dense(6, activation='tanh', name='decoder_1')(latent_encoding)\n    decoder = Dropout(.15)(decoder)\n    decoder = Dense(9, activation='tanh', name='decoder_2')(decoder)\n    decoder = Dropout(.15)(decoder)\n\n    # The output is the same dimension as the input data we are reconstructing\n    reconstructed_data = Dense(input_dim, activation='linear', name='OUTPUT0')(decoder)\n\n    autoencoder_model = Model(input_data, reconstructed_data)\n\n    return autoencoder_model\n
                    import os os.environ['TF_CPP_MIN_LOG_LEVEL']='2' # Avoid AVX2 error from tensorflow.keras.models import Model from tensorflow.keras.layers import Input, Dense, Dropout def create_model(input_dim): # The encoder will consist of a number of dense layers that decrease in size # as we taper down towards the bottleneck of the network, the latent space input_data = Input(shape=(input_dim,), name='INPUT0') # hidden layers encoder = Dense(9, activation='tanh', name='encoder_1')(input_data) encoder = Dropout(.15)(encoder) encoder = Dense(6, activation='tanh', name='encoder_2')(encoder) encoder = Dropout(.15)(encoder) # bottleneck layer latent_encoding = Dense(3, activation='linear', name='latent_encoding')(encoder) # The decoder network is a mirror image of the encoder network decoder = Dense(6, activation='tanh', name='decoder_1')(latent_encoding) decoder = Dropout(.15)(decoder) decoder = Dense(9, activation='tanh', name='decoder_2')(decoder) decoder = Dropout(.15)(decoder) # The output is the same dimension as the input data we are reconstructing reconstructed_data = Dense(input_dim, activation='linear', name='OUTPUT0')(decoder) autoencoder_model = Model(input_data, reconstructed_data) return autoencoder_model In\u00a0[11]: Copied! 
                    autoencoder_model = create_model(len(features))\nautoencoder_model.summary()\n
                    autoencoder_model = create_model(len(features)) autoencoder_model.summary() 
                    Model: \"model\"\n_________________________________________________________________\n Layer (type)                Output Shape              Param #   \n=================================================================\n INPUT0 (InputLayer)         [(None, 10)]              0         \n                                                                 \n encoder_1 (Dense)           (None, 9)                 99        \n                                                                 \n dropout (Dropout)           (None, 9)                 0         \n                                                                 \n encoder_2 (Dense)           (None, 6)                 60        \n                                                                 \n dropout_1 (Dropout)         (None, 6)                 0         \n                                                                 \n latent_encoding (Dense)     (None, 3)                 21        \n                                                                 \n decoder_1 (Dense)           (None, 6)                 24        \n                                                                 \n dropout_2 (Dropout)         (None, 6)                 0         \n                                                                 \n decoder_2 (Dense)           (None, 9)                 63        \n                                                                 \n dropout_3 (Dropout)         (None, 9)                 0         \n                                                                 \n OUTPUT0 (Dense)             (None, 10)                100       \n                                                                 \n=================================================================\nTotal params: 367\nTrainable params: 367\nNon-trainable params: 0\n_________________________________________________________________\n

                    In\u00a0[12]: Copied! 
                    from tensorflow.keras import optimizers\n\nbatch_size = 32\nmax_epochs = 15\nlearning_rate = .0001\n\nopt = optimizers.Adam(learning_rate=learning_rate)\nautoencoder_model.compile(optimizer=opt, loss='mse', metrics=['accuracy'])\ntrain_history = autoencoder_model.fit(x_train, x_train,\n                      shuffle=True,\n                      epochs=max_epochs,\n                      batch_size=batch_size,\n                      validation_data=(x_test, x_test))\n
                    from tensorflow.keras import optimizers batch_size = 32 max_epochs = 15 learning_rate = .0001 opt = optimizers.Adam(learning_rate=learning_rate) autoencoder_model.compile(optimizer=opt, loss='mse', metrics=['accuracy']) train_history = autoencoder_model.fit(x_train, x_train, shuffle=True, epochs=max_epochs, batch_size=batch_size, validation_data=(x_test, x_test)) 
                    Epoch 1/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.2282 - accuracy: 0.1129 - val_loss: 0.0922 - val_accuracy: 0.0045\nEpoch 2/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0949 - accuracy: 0.1541 - val_loss: 0.0279 - val_accuracy: 0.4210\nEpoch 3/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0613 - accuracy: 0.1779 - val_loss: 0.0206 - val_accuracy: 0.4426\nEpoch 4/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0466 - accuracy: 0.2152 - val_loss: 0.0186 - val_accuracy: 0.5276\nEpoch 5/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0366 - accuracy: 0.2514 - val_loss: 0.0157 - val_accuracy: 0.5944\nEpoch 6/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0290 - accuracy: 0.3083 - val_loss: 0.0119 - val_accuracy: 0.6403\nEpoch 7/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0228 - accuracy: 0.3930 - val_loss: 0.0078 - val_accuracy: 0.7182\nEpoch 8/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0186 - accuracy: 0.4668 - val_loss: 0.0059 - val_accuracy: 0.8195\nEpoch 9/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0157 - accuracy: 0.5021 - val_loss: 0.0048 - val_accuracy: 0.8256\nEpoch 10/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0136 - accuracy: 0.5277 - val_loss: 0.0042 - val_accuracy: 0.8263\nEpoch 11/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0121 - accuracy: 0.5409 - val_loss: 0.0037 - val_accuracy: 0.8296\nEpoch 12/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0107 - accuracy: 0.5569 - val_loss: 0.0036 - val_accuracy: 0.8306\nEpoch 13/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0098 - accuracy: 0.5857 - val_loss: 0.0034 - val_accuracy: 0.8256\nEpoch 14/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0089 - accuracy: 0.6076 - val_loss: 0.0033 - val_accuracy: 0.8281\nEpoch 15/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0083 - accuracy: 0.6337 - val_loss: 0.0032 - val_accuracy: 0.8262\n
                    In\u00a0[13]: Copied! 
                    plt.plot(train_history.history['loss'])\nplt.plot(train_history.history['val_loss'])\nplt.legend(['loss on train data', 'loss on test data'])\n
                    plt.plot(train_history.history['loss']) plt.plot(train_history.history['val_loss']) plt.legend(['loss on train data', 'loss on test data']) Out[13]: 
                    <matplotlib.legend.Legend at 0x16d0c3400>

                    Here we can see the loss for the training set and the test set on the epochs.

                    Some of you might notice that this graph is somewhat unexpected. Why the validation loss is lower than the train loss? This is the effect of the regularization: regularization terms and dropout layer are affecting the network during training. A good writeup of this effect can be found here.

                    As an excercise try and compute the average MSE on the training set and the test set. You'll find that the MSE is lower in the training set!

                    We can now save the model on disk as we'll use this later.

                    In\u00a0[14]: Copied! 
                    autoencoder_model.save(\"./saved_model/autoencoder\")\n
                    autoencoder_model.save(\"./saved_model/autoencoder\") 
                    WARNING:absl:Function `_wrapped_model` contains input name(s) INPUT0 with unsupported characters which will be renamed to input0 in the SavedModel.\n
                    INFO:tensorflow:Assets written to: ./saved_model/autoencoder/assets\n
                    INFO:tensorflow:Assets written to: ./saved_model/autoencoder/assets\n
                    In\u00a0[15]: Copied! 
                    !ls ./saved_model/autoencoder\n
                    !ls ./saved_model/autoencoder 
                    assets            keras_metadata.pb saved_model.pb    variables\n
                    In\u00a0[16]: Copied! 
                    input_sample = x_test[3:4].copy() # Deep copy\n\nreconstructed_sample = autoencoder_model.predict(input_sample)\n\nprint(input_sample)\nprint(reconstructed_sample)\n
                    input_sample = x_test[3:4].copy() # Deep copy reconstructed_sample = autoencoder_model.predict(input_sample) print(input_sample) print(reconstructed_sample) 
                    1/1 [==============================] - 0s 109ms/step\n[[0.603534   0.6770555  0.54900813 0.5327966  0.6680801  0.6171171\n  0.5198642  0.50135666 0.54716927 0.2718224 ]]\n[[0.59638697 0.67410123 0.5484349  0.52024144 0.64766663 0.5916597\n  0.4445051  0.499677   0.54471916 0.26904327]]\n
                    In\u00a0[17]: Copied! 
                    import matplotlib.pyplot as plt\n\nindex = np.arange(10)\nbar_width = 0.35\n\nfigure, ax = plt.subplots()\n\ninbar = ax.bar(index, input_sample[0], bar_width, label=\"Input data\")\nrecbar = ax.bar(index+bar_width, reconstructed_sample[0], bar_width, label=\"Reconstruced data\")\n\nax.set_xlabel('Features')\nax.set_xticks(index + bar_width / 2)\nax.set_xticklabels(features, rotation = 45)\nax.legend()\n
                    import matplotlib.pyplot as plt index = np.arange(10) bar_width = 0.35 figure, ax = plt.subplots() inbar = ax.bar(index, input_sample[0], bar_width, label=\"Input data\") recbar = ax.bar(index+bar_width, reconstructed_sample[0], bar_width, label=\"Reconstruced data\") ax.set_xlabel('Features') ax.set_xticks(index + bar_width / 2) ax.set_xticklabels(features, rotation = 45) ax.legend() Out[17]: 
                    <matplotlib.legend.Legend at 0x16d184880>

                    As we can see from the graph above it reconstructed the input fairly well. It is not perfect since the Autoencoder is lossy but it is good enough

                    What happens if we manipulate this sample in a way the autoencoder doesn't expect (i.e. we introduce an anomaly)?

                    Let's try and set the ACC_Z to a value the autoencoder has never seen before.

                    In\u00a0[18]: Copied! 
                    input_anomaly = input_sample.copy() # Deep copy\n\ninput_anomaly[0][2] = 0.15\n\nreconstructed_anomaly = autoencoder_model.predict(input_anomaly)\n\nprint(input_anomaly)\nprint(reconstructed_anomaly)\n
                    input_anomaly = input_sample.copy() # Deep copy input_anomaly[0][2] = 0.15 reconstructed_anomaly = autoencoder_model.predict(input_anomaly) print(input_anomaly) print(reconstructed_anomaly) 
                    1/1 [==============================] - 0s 21ms/step\n[[0.603534   0.6770555  0.15       0.5327966  0.6680801  0.6171171\n  0.5198642  0.50135666 0.54716927 0.2718224 ]]\n[[0.60162103 0.69035804 0.55594885 0.51874125 0.7346029  0.6700014\n  0.40932336 0.5034408  0.5424664  0.26861513]]\n
                    In\u00a0[19]: Copied! 
                    figure, ax = plt.subplots()\n\ninbar = ax.bar(index, input_anomaly[0], bar_width, label=\"Input anomaly\")\nrecbar = ax.bar(index+bar_width, reconstructed_anomaly[0], bar_width, label=\"Reconstruced anomaly\")\n\nax.set_xlabel('Features')\nax.set_xticks(index + bar_width / 2)\nax.set_xticklabels(features, rotation = 45)\nax.legend()\n
                    figure, ax = plt.subplots() inbar = ax.bar(index, input_anomaly[0], bar_width, label=\"Input anomaly\") recbar = ax.bar(index+bar_width, reconstructed_anomaly[0], bar_width, label=\"Reconstruced anomaly\") ax.set_xlabel('Features') ax.set_xticks(index + bar_width / 2) ax.set_xticklabels(features, rotation = 45) ax.legend() Out[19]: 
                    <matplotlib.legend.Legend at 0x16d3c0220>

                    The autoencoder fails to reconstruct the data it received at the input. This means that the reconstruction error is very high.

                    In\u00a0[20]: Copied! 
                    from sklearn.metrics import mean_squared_error\n\nprint(\"Anomaly %f\"% mean_squared_error(input_anomaly[0], reconstructed_anomaly[0]))\nprint(\"Normal  %f\"% mean_squared_error(input_sample[0], reconstructed_sample[0]))\n
                    from sklearn.metrics import mean_squared_error print(\"Anomaly %f\"% mean_squared_error(input_anomaly[0], reconstructed_anomaly[0])) print(\"Normal %f\"% mean_squared_error(input_sample[0], reconstructed_sample[0])) 
                    Anomaly 0.018465\nNormal  0.000698\n

                    It's working as expected!

                    We now need to decide when to trigger an alarm (i.e. classify an input sample as anomalous) from this reconstruction error. In other words we need to decide our threshold.

                    There are multiple ways to set this value, in this example we'll use the Z-Score.

                    From Wikipedia:

                    In statistics, the standard score is the number of standard deviations by which the value of a raw score (i.e., an observed value or data point) is above or below the mean value of what is being observed or measured.[...]

                    It is calculated by subtracting the population mean from an individual raw score and then dividing the difference by the population standard deviation.

                    We'll consider a sample an anomaly if the Reconstruction Error Z-Score is not in the range [-2, +2]. This means that if the reconstruction error for a sample is more than 2 standard deviation away from the average reconstruction error computed on the test set, the sample is an anomaly. This choice is arbirtary, we can control the sensitivity of the detector by changing this range.

                    In\u00a0[21]: Copied! 
                    x_test_recon = autoencoder_model.predict(x_test)\nreconstruction_scores = np.mean((x_test - x_test_recon)**2, axis=1)  # MSE\n\nreconstruction_scores_pd = pd.DataFrame({'recon_score': reconstruction_scores})\nprint(reconstruction_scores_pd.describe())\n
                    x_test_recon = autoencoder_model.predict(x_test) reconstruction_scores = np.mean((x_test - x_test_recon)**2, axis=1) # MSE reconstruction_scores_pd = pd.DataFrame({'recon_score': reconstruction_scores}) print(reconstruction_scores_pd.describe()) 
                    237/237 [==============================] - 0s 620us/step\n       recon_score\ncount  7584.000000\nmean      0.003175\nstd       0.005438\nmin       0.000098\n25%       0.000816\n50%       0.001211\n75%       0.002108\nmax       0.106237\n
                    In\u00a0[22]: Copied! 
                    def z_score(mse_sample):\n    return (mse_sample - reconstruction_scores_pd.mean())/reconstruction_scores_pd.std()\n
                    def z_score(mse_sample): return (mse_sample - reconstruction_scores_pd.mean())/reconstruction_scores_pd.std() In\u00a0[23]: Copied! 
                    mse_anomaly = mean_squared_error(input_anomaly[0], reconstructed_anomaly[0])\nmse_normal = mean_squared_error(input_sample[0], reconstructed_sample[0])\n\nz_score_anomaly = z_score(mse_anomaly)\nz_score_normal = z_score(mse_normal)\n\nprint(\"Anomaly Z-score %f\"% z_score_anomaly)\nprint(\"Normal Z-score %f\"% z_score_normal)\n
                    mse_anomaly = mean_squared_error(input_anomaly[0], reconstructed_anomaly[0]) mse_normal = mean_squared_error(input_sample[0], reconstructed_sample[0]) z_score_anomaly = z_score(mse_anomaly) z_score_normal = z_score(mse_normal) print(\"Anomaly Z-score %f\"% z_score_anomaly) print(\"Normal Z-score %f\"% z_score_normal) 
                    Anomaly Z-score 2.811887\nNormal Z-score -0.455488\n

                    We now have our anomaly detector... let's see how we can deploy it on our Kura\u2122-powered edge device.

                    In\u00a0[24]: Copied! 
                    !rm -rf ./tf_autoencoder_fp32/ && mkdir -p ./tf_autoencoder_fp32/1\n
                    !rm -rf ./tf_autoencoder_fp32/ && mkdir -p ./tf_autoencoder_fp32/1 In\u00a0[25]: Copied! 
                    !ls\n
                    !ls 
                    AD-EdgeAI.ipynb      requirements.txt     train-data-raw.csv\nREADME.md            saved_model          train-data-raw.csv.1\nimgs                 tf_autoencoder_fp32\n
                    In\u00a0[26]: Copied! 
                    cp -r ./saved_model/autoencoder tf_autoencoder_fp32/1/model.savedmodel\n
                    cp -r ./saved_model/autoencoder tf_autoencoder_fp32/1/model.savedmodel In\u00a0[27]: Copied! 
                    !tree tf_autoencoder_fp32\n
                    !tree tf_autoencoder_fp32 
                    tf_autoencoder_fp32\n\u2514\u2500\u2500 1\n    \u2514\u2500\u2500 model.savedmodel\n        \u251c\u2500\u2500 assets\n        \u251c\u2500\u2500 keras_metadata.pb\n        \u251c\u2500\u2500 saved_model.pb\n        \u2514\u2500\u2500 variables\n            \u251c\u2500\u2500 variables.data-00000-of-00001\n            \u2514\u2500\u2500 variables.index\n\n4 directories, 4 files\n

                    Now comes the hard part: we need to provide the model configuration (i.e. the config.pbtxt file). In the case of the autoencoder is pretty simple:

                    name: \"tf_autoencoder_fp32\"\nbackend: \"tensorflow\"\nmax_batch_size: 0\ninput [\n    {\n    name: \"INPUT0\"\n    data_type: TYPE_FP32\n    dims: [ 1, 10 ]\n    }\n]\noutput [\n    {\n    name: \"OUTPUT0\"\n    data_type: TYPE_FP32\n    dims: [ -1, 10 ]\n    }\n]\nversion_policy: { all { }}\ninstance_group [{ kind: KIND_CPU }]\n

                    Each model input and output must specify the name, data_type and dims. We already know all of these:

                    • name: corresponds to the layer name we've seen in the Model Training section. INPUT0 for the input and OUTPUT0 for the output.
                    • data_type: will be float since we didn't perform any quantization
                    • dims: is the shape of the in/out tensor. In this case it will correspond to an array with the same length as the number of features.

                    Other interesting parameters of this configuration are:

                    • backend: where we set the backend for the model. In this case it will be the Tensorflow backend
                    • name: the name of the model that must correspond to the name of the folder
                    • instance_group: where we set where we want the model to run. In this case we'll use the CPU since we're on a Raspberry Pi but keep in mind that Triton support multiple accelerators.

                    for a deep dive into the model configuration parameter take a look at the official documentation.

                    "},{"location":"tutorials/AD-EdgeAI/#edge-ai-anomaly-detection","title":"Edge AI Anomaly Detection\u00b6","text":""},{"location":"tutorials/AD-EdgeAI/#overview","title":"Overview\u00b6","text":"

                    This document contains the code and the instructions for our EclipseCON 2022 Talk: \"How to Train Your Dragon and Its Friends: AI on the Edge with Eclipse Kura\u2122\"

                    This notebook can also be viewed and ran on Google Colab.

                    In this example scenario we will collect the data provided by a Raspberry Pi Sense HAT using Eclipse Kura\u2122 and upload them to a Eclipse Kapua\u2122 instance. We will then download this data and train an AI-based anomaly detector using TensorFlow. Finally we will deploy the trained anomaly detector model leveraging Nvidia Triton\u2122 Inference Server and Eclipse Kura\u2122 integration.

                    We'll subdivide this example scenario in three main sections:

                    1. Data collection: in this section we'll discuss how to retrieve training data from the field leveraging Eclipse Kura\u2122 and Eclipse Kapua\u2122
                    2. Model building and training: we'll further divide this section in three subsections:
                      • Data processing: where we'll show how to explore our training data and manipulate them to make them suitable for training (feature selection, scaling and dataset splitting). This will provide us with the \"Preprocessing\" stage of the resulting AI data-processing pipeline
                      • Model training: where we'll discuss how we can create a simple Autoencoder in Tensorflow Keras and how to train it. This will provide us with the \"Inference\" stage of the AI pipeline
                      • Model evaluation: where we'll cover how can we extract the high level data from the model output and ensure the model was trained correctly. This will provide us with the \"Postprocessing\" stage of the AI pipeline
                    3. Model deployment: finally we will convert the model to make it suitable for running on Eclipse Kura\u2122 and Nvidia Triton\u2122 and deploy it on the edge.
                    "},{"location":"tutorials/AD-EdgeAI/#data-collection","title":"Data collection\u00b6","text":""},{"location":"tutorials/AD-EdgeAI/#overview","title":"Overview\u00b6","text":"

                    In this setup we'll leverage Eclipe Kura\u2122 and Kapua\u2122 for retrieving data from a Raspberry Pi Sense HAT and upload them to the cloud.

                    The Sense HAT is an add-on board for Raspberry Pi which provides an 8\u00d78 RGB LED matrix, a five-button joystick and includes the following sensors:

                    • Gyroscope
                    • Accelerometer
                    • Magnetometer
                    • Temperature
                    • Barometric pressure
                    • Humidity

                    "},{"location":"tutorials/AD-EdgeAI/#kuratm-installation","title":"Kura\u2122 installation\u00b6","text":"

                    Requirement: A Raspberry Pi 3/4 running the latest version of Raspberry Pi OS 64 bit.

                    To make everything work on the Raspberry Pi we need to use the develop version of the raspberry-pi-ubuntu-20-nn Kura installer (yes, I know we're installing the Ubuntu package on the Raspberry Pi OS but bear with me...) . You can do so by downloading the repo and building locally or by downloading a pre-built installer from the Kura CI artifacts.

                    Copy the resulting file kura_<version>_raspberry-pi-ubuntu-20_installer-nn.deb on the target device.

                    On the target device run the following commands:

                    sudo apt-get install -y wget apt-transport-https gnupg\n
                    sudo wget -O - https://packages.adoptium.net/artifactory/api/gpg/key/public | sudo apt-key add -\n
                    sudo echo \"deb https://packages.adoptium.net/artifactory/deb $(awk -F= '/^VERSION_CODENAME/{print$2}' /etc/os-release) main\" | sudo tee /etc/apt/sources.list.d/adoptium.list\n
                    sudo apt-get update && sudo apt-get install temurin-8-jdk chrony\n

                    Finally install Kura with:

                    sudo apt install ./kura_<version>_raspberry-pi-ubuntu-20_installer-nn.deb\n
                    "},{"location":"tutorials/AD-EdgeAI/#cloud-connection","title":"Cloud connection\u00b6","text":"

                    After setting up an Eclipse Kura\u2122 instance on the Raspberry Pi we'll need to connect it to an Eclipse Kapua\u2122 instance.

                    An excellent tutorial on how to deploy a Kapua\u2122 instance using Docker is available in the official repository. For the purpose of this tutorial we'll assume a Kapua\u2122 instance is already running and is available for connection from Kura\u2122

                    After setting up the Kapua\u2122 instance you can refer to the official Kura\u2122 documentation for connecting the Raspberry Pi to the Kapua\u2122 instance. For the remaining of this tutorial we'll assume a connection with the Kapua\u2122 was correctly established.

                    "},{"location":"tutorials/AD-EdgeAI/#data-publisher","title":"Data publisher\u00b6","text":"

                    To publish the collected data on the Cloud we'll need to create a new Cloud Publisher through the Kura\u2122 web interface. Go to \"Cloud Connections\" and press \"New Pub/Sub\", in the example below we'll call our new publisher KapuaSenseHatPublisher.

                    To keep things clean we'll create a new topic called SenseHat. To do so we'll move to the KapuaSenseHatPublisher configuration and we'll update the Application Topic field to A1/SenseHat

                    "},{"location":"tutorials/AD-EdgeAI/#sensehat-driver","title":"SenseHat driver\u00b6","text":"

                    Kura\u2122 provides a driver that allows to interact to a RaspberryPi SenseHat device using Kura Driver, Asset and Wires frameworks.

                    From the Kura\u2122 documentation:

                    Eclipse Kura introduces a model based on the concepts of Drivers and Assets to simplify the communication with the field devices attached to a gateway.

                    A Driver encapsulates the communication protocol and its configuration parameters, dealing with the low-level characteristics of the field protocol. It opens, closes and performs the communication with the end field device. It also exposes field protocol specific information that can be used by upper levels of abstraction to simplify the interaction with the end devices.

                    An Asset is a logical representation of a field device, described by a list of Channels. The Asset uses a specific Driver instance to communicate with the underlying device and it models a generic device resource as a Channel. A register in a PLC or a GATT Characteristic in a Bluetooth device are examples of Channels. In this way, each Asset has multiple Channels for reading and writing data from/to an Industrial Device.

                    The Kura Sense Hat driver requires a few changes on the Raspberry Pi:

                    • Configured SenseHat: see SenseHat documentation
                    • I2C interface should be unlocked using sudo raspi-config

                    As others Drivers supported by Kura, it is distributed as a deployment package on the Eclipse Marketplace. It consists of two packages:

                    • SenseHat Example Driver.
                    • SenseHat Support Library

                    We need to install both. Complete installation instructions are available here.

                    "},{"location":"tutorials/AD-EdgeAI/#driver-configuration","title":"Driver configuration\u00b6","text":"

                    We now need to configure the driver to access the sensors on the SenseHat. Move to the \"Driver and Assets\" section of the web UI and create a new driver. We'll call it driver-sensehat.

                    Then add a new Asset (which we'll call asset-sensehat) to this driver and configure it as per the screenshots below. We'll need a Channel for every sensor we want to access.

                    Refer to the following table for the driver parameters:

                    name type value.type resource ACC_X READ FLOAT ACCELERATION_X ACC_Y READ FLOAT ACCELERATION_Y ACC_Z READ FLOAT ACCELERATION_Z GYRO_X READ FLOAT GYROSCOPE_X GYRO_Y READ FLOAT GYROSCOPE_Y GYRO_Z READ FLOAT GYROSCOPE_Z HUMIDITY READ FLOAT HUMIDITY PRESSURE READ FLOAT PRESSURE TEMP_HUM READ FLOAT TEMPERATURE_FROM_HUMIDITY TEMP_PRESS READ FLOAT TEMPERATURE_FROM_PRESSURE

                    After correctly configuring it you should see the data in the \"Data\" page of the UI.

                    "},{"location":"tutorials/AD-EdgeAI/#wire-graph","title":"Wire graph\u00b6","text":"

                    Now that we have our Driver and Cloud Publisher ready we can put everything together with a Kura Wire Graph.

                    From Kura\u2122 documentation:

                    The Kura\u2122 Wires feature aims to simplify the development of IoT Edge Computing Applications leveraging reusable configurable components that can be wired together and which, eventually, allows configurable cooperation between these components.

                    In the dataflow programming model, the application logic is expressed as a directed graph (flow) where each node can have inputs, outputs, and independent processing units. There are nodes that only produce outputs and ones that only consume inputs, which usually represent the start and the end of the flow. The inner-graph nodes process the inputs and produce outputs for downstream nodes. The processing unit of a node executes independently and does not affect the execution of other nodes. Thus, the nodes are highly reusable and portable.

                    Move to the \"Wire Graph\" section of the UI. We'll need a graph with three components:

                    • A Timer which will dictate the sample rate at which we will collect data coming from the Sense Hat
                    • A WireAsset for the Sense Hat driver asset
                    • A Publisher for the Kapua publisher we created before.

                    The resulting Wire Graph will look like this:

                    "},{"location":"tutorials/AD-EdgeAI/#timer","title":"Timer\u00b6","text":"

                    Configure the timer such that it will poll the SenseHat each second, this can be done by setting the simple.interval to 1.

                    "},{"location":"tutorials/AD-EdgeAI/#wireasset","title":"WireAsset\u00b6","text":"

                    Select the driver-sensehat when creating the WireAsset. No further configuration is needed for this component.

                    "},{"location":"tutorials/AD-EdgeAI/#publisher","title":"Publisher\u00b6","text":"

                    Create a \"Publisher\" Wire component and select the KapuaSensehatPublisher from the target filter.

                    Don't forget to press \"Apply\" to start the Wire Graph!

                    "},{"location":"tutorials/AD-EdgeAI/#collect-the-data","title":"Collect the data\u00b6","text":"

                    At this point you should see data coming from the Rasperry Pi from the Kapua\u2122 console under the SenseHat topic.

                    You can download the .csv file directly from the console using the \"Export to CSV\" button.

                    "},{"location":"tutorials/AD-EdgeAI/#model-building-and-training","title":"Model building and training\u00b6","text":""},{"location":"tutorials/AD-EdgeAI/#overview","title":"Overview\u00b6","text":"

                    We will now use the data collected in the previous section to train an artificial neural network-based Anomaly Detector of our design. To this end we will use an Autoencoder model. To understand why we choose such model we need to understand how it works. From Wikipedia:

                    An autoencoder is a type of artificial neural network used to learn efficient codings of unlabeled data (unsupervised learning). The encoding is validated and refined by attempting to regenerate the input from the encoding. The autoencoder learns a representation (encoding) for a set of data, typically for dimensionality reduction, by training the network to ignore insignificant data (\u201cnoise\u201d).

                    Another application for autoencoders is anomaly detection. By learning to replicate the most salient features in the training data [...] the model is encouraged to learn to precisely reproduce the most frequently observed characteristics. When facing anomalies, the model should worsen its reconstruction performance. In most cases, only data with normal instances are used to train the autoencoder; in others, the frequency of anomalies is small compared to the observation set so that its contribution to the learned representation could be ignored. After training, the autoencoder will accurately reconstruct \"normal\" data, while failing to do so with unfamiliar anomalous data. Reconstruction error (the error between the original data and its low dimensional reconstruction) is used as an anomaly score to detect anomalies

                    In simple terms:

                    • The Autoencoder is a artificial neural network model that learns how to reconstruct the input data at the output.
                    • If trained on \"normal\" data, it learns to recontruct only normal data and fails to reconstruct anomalies.
                    • We can detect anomalies by computing the reconstruction error of the Autoencoder. If the error is above a certain threshold (which we will decide) the input sample is an anomaly.

                    Why did we choose this approach over others?

                    • The Autoencoder falls in the \"Unsupervised Learning\" category: it doesn't need labeled data to be trained i.e. we don't need to go through all the dataset and manually label the samples as \"normal\" or \"anomaly\" (Supervised Learning).
                    • Simpler data collection: we just need to provide it with the \"normal\" data. We don't need to artificially generate anomalies to train it on them.
                    "},{"location":"tutorials/AD-EdgeAI/#data-processing","title":"Data Processing\u00b6","text":"

                    We can now work on our .csv file downloaded from Kapua. For demonstration purposes an already available dataset is provided within this repository.

                    If you're running this notebook through Google Colab you'll need to download the dataset running the cell below:

                    "},{"location":"tutorials/AD-EdgeAI/#feature-selection","title":"Feature selection\u00b6","text":"

                    As you might notice there's some information in the dataset we don't care about and are not meaningful for our application:

                    • ID
                    • The various timestamps
                    • assetName which doesn't change

                    Then we can remove them from the dataset.

                    "},{"location":"tutorials/AD-EdgeAI/#feature-scaling","title":"Feature scaling\u00b6","text":"

                    AI models don't perform well when the input numerical attributes have very different scales. As you can see ACC_X, ACC_Y and ACC_Z range from 0 to 1, while the PRESSURE have far higher values.

                    There are two common ways to address this: normalization and standardization.

                    Normalization (a.k.a. Min-max scaling) shifts and rescales values so that they end up ranging from 0 to 1. This can be done by subtracting the min value and dividing by the max minus the min.

                    x' = $\\frac{x - min(x)}{max(x) - min(x)}$

                    Standardization makes the values of each feature in the data have zero-mean (when subtracting the mean in the numerator) and unit-variance. The general method of calculation is to determine the distribution mean and standard deviation for each feature. Next we subtract the mean from each feature. Then we divide the values (mean is already subtracted) of each feature by its standard deviation.

                    x' = $\\frac{x - avg(x)}{\\sigma}$

                    Fortunately for us scikit-learn library provides a function for both of them. In this case we'll use normalization because it works well for this application.

                    "},{"location":"tutorials/AD-EdgeAI/#train-test-split","title":"Train test split\u00b6","text":"

                    The only way to know how well a model will generalize to new data points is to try it on new data. To do so we split our data into two sets: the training set and the test set.

                    To do so we'll use a function from scikit-learn.

                    "},{"location":"tutorials/AD-EdgeAI/#model-training","title":"Model training\u00b6","text":"

                    We can now leverage the Keras API of Tensorflow for creating our Autoencoder and then train it on our dataset.

                    We'll design a neural network architecture such that we impose a bottleneck in the network which forces a compressed knowledge representation of the original input (also called the latent-space representation). If the input features were each independent of one another, this compression and subsequent reconstruction would be a very difficult task. However, if some sort of structure exists in the data (ie. correlations between input features), this structure can be learned and consequently leveraged when forcing the input through the network's bottleneck.

                    The bottleneck consists of reducing the number of neurons for each layer of the neural network up to a certain point, and then increase the number until the original input number is reached. This will result in a hourglass shape which is typical for the Autoencoders.

                    "},{"location":"tutorials/AD-EdgeAI/#build-the-autoencoder-model","title":"Build the Autoencoder model\u00b6","text":"

                    In this example we'll use a basic fully-connected autoencoder but keep in mind that autoencoders can be built with different classes of neural network (i.e. Convolutional Neural Networks, Recurrent Neural Networks etc).

                    "},{"location":"tutorials/AD-EdgeAI/#model-training","title":"Model training\u00b6","text":"

                    As we already explained, the autoencoder is a type of artificial neural network used to learn efficient codings of unlabeled data. We'll use that to reconstruct the input at the output. To train an autoencoder we don\u2019t need to do anything fancy, just throw the raw input data at it. Autoencoders are considered an unsupervised learning technique since they don\u2019t need explicit labels to train on but to be more precise they are self-supervised because they generate their own labels from the training data.

                    To train our neural network we need to have a performance metric to measure how well it is learning to reconstruct the data i.e. our loss function. The loss function in our example, which we need to minimize during our training, is the error between the input data and the data reconstructed by the autoencoder. We'll use the Mean Squared Error.

                    MSE = $\\frac{1}{n}\\sum_{i=1}^{n}{(Y_i - Y'_i)^2}$

                    Where:

                    • $n$: is the number of features (10 in our example)
                    • $Y_i$: is the original data point i.e. the input of the autoencoder
                    • $Y'_i$: is the reconstructed data point i.e. the output of the autoencoder

                    Before starting the training we need to set the hyperparameters). Hyperparameters are parameters whose values control the learning process and determine the values of model parameters that a learning algorithm ends up learning. These are the learning_rate, max_epochs, optimizer and the batch_size you see in the code snippet below. You may ask yourself how to set them, it all comes down to trial and error. Try tweaking them below and see how they affect the learning process...

                    A good explaination of their meaning can be found in the Keras documentation.

                    "},{"location":"tutorials/AD-EdgeAI/#model-evaluation","title":"Model evaluation\u00b6","text":"

                    We now have a model that reconstruct the input at the output... doesn't sounds really useful right?

                    Let's see it in action. Let's take a sample from the test set and run it through our autoencoder.

                    "},{"location":"tutorials/AD-EdgeAI/#model-deployment","title":"Model deployment\u00b6","text":"

                    To deploy our model on the target device we'll leverage Kura\u2122's newly added Nvidia\u2122 Triton Inferece Server integration.

                    The Nvidia\u2122 Triton Inference Server is an open-source inference service software that enables the user to deploy trained AI models from any framework on GPU or CPU infrastructure. It supports all major frameworks like TensorFlow, TensorRT, PyTorch, ONNX Runtime, and even custom framework backend. With specific backends, it is also possible to run Python scripts, mainly for pre-and post-processing purposes, and exploit the DALI building block for optimized operations.

                    For installation refer to the official Kura\u2122 and Triton documentation. For the rest of this tutorial we'll assume a Triton container is available on the target device. It can be simply installed with:

                    docker pull nvcr.io/nvidia/tritonserver:22.07-tf2-python-py3\n

                    We'll also need to install Kura\u2122's Triton bundles:

                    • Triton Server Component: for Kura-Triton integration
                    • AI Wire Component: for making the Triton Inference Server available through the Kura Wires as a Wire component.
                    "},{"location":"tutorials/AD-EdgeAI/#model-conversion","title":"Model conversion\u00b6","text":"

                    The first step in using Triton to serve your models is to place one or more models into a model repository i.e. a folder were the model are available for Triton to load. Depending on the type of the model and on what Triton capabilities you want to enable for the model, you may need to create a model configuration for the model. This configuration is a protobuf containing informations about runtime configuration and input/output shape accepted by the model.

                    For our autoencoder model we'll need three \"models\":

                    • A Preprocessor for performing the operations described in the \"Data processing\" section (Wire envelop translation, feature selection and scaling)
                    • The Autoencoder model we exported in the \"Model training\" section
                    • A Postprocessor for performing the operations described in the \"Model evaluation\" section (Reconstruction error computation)

                    To simplify the handling of these models and improve inference performance, we'll use an advanced feature of Triton wich is an Ensemble Model. From Triton official documentation:

                    An ensemble model represents a pipeline of one or more models and the connection of input and output tensors between those models. Ensemble models are intended to be used to encapsulate a procedure that involves multiple models, such as \"data preprocessing -> inference -> data postprocessing\". Using ensemble models for this purpose can avoid the overhead of transferring intermediate tensors and minimize the number of requests that must be sent to Triton.

                    "},{"location":"tutorials/AD-EdgeAI/#autoencoder","title":"Autoencoder\u00b6","text":"

                    As seen in the \"Model training\" section, our model is available as a Tensorflow SavedModel which can be simply loaded by the Triton Tensorflow backend. We just need to configure it properly.

                    We'll start by creating the following folder structure

                    tf_autoencoder_fp32\n\u251c\u2500\u2500 1\n\u2502   \u2514\u2500\u2500 model.savedmodel\n\u2502       \u251c\u2500\u2500 assets\n\u2502       \u251c\u2500\u2500 keras_metadata.pb\n\u2502       \u251c\u2500\u2500 saved_model.pb\n\u2502       \u2514\u2500\u2500 variables\n\u2502           \u251c\u2500\u2500 variables.data-00000-of-00001\n\u2502           \u2514\u2500\u2500 variables.index\n\u2514\u2500\u2500 config.pbtxt\n

                    This can be done by copying the model we saved in the Model Training section:

                    "},{"location":"tutorials/AD-EdgeAI/#preprocessor","title":"Preprocessor\u00b6","text":"

                    As discussed in the \"Data processing\" section, before providing the incoming data to the autoencoder, we need to perform feature selection and scaling. In addition to these responsibilites, the Preprocessor will need to perform a sort of serialization of the data to comply to the input shape accepted by the Autoencoder. This is due to how Kura manages the data running on Wires. More details can be found here.

                    To perform all of this we'll use the Python backend available in Triton.

                    As described in the previous section we will need to provide the following folder structure:

                    preprocessor\n\u251c\u2500\u2500 1\n\u2502   \u2514\u2500\u2500 model.py\n\u2514\u2500\u2500 config.pbtxt\n
                    "},{"location":"tutorials/AD-EdgeAI/#preprocessor-configuration","title":"Preprocessor Configuration\u00b6","text":"

                    As discussed in the official Kura documentation:

                    The AI wire component takes a WireEnvelope as an input, it processes its records and feeds them to the specified preprocessing or inference model.

                    ...

                    The models that manage the input and the output must expect a list of inputs such that:

                    • each input corresponds to an entry of the WireRecord properties
                    • the entry key will become the input name (e.g. in the case of an asset, the channel name becomes the tensor name)
                    • input shape will be [1]

                    Therefore for our input we'll have that each name corresponds to the names we've seen in the Data Collection section. The output needs to correspond to the input accepted by the model (i.e. INPUT0).

                    name: \"preprocessor\"\nbackend: \"python\"\n\ninput [\n  {\n    name: \"ACC_X\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\ninput [\n  {\n    name: \"ACC_Y\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\n ...\ninput [\n  {\n    name: \"TEMP_PRESS\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"INPUT0\"\n    data_type: TYPE_FP32\n    dims: [ 1, 10 ]\n  }\n]\ninstance_group [{ kind: KIND_CPU }]\n
                    "},{"location":"tutorials/AD-EdgeAI/#preprocessor-model","title":"Preprocessor Model\u00b6","text":"

                    As we've seen in the Data Processing section the Preprocessor is responsible for scaling the input features and serializing them in the tensor shape expected by the Autoencoder model.

                    This can be done with the following python script:

                    import numpy as np\nimport json\n\nimport triton_python_backend_utils as pb_utils\n\n\nclass TritonPythonModel:\n\n    def initialize(self, args):\n        self.model_config = model_config = json.loads(args['model_config'])\n\n        output0_config = pb_utils.get_output_config_by_name(\n            model_config, \"INPUT0\")\n\n        self.output0_dtype = pb_utils.triton_string_to_numpy(\n            output0_config['data_type'])\n\n    def execute(self, requests):\n        output0_dtype = self.output0_dtype\n\n        responses = []\n\n        for request in requests:\n            acc_x      = pb_utils.get_input_tensor_by_name(request, \"ACC_X\").as_numpy()\n            acc_y      = pb_utils.get_input_tensor_by_name(request, \"ACC_Y\").as_numpy()\n            acc_z      = pb_utils.get_input_tensor_by_name(request, \"ACC_Z\").as_numpy()\n            gyro_x     = pb_utils.get_input_tensor_by_name(request, \"GYRO_X\").as_numpy()\n            gyro_y     = pb_utils.get_input_tensor_by_name(request, \"GYRO_Y\").as_numpy()\n            gyro_z     = pb_utils.get_input_tensor_by_name(request, \"GYRO_Z\").as_numpy()\n            humidity   = pb_utils.get_input_tensor_by_name(request, \"HUMIDITY\").as_numpy()\n            pressure   = pb_utils.get_input_tensor_by_name(request, \"PRESSURE\").as_numpy()\n            temp_hum   = pb_utils.get_input_tensor_by_name(request, \"TEMP_HUM\").as_numpy()\n            temp_press = pb_utils.get_input_tensor_by_name(request, \"TEMP_PRESS\").as_numpy()\n\n            out_0 = np.array([acc_y, acc_x, acc_z, pressure, temp_press, temp_hum, humidity, gyro_x, gyro_y, gyro_z]).transpose()\n\n            #                  ACC_Y     ACC_X     ACC_Z    PRESSURE   TEMP_PRESS   TEMP_HUM   HUMIDITY    GYRO_X    GYRO_Y    GYRO_Z\n            min = np.array([-0.132551, -0.049693, 0.759847, 976.001709, 38.724998, 40.220890, 13.003981, -1.937896, -0.265019, -0.250647])\n            max = np.array([ 0.093099, 0.150289, 1.177543, 1007.996338, 46.093750, 48.355824, 23.506138, 1.923712, 0.219204, 0.671759])\n\n            # MinMax scaling\n            out_0_scaled = (out_0 - min)/(max - min)\n\n            # Create output tensor\n            out_tensor_0 = pb_utils.Tensor(\"INPUT0\",\n                                           out_0_scaled.astype(output0_dtype))\n\n            inference_response = pb_utils.InferenceResponse(\n                output_tensors=[out_tensor_0])\n            responses.append(inference_response)\n\n        return responses\n

                    Here there are two important things to note:

                    • The template we're using is taken from the Triton documentation and can be found here.
                    • The MinMax scaling must be the same we used in our training. For illustration purposes we wrote the min and max arrays we found in the Data Processing section but we could have serialized the MinMaxScaler using pickle instead.
                    "},{"location":"tutorials/AD-EdgeAI/#postprocessor","title":"Postprocessor\u00b6","text":"

                    As discussed in the \"Data processing\" section, to perform the anomaly detection step we need to compute the Mean Squared Error between the recontructed data and the actual input data. Due to this the configuration of the Postprocessor model will be somewhat more complicated than before: in addition to the output of the Autoencoder model we will need the output of the Preprocessor model.

                    To perform all of this we'll use the Python backend again.

                    As described in the previous section we will need to provide the following folder structure:

                    postprocessor\n\u251c\u2500\u2500 1\n\u2502   \u2514\u2500\u2500 model.py\n\u2514\u2500\u2500 config.pbtxt\n
                    "},{"location":"tutorials/AD-EdgeAI/#postprocessor-configuration","title":"Postprocessor Configuration\u00b6","text":"
                    name: \"postprocessor\"\nbackend: \"python\"\n\ninput [\n  {\n    name: \"RECONSTR0\"\n    data_type: TYPE_FP32\n    dims: [ 1, 10 ]\n  }\n]\ninput [\n  {\n    name: \"ORIG0\"\n    data_type: TYPE_FP32\n    dims: [ 1, 10 ]\n  }\n]\noutput [\n  {\n    name: \"ANOMALY_SCORE0\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"ANOMALY0\"\n    data_type: TYPE_BOOL\n    dims: [ 1 ]\n  }\n]\ninstance_group [{ kind: KIND_CPU }]\n

                    As we can see we have two inputs and two outputs:

                    • The first input tensor is the reconstruction performed by the autoencoder model
                    • The second input tensor is the original data (already scaled and serialized by the Preprocessor model)
                    • The first output is the anomaly score i.e. the reconstruction error between the original and the reconstructed data.
                    • The second output is a boolean representing whether the data constitute an anomaly or not

                    Let's see how this is computed by the Python model.

                    "},{"location":"tutorials/AD-EdgeAI/#postprocessor-model","title":"Postprocessor Model\u00b6","text":"
                    import numpy as np\nimport json\n\nimport triton_python_backend_utils as pb_utils\n\ndef z_score(mse):\n    return (mse - MEAN_MSE)/STD_MSE\n\n\nclass TritonPythonModel:\n\n    def initialize(self, args):\n        self.model_config = model_config = json.loads(args['model_config'])\n\n        output0_config = pb_utils.get_output_config_by_name(\n            model_config, \"ANOMALY_SCORE0\")\n        output1_config = pb_utils.get_output_config_by_name(\n            model_config, \"ANOMALY0\")\n\n        self.output0_dtype = pb_utils.triton_string_to_numpy(\n            output0_config['data_type'])\n        self.output1_dtype = pb_utils.triton_string_to_numpy(\n            output1_config['data_type'])\n\n    def execute(self, requests):\n        output0_dtype = self.output0_dtype\n        output1_dtype = self.output1_dtype\n\n        responses = []\n\n        for request in requests:\n            # Get input\n            x_recon = pb_utils.get_input_tensor_by_name(request, \"RECONSTR0\").as_numpy()\n            x_orig = pb_utils.get_input_tensor_by_name(request, \"ORIG0\").as_numpy()\n\n            # Get Mean square error between reconstructed input and original input\n            reconstruction_score = np.mean((x_orig - x_recon)**2, axis=1)\n            \n            #\u00a0Z-Score of Mean square error must be inside [-2; 2]\n            anomaly = np.array([z_score(reconstruction_score) < -2.0 or z_score(reconstruction_score) > 2.0])\n\n            # Create output tensors\n            out_tensor_0 = pb_utils.Tensor(\"ANOMALY_SCORE0\",\n                                           reconstruction_score.astype(output0_dtype))\n            out_tensor_1 = pb_utils.Tensor(\"ANOMALY0\",\n                                           anomaly.astype(output1_dtype))\n\n            inference_response = pb_utils.InferenceResponse(\n                output_tensors=[out_tensor_0, out_tensor_1])\n            responses.append(inference_response)\n\n        return responses\n

                    As you can see the script is simple:

                    • It gets the input tensors
                    • It computes the Mean Squared Error between the inputs (which is what we called the reconstruction error)
                    • It computes the Z-Score of the MSE computed for the current sample and flags it as an anomaly if it is farther than 2 standard deviations away from the average MSE.

                    Note: MEAN_MSE and STD_MSE are the mean value and the standard deviation of the Mean Squared Error computed on the test set and correspond to the reconstruction_scores_pd.mean() and reconstruction_scores_pd.std() we used in the previous section. We didn't set them as they change for every training performed on the Autoencoder. Be sure to set it to their proper values before trying this model on the Triton server!

                    "},{"location":"tutorials/AD-EdgeAI/#ensemble-model","title":"Ensemble model\u00b6","text":"

                    To make things easier for ourselves and improve performance we'll consolidate the AI pipeline into an Ensemble Model.

                    We will need to provide the following folder structure:

                    ensemble_pipeline\n\u251c\u2500\u2500 1\n\u2514\u2500\u2500 config.pbtxt\n

                    Note that the 1 folder is empty. The ensemble model essentially describe how to connect the models that belong to the processing pipeline.

                    Therefore we'll need to focus on the configuration only.

                    name: \"ensemble_pipeline\"\nplatform: \"ensemble\"\nmax_batch_size: 0\ninput [\n  {\n    name: \"ACC_X\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\ninput [\n  {\n    name: \"ACC_Y\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\n ...\ninput [\n  {\n    name: \"TEMP_PRESS\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"ANOMALY_SCORE0\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"ANOMALY0\"\n    data_type: TYPE_BOOL\n    dims: [ 1 ]\n  }\n]\nensemble_scheduling {\n  step [\n    {\n      model_name: \"preprocessor\"\n      model_version: -1\n      input_map{\n          key: \"ACC_X\"\n          value: \"ACC_X\"\n      }\n      input_map{\n          key: \"ACC_Y\"\n          value: \"ACC_Y\"\n      }\n       ...\n      input_map{\n          key: \"TEMP_PRESS\"\n          value: \"TEMP_PRESS\"\n      }\n      output_map {\n        key: \"INPUT0\"\n        value: \"preprocess_out\"\n      }\n    },\n    {\n      model_name: \"tf_autoencoder_fp32\"\n      model_version: -1\n      input_map {\n        key: \"INPUT0\"\n        value: \"preprocess_out\"\n      }\n      output_map {\n        key: \"OUTPUT0\"\n        value: \"autoencoder_output\"\n      }\n    },\n    {\n      model_name: \"postprocessor\"\n      model_version: -1\n      input_map {\n        key: \"RECONSTR0\"\n        value: \"autoencoder_output\"\n      }\n      input_map {\n        key: \"ORIG0\"\n        value: \"preprocess_out\"\n      }\n      output_map {\n        key: \"ANOMALY_SCORE0\"\n        value: \"ANOMALY_SCORE0\"\n      }\n      output_map {\n        key: \"ANOMALY0\"\n        value: \"ANOMALY0\"\n      }\n    }\n  ]\n}\n

                    The configuration is split in two main parts:

                    • The first is the usual configuration we've seen before: we describe what are the input and the output of our model. In this case the input will correspond to the input of the first model of the pipeline (the Preprocessor) and the output to the output of the last model of the pipeline (the Postprocessor)
                    • The second part describe how to map the input/output of the models within the pipeline

                    To better visualize the configuration we can look at the graph below.

                    "},{"location":"tutorials/AD-EdgeAI/#conversion-results","title":"Conversion results\u00b6","text":"

                    At this point we should have a folder structure that looks like this:

                    models\n\u251c\u2500\u2500 ensemble_pipeline\n\u2502\u00a0\u00a0 \u251c\u2500\u2500 1\n\u2502\u00a0\u00a0 \u2514\u2500\u2500 config.pbtxt\n\u251c\u2500\u2500 postprocessor\n\u2502\u00a0\u00a0 \u251c\u2500\u2500 1\n\u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u2514\u2500\u2500 model.py\n\u2502\u00a0\u00a0 \u2514\u2500\u2500 config.pbtxt\n\u251c\u2500\u2500 preprocessor\n\u2502\u00a0\u00a0 \u251c\u2500\u2500 1\n\u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u2514\u2500\u2500 model.py\n\u2502\u00a0\u00a0 \u2514\u2500\u2500 config.pbtxt\n\u2514\u2500\u2500 tf_autoencoder_fp32\n    \u251c\u2500\u2500 1\n    \u2502\u00a0\u00a0 \u2514\u2500\u2500 model.savedmodel\n    \u2502\u00a0\u00a0     \u251c\u2500\u2500 assets\n    \u2502\u00a0\u00a0     \u251c\u2500\u2500 keras_metadata.pb\n    \u2502\u00a0\u00a0     \u251c\u2500\u2500 saved_model.pb\n    \u2502\u00a0\u00a0     \u2514\u2500\u2500 variables\n    \u2502\u00a0\u00a0         \u251c\u2500\u2500 variables.data-00000-of-00001\n    \u2502\u00a0\u00a0         \u2514\u2500\u2500 variables.index\n    \u2514\u2500\u2500 config.pbtxt\n
                    "},{"location":"tutorials/AD-EdgeAI/#kura-deployment","title":"Kura Deployment\u00b6","text":"

                    We can now move our pipeline to the target device for inference on the edge.

                    We want to perform anomaly detection in real time, directly within the edge device, using the same data we used to collect for our training.

                    "},{"location":"tutorials/AD-EdgeAI/#triton-component-configuration","title":"Triton component configuration\u00b6","text":"

                    To do so we need to copy the models folder on the target device. For this example we'll use the /home/pi/models path.

                    We can now move to the Kura web UI and create a new Triton Server Container Service component instance. The complete documentation can be found here.

                    In this example we'll call it TritonContainerService.

                    Then we'll need to configure it to run our models. Move to the TritonContainerService configuration interface and set the following parameters:

                    • Image name/Image tag: use the name and tag of the Triton container image you installed. We're using nvcr.io/nvidia/tritonserver:22.07-tf2-python-py3 in this example.
                    • Local model repository path: in our example is /home/pi/models
                    • Inference Models: we'll need to load all the models of the pipeline so: preprocessor,postprocessor,tf_autoencoder_fp32,ensemble_pipeline
                    • Optional configuration for the local backends: tensorflow,version=2 since Tensorflow 2 is the only available Tensorflow backend in the Triton container image we're using.

                    You can leave everything else as default.

                    Once you press the \"Apply\" button Kura will create a new container from the Triton image we set and spin up the service with our models loaded.

                    pi@raspberrypi:~ $ docker ps\nCONTAINER ID   IMAGE                                              COMMAND                  CREATED          STATUS          PORTS                                                                                                                             NAMES\n4deae2857b6f   nvcr.io/nvidia/tritonserver:22.07-tf2-python-py3   \"tritonserver --mode\u2026\"   13 seconds ago   Up 11 seconds   0.0.0.0:4000->8000/tcp, :::4000->8000/tcp, 0.0.0.0:4001->8001/tcp, :::4001->8001/tcp, 0.0.0.0:4002->8002/tcp, :::4002->8002/tcp   tritonserver-kura\n

                    Note: if no container is created check that the \"Container Orchestration Service\" is enabled in the Kura UI. Full documentation for the service can be found here.

                    Note: if you see an error in the logs like \"Internal: Unable to initialize shared memory key 'triton_python_backend_shm_region_2' to requested size (67108864 bytes). If you are running Triton inside docker, use '--shm-size' flag to control the shared memory region size. Each Python backend model instance requires at least 64MBs of shared memory.\", you can update the default shared memory size allocated by the Docker daemon. Go to /etc/docker/daemon.json, set \"default-shm-size\": \"200m\" and restart the Docker daemon with: sudo systemctl restart docker.

                    "},{"location":"tutorials/AD-EdgeAI/#wire-graph","title":"Wire Graph\u00b6","text":"

                    Finally we can move to the \"Wire Graph\" UI and create the AI component (in the Emitters/Receiver menu) for interfacing with the Triton instance we just created. We'll call it Triton in this example.

                    We just need to change two parameter in the configuration:

                    • InferenceEngineService Target Filter: we need to select the TritonContainerService we created at the step above
                    • inference.model.name: Since we're using an ensemble pipeline we need only that as our inference model.

                    The resulting wire graph is the following:

                    And that's it! We should now see the anomaly detection results coming to Kapua in addition to the SenseHat data.

                    "},{"location":"tutorials/AD-EdgeAI/#complete-example","title":"Complete Example\u00b6","text":"

                    A similar but more complete example of the feature presented in this notebook is available in the official Kura\u2122 repository containing all the code and the configuration needed to make it work.

                    Give it a try!

                    "}]} \ No newline at end of file +{"config":{"lang":["en"],"separator":"[\\s\\-]+","pipeline":["stopWordFilter"]},"docs":[{"location":"","title":"Home","text":""},{"location":"#welcome-to-the-eclipse-kuratm-documentation","title":"Welcome to the Eclipse Kura\u2122 Documentation","text":"

                    The emergence of an Internet of Thing (IoT) service gateway model running modern software stacks, operating on the edge of an IoT deployment as an aggregator and controller, has opened up the possibility of enabling enterprise level technologies to IoT gateways.

                    Advanced software frameworks, which abstract and isolate the developer from the complexity of the hardware and the networking sub-systems, re-define the development and re-usability of integrated hardware and software solutions.

                    Eclipse Kura is an Eclipse IoT project that provides a platform for building IoT gateways. It is a smart application container that enables remote management of such gateways and provides a wide range of APIs for allowing you to write and deploy your own IoT application.

                    Kura runs on top of the Java Virtual Machine (JVM) and leverages OSGi, a dynamic component system for Java, to simplify the process of writing reusable software building blocks. Kura APIs offer easy access to the underlying hardware including serial ports, GPS, watchdog, USB, GPIOs, I2C, etc. It also offer OSGI bundle to simplify the management of network configurations, the communication with IoT servers, and the remote management of the gateway.

                    Kura components are designed as configurable OSGi Declarative Service exposing service API and raising events. While several Kura components are in pure Java, others are invoked through JNI and have a dependency on the Linux operating system.

                    Kura comes with the following services:

                    • I/O Services
                      • Serial port access through javax.comm 2.0 API or OSGi I/O connection
                      • USB access and events through javax.usb, HID API, custom extensions
                      • Bluetooth access through javax.bluetooth or OSGi I/O connection
                      • Position Service for GPS information from an NMEA stream
                      • Clock Service for the synchronization of the system clock
                      • Kura API for GPIO/PWM/I2C/SPI access
                    • Data Services
                      • Store and forward functionality for the telemetry data collected by the gateway and published to remote servers.
                      • Policy-driven publishing system, which abstracts the application developer from the complexity of the network layer and the publishing protocol used. Eclipse Paho and its MQTT client provide the default messaging library used.
                    • Cloud Services
                      • Easy to use API layer for IoT application to communicate with a remote server. In addition to simple publish/subscribe, the Cloud Service API simplifies the implementation of more complex interaction flows like request/response or remote resource management. Allow for a single connection to a remote server to be shared across more than one application in the gateway providing the necessary topic partitioning.
                    • Configuration Service
                      • Leverage the OSGi specifications ConfigurationAdmin and MetaType to provide a snapshot service to import/export the configuration of all registered services in the container.
                    • Remote Management
                      • Allow for remote management of the IoT applications installed in Kura including their deployment, upgrade and configuration management. The Remote Management service relies on the Configuration Service and the Cloud Service.
                    • Networking
                      • Provide API for introspects and configure the network interfaces available in the gateway like Ethernet, Wifi, and Cellular modems.
                    • Watchdog Service
                      • Register critical components to the Watchdog Service, which will force a system reset through the hardware watchdog when a problem is detected.
                    • Web administration interface
                      • Offer a web-based management console running within the Kura container to manage the gateway.
                    • Drivers and Assets
                      • A unified model is introduced to simplify the communication with the devices attached to the gateway. The Driver encapsulates the communication protocol and its configuration parameters, while the Asset, which is generic across Drivers, models the information data channels towards the device. When an Asset is created, a Mirror of the device is automatically available for on-demand read and writes via Java APIs or via Cloud through remote messages.
                    • Wires
                      • Offers modular and visual data flow programming tool to define data collection and processing pipelines at the edge by simply selecting components from a palette and wiring them together. This way users can, for example, configure an Asset, periodically acquire data from its channels, store them in the gateway, filter or aggregate them using powerful SQL queries, and send the results to the Cloud. The Eclipse Kura Marketplace is a repository from which additional Wires components can be installed into your Kura runtime with a simple drag-and-drop.

                    "},{"location":"administration/application-management/","title":"Application Management","text":""},{"location":"administration/application-management/#package-installation","title":"Package Installation","text":"

                    After developing your application and generating a deployment package that contains the bundles to be deployed (refer to the Development section for more information), you may install it on the gateway using the Packages option in the System area of the Kura Gateway Administration Console as shown below.

                    Upon a successful installation, the new component appears in the Services list (shown as the Heater example in these screen captures). Its configuration may be modified according to the defined parameters as shown the Heater display that follows.

                    "},{"location":"administration/application-management/#eclipse-kura-marketplace","title":"Eclipse Kura Marketplace","text":"

                    Kura allows the installation and update of running applications via the Eclipse Kura Marketplace. The Packages page has, in the top part of the page a section dedicated to the Eclipse Kura Marketplace.

                    Dragging an application reference taken from the Eclipse Kura Marketplace to the specific area of the Kura Web Administrative Console will instruct Kura to download and install the corresponding package, as seen below:

                    Warning

                    If the installation from the Eclipse Marketplace fails, it can be for the lack of the correct certificates. In this case, import the certificate in the SSLKeystore from the Certificate List tab under the Security section. For more details about the procedure see here.

                    If the bundle is an official add-on for Eclipse Kura, the following certificate has to be imported:

                    -----BEGIN CERTIFICATE-----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\ncTW2rRm8jFiLm1kf0/iOL7/ddw0yZQAUMthU\n-----END CERTIFICATE-----\n

                    that has the following description:

                    Common Name: *.eclipse.org\nSubject Alternative Names: *.eclipse.org, eclipse.org\nOrganization: Eclipse.org Foundation, Inc.\nLocality: Ottawa\nState: Ontario\nCountry: CA\nValid From: September 10, 2023\nValid To: October 11, 2024\nIssuer: DigiCert TLS RSA SHA256 2020 CA1, DigiCert Inc Write review of DigiCert\nKey Size: 4096 bit\nSerial Number: 082c4248d6f88acce634f3427e551c19\n

                    If the bundle is not an official one and it is not hosted by Eclipse, retrieve the certificate with this command: 

                    openssl s_client -showcerts -connect <download_link>:443\n

                    and import it in the SSLKeystore.

                    "},{"location":"administration/application-management/#package-signature","title":"Package Signature","text":"

                    Once the selected application deployment package (dp) file is installed, it will be listed in the Packages page and detailed with the name of the deployment package, the version and the signature status. The value of the signature field can be true if all the bundles contained in the deployment package are digitally signed, or false if at least one of the bundles is not signed.

                    "},{"location":"administration/directory-layout/","title":"Directory Layout","text":"

                    This section describes the default Kura directory layout that is created upon installation. The default installation directory is as follows:

                    /opt/eclipse\n

                    The kura sub-directory is a logical link on the actual Kura release directory:

                    kura -> /opt/eclipse/kura_3.0.0_raspberry-pi-2\nkura_3.0.0_raspberry-pi-2\n
                    "},{"location":"administration/directory-layout/#kura-file-structure","title":"Kura File Structure","text":"

                    The idea behind the Kura file and folder structure is to separate user and framework configuration files, that is files that can be modified by the user to customize Kura behavior and files that are used by Kura to persist configurations. Moreover, some files are generated at runtime by Kura (i.e. database) and they are kept in specific folders.

                    The user, console, log4j and packages directories contain files that can be modified by the user (i.e. the configuration for the logging or custom Kura properties). The framework folder keeps the configuration files used by Kura and that shouldn't be modified by the user. The data directory is used to persist files that are generated by Kura. Finally, the plugins folder contains all the jar files needed by Kura. All of the Kura files are located within /opt/eclipse/kura folder using the structure shown in the following table:

                    Directory Description bin Scripts that start Kura. console This folder contains files that are used to customise the Kura Web UI appearance. data Data files generated by the Kura runtime. data/persistance Embedded Database files. packages Deployment package files that are not part of the standard Kura framework, but are installed at a later time. framework Configuration data for Kura framework. The user shouldn't directly modify these files. log Log file from the latest Kura installation. log4j Logger framework configuration plugins All of the libraries and Kura specific jar files needed for the framework execution. user Configuration files generated by the user or by Kura at runtime. These files can be modified by the user to customise the Kura behavior. user/snapshots XML snapshot files; up to 10 successive configurations including the original. user/security Files used by Kura to configure security. .data Backup files needed to restore factory configuration"},{"location":"administration/directory-layout/#log-files","title":"Log Files","text":"

                    Kura regularly updates two log files in the /var/log directory:

                    • /var/log/kura-console.log - stores the standard console output of the application. This log file contains the eventual errors that are thrown upon Kura startup.

                    • /var/log/kura.log - stores all of the logging information from Kura bundles. The logger levels are defined in the log4j.xml configuration file as shown below:

                    /opt/eclpse/kura/user/log4j.xml\n

                    The default logger level in this file is set to INFO. This level may be modified for the whole application or for a specific package as shown in the following example:

                    <Loggers>\n    <Logger name=\"org.eclipse\" level=\"info\" additivity=\"false\">\n        <AppenderRef ref=\"RollingFile\"/>\n    </Logger>\n\n    <Logger name=\"org.eclipse.kura.net.admin\" level=\"debug\" additivity=\"false\">\n        <AppenderRef ref=\"RollingFile\"/>\n    </Logger>\n\n    <Root level=\"info\">\n        <AppenderRef ref=\"RollingFile\"/>\n    </Root>\n</Loggers>\n

                    In this example, the logger level is set to DEBUG only for the net.admin bundle. Additionally, more specific, properties may be defined as required for your particular logging needs. The logger levels are hierarchical, so that those in a deeper level of the hierarchy will apply; otherwise, the more general logger level will override them.

                    Once the logger levels are modified as needed and the log4j.xml configuration file is saved, Kura automatically loads the new configuration. By default Kura checks the file every 30 seconds.

                    "},{"location":"administration/remote-management-kapua/","title":"Remote Management with Eclipse Kapua","text":""},{"location":"administration/remote-management-kapua/#built-in-services-management","title":"Built-in Services Management","text":"

                    This section describes the remote management of devices running Kura via Eclipse Kapua Console. The Eclipse Kapua Web Console provides the administration tools used for the management of the built-in services exposed by Kura.

                    To remotely manage a device running Kura through the Eclipse Kapua Web Console, select the desired device from the Devices Table of the console and open the Configuration tab as shown in the screen capture below. Please refer to the Built-in Services section for a description of the available Services and their configuration parameters.

                    "},{"location":"administration/remote-management-kapua/#installation-of-a-new-application","title":"Installation of a New Application","text":"

                    As described in Application Management, a new application embedded in a deployment package can be deployed and configured using Eclipse Kapua Console.

                    To do so, select a connected device and click on the Packages tab. Then, click on Install/Upgrade. The Install New Package window opens allowing the deployment package to be installed from an URL as shown in the screen capture below. Once installed, the new application parameters may be modified in the same way as the Built-in Services. Click on the Configuration tab to see the service that corresponds to your application.

                    "},{"location":"administration/remote-management-kapua/#snapshots","title":"Snapshots","text":"

                    As described in Snapshot Management, the overall Kura configuration, including the new installed applications, is stored in a snapshot xml file. The Eclipse Kapua Console also provides options to Download, Upload and Apply, or Rollback snapshots as shown in the screen capture below.

                    "},{"location":"administration/remote-management-kapua/#remote-command-execution-from-eclipse-kapua-web-console","title":"Remote Command Execution from Eclipse Kapua Web Console","text":"

                    The Eclipse Kapua Console provides the ability to run system commands directly on the device. Refer to Command Service for details on how to configure this service in Kura.

                    It is also possible to send a script to execute using the File option of the Command tab in Eclipse Kapua Console as shown in the screen capture below. This script must be compressed into a zip file with the eventual associated resource files. Once the file is selected, click Execute.

                    The zip file is sent embedded in an MQTT message on the device. The Command Service in the device stores the file in /tmp, unzips it, and tries to execute a shell script if one is present. Note that in this case, the Execute parameter cannot be empty; a simple command, such as \"ls -l /tmp\", may be entered.

                    "},{"location":"administration/snapshot-management/","title":"Snapshot Management","text":"

                    The overall configuration of Kura is stored in an XML file called a snapshot. This file includes all of the parameters for every service running in Kura. The original configuration file is named snapshot_0.xml. This section describes how snapshots may be used.

                    Each time a configuration change is made to one of the Kura components, a new XML file is created using the naming convention snapshot_[time as a long integer].xml. The nine most recent snapshots are saved, as well as the original snapshot 0.

                    "},{"location":"administration/snapshot-management/#how-to-access-snapshots","title":"How to Access Snapshots","text":"

                    To display snapshots using the Gateway Administration Console, select Settings from the System area, and then click on the Snapshots tab. The following three operations are available: Download, Upload and Apply, and Rollback.

                    "},{"location":"administration/snapshot-management/#how-to-use-snapshots","title":"How to Use Snapshots","text":""},{"location":"administration/snapshot-management/#download","title":"Download","text":"

                    The Download option provides the ability to save a snapshot file onto your computer. This file may then be edited, uploaded back to the device, or transferred to another equivalent device.

                    Starting from Kura 5.1, the snapshot can be downloaded in two formats:

                    • XML: The original XML snapshot format.
                    • JSON: The JSON format used by the Configuration v2 REST APIs and CONF-V2 request handler. For example the downloaded snapshot can be used as is as a body for the PUT/configurableComponents/configurations/_update request. The takeSnapshot parameter specified by the CONF-V2 request is missing from the downloaded JSON file, if that parameter is not specified, a new snapshot will be created by default.

                    Pressing the Download button will trigger a dialog that allows choosing the desired format.

                    "},{"location":"administration/snapshot-management/#upload-and-apply","title":"Upload and Apply","text":"

                    The Upload and Apply option provides the ability to import an XML file from your computer and upload it onto the device. This function updates every service in Kura with the parameters defined in the XML file.

                    Warning

                    Carefully select the file to be uploaded. An incorrect file may crash Kura and make it unresponsive.

                    "},{"location":"administration/snapshot-management/#rollback","title":"Rollback","text":"

                    The Rollback option provides the ability to restore the system to a previous configuration.

                    "},{"location":"administration/system-component-inventory/","title":"System Component Inventory","text":"

                    The Framework has the capability to report locally and to the associated cloud platform the list of currently installed components and their associated properties.

                    This feature allows, locally and remotely, the system administrator to know which components are installed into the target device and the associated versions. The feature is particularly important for a system administrator because allows to identify vulnerable components and allows immediate actions in response.

                    From the local Kura Web UI, the list of system components is available in the System Packages tab of the Device section. Once selected, the user will get the list of all the system installed components.

                    The component's inventory list is available also via REST APIs and, with the same contract, from the cloud. The Mqtt contract defined for this component is available here

                    "},{"location":"cloud-api/app-dev-guide/","title":"Application developer guide","text":"

                    This guide will provide information on how an application developer can leverage the new Generic Cloud Services APIs, in order to be able to properly use the CloudPublisher/CloudSubscriber API, publish a message, being notified of message delivery and of connection status changes.

                    The Kura ExamplePublisher will be used as a reference.

                    The application should bind itself to a CloudPublisher or CloudSubscriber instance, this can be done in different ways, such as using OSGi ServiceTrackers or by leveraging the Declarative Service layer.

                    The recommended way to perform this operation is choosing the latter and allowing the user to customize the service references through component configuration.

                    If the component metatype and definition are structured as described below, the Kura Web UI will show a dedicated widget in component configuration that helps the user to pick compatible CloudPublisher or CloudSubscriber instances.

                    1. Write component definition

                      The first step involves declaring the Publisher or Subscriber references in component definition:

                        <scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\"\n    name=\"org.eclipse.kura.example.publisher.ExamplePublisher\"\n    activate=\"activate\"\n    deactivate=\"deactivate\"\n    modified=\"updated\"\n    enabled=\"true\"\n    immediate=\"true\"\n    configuration-policy=\"require\">\n  <implementation class=\"org.eclipse.kura.example.publisher.ExamplePublisher\"/>\n\n   <!-- If the component is configurable through the Kura ConfigurationService, it must expose a Service. -->\n   <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.example.publisher.ExamplePublisher\"/>\n   <service>\n       <provide interface=\"org.eclipse.kura.configuration.ConfigurableComponent\"/>\n   </service>\n\n   <reference name=\"CloudPublisher\"\n           policy=\"static\"\n           bind=\"setCloudPublisher\"\n           unbind=\"unsetCloudPublisher\"\n           cardinality=\"0..1\"\n           interface=\"org.eclipse.kura.cloudconnection.publisher.CloudPublisher\"/>\n   <reference name=\"CloudSubscriber\"\n           policy=\"static\"\n           bind=\"setCloudSubscriber\"\n           unbind=\"unsetCloudSubscriber\"\n           cardinality=\"0..1\"\n           interface=\"org.eclipse.kura.cloudconnection.subscriber.CloudSubscriber\"/>\n  </scr:component>\n

                      The snipped above shows the definition of Kura ExamplePublisher, this component is capable of sending and receiving messages, and therefore defines two references, the first to a CloudPublisher and the second to a CloudSubscriber.

                      In order to allow the user to customize the bindings at runtime, the target attribute of the references should not be specified at this point in component definition, as it will be set by the Web UI.

                      Reference cardinality should be use the 0..1 or 0..n form, as it is not guaranteed that the references will point to a valid service instance during all the lifetime of the application component. For example, references can not be bound if the application has not been configured by the user yet or if the target service is missing.

                    2. Create component metatype

                      Application metatype should declare an AD for each Publisher/Subscriber reference declared in component definition:

                        <MetaData xmlns=\"http://www.osgi.org/xmlns/metatype/v1.2.0\" localization=\"en_us\">\n      <OCD id=\"org.eclipse.kura.example.publisher.ExamplePublisher\"\n           name=\"ExamplePublisher\"\n           description=\"Example of a Configuring Kura Application.\">\n\n       <!-- ... -->\n\n        <AD id=\"CloudPublisher.target\"\n            name=\"CloudPublisher Target Filter\"\n            type=\"String\"\n            cardinality=\"0\"\n            required=\"true\"\n            default=\"(kura.service.pid=changeme)\"\n            description=\"Specifies, as an OSGi target filter, the pid of the Cloud Publisher used to publish messages to the cloud platform.\">\n        </AD>\n\n        <AD id=\"CloudSubscriber.target\"\n            name=\"CloudSubscriber Target Filter\"\n            type=\"String\"\n            cardinality=\"0\"\n            required=\"true\"\n            default=\"(kura.service.pid=changeme)\"\n            description=\"Specifies, as an OSGi target filter, the pid of the Cloud Subscriber used to receive messages from the cloud platform.\">\n        </AD>\n\n        <!-- ... -->\n\n        </OCD>\n    <Designate pid=\"org.eclipse.kura.example.publisher.ExamplePublisher\" factoryPid=\"org.eclipse.kura.example.publisher.ExamplePublisher\">\n        <Object ocdref=\"org.eclipse.kura.example.publisher.ExamplePublisher\"/>\n    </Designate>\n  </MetaData>\n

                      It is important to respect the following rules for some of the AD attributes:

                      • id

                      This attribute must have the following form:

                      <reference name>.target\n

                      where <reference name> should match the value of the name attribute of the corresponding reference in component definition.

                      • required must be set to true

                      • default must not be empty and must be a valid OSGi filter.

                      The Web UI will renderer a dedicated widget for picking CloudPublisher and CloudSubscriber instances:

                    3. Write the bind/unbind methods in applicaiton code

                      The last step involves defining some bind...()/unbind...() methods with a name that matches the values of the bind/unbind attributes of the references in component definition.

                      public void setCloudPublisher(CloudPublisher cloudPublisher) {\n...\n}\n\npublic void unsetCloudPublisher(CloudPublisher cloudPublisher) {\n...\n}\n\npublic void setCloudSubscriber(CloudSubscriber cloudSubscriber) {\n...\n}\n\npublic void unsetCloudSubscriber(CloudSubscriber cloudSubscriber) {\n...\n}\n

                      As stated above, since reference cardinality is declared as 0.., the application must be prepared to handle the cases where references are not satisfied, and therefore CloudPublisher and CloudSubscriber instances are not available.

                    4. Publish a message

                      If a CloudPublisher instance is bound, the application can publish messages using its publish() method:

                        if (nonNull(this.cloudPublisher)) {\n    KuraMessage message = new KuraMessage(payload);\n    String messageId = this.cloudPublisher.publish(message);\n  }\n

                    5. Receiving messages using a CloudSubscriber

                      In order to receive messages from a CloudSubscriber, the application must implement and attach a CloudSubscriberListener to it.

                      This can be done for example during CloudSubscriber binding:

                        public class ExamplePublisher implements CloudSubscriberListener, ... {\n\n  ...\n\n   public void setCloudSubscriber(CloudSubscriber cloudSubscriber) {\n    this.cloudSubscriber = cloudSubscriber;\n    this.cloudSubscriber.registerCloudSubscriberListener(ExamplePublisher.this);\n    ...\n  }\n\n  public void unsetCloudSubscriber(CloudSubscriber cloudSubscriber) {\n    this.cloudSubscriber.unregisterCloudSubscriberListener(ExamplePublisher.this);\n    ...\n    this.cloudSubscriber = null;\n  }\n\n  ...\n\n  @Override\n  public void onMessageArrived(KuraMessage message) {\n    logReceivedMessage(message);\n  }\n\n  ...\n\n  }\n

                      The CloudSubscriber will invoke the onMessageArrived() method when new messages are received.

                    6. Receiving connection state notifications

                      If an application is interested in cloud connection status change events (connected, disconnected, etc), it can implement and attach a CloudConnectionListener to a CloudPublisher or CloudSubscriber instance.

                        public class ExamplePublisher implements CloudConnectionListener, ... {\n\n  ...\n\n  public void setCloudPublisher(CloudPublisher cloudPublisher) {\n    this.cloudPublisher = cloudPublisher;\n    this.cloudPublisher.registerCloudConnectionListener(ExamplePublisher.this);\n    ...\n  }\n\n  public void unsetCloudPublisher(CloudPublisher cloudPublisher) {\n    this.cloudPublisher.unregisterCloudConnectionListener(ExamplePublisher.this);\n    ...\n    this.cloudPublisher = null;\n  }\n\n  public void setCloudSubscriber(CloudSubscriber cloudSubscriber) {\n    this.cloudSubscriber = cloudSubscriber;\n    ...\n    this.cloudSubscriber.registerCloudConnectionListener(ExamplePublisher.this);\n  }\n\n  public void unsetCloudSubscriber(CloudSubscriber cloudSubscriber) {\n    ...\n    this.cloudSubscriber.unregisterCloudConnectionListener(ExamplePublisher.this);\n    this.cloudSubscriber = null;\n  }\n\n  ...\n\n  @Override\n  public void onConnectionEstablished() {\n    logger.info(\"Connection established\");\n  }\n\n  @Override\n  public void onConnectionLost() {\n    logger.warn(\"Connection lost!\");\n  }\n\n  @Override\n  public void onDisconnected() {\n    logger.warn(\"On disconnected\");\n  }\n\n  ...\n\n  }\n

                    7. Receiving message delivery notifications

                      If an application is interested in message confirmation events and the underlying cloud connection supports it, it can implement and attach a CloudDeliveryListener to a CloudPublisher instance.

                        public class ExamplePublisher implements CloudDeliveryListener, ... {\n\n  ...\n\n  public void setCloudPublisher(CloudPublisher cloudPublisher) {\n    this.cloudPublisher = cloudPublisher;\n    ...\n    this.cloudPublisher.registerCloudDeliveryListener(ExamplePublisher.this);\n  }\n\n  public void unsetCloudPublisher(CloudPublisher cloudPublisher) {\n    ...\n    this.cloudPublisher.registerCloudDeliveryListener(ExamplePublisher.this);\n    this.cloudPublisher = null;\n  }\n\n  ...\n\n  @Override\n  public void onMessageConfirmed(String messageId) {\n    logger.info(\"Confirmed message with id: {}\", messageId);\n  }\n\n  ...\n\n  }\n

                      The CloudSubscriber will invoke the onMessageConfirmed() method when a published message is confirmed.

                      In order to determine which message has been confirmed, the provided messageId can be compared with the id returned by the publish() call that published the message.

                      Please note that if the underlying cloud connection is not able to provide message confirmation for the published message, the id returned by publish() will be null.

                    "},{"location":"cloud-api/built-in-cloud/","title":"Built-in Cloud Services","text":"

                    Eclipse Kura provides by default a set of services used to connect to a cloud platform. The following sections describe the services and how to configure them.

                    The CloudService API is deprecated since Kura 4.0. The functionalities provided by CloudService are now provided by the CloudEndpoint and CloudConnectionManager service interfaces. See the section describing the Kura 4.0 cloud connection model for more details.

                    The DataService and MqttDataTrasport APIs are not deprecated in Kura 4.0.

                    "},{"location":"cloud-api/built-in-cloud/#cloudservice","title":"CloudService","text":"

                    The CloudService provides an easy-to-use API layer for the M2M application to communicate with a remote server. It operates as a decorator for the DataService, providing add-on features over the management of the transport layer.

                    In addition to simple publish/subscribe, the CloudService API simplifies the implementation of more complex interaction flows like request/response or remote resource management. The CloudService abstracts the developers from the complexity of the transport protocol and payload format used in the communication.

                    The CloudService allows a single connection to a remote server to be shared across more than one application in the gateway providing the necessary topic partitioning. Its functions include:

                    • Adds application topic prefixes to allow for a single remote server connection to be shared across applications.

                    • Defines a payload data model and provides default encoding/decoding serializers.

                    • Publishes life-cycle messages when the device and applications start and stop.

                    To use this service, select the CloudServices option located in the System area and select the CloudService tab as shown in the screen capture below.

                    The CloudService provides the following configuration parameters:

                    • device.display-name - defines the device display name given by the system. (Required field.)
                    • device.custom-name - defines the custom device display name if the device.display-name parameter is set to \"Custom\".
                    • topic.control-prefix - defines the topic prefix for system messages.
                    • encode.gzip - defines if the message payloads are sent compressed.
                    • republish.mqtt.birth.cert.on.gps.lock - when set to true, forces a republish of the MQTT Birth Certificate when a GPS correct position lock is received. The device is then registered with its real coordinates. (Required field.)
                    • republish.mqtt.birth.cert.on.modem.detect - when set to true, forces a republish of the MQTT Birth Certificate when the service receives a modem detection event. (Required field.)
                    • enable.default.subscriptions - when set to true, the gateway will not be remotely manageable.
                    • payload.encoding - Specify the message payload encoding. The possible options are Kura Protobuf and Simple JSON.

                    The default CloudService implementations publishes the following lifecycle messages:

                    1. BIRTH message: sent immediately when device is connected to the cloud platform. The BIRTH message is published with priority 0 and QoS 1;
                    2. DISCONNECT message: sent immediately before device is disconnected from the cloud platform. The DISCONNECT message is published with priority 0 and QoS 0;
                    3. delayed BIRTH message: sent when new cloud application handler becomes available, a DP is installed or removed, GPS position is locked (can be disabled), or when modem status changes (can be disabled). These messages are cached for 30 seconds before sending. If no other message of such type arrives the message is sent; otherwise the BIRTH is cached and the timeout restarts. This is to avoid sending multiple messages when the framework starts. The message is published with priority 0 and QoS 1;
                    "},{"location":"cloud-api/built-in-cloud/#mqttdatatransport","title":"MqttDataTransport","text":"

                    The MqttDataTransport service provides the ability to connect to a remote broker, publish messages, subscribe to topics, receive messages on the subscribed topics, and disconnect from the remote message broker. To use this service, select the MqttDataTransport option located in the System area and select the CloudService tab as shown in the screen capture below.

                    The MqttDataTransport service provides the following configuration parameters:

                    • broker-url - defines the URL of the MQTT broker to connect to. (Required field.)
                    • topic.context.account-name - defines the name of the account to which the device belongs.
                    • username and password - define the username and password that have been assigned to the device by the account administrator (generally username is account-name_broker). (Required field.)
                    • client-id - defines the identifier of the MQTT client representing the device when connecting to the MQTT broker. If left empty, it is automatically determined by the client software as the MAC address of the main network interface (in general numbers and uppercase letters without ':'). This identifier has to be unique within your account.
                    • keep-alive - defines the \"keep alive\" interval measured in seconds. It specifies the maximum amount of time that should pass without communication between the client and the server. The client will ensure that at least one message travels across the network within each keep alive period. In the absence of a data-related message during this time period, the client will send a very small MQTT \"ping\" message that the server will acknowledge. The keep alive interval enables the client to detect when the server is no longer available without having to wait for the long TCP/IP timeout. (Required field.)
                    • timeout - sets the timeout used for all interactions with the MQTT broker. (Required field.)
                    • clean-session - controls the behavior of both the client and the server at the time of connect and disconnect. When this parameter is set to true, the state information is discarded at connect and disconnect; when set to false, the state information is maintained. (Required field.)
                    • lwt parameters - define the MQTT \"Last Will and Testament\" (LWT) settings for the client. In the event that the client unexpectedly loses its connection to the server, the server publishes the LWT message (lwt.payload) to the LWT topic on behalf of the client. This allows other clients (subscribed to the LWT topic) to be made aware that the client has disconnected. LWT parameters that may be configured include:
                    • lwt.topic
                    • lwt.payload
                    • lwt.qos
                    • lwt.retain
                    • in-flight.persistence - defines the storage type where in-flight messages are persisted across reconnections. They may be stored in memory, or in a file on the disk. (Required field.)
                    • protocol-version - defines the MQTT Protocol version to be used. This value may be 3.1 or 3.1.1.
                    • ssl parameters - defines the SSL configuration. SSL parameters that may be configured include:
                    • ssl.hostname.verification
                    • ssl.default.cipherSuites
                    • ssl.certificate.alias
                    "},{"location":"cloud-api/cloud-conn-dev-guide/","title":"Cloud connection developer guide","text":"

                    This guide will provide information on how a cloud connection developer can leverage the new Generic Cloud Services APIs.

                    As reference, this guide will use the Eclipse IoT WG namespace implementation bundle available here

                    "},{"location":"cloud-api/cloud-conn-dev-guide/#implement-cloudendpoint-and-cloudconnectionmanager","title":"Implement CloudEndpoint and CloudConnectionManager","text":"

                    In order to leverage the new APIs, and be managed by the Kura Web UI, the Cloud Connection implementation bundle must implement CloudEndpont and, if log-lived connections are supported, the CloudConnectionManager interface must be implemented as well.

                    The ending class should be something as follows:

                    public class CloudConnectionManagerImpl\n        implements CloudConnectionManager, CloudEndpoint, ... {\n\n    @Override\n    public boolean isConnected() {\n        ...\n    }\n\n    @Override\n    public void connect() throws KuraConnectException {\n        ...\n    }\n\n    @Override\n    public void disconnect() {\n        ...\n    }\n\n    @Override\n    public Map<String, String> getInfo() {\n        ...\n    }\n\n    @Override\n    public void registerCloudConnectionListener(CloudConnectionListener cloudConnectionListener) {\n        ...\n    }\n\n    @Override\n    public void unregisterCloudConnectionListener(CloudConnectionListener cloudConnectionListener) {\n        ...\n    }\n}\n

                    A corresponding component definition should be provided in the OSGI-INF folder exposing the implementation of CloudEndpoint and CloudConnectionManager interfaces.

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\" activate=\"activate\" configuration-policy=\"require\" deactivate=\"deactivate\" enabled=\"true\" immediate=\"true\" modified=\"updated\" name=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\">\n   <implementation class=\"org.eclipse.kura.internal.cloudconnection.eclipseiot.mqtt.cloud.CloudConnectionManagerImpl\"/>\n   <service>\n      <provide interface=\"org.eclipse.kura.configuration.ConfigurableComponent\"/>\n      <provide interface=\"org.eclipse.kura.cloudconnection.CloudConnectionManager\"/>\n      <provide interface=\"org.eclipse.kura.cloudconnection.CloudEndpoint\"/>\n      <!-- ... -->\n   </service>\n\n   <!-- ... -->\n\n   <property name=\"kura.ui.service.hide\" type=\"Boolean\" value=\"true\"/>\n   <property name=\"kura.ui.factory.hide\" type=\"String\" value=\"true\"/>\n</scr:component>\n

                    In order to be fully compliant with the Web UI requirements, the CloudConnection component definition should provide two properties kura.ui.service.hide and kura.ui.factory.hide to hide the component from the left side part of the UI dedicated to display the services list.

                    "},{"location":"cloud-api/cloud-conn-dev-guide/#implement-the-cloudconnectionfactory-interface","title":"Implement the CloudConnectionFactory interface","text":"

                    The CloudConnectionFactory is responsible to manage the cloud connection instance lifecycle by creating the CloudEndpoint instance and all the required services needed to publish or receive messages from the cloud platform.

                    As a reference, please have a look at the CloudConnectionFactory defined for the Eclipse IoT WG namespace implementation.

                    In particular, the getFactoryPid() method returns the PID of the CloudEndpoint factory. The createConfiguration() method receives a PID that will be used for the instantiation of the CloudEndpoint and for all the related services required to communicate with the cloud platform. In the example above, the factory creates the CloudEnpoint, and a DataService and MqttDataTransport instances internally needed to communicate with a remote cloud platform. As can be seen here, the CloudEndpoint instance configuration is enriched with the reference to the CloudConnectionFactory that generated it. This step is required by the Web UI in order to properly relate the instances with the corresponding factories.

                    The deleteConfiguration() method deletes from the framework the CloudEndpoint instance identified by the PID passed as argument and all the related services. In the Eclipse IOT WG example, it not only deletes the CloudEndpoint instance but also the corresponding DataService and MqttDataTransport instances.

                    The getStackComponentsPids() method return a List of String that represent the kura.service.pid of the configurable components that are part of a Cloud Connection instance. This method is used by the Web UI to get the list of configurable components that need to be displayed to the end user.

                    The getManagedCloudConnectionPids() method will return the list of kura.service.pid of all the CloudEndpoints managed by the factory.

                    The factory component definition should be defined as follows: 

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\" name=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.DefaultCloudConnectionFactory\">\n   <implementation class=\"org.eclipse.kura.internal.cloudconnection.eclipseiot.mqtt.cloud.factory.DefaultCloudConnectionFactory\"/>\n   <reference bind=\"setConfigurationService\" cardinality=\"1..1\" interface=\"org.eclipse.kura.configuration.ConfigurationService\" name=\"ConfigurationService\" policy=\"static\" unbind=\"unsetConfigurationService\"/>\n   <service>\n      <provide interface=\"org.eclipse.kura.cloudconnection.factory.CloudConnectionFactory\"/>\n   </service>\n   <property name=\"osgi.command.scope\" type=\"String\" value=\"kura.cloud\"/>\n   <property name=\"osgi.command.function\" type=\"String\">\n      createConfiguration\n   </property>\n   <property name=\"kura.ui.csf.pid.default\" type=\"String\" value=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\"/>\n   <property name=\"kura.ui.csf.pid.regex\" type=\"String\" value=\"^org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager(\\-[a-zA-Z0-9]+)?$\"/>\n   <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.DefaultCloudConnectionFactory\"/>\n</scr:component>\n

                    In particular, it should expose in the service section the fact that the factory implements org.eclipse.kura.cloudconnection.factory.CloudConnectionFactory 

                       <service>\n      <provide interface=\"org.eclipse.kura.cloudconnection.factory.CloudConnectionFactory\"/>\n   </service>\n

                    Important properties that need to be specified to have a better Web UI experience are the following: 

                    <property name=\"kura.ui.csf.pid.default\" type=\"String\" value=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\"/>\n<property name=\"kura.ui.csf.pid.regex\" type=\"String\" value=\"^org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager(\\-[a-zA-Z0-9]+)?$\"/>\n
                    those allow to specify the form of the expected PID that the end user should provide when creating a new cloud connection.

                    "},{"location":"cloud-api/cloud-conn-dev-guide/#provide-a-cloudpublisher-implementation","title":"Provide a CloudPublisher implementation","text":"

                    To provide a CloudPublisher implementation, other than implementing CloudPublisher API in a java class, the developer must provide a component definition in the OSGI-INF folder that should be like the following:

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\" activate=\"activate\" configuration-policy=\"require\" deactivate=\"deactivate\" enabled=\"true\" immediate=\"true\" modified=\"updated\" name=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher\">\n   <implementation class=\"org.eclipse.kura.internal.cloudconnection.eclipseiot.mqtt.cloud.publisher.CloudPublisherImpl\"/>\n   <service>\n      <provide interface=\"org.eclipse.kura.cloudconnection.publisher.CloudPublisher\"/>\n      <provide interface=\"org.eclipse.kura.configuration.ConfigurableComponent\"/>\n   </service>\n   <property name=\"cloud.connection.factory.pid\" type=\"String\" value=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\"/>\n   <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher\"/>\n   <property name=\"kura.ui.service.hide\" type=\"Boolean\" value=\"true\"/>\n   <property name=\"kura.ui.factory.hide\" type=\"String\" value=\"true\"/>\n   <property name=\"kura.ui.csf.pid.default\" type=\"String\" value=\"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher\"/>\n   <property name=\"kura.ui.csf.pid.regex\" type=\"String\" value=\"^org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher(\\-[a-zA-Z0-9]+)?$\"/>\n</scr:component>\n

                    As can be seen in the previous snippet, the Publisher exposes itself in the framework as a ConfigurableComponent and as a CloudPublisher.

                    The component definition must contain the following well-known properties:

                    • cloud.connection.factory.pid: this property must be set to the kura.service.pid of the factory that created the cloud connection which the publisher belongs. It is used by the Web UI to enforce that the correct cloud publisher implementation is used in a specific cloud endpoint.
                    • kura.ui.service.hide: as specified before for the Cloud Endpoint
                    • kura.ui.factory.hide: as specified before for the Cloud Endpoint
                    • kura.ui.csf.pid.default: as specified before for the Cloud Factory. It is an optional property.
                    • kura.ui.csf.pid.regex: as specified before for the Cloud Factory. It is an optional property.

                    The relation between the CloudPublisher instance and the CloudEndpoint is defined by a configuration property set by the Web UI at CloudPublisher creation.

                    "},{"location":"cloud-api/cloud-conn-dev-guide/#provide-a-cloudsubscriber-implementation","title":"Provide a CloudSubscriber implementation","text":"

                    The CloudSubscriber implementation and component definition is similar to the one described for the CloudPublisher.

                    "},{"location":"cloud-api/cloud-conn-dev-guide/#implement-requesthandler-support","title":"Implement RequestHandler support","text":"

                    In order to support Command and Control, the cloud connection bundle should provide a service that registers itself as RequestHandlerRegistry. In this way all the RequestHandler instances could be able to discover the different Registry and subscribe for command and control messages received from the cloud platform. As an example, for the Eclipse IoT WG bundle, the CloudEndpoint registers itself also as RequestHandlerRegistry.

                    "},{"location":"cloud-api/overview/","title":"Overview","text":"

                    This section describes the new cloud related concepts and APIs introduced in Kura 4.0.

                    "},{"location":"cloud-api/overview/#motivations","title":"Motivations","text":"

                    Before Kura 4.0, Cloud APIs were quite tied to Kapua messaging conventions and to the MQTT protocol. Defining custom stacks that support other cloud platforms was possible, but the resulting implementations were affected by the following limitations:

                    • The legacy APIs assume that the underlying messaging protocol is MQTT. This assumption spans across all API layers, from the low level MQTTDataTrasport to the high level CloudClient. This makes quite difficult to implement cloud stacks that use other protocols like AMQP or HTTP.

                    • The CloudClient API, which was the recommended way for applications to interface with a cloud stack, enforce the following MQTT topic structure: 

                      #account-name/#device-id/#app-id/<app-topic>\n
                      This topic hierarchy, which is Kapua related, might be too restrictive or too loose for other cloud platforms, for example:

                      • The Eclipse IoT working group namespace allows authenticated devices to omit the accont-name and device-id parameters in the topic. Moreover, telemetry, alert and event message topics must start respectively the t/, a/ and e/ prefixes. Adhering to this specification is not possible for a cloud stack that implements the legacy APIs.
                      • The AWS cloud platform allows publishing on virtually any topic, using a CloudClient would be quite restrictive in this case. A way for overcoming this limitation for an application might be using the DataService layer directly, adversely affecting portability.
                      • The Cumulocity cloud platform allows publishing only on a limited set of topics, and most of the application generated information is placed in the payload encoded in CSV. Using CloudClient in this case makes difficult for the cloud stack to enforce that the messages are published on the correct topics. Moreover, the cloud stack in this case must also convert from KuraPayload to CSV, this can be currently achieved only by introducing rigid conversion rules, that might not be enough to support all message formats.

                    • Applications that use the current APIs are not portable across cloud platforms. For example if an appliaction intends to publish on Cumulocity or AWS, it should be probably aware of the underlying cloud platform.

                    "},{"location":"cloud-api/overview/#concepts","title":"Concepts","text":"

                    The main interfaces of the new set of APIs and their interactions are depicted in the diagram below:

                    As shown in the above diagram new APIs introduce the concept of Cloud Connection, a set of related services that allow to manage the communication to/from a remote cloud platform.

                    The services that compose a Cloud Connection can implement the following cloud-specific interfaces:

                    • CloudEndpoint (required): Each Cloud Connection is identified by a single instance of CloudEndpoint that implements low level specificities for the communication with the remote cloud platform.

                    • CloudConnectionManager (optional): Exposes methods that allow to manage long-lived connections. The implementor of CloudEndpoint can implement this interface as well if the cloud platform support long-lived connections (for example by using the MQTT protocol).

                    • RequestHandlerRegistry (optional): Manages the command and control functionalities if supported by the cloud platform.

                    • CloudPublisher (optional): Allows applications to publish messages to the cloud platform in a portable way.

                    • CloudSubscriber (optional): Allows applications to receive messages from the cloud platform in a portable way.

                    • CloudConnectionFactory (required): Manages the lifecycle of Cloud Connections.

                    A Cloud Connection can also include services that do not provide any of the interfaces above but compose the internal implementation.

                    "},{"location":"cloud-api/overview/#cloudendpoint","title":"CloudEndpoint","text":"

                    Every Cloud Connection must contain a single CloudEndpoint instance. The kura.service.pid of the CloudEndpoint identifies the whole Cloud Connection.

                    The CloudEndpoint provides some low level methods that can be used to interact with the remote cloud platform.

                    For example the interface provides the publish() and subscribe() methods that allow to publish or receive messages from the cloud platform in form of KuraMessages. Those methods are designed for internal use and are not intended to be used by end-user applications.

                    The format of the KuraMessage provided to/received from a CloudEndpoint is implementation specific: the CloudEndpoint expects some properties to be set in the KuraMessage to be able to correctly publish a message (e.g. MQTT topic). These properties are specified by the particular CloudEndpoint, and should be documented by the implementor.

                    The recommended way for applications to publish and receive messages involves using the Publisher and Subscriber APIs described below. If an application directly uses the methods above, it will lose portability and will be tied to the specific Cloud Connection implementation.

                    "},{"location":"cloud-api/overview/#cloudconnectionmanager","title":"CloudConnectionManager","text":"

                    If the messaging protocol implemented by a Cloud Connection supports long-lived connection, then its CloudEndpoint can also implement and provide the CloudConnectionManager interface.

                    This interface exposes some methods that can be used to manage the connection like connect(), disconnect() and isConnected(); it also supports monitoring connection state using the CloudConnectionListener interface.

                    "},{"location":"cloud-api/overview/#publishers-and-subscribers","title":"Publishers and Subscribers","text":"

                    The limitations of the current model described above are addressed by the introduction of the CloudPublisher and CloudSubscriber APIs, that replace the CloudClient as the recommended interface between applications and cloud stacks. CloudPublisher and CloudSubscriber are service interfaces defined as follows:

                    public interface CloudPublisher {\n\n    public String publish(KuraMessage message) throws KuraException;\n\n    public void registerCloudConnectionListener(CloudConnectionListener cloudConnectionListener);\n\n    public void unregisterCloudConnectionListener(CloudConnectionListener cloudConnectionListener);\n\n    public void registerCloudDeliveryListener(CloudDeliveryListener cloudDeliveryListener);\n\n    public void unregisterCloudDeliveryListener(CloudDeliveryListener cloudDeliveryListener);\n\n}\n
                    public interface CloudSubscriber {\n\n    public void registerCloudSubscriberListener(CloudSubscriberListener listener);\n\n    public void unregisterCloudSubscriberListener(CloudSubscriberListener listener);\n\n    public void registerCloudConnectionListener(CloudConnectionListener cloudConnectionListener);\n\n    public void unregisterCloudConnectionListener(CloudConnectionListener cloudConnectionListener);\n\n}\n
                    "},{"location":"cloud-api/overview/#cloudpublisher","title":"CloudPublisher","text":"

                    The CloudPublisher interface should be used by applications for publishing messages using the single publish() method. This method accepts a KuraMessage which is basically a KuraPayload that can be enriched with metadata.

                    The main difference with the CloudClient APIs is that the publish() method does not require the application to specify any information related to message destinations. This allows to write portable applications that are unaware of the low level details of the destination cloud platform, such as the message format and the transport protocol.

                    "},{"location":"cloud-api/overview/#cloudsubscriber","title":"CloudSubscriber","text":"

                    An application designed to receive messages from the cloud must now attach a listener (CloudSubscriberListener) to a CloudSubscriber instance.

                    In this case, the message source cannot be specified by the application but is defined by the subscriber instance, in the same way as the CloudPublisher defines destination for published messages.

                    The low level details necessary for message delivery and reception (e.g. the MQTT topic and the conversion between KuraMessage and the message format used on the wire) are managed by the publisher/subscriber, typically these details are stored in the service configuration.

                    While in the previous model an application was responsible to actively obtain a CloudClient instance from a CloudService, now the relation between the application and a CloudPublisher or CloudSubscriber instance is represented as an OSGi service reference. Applications should allow the user to modify this reference in configuration, making it easy to switch between different cloud publisher/subscriber instances and different cloud platforms.

                    Publisher/subscriber instances are now typically instantiated and configured by the end user using the Web UI.

                    Publisher/subscriber instances are related to a CloudEnpoint instance using an OSGi service reference encoded in well known configuration property specified in the APIs (CloudConnectionConstants.CLOUD_ENDPOINT_SERVICE_PID_PROP_NAME). This allows the user to create those instances in a dedicated section of the Web UI.

                    "},{"location":"cloud-api/overview/#command-and-control","title":"Command and control","text":"

                    Another field in which the current Kura cloud related APIs can be generalized is related to command and control. In the previous model this aspect was covered by the Cloudlet APIs that are now replaced by RequestHandler APIs

                    Legacy Cloudlet implementations are defined by extending a base class, Cloudlet, which takes care of handling the invocation of the doGet(), doPut(), doPost() ... methods, and of correlating request and response messages. Messages were sent and received through a CloudClient.

                    More explicitly, Cloudlet only works with control topics whose structure is 

                    $EDC/<account-name>/<device-id>/<app-id>/<method>/<resource-path>\n
                    and also expects the identifier of the sender and the correlation identifier in the KuraPayload.

                    In the previous model, there is no way for a cloud stack implementor to customize the aspects above, which are hardcoded in the Cloudlet base class.

                    The new model delegates these aspects to some component of the cloud stack, and requires applications that want to support command and control to register themselves as RequestHandler to a RequestHandlerRegistry instance.

                    In order to ease porting old applications to the new model, some of the concepts of the old Cloudlet APIs are still present, this can be seen by looking at the RequestHandler interface definition:

                    public interface RequestHandler {\n\n    public KuraMessage doGet(RequestHandlerContext context, KuraMessage reqMessage) throws KuraException;\n\n    public KuraMessage doPut(RequestHandlerContext context, KuraMessage reqMessage) throws KuraException;\n\n    public KuraMessage doPost(RequestHandlerContext context, KuraMessage reqMessage) throws KuraException;\n\n    public KuraMessage doDel(RequestHandlerContext context, KuraMessage reqMessage) throws KuraException;\n\n    public KuraMessage doExec(RequestHandlerContext context, KuraMessage reqMessage) throws KuraException;\n}\n

                    A RequestHandler invocation involves the following parameters:

                    Request parameters:

                    • method: (GET, PUT, POST, DEL, EXEC) that identifies the RequestHandler method to be called
                    • request message: A set of key-value pairs and/or binary body contained in the KuraPayload wrapped inside the KuraMessage.
                    • resources: A List<String> of positional parameters available under the well known args key in the provided KuraMessage properties.

                    Response parameters:

                    • response message: A set of key-value pairs and/or binary body contained in the KuraPayload wrapped inside the returned KuraMessage.
                    • status: A numeric code reporting operation completion state, determined as follows:
                    • 200, if RequestHandler methods returns without throwing exceptions.
                    • 400, if RequestHandler methods throws a KuraException with KuraErrorCode == BAD_REQUEST
                    • 404, if RequestHandler methods throws a KuraException with KuraErrorCode == NOT_FOUND
                    • 500, if RequestHandler methods throws a KuraException with other error codes.
                    • exception message: The message of the KuraException thrown by the RequestHandler methods, if any.
                    • exception stack trace: The stack trace of the KuraException thrown by the RequestHandler methods, if any.

                    The parameters above are the same involved in current Cloudlet calls. The request id and requester client id parameters are no longer part of the API, because are related to the to the way Kapua correlates requests and response. In the new API, request and response identifiers are not specified and not forwarded to the Cloudlet, this allows the CloudletService implementation to adopt the platform specific conventions for message correlation.

                    The Cloudlet parameters must be present in the request and response messages encoded in some format. A user that intends to call a Kura Cloudlet, for example through platform-specific REST APIs must be aware of these parameters. The user must supply request parameters in request message and must be able to extract response data from received message. The actual encoding of these parameters inside the messages depends on the particular platform.

                    The fact that set of Cloudlet parameters are roughly the same involved in current Cloudlet calls allows existing Cloudlet based applications to continue to work without changes to the protocol.

                    "},{"location":"cloud-api/overview/#cloud-connection-lifecycle","title":"Cloud Connection lifecycle","text":"

                    CloudEndpoint instance lifecycle is managed by a CloudConnectionFactory instance. A cloud connection implementor must register a CloudConnectionFactory instance in the framework that is responsible of creating and destroying the CloudEndpoint instances.

                    The CloudConnectionFactory will be typically invoked by the Web UI, and is defined as follows:

                    public interface CloudConnectionFactory {\n\n    public static final String KURA_CLOUD_CONNECTION_FACTORY_PID = \"kura.cloud.connection.factory.pid\";\n\n    public String getFactoryPid();\n\n    public void createConfiguration(String pid) throws KuraException;\n\n    public List<String> getStackComponentsPids(String pid) throws KuraException;\n\n    public void deleteConfiguration(String pid) throws KuraException;\n\n    public Set<String> getManagedCloudConnectionPids() throws KuraException;\n\n}\n

                    The createConfiguration() and deleteConfiguration() methods are responsible of creating/destroying a CloudEndpoint instance, specified by the provided kura.service.pid, and all the related services.

                    The getManagedCloudConnectionPids() returns the set of kura.service.pid managed by the factory.

                    The getStackComponentsPids(String pid) returns the list of the kura.service.pids of the ConfigurableComponents that are associated with the CloudEndpoint with the specified pid. The Web Ui will render the configuration of those components in separated tabs, in the dedicated CloudConnections section.

                    "},{"location":"cloud-api/overview/#backwards-compatibility","title":"Backwards compatibility","text":"

                    In order to ease the transition to the new model, legacy APIs like CloudService and CloudClient are still supported in Kura 4.0.0, even if deprecated.

                    The default Kapua oriented CloudService implementation is still available and can be used by legacy applications without changes. The default CloudService instance in Kura 4.0 also implements the new CloudEndpoint and CloudConnectionManager interfaces.

                    "},{"location":"cloud-api/user-guide/","title":"User guide","text":"

                    This guide will illustrate the steps required for configuring an application that uses the new Cloud Connection APIs to publish messages to the Kapua platform.

                    The involved steps are the following

                    1. Instantiation and configuration of the Cloud Connection.
                    2. Instantiation and configuration of a Publisher.
                    3. Binding an application to the Publisher.
                    "},{"location":"cloud-api/user-guide/#creating-a-new-cloud-connection","title":"Creating a new Cloud Connection","text":"

                    1. Open the Cloud Connections section of the Web UI:

                    2. Create a new Cloud Connection

                      1. Click on the New Connection button

                      2. Enter a new unique identifier in the Cloud Connection Service PID field. The identifier must be a valid kura.service.pid and, in case of a Kapua Cloud Connection, it must start with the org.eclipse.kura.cloud.CloudService- prefix. A valid identifier can be org.eclipse.kura.cloud.CloudService-KAPUA. As an alternative it is possible to reconfigure the existing org.eclipse.kura.cloud.CloudService Cloud Connection.

                      3. Configure the MQTTDataTrasport service.

                        Click on the MQTTDataTrasport-KAPUA tab and fill the parameters required for establishing the MQTT connection:

                        • Broker-url
                        • Topic Context Account-Name
                        • Username
                        • Password

                      4. Configure the DataService-KAPUA service.

                        In order to enable automatic connection, set the Connect Auto-on-startup parameter to true

                    "},{"location":"cloud-api/user-guide/#creating-and-configuring-a-new-publisher","title":"Creating and configuring a new Publisher","text":"

                    1. Select to the connection to be used from the list.

                    2. Click on the New Pub/Sub button.

                    3. Select the type of component to be created, from the Available Publisher/Subscriber factories drop down list, in order to create a Publisher select the org.eclipse.kura.cloud.publisher.CloudPublisher entry.

                    4. Enter an unique kura.service.pid identifier in the New Publisher/Subscriber PID field.

                    5. Click Apply, you should see the publisher configuration

                    6. Select and configure the newly created publisher instance, and then click Apply

                    "},{"location":"cloud-api/user-guide/#binding-an-application-to-a-publisher","title":"Binding an application to a publisher","text":"

                    1. Select the application instance configuration

                    2. Find the configuration entry that represents a Publisher reference.

                    3. Click on the Select available targets link and select the desired Publisher instance to bind to.

                    4. Click on Apply

                    "},{"location":"cloud-platform/kura-aws-cloud/","title":"Amazon AWS IoT\u2122 platform","text":""},{"location":"cloud-platform/kura-aws-cloud/#overview","title":"Overview","text":"

                    This section provides a guide on connecting an Eclipse Kura\u2122 device to the Amazon AWS IoT platform.

                    "},{"location":"cloud-platform/kura-aws-cloud/#prerequisites","title":"Prerequisites","text":"
                    • In order to connect a device to Amazon AWS IoT Kura version 1.3 or greater is required.
                    • An Amazon AWS account is also needed.
                    "},{"location":"cloud-platform/kura-aws-cloud/#device-registration","title":"Device registration","text":"

                    The first step involves the registration of the new device on AWS, this operation can be done using the AWS Web Console or with the AWS CLI command line tool, in this guide the Web based console will be used.

                    "},{"location":"cloud-platform/kura-aws-cloud/#1-access-the-aws-iot-management-console","title":"1. Access the AWS IoT management console.","text":"

                    This can be done by logging in the AWS console and selecting IoT Core from the services list, in the Internet of Things section.

                    "},{"location":"cloud-platform/kura-aws-cloud/#2-create-a-default-policy-for-the-device","title":"2. Create a default policy for the device.","text":"

                    This step involves creating a default policy for the new device, skip if an existing policy is already available.

                    Access the main screen of the console and select Secure -> Policies from the left side menu and then press the Create button, in the top right area of the screen.

                    Fill the form as follows and then press the Create button:

                    • Action -> iot:Connect, iot:Publish, iot:Subscribe, iot:Receive, iot:UpdateThingShadow, iot:GetThingShadow, iot:DeleteThingShadow
                    • Resource ARN -> *
                    • Effect -> Allow

                    This will create a policy that allows a device to connect to the platform, publish/subscribe on any topic and manage its thing shadow.

                    "},{"location":"cloud-platform/kura-aws-cloud/#3-register-a-new-device","title":"3. Register a new device.","text":"

                    Devices on the AWS IoT platform are called things, in order to register a new thing select Manage -> Things from the left side menu and then press the Create button, in the top right section of the screen. Select Create a single thing.

                    Enter a name for the new device and then press the Next button, from now on kura-gateway will be used as the device name.

                    "},{"location":"cloud-platform/kura-aws-cloud/#4-create-a-new-certificate-for-the-device","title":"4. Create a new certificate for the device.","text":"

                    The AWS IoT platform uses SSL mutual authentication, for this reason it is necessary to download a public/private key pair for the device and a server certificate. Click on Create certificate to quickly generate a new certificate for the new device.

                    Certificates can be managed later on by clicking on Secure -> Certificates, in the left part of the console.

                    "},{"location":"cloud-platform/kura-aws-cloud/#5-download-the-device-ssl-keys","title":"5. Download the device SSL keys.","text":"

                    You should see a screen like the following:

                    Download the 3 files listed in the table and store them in a safe place, they will be needed later, also copy the link to the root CA for AWS IoT in order to be able to retrieve it later from the device.

                    Press the Activate button, and then on Attach a policy.

                    "},{"location":"cloud-platform/kura-aws-cloud/#6-assign-the-default-policy-to-the-device","title":"6. Assign the default policy to the device.","text":"

                    Select the desired policy and then click on Register thing.

                    A policy can also be attached to a certificate later on perforiming the following steps:

                    Enter the device configuration section, by clicking on Manage -> Things and then clicking on the newly created device. Click on Security on the left panel and then click on the certificate entry (it is identified by an hex code), select Policies in the left menu, you should see this screen:

                    Click on Actions in the top left section of the page and then click on Attach policy, select the default policy previously created and then press the Attach button.

                    "},{"location":"cloud-platform/kura-aws-cloud/#device-configuration","title":"Device configuration","text":"

                    The following steps should be performed on the device, this guide is based on Kura 3.1.0 version and has been tested on a Raspberry PI 3.

                    "},{"location":"cloud-platform/kura-aws-cloud/#7-create-a-java-keystore-on-the-device","title":"7. Create a Java keystore on the device.","text":"

                    The first step for using the device keys obtained at the previous step is to create a new Java keystore containing the Root Certificate used by the Amazon IoT platform, this can be done executing the following commands on the device:

                    sudo mkdir /opt/eclipse/kura/security\n
                    cd /opt/eclipse/kura/security\n
                    curl https://www.amazontrust.com/repository/AmazonRootCA1.pem > /tmp/root-CA.pem\n
                    sudo keytool -import -trustcacerts -alias aws -file /tmp/root-CA.pem -keystore cacerts.ks -storepass changeit\n

                    If the last command reports that the certificate already exist in the system-wide store type yes to proceed. The code above will generate a new keystore with changeit as password, change it if needed.

                    "},{"location":"cloud-platform/kura-aws-cloud/#8-configure-the-ssl-parameters-using-the-kura-web-ui","title":"8. Configure the SSL parameters using the Kura Web UI.","text":"

                    1. Open the Kura Web Console and enter select the Settings entry in the left side menu and then click on SSL Configuration, you should see this screen:

                      Change the Keystore path parameter to /opt/eclipse/kura/security/cacerts.ks if needed.

                      Change the settings in the form to match the screen above, set Default protocol to TLSv1.2, enter changeit as Keystore Password (or the password defined at step 7).

                      Warning

                      Steps from 8.2 to 8.6 will not work on Kura 3.2.0 due to a known issue. On this version, private key and device certificate need to be manually added to the keystore using the command line. If you are running Kura 3.2.0, proceed with step 8.7.

                    2. Open the Kura Web Console and enter select the Settings entry in the left side menu and then click on Device SSL Certificate, you should see this screen:

                      Enter aws-ssl in the Storage Alias field.

                    3. The private key needs to be converted to the PKCS8 format, this step can be performed executing the following command on a Linux or OSX based machine:

                      openssl pkcs8 -topk8 -inform PEM -outform PEM -in xxxxxxxxxx-private.pem.key -out outKey.pem -nocrypt\n

                      where xxxxxxxxxx-private.pem.key is the file containing the private key downloaded at step 4.

                    4. Paste the contents of the obtained outKey.pem in the \"Private Key\" field.

                    5. Paste the contents of xxxxxxxxxx-certificate.pem.crt in the Certificate field.

                      You should see a screen like this

                    6. Click the Apply button to confirm.

                    7. Kura 3.2.0 only - manually import device certificate and private key into keystore.

                      On the host machine, open a terminal window in the folder containing the files downloaded at step 5 and execute the following command:

                      openssl pkcs12 -export -in xxxxxxxxxx-certificate.pem.crt -inkey xxxxxxxxxx-private.pem.key -name aws-ssl -out aws-ssl.p12\n

                      where xxxxxxxxxx-certificate.pem.crt is the original certificate downloaded from AWS and xxxxxxxxxx-private.pem.key is the private key.

                      The command will ask for a password, define a new password.

                      Copy the obtained aws-ssl.p12 file to the device into the /tmp folder using scp:

                      scp ./aws-ssl.p12 pi@<device-address>:/tmp\n

                      Replacing <device-address> with the hostname or ip address of the device.

                      Open a ssh connection to the device and enter the following command:

                      sudo keytool -importkeystore -deststorepass changeit -destkeystore /opt/eclipse/kura/security/cacerts.ks -srckeystore /tmp/aws-ssl.p12 -srcstoretype PKCS12\n

                      The command will ask for a password, enter the password defined when creating the aws-ssl.p12 file.

                      Restart Kura to reload the keystore.

                    "},{"location":"cloud-platform/kura-aws-cloud/#9-setup-a-new-cloud-connection","title":"9. Setup a new cloud connection","text":"

                    1. Click on Cloud Connections in the left panel, and setup a new cloud connection

                    2. Click on the New Connection button at the top of the page and set the following parameters in the dialog:

                      • Cloud Connection Factory PID -> org.eclipse.kura.cloud.CloudService
                      • Cloud Connection Service PID -> org.eclipse.kura.cloud.CloudService-AWS

                      Press the Create button to confirm and then select the newly created CloudService instance from the list.

                    3. Set the broker URL in the MqttDataTransport-AWS tab, it can be obtained from the AWS IoT Web Console clicking on the Settings entry in the bottom left section of the page, the URL will look like the following:

                      a1rm1xxxxxxxxx.iot.us-east-1.amazonaws.com\n

                      The mqtts protocol must be used, the value for the broker-url field derived from the URL above is the following: 

                      mqtts://a1rm1xxxxxxxxx.iot.us-east-1.amazonaws.com:8883/\n

                    4. Clear the value of the username and password fields.

                    5. Set a value for the topic.context.account-name and client-id.

                      • Assign an arbitrary account name to topic.context.account-name (for example aws-test), this will be used by the CloudClient instances for building the topic structure.

                      • Enter the thing name in the client-id field (in this example kura-gateway).

                    6. In order for the previously added keys to be used for the SSL connection with the broker enter the Storage Alias defined in step 8.2 (e.g aws-ssl) as value for the ssl.certificate.alias field.

                    7. The setting lwt.topic under MqttDataTransport-AWS needs to be updated as well by entering a value not containing the $ character. This is required because of the fact that AWS IoT does not support topic names starting with $ (except for the $aws/ hierarchy).

                    8. Press the Apply button in the top left section to commit the changes to the MqttDataTransport-AWS.

                    9. Enter a name without the $ character for the topic.control-prefix setting in the CloudService-AWS tab, for example aws-control.

                    10. The Kura CloudService uses some well-known topics to allow remote device management and to report device state information, this features are not supported by default by AWS IoT, the following settings can be applied in the CloudService-AWS tab in order to avoid sending unnecessary messages:

                      • republish.mqtt.birth.cert.on.gps.lock -> false
                      • republish.mqtt.birth.cert.on.modem.detect -> false
                      • enable.default.subscriptions -> false

                    11. Click the Apply button to save the changes.

                    "},{"location":"cloud-platform/kura-aws-cloud/#10-connect-to-the-cloud-platform","title":"10. Connect to the cloud platform","text":"

                    Make sure the AWS CloudService instance is selected from the list in the top section of the page and click on the Connect button, if the connection to AWS IoT platform succeeds the Status of the instance will be reported as Connected.

                    "},{"location":"cloud-platform/kura-azure/","title":"Azure IoT Hub\u2122 platform","text":"

                    Starting from release 3.0, Eclipse Kura can connect to the Azure IoT Hub using the MQTT protocol. When doing so, Kura applications can send device-to-cloud messages. More information on the Azure IoT Hub and its support for the MQTT protocol can be found here. This document outlines how to configure and connect a Kura application to the Azure IoT Hub.

                    "},{"location":"cloud-platform/kura-azure/#get-azure-iot-hub-information","title":"Get Azure IoT Hub information","text":"

                    In order to properly configure Kura to connect to IoT Hub, some information are needed. You will need the hostname of the Azure IoT Hub, referred below as {iothubhostname}, the Id and the SAS Token of the device, referred as {device_id} and {device_SAS_token}. The hostname is listed on the \"Overview\" tab on the IoT Hub main page, while the device ID is shown on the \"Device Explorer\" tab. Finally, the SAS token can be generated using the iothub-explorer application that can be found here. To install the application, type on a shell:

                    npm install -g iothub-explorer\n

                    Then start a new session on your IoT Hub instance (it will expire in 1 hour):

                    iothub-explorer login \"{your-connection-string}\"\n

                    where {your-connection-string} is the connection string of your IoT Hub instance. It can be found on the \"Shared access policies\" tab under \"Settings\". Select the \"iothubowner\" policy and a tab will appear with the \"Connection string\u2014primary key\" option. Then list your devices:

                    iothub-explorer list\n

                    and get the SAS token for the {device-name} device:

                    iothub-explorer sas-token {device-name}\n

                    Be aware that the SAS token will expire in 1 hour by default, but using \"-d\" option it is possible to set a custom expiration time.

                    "},{"location":"cloud-platform/kura-azure/#ssl-certificates","title":"SSL certificates","text":"

                    In order to connect to your IoT Hub instance, Kura should trust the remote broker through a SSL certificate. The simpler way to get the IotHub certificate is to run the following command on a shell:

                    openssl s_client -showcerts -tls1 -connect {iothubhostname}:8883\n

                    The result is the SSL certificate chain. Copy all the certificates in the format:

                    -----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----\n-----BEGIN CERTIFICATE-----\n...\n-----END CERTIFICATE-----\n

                    and paste them in to the \"Server SSL Certificate\" tab under \"Settings\" in Kura. Then click the Apply button and restart Kura to update the keystore.

                    "},{"location":"cloud-platform/kura-azure/#configuring-a-kura-cloud-stack-for-azure-iot-hub","title":"Configuring a Kura Cloud Stack for Azure IoT Hub","text":"

                    The Kura Gateway Administrative Console exposes all services necessary to configure a connection to the Azure IoT Hub. You can follow the steps outlined below to configure the connection to the Azure IoT Hub.

                    The first step is to create a new Kura Cloud stack. From the Kura Gateway Administrative Console:

                    • Select Cloud Connections in the navigation on the left and click New Connection to create a new Cloud connection
                    • In the dialog, select org.eclipse.kura.cloud.CloudService as the Cloud Connection Factory PID
                    • Enter a Cloud Connection Service PID name like org.eclipse.kura.cloud.CloudService-Azure
                    • Press the Create button to create the new Cloud stack

                    Now review and update the configuration of each Kura Cloud stack component as outline below.

                    • MqttDataTransport
                    • DataService
                    • CloudService
                    "},{"location":"cloud-platform/kura-azure/#mqttdatatransport","title":"MqttDataTransport","text":"

                    Modify the service configuration parameters as follows:

                    • broker-url - defines the URL of the Azure IoT MQTT broker. The URL value should be set as mqtts://{iothubhostname}:8883/

                      Note

                      An SSL connection (mqtts on port 8883) is required to connect to Azure IoT Hub\u2122.

                    • topic.context.account-name - insert devices as the MQTT topic prefix for the device-to-cloud and cloud-to-device messages

                    • username - insert {iothubhostname}/{device_id} as username for the MQTT connection

                    • password - insert {device_SAS_token} as password for the MQTT connection

                      Note

                      The format of the SAS Token is like: 

                      SharedAccessSignature sig={signature-string}&se={expiry}&sr={URL-encoded-resourceURI}\n

                    • client-id - insert {device_id} as Client ID for the MQTT connection

                    • clean-session - make sure it is set to true
                    • lwt.topic - set the Will Topic to something #account-name/#client-id/messages/events/LWT

                    You can keep the default values of the remaining parameters, so save your changes by clicking the Apply button. A screen capture of the MqttDataTransport configuration is shown below.

                    "},{"location":"cloud-platform/kura-azure/#dataservice","title":"DataService","text":"

                    The majority of default settings in the DataService can be left unchanged. A screen capture of the DataService configuration is shown below.

                    In order for Kura to connect to Azure IoT Hub on startup, the connect.auto-on-startup option must be set to true. If this value is changed from false to true, Kura will immediately begin the connection process. It is recommended that the CloudService and MqttDataTransport are configured before setting the connect.auto-on-startup option to true.

                    Note

                    Changing the value of connect.auto-on-startup from true to false will not disconnect the client from the broker. This setting simply implies that Kura will not automatically connect on the next start of Kura.

                    "},{"location":"cloud-platform/kura-azure/#cloudservice","title":"CloudService","text":"

                    The default settings for the CloudService should be modified as follow to allow a connection to Azure IoT Hub .

                    • topic.control-prefix - insert devices as the MQTT topic prefix for the device-to-cloud and cloud-to-device messages
                    • encode.gzip - should be set false to avoid compression of the message payloads
                    • republish.mqtt.birth.cert.on.gps.lock - should be set false to avoid sending additional messages on GPS position lock
                    • republish.mqtt.birth.cert.on.modem.detect - should be set false to avoid sending additional messages on cellular modem update
                    • enable.default.subscriptions - should be set false to avoid subscriptions on Kura control topics for cloud-to-device
                    • payload.encoding - should be set to Simple JSON

                    The screen capture shown below displays the default settings for the CloudService.

                    "},{"location":"cloud-platform/kura-azure/#how-to-connect-and-disconnect-from-the-cloud-platform","title":"How to connect and disconnect from the cloud platform","text":"

                    The status panel can be used to manually connect or disconnect the client while Kura is running. The main button toolbar has a connect and disconnect button that may be used to control connectivity.

                    Note

                    Connecting or disconnecting the client via the status panel has no impact on Kura automatically connecting at startup. This capability is only controlled via the connect.auto-on-startup DataService setting.

                    "},{"location":"cloud-platform/kura-azure/#kura-application-connecting-to-azure-iot-hub","title":"Kura Application Connecting to Azure IoT Hub","text":"

                    The Kura example publisher can be used to publish to the IoT Hub. The example configuration should be modified as follows.

                    • cloud.service.pid - insert the name of the new Kura Cloud stack, org.eclipse.kura.cloud.CloudService-Azure in this tutorial
                    • app.id - insert messages as application id
                    • publish.appTopic - insert events/ as publish topic

                    This configuration allows the publication on the default messages/events endpoint on the IoT Hub\u2122.

                    "},{"location":"cloud-platform/kura-ec-cloud/","title":"Eurotech Everyware Cloud\u2122 platform","text":"

                    Everyware Cloud provides an easy mechanism for connecting cloud-ready devices to IT systems and/or applications; therefore, connecting to Everyware Cloud is an important step in creating and maintaining a complete M2M application. Information on Everyware Cloud and its features can be found here. This document outlines how to connect to Everyware Cloud using the Kura Gateway Administrative Console.

                    "},{"location":"cloud-platform/kura-ec-cloud/#using-the-kura-gateway-administrative-console","title":"Using the Kura Gateway Administrative Console","text":"

                    The Kura Gateway Administrative Console exposes all services necessary for connecting to Everyware Cloud. The reference links listed below outline each service involved in the Everyware Cloud connection. It is recommended that each section be reviewed.

                    • CloudService
                    • DataService
                    • MqttDataTransport
                    "},{"location":"cloud-platform/kura-ec-cloud/#cloudservice","title":"CloudService","text":"

                    The default settings for the CloudService are typically adequate for connecting to Everyware Cloud. The screen capture shown below displays the default settings for the CloudService. For details about each setting, please refer to CloudService.

                    Warning

                    The \"Simple JSON\" payload encoding is not supported by Everyware Cloud. Use the default \"Kura Protobuf\" encoding instead.

                    "},{"location":"cloud-platform/kura-ec-cloud/#dataservice","title":"DataService","text":"

                    The majority of default settings in the DataService can be left unchanged. A screen capture of the DataService configuration is shown below. For complete details about the DataService configuration parameters, please refer to DataService.

                    In order for Kura to connect to Everyware Cloud on startup, the connect.auto-on-startup option must be set to true. If this value is changed from false to true, Kura will immediately begin the connection process. It is recommended that the CloudService and MqttDataTransport are configured before setting the connect.auto-on-startup option to true.

                    Note

                    Changing the value of connect.auto-on-startup from true to false will not disconnect the client from the broker. This setting simply implies that Kura will not automatically connect on the next start of Kura.

                    "},{"location":"cloud-platform/kura-ec-cloud/#mqttdatatransport","title":"MqttDataTransport","text":"

                    While the majority of default settings in the MqttDataTransport can be left unchanged, the following parameters must be modified:

                    • broker-url - defines the MQTT broker URL that was provided when the Eurotech Everyware Cloud account was established. Information on how to obtain the broker URL can be found here. In the MqttDataTransport configuration screen capture shown below, the broker-url is mqtt://broker-sbx.everyware.io:1883
                    • topic.context.account-name - defines the account name of the account to which the device is attempting to connect. In the MqttDataTransport configuration screen capture shown below, the account name is account-name
                    • username - identifies the user to be used when creating the connection. In the MqttDataTransport configuration screen capture shown below, the username is username.

                    Note

                    When connecting to Everyware Cloud, the username must have proper permissions. Information on users and permissions can be found here.

                    For complete details about the MqttDataTransport configuration parameters, please refer to MqttDataTransport.

                    "},{"location":"cloud-platform/kura-ec-cloud/#connectdisconnect","title":"Connect/Disconnect","text":"

                    The status panel can be used to manually connect or disconnect the client while Kura is running. The main button toolbar has a connect and disconnect button that may be used to control connectivity.

                    Note

                    Connecting or disconnecting the client via the status panel has no impact on Kura automatically connecting at startup. This capability is only controlled via the connect.auto-on-startup DataService setting.

                    "},{"location":"cloud-platform/kura-hono/","title":"Eclipse Hono\u2122 platform","text":"

                    Eclipse Hono\u2122 provides remote service interfaces for connecting large numbers of IoT devices to a back end and interacting with them in a uniform way regardless of the device communication protocol. More information can be found here. This document outlines how to connect to Eclipse Hono using the Kura Gateway Administrative Console.

                    "},{"location":"cloud-platform/kura-hono/#using-the-kura-gateway-administrative-console","title":"Using the Kura Gateway Administrative Console","text":"

                    The Kura Gateway Administrative Console exposes all services necessary for connecting to Eclipse Hono. First of all, in the Cloud Connections section, a new Hono-enabled connection needs to be setup.

                    From the Cloud Connections section,

                    the user needs to create a new connection:

                    by specifying a valid PID:

                    The result should be like the one depicted in the following image:

                    The reference links listed below outline each service involved in the cloud connection. It is recommended that each section be reviewed.

                    • CloudService
                    • DataService
                    • MqttDataTransport
                    "},{"location":"cloud-platform/kura-hono/#cloudservice","title":"CloudService","text":"

                    The default settings for the CloudService are typically adequate for connecting to a Hono instance. The screen capture shown below displays the default settings for the CloudService. For details about each setting, please refer to CloudService.

                    "},{"location":"cloud-platform/kura-hono/#dataservice","title":"DataService","text":"

                    The majority of default settings in the DataService can be left unchanged. A screen capture of the DataService configuration is shown below. For complete details about the DataService configuration parameters, please refer to DataService.

                    In order for Kura to connect to Eclipse Hono on startup, the connect.auto-on-startup option must be set to true. If this value is changed from false to true, Kura will immediately begin the connection process. It is recommended that the CloudService and MqttDataTransport are configured before setting the connect.auto-on-startup option to true.

                    Note

                    Changing the value of connect.auto-on-startup from true to false will not disconnect the client from the broker. This setting simply implies that Kura will not automatically connect on the next start of Kura.

                    "},{"location":"cloud-platform/kura-hono/#mqttdatatransport","title":"MqttDataTransport","text":"

                    While the majority of default settings in the MqttDataTransport can be left unchanged, the following parameters must be modified:

                    • broker-url - defines the MQTT broker URL that was provided when the Eurotech Everyware Cloud account was established. In the MqttDataTransport configuration screen capture shown below, the broker-url is mqtt://broker-url:1883
                    • topic.context.account-name - defines the account name of the account to which the device is attempting to connect. In the MqttDataTransport configuration screen capture shown below, the account name is account-name
                    • username - identifies the user to be used when creating the connection. In the MqttDataTransport configuration screen capture shown below, the username is username.

                    For complete details about the MqttDataTransport configuration parameters, please refer to MqttDataTransport.

                    "},{"location":"cloud-platform/kura-hono/#connectdisconnect","title":"Connect/Disconnect","text":"

                    The status panel can be used to manually connect or disconnect the client while Kura is running. The main button toolbar has a connect and disconnect button that may be used to control connectivity.

                    Note

                    Connecting or disconnecting the client via the status panel has no impact on Kura automatically connecting at startup. This capability is only controlled via the connect.auto-on-startup DataService setting.

                    "},{"location":"cloud-platform/kura-kapua/","title":"Eclipse Kapua\u2122 platform","text":"

                    Eclipse Kapua\u2122 is a modular platform providing the services required to manage IoT gateways and smart edge devices. Kapua provides a core integration framework and an initial set of core IoT services including a device registry, device management services, messaging services, data management, and application enablement. More information can be found here. This document outlines how to connect to Eclipse Kapua using the Kura Gateway Administrative Console.

                    "},{"location":"cloud-platform/kura-kapua/#using-the-kura-gateway-administrative-console","title":"Using the Kura Gateway Administrative Console","text":"

                    The Kura Gateway Administrative Console exposes all services necessary for connecting to Eclipse Kapua. The reference links listed below outline each service involved in the cloud connection. It is recommended that each section be reviewed.

                    • CloudService
                    • DataService
                    • MqttDataTransport
                    "},{"location":"cloud-platform/kura-kapua/#cloudservice","title":"CloudService","text":"

                    The default settings for the CloudService are typically adequate for connecting to a Kapua instance. The screen capture shown below displays the default settings for the CloudService. For details about each setting, please refer to CloudService.

                    Warning

                    The \"Simple JSON\" payload encoding is not supported by Kapua. Use the default \"Kura Protobuf\" encoding instead.

                    "},{"location":"cloud-platform/kura-kapua/#dataservice","title":"DataService","text":"

                    The majority of default settings in the DataService can be left unchanged. A screen capture of the DataService configuration is shown below. For complete details about the DataService configuration parameters, please refer to DataService.

                    In order for Kura to connect to Eclipse Kapua on startup, the connect.auto-on-startup option must be set to true. If this value is changed from false to true, Kura will immediately begin the connection process. It is recommended that the CloudService and MqttDataTransport are configured before setting the connect.auto-on-startup option to true.

                    Note

                    Changing the value of connect.auto-on-startup from true to false will not disconnect the client from the broker. This setting simply implies that Kura will not automatically connect on the next start of Kura.

                    "},{"location":"cloud-platform/kura-kapua/#mqttdatatransport","title":"MqttDataTransport","text":"

                    While the majority of default settings in the MqttDataTransport can be left unchanged, the following parameters must be modified:

                    • broker-url - defines the MQTT broker URL that was provided when the Kapua account was established.
                    • topic.context.account-name - defines the account name of the account to which the device is attempting to connect. In the MqttDataTransport configuration screen capture shown below, the account name is account-name
                    • username - identifies the user to be used when creating the connection. In the MqttDataTransport configuration screen capture shown below, the username is username.

                    For complete details about the MqttDataTransport configuration parameters, please refer to MqttDataTransport.

                    "},{"location":"cloud-platform/kura-kapua/#connectdisconnect","title":"Connect/Disconnect","text":"

                    The status panel can be used to manually connect or disconnect the client while Kura is running. The main button toolbar has a connect and disconnect button that may be used to control connectivity.

                    Note

                    Connecting or disconnecting the client via the status panel has no impact on Kura automatically connecting at startup. This capability is only controlled via the connect.auto-on-startup DataService setting.

                    "},{"location":"cloud-platform/kura-sparkplug/","title":"Eclipse Sparkplug\u00ae Cloud Connector","text":"

                    The org.eclipse.kura.cloudconnection.sparkplug.mqtt.provider package provides a Eclipse Kura Cloud Connection that implements the Eclipse Sparkplug\u00ae v3.0.0 specification.

                    Minimum requirements

                    This addon is compatible with Kura 5.2+.

                    "},{"location":"cloud-platform/kura-sparkplug/#introduction-to-eclipse-sparkplug","title":"Introduction to Eclipse Sparkplug","text":"

                    from Eclipse Sparkplug

                    Sparkplug is an open software specification that provides MQTT clients the framework to seamlessly integrate data from their applications, sensors, devices, and gateways within the MQTT Infrastructure. It is specifically designed for use in Industrial Internet of Things (IIoT) architectures to ensure a high level of reliability and interoperability.

                    The specification aims fulfill the following 3 goals:

                    1. Define a common MQTT topic namespace.
                    2. Define a common MQTT state management.
                    3. Define a common MQTT payload.

                    To achieve that, the Eclipse Sparkplug specification defines an architecture (see picture below) and 4 main actors:

                    • Device: a collection of related data points, which may represent a physical device (like a PLC, a set of sensors, etc.) and that notify the value or quality change of their data points. In this cloud connection, a Device is represented by the attached Cloud Publishers.
                    • Edge Node: the gateway that is responsible of the interaction with the MQTT broker and that estabilished sessions with the data-consuming Host Applications. This Cloud Connection assumes the role of Edge Node.
                    • MQTT Server: a MQTT server that supports the v3.1.1 (or v5.0) version of the protocol.
                    • Host Application: the data-consuming application that subscribes to the MQTT messages generated by the Edge Nodes. A Primary Host Application is responsible of controlling and monitoring Edge Nodes, which can be configured to modify their behavior based on the state of the Primary Host Application (for example, the application goes offline). You can imagine the Primary Host Application for Eclipse Kura being Eclipse Kapua.

                    Image from https://sparkplug.eclipse.org/specification/version/3.0/documents/sparkplug-specification-3.0.0.pdf

                    The main principles upon which the Specification is based on can be summarized as follows:

                    1. PubSub Protocol: this is the main topology upon which the architecture is developed.
                    2. Report by Exception (RBE): messages need to be sent by the Edge Node only when values at the edge change, and the message should contain only the value/metrics that changed. There is no need for continuos polling; although it is higly discouraged, it is not mandatory to have Edge Nodes apply the RBE.
                    3. Continuos Session Awareness: Host Applications are aware of the state of the Edge Nodes, and Edge Nodes are aware of the state of the Host Applications. This continuos session awareness is achieved by the means of birth and death certificates and state messages (continue the reading to find out more) and is the key to allow reporting by exception.
                    4. Birth and Death certificates: these messages represent the state of Edge Nodes and Devices (online/offline + data that will be reported). The birth messages are always the first ones that are sent from the Edge Node, and the delivery of death certificates is ensured through the MQTT Will message, even if the connection is lost ungracefully. The birth messages always contain all the metrics that the Device or Edge Node will ever report on. If a new metric is added or a metric gets removed, then a new session needs to be estabilished.

                    5. Connection Persistence: with the mechanisms above, the connection does not need to be persistent. For example, an Edge Node that disconnects gracefully with a MQTT DISCONNECT packet will not be seen as \"dead\" from the host application because no death certificate has been triggered (Will messages are sent only on failures). Hence, the Edge Node can implement a logic where it remains connected only during the timeframe needed for sending the new data.

                      Warning

                      This Cloud Connection maintains a persistent connection to the MQTT server.

                    "},{"location":"cloud-platform/kura-sparkplug/#eclipse-sparkplug-topic-namespace","title":"Eclipse Sparkplug Topic Namespace","text":"

                    All clients using the specification must adhere to the following topic namespace:

                    namespace/group_id/message_type/edge_node_id/[device_id]\n

                    where:

                    • namespace: defines the structure of the remaining elements and the encoding for the payload. With Sparkplug v3.0.0 the namespace to utilize is spBv1.0.
                    • group_id: some Edge Nodes can be related to each other identifying a group (for example, Edge Nodes in a given plant). This element is the identifier for the group.
                    • message_type: defines how to interpret and handle the payload. It encapsulates the semantic of the message and can be one of the following elements:
                      • NBIRTH/NDEATH: Edge Node birth and death certificates.
                      • DBIRTH/DDEATH: Device birth and death certificates.
                      • NDATA/DDATA: message containing data reported by the Edge Node or Device.
                      • NCMD/DMCD: message containing commands for the Edge Node or Device.
                      • STATE: message from the Primary Host Application indicating the state (offline/online) of the main consumer.
                    • edge_node_id: the identifier for the Edge Node.
                    • device_id (optional): the identifier for the Device. Must be unique under the same edge_node_id and must be always present on messages belonging to Devices (D- type messages).

                    The combination of group_id and edge_node_id must be unique and is called Edge Node Descriptor.

                    Tip

                    It is advised to have group_id, edge_node_id, and device_id as small but as descriptive as possible, for better efficiency.

                    "},{"location":"cloud-platform/kura-sparkplug/#operational-behavior","title":"Operational Behavior","text":"

                    This introduction will focus more on the Edge Node and Device, as they are of more interest for this Cloud Connection.

                    "},{"location":"cloud-platform/kura-sparkplug/#session-management","title":"Session Management","text":"

                    The session estabilishment procedure ensures the Edge Node to be subscribed to command-type messages for receiveing commands from the Host Application.

                    An Edge Node can (optionally, but incouraged) specify to be aware of a primary host application state and, in such case, it needs to subscribe to the relative STATE messages. The Edge Node will send the birth certificate (and thus completing the session init procedure) only after receiving the STATE message denoting the Primary Host Application is online. After connection, if the Edge Node receives a STATE message denoting the Primary Host Application is offline, it must restart the session estabilishment procedure.

                    On connection, the Edge Node sets a MQTT Will message containing a NDEATH certificate. Doing so, if the MQTT broker does not receive any communication within the Keep Alive period (client lost connection), it will send the Edge Node NDEATH certificate on all subscribers. A birth/death sequence number bdSeq is maintained in the Edge Node to match NBIRTH with NDEATH messages in the Host Application. Each bdSeq in the NDEATH message is matched with the corresponding bdSeq of the previous NBIRTH message. This allows the Host Application tracking the state of the Edge Nodes and mark not up-to-date metrics as STALE.

                    A Device can send a device DBIRTH message after a Edge Node NBIRTH has been sent. The DBIRTH message contains all the metrics that the device will ever report on. If a new metric is added or an existing one removed, then the Device session needs to be re-estabilished. If the Edge Node looses the connection to some of its Devices, then it needs to send a Device DDEATH certificate on his behalf. The data-consuming Host Application will then mark that particular Device as offline and mark its metrics as STALE. Once the session is estabilished, the Device can publish the changed metrics using the DDATA message type.

                    "},{"location":"cloud-platform/kura-sparkplug/#multiple-mqtt-server-topologies","title":"Multiple MQTT Server Topologies","text":"

                    A Primary Host Application must publish its STATE message every time it connects to the MQTT broker. This ensures the Edge Nodes to be aware of its status as long as they remain connected to the MQTT server.

                    At any point in time, an Edge Node can be connected to at most one MQTT server. If multiple MQTT servers are defined each time the Edge Node receives an offline STATE message from its Primary Host Application it needs to terminate the session and estabilish a new one with the next MQTT broker.

                    "},{"location":"cloud-platform/kura-sparkplug/#further-resources","title":"Further Resources","text":"
                    • Eclipse Sparkplug v3.0.0 specification
                    • HiveMQ Sparkplug guides collection
                    • Eclipse Sparkplug FAQ
                    "},{"location":"cloud-platform/kura-sparkplug/#cloud-connection-configuration","title":"Cloud Connection Configuration","text":""},{"location":"cloud-platform/kura-sparkplug/#cloud-endpoint-layer-configuration","title":"Cloud Endpoint Layer Configuration","text":"

                    The cloud endpoint layer allows to attach CloudPublishers and CloudSubscribers to publish/subscribe messages on Sparkplug topics.

                    "},{"location":"cloud-platform/kura-sparkplug/#sparkplug-device","title":"Sparkplug Device","text":"

                    Each CloudPublisher attached to this cloud connection acts as a Sparkplug Device. The corresponding configuration is shown in the picture below.

                    The parameter specified as device.id will dictate the Sparkplug device identifier used to publish messages from this cloud publisher. A device DBIRTH message is immediately sent from this publisher when the first publish occurs or when a the set of published metrics is changed. The subsequent messages will be published as Sparkplug device data (DDATA message type).

                    The Sparkplug Device implemented by this publisher does not support the following features (optional in the Eclipse Sparkplug specification):

                    • tck-id-operational-behavior-device-ddeath: Device death messages (DDEATH message type) since the usual way to publish data from the Wire Graph using a WireAsset attached to a CloudPublisher has no implementation for reporting error states (see WireAsset.onWireReceive)
                    • tck-id-payloads-alias-uniqueness: Sparkplug aliases for metrics
                    • tck-id-message-flow-device-dcmd-subscribe: writing to outputs, hence it will not subscribe to device command messages (DCMD message type)
                    "},{"location":"cloud-platform/kura-sparkplug/#sparkplug-device-payload","title":"Sparkplug Device Payload","text":"

                    The payload of DDATA message will be encoded using the Sparkplug B Protobuf definition converting the KuraPayload into Sparkplug payload as follows:

                    • Metrics from KuraPayload.metric() become Sparkplug metrics. Only the name, timestamp, datatype and value components are added. The timestamp is set to the publishing instant. The datatype is inferred from the Java type as follows:

                      Java Type Sparkplug DataType Boolean DataType.Boolean byte[] DataType.Bytes Double DataType.Double Float DataType.Float Byte DataType.Int8 Short DataType.Int16 Integer DataType.Int32 Long DataType.Int64 String DataType.String Date DataType.DateTime BigInteger DataType.UInt64

                      All other Java types will cause the application to throw an Exception.

                    • KuraPayload.getBody(), if non null, will be copied into the body of the Sparkplug payload

                    • KuraPayload.getPosition(), if not null, will be used to create the following metrics from the KuraPosition object, if the value in there is not null (with the corresponding Sparkplug data types):

                      • kura.position.altitude: DataType.Double
                      • kura.position.heading: DataType.Double
                      • kura.position.latitude: DataType.Double
                      • kura.position.longitude: DataType.Double
                      • kura.position.precision: DataType.Double
                      • kura.position.satellites: DataType.Int32
                      • kura.position.status DataType.Int32
                      • kura.position.speed: DataType.Double
                      • kura.position.timestamp: DataType.DateTime

                    • KuraPayload.getTimestamp(), if not null, it will be used as the timestamp metric of the Sparkplug payload

                    "},{"location":"cloud-platform/kura-sparkplug/#sparkplug-subscriber","title":"Sparkplug Subscriber","text":"

                    This cloud connections allows creating a Cloud Subscriber that will subscribe to a generic set of topics. The configuration is shown in the picture below.

                    It is assumed that the payloads received by this Cloud Connection are encoded using the Sparkplug B Protobuf definition. Users of this Cloud Subscriber should expect to receive KuraMessages containing a KuraPayload such that:

                    • If non null, the Sparkplug body is used to set KuraPayload.setBody()
                    • If non null, the Sparkplug seq Metric is converted into a Kura metric with name seq
                    • If non null, the Sparkplug timestamp is used as Eclipse Kura's payload timestamp

                    • All Sparkplug Metrics are converted into Kura metrics with the same name and the following conversion rules:

                      Sparkplug ValueCase Java Type Boolean boolean Bytes byte[] Dataset byte[] Double double Extension byte[] Float float Integer int Long long String String Template byte[] default null

                      The metric timestamp is not supported in Eclipse Kura, therefore this information is lost at conversion.

                    "},{"location":"cloud-platform/kura-sparkplug/#data-service-layer-configuration","title":"Data Service Layer Configuration","text":"

                    The DataService layer used in this component is the org.eclipse.kura.data.DataService implementation. Please refer to the Data Service Configuraion page for further details.

                    "},{"location":"cloud-platform/kura-sparkplug/#data-transport-layer-configuration","title":"Data Transport Layer Configuration","text":"

                    The Sparkplug Data Transport layer bridges the incoming requests to the underlying Eclipse Paho MQTT v3.1.1 client following the Sparkplug specification. In particular, the Data Transport Layer ensures the following.

                    • Edge Node Sparkplug Session Estabilishment: the Edge Node (this Cloud Connection) estabilishes a new Sparkplug session upon connection. An optional Primary Host Application ID can be specified (see picture below) to make the Cloud Connection wait until the Primary Host Application is online before publishing NBIRTH and DBIRTH messages.
                    • Edge Node Sparkplug Session Termination: upon disconnection, the Edge Node follows the required specification statements. In particular, multiple space-separated Server URIs can be specified in the component's configuration (see picture below). When a Primary Host Application ID is defined and it receives a STATE message denoting that the configured primary application is offline, then reconnection attempts are made cycling through the Server URIs list. When the last server fails to connect, then the traversal is restarted from the start of the list.
                    • Edge Node NCMD handler: upon reception of a valid NCMD message, the Transport layer checks if it contains a Node Control/Rebirth metric, and, if set to true, restarts the session estabilishment procedure without sending an MQTT CONNECT packet (client connection is not closed, only BIRTH messages are re-sent).

                    The Sparkplug Data Transport layer is configured to wait for a random period of time between 0sec and 5sec before each connection attempt. This is to ensure that, on large deployments, the target MQTT servers and Host Applications will dilute session estabilishment requests by some margin. This behavior is not part of the Sparkplug specification.

                    This cloud connection supports SSL connections to the connecting broker. The option SslManagerService.target allows, as an OSGi target filter, to specify the pid of the SslManagerService instance to use for creating SSL connections for broker URIs that use the ssl:// protocol. The default socket factory is used otherwise.

                    "},{"location":"cloud-platform/kura-sparkplug/#sparkplug-implementation-details","title":"Sparkplug Implementation Details","text":""},{"location":"cloud-platform/kura-sparkplug/#edge-node","title":"Edge Node","text":"
                    • The NBIRTH message sent by this cloud connection will not contain any metrics, except for the mandatory ones required by the specification.
                    • This cloud connection does not send any NDATA messages in its default implementation.
                    "},{"location":"cloud-platform/raw-cloud-connection/","title":"Raw MQTT Cloud Connector","text":""},{"location":"cloud-platform/raw-cloud-connection/#raw-mqtt-cloud-connection","title":"Raw MQTT Cloud Connection","text":"

                    The Raw MQTT cloud connector is a cloud stack that exposes a MQTT cloud connection without applying any restriction on topic structure or performing any particular message encoding.

                    The Raw MQTT cloud connector is composed by the following components:

                    "},{"location":"cloud-platform/raw-cloud-connection/#cloud-stack-components","title":"Cloud stack components","text":"

                    The cloud stack is composed by the default DataService and MqttDataTransport plus the following component:

                    "},{"location":"cloud-platform/raw-cloud-connection/#orgeclipsekuracloudconnectionrawmqttcloudrawmqttcloudendpoint","title":"org.eclipse.kura.cloudconnection.raw.mqtt.cloud.RawMqttCloudEndpoint","text":"

                    The CloudEndpoint implementation, this component does not have any configuration property.

                    "},{"location":"cloud-platform/raw-cloud-connection/#publishers-and-subscriber","title":"Publishers and subscriber","text":"

                    The following CloudPublisher and CloudSubscriber factories are available:

                    "},{"location":"cloud-platform/raw-cloud-connection/#orgeclipsekuracloudconnectionrawmqttpublisherrawmqttpublisher","title":"org.eclipse.kura.cloudconnection.raw.mqtt.publisher.RawMqttPublisher","text":"

                    A CloudPublisher implemetation that can be attached to a RawMqttCloudEndpoint.

                    The RawMqttPublisher provides the following configuration options:

                    • Topic: The MQTT topic to publish messages on.

                    • Qos: The desired quality of service for the messages that have to be published. If Qos is 0, the message is delivered at most once, or it is not delivered at all. If Qos is set to 1, the message is always delivered at least once. If set to 2, the message will be delivered exactly once.

                    • Retain: The MQTT retain flag for the published messages.

                    • Priority: The priority of the messages. 0 is highest priority. This parameter is related to the DataService component of the cloud stack.

                    The RawMqttPublisher will consider only the body field of the KuraPayloads submitted for publishing. All other KuraPayload fields like metrics or position information will be discarded.

                    The received KuraPayload body field will be used as the payload of the published messages without any modification.

                    "},{"location":"cloud-platform/raw-cloud-connection/#orgeclipsekuracloudconnectionrawmqttsubscriberrawmqttsubscriber","title":"org.eclipse.kura.cloudconnection.raw.mqtt.subscriber.RawMqttSubscriber","text":"

                    A CloudSubscriber implementation that can be attached to a RawMqttCloudEndpoint.

                    The RawMqttSubscriber provides the following configuration options:

                    • Topic Filter: The MQTT subscription topic filter. For example foo/bar/baz, foo/+/bar, #, foo/#.

                    • Qos: The desired quality of service for the subscription messages.

                    The RawMqttSubscriber will popolate the body field of the KuraPayload provided to consumers using the payload of received MQTT messages without any modification.

                    "},{"location":"cloud-platform/raw-cloud-connection/#using-the-raw-mqtt-cloud-connection-from-eclipse-kura-wires","title":"Using the Raw MQTT Cloud Connection from Eclipse Kura Wires","text":"

                    Using the Raw MQTT Cloud Connection from Eclipse Kura Wires is possible but requires a few extra configuration steps.

                    "},{"location":"cloud-platform/raw-cloud-connection/#publishig-messages","title":"Publishig messages","text":"

                    As said previously, the RawMqttPublisher component will only consider the body of received KuraPayloads. The default behaviour of the Wires CloudPublisher component is to populate KuraPayload metrics using the received wire record properties, without filling the body. It is possible to configure it to populate the body in the following way:

                    • Create a CloudPublisher wire component and attach it to a RawMqttPublisher instance.

                    • Set the value of the Set body from envelope property of the CloudPublisher instance to the name of an input wire record property of STRING or BYTE_ARRAY type that the component will receive.

                    In this way every time that the CloudPublisher will receive an envelope with a property whose name matches the configured one, it will use its value as the body of the produced KuraPayload.

                    The input property must be of STRING or BYTE_ARRAY type:

                    • if the type is BYTE_ARRAY the value will be used as KuraPayload body without modifications.

                    • if the type is STRING the value will be ecoded in UTF-8.

                    "},{"location":"cloud-platform/raw-cloud-connection/#receiveing-messages","title":"Receiveing messages","text":"

                    It is also possible to receive the messages originating form a RawMqttSubscriber using a Wires CloudSubscriber component with additional configuration. By default, the CloudSubscriber component will not emit KuraPayload body on the wires but it is possible to change this behaviour in the following way:

                    • Create a CloudSubscriber wire component and attach it to a RawMqttSubscriber instance.

                    • Set the value of the Set property from message body configuration property to the name of a wire record property that will be used to store the KuraPayload body

                    • Set the value of the Body property type to STRING or BYTE_ARRAY:

                      • If set to BYTE_ARRAY, the body will be emitted without modifications.

                      • If set to STRING, the body will be decoded from UTF-8 and emitted as a string.

                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/","title":"Apache Camel\u2122 as a Kura application","text":"

                    As of 2.1.0 Kura provides a set of different ways to implement an application backed by Camel:

                    • Simple XML route configuration
                    • Custom XML route configuration
                    • Custom Java DSL definition
                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#kura-cloud-endpoint","title":"Kura cloud endpoint","text":"

                    Kura provides a special \"Kura cloud endpoint\" which allows to publish or subscribe to the Kura Cloud API. The default component name for this component is kura-cloud but it may be overridden in the following use cases.

                    The default component will only be registered once the default Kura Cloud API is registered with OSGi. This instance is registered with the OSGi property kura.service.pid=org.eclipse.kura.cloud.CloudService.

                    If you want to publish to a different cloud service instance you can either manually register a new instance of this endpoint, or e.g. use a functionality like the Simple XML router provides: also see selecting a cloud service.

                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#endpoint-uri","title":"Endpoint URI","text":"

                    The URI syntax of the endpoint is (assuming the default component name): kura-cloud:appid/topic. Where appid is the application ID registered with the Cloud API and topic is the topic to use.

                    The following URI parameters are supported by the endpoint:

                    Name Type Default Description applicationId String From URI path The application ID used with the Cloud API topic String From URI path The default topic name to publish/subscribe to when no header value is specified qos Integer 0 The QoS value when publishing to MQTT retain Boolean false The default retain flag when publishing to MQTT priority Integer 5 The default priority value control Boolean false Whether to publish/subscribe on the control or data topic hierarchy deviceId String empty The default device ID when publishing/subscribing to control topics

                    The following header fields are supported. If a value is not set when publishing it is taken from the endpoint configuration:

                    Name Type Description CamelKuraCloudService.topic String The name of the topic to publish to or from which the message was received CamelKuraCloudService.qos Integer The QoS to use when publishing to MQTT CamelKuraCloudService.retain Boolean The value of the retain flag when publishing to MQTT CamelKuraCloudService.control Boolean Whether to publish/subscribe on the control or data topic hierarchy CamelKuraCloudService.deviceId String The device ID when publishing to control topics"},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#cloud-to-cloud-messaging","title":"Cloud to cloud messaging","text":"

                    As already described, header values override the endpoint settings. This allows for a finer grained control with Camel messaging. However this can cause unexpected behavior when two Cloud API endpoints are bridged. Camel can received from a Cloud endpoint but also publish to it. Now it is possible to write Camel routes with exchange messages, receiving from one Cloud API, pushing to another.

                    -------------------             -------------------\n| Cloud Service A |    <--->    | Cloud Service B |\n-------------------             -------------------\n

                    Which could result in a Camel route XML like:

                    <route id=\"bridgeLocalToRemote\">\n  <from uri=\"local-cloud:sensor/sensor1\" />\n  <to   uri=\"upstream-cloud:gateway1/all-sensors\" />\n</route>\n

                    However the Consumer (from) would set the topic header value with the topic name it received the message from. And the Producer (to) would get its topic from the URI overriden by that header value.

                    In order to fix this behavior the header field has to be cleared before publishing:

                    <route id=\"bridgeLocalToRemote\">\n  <from uri=\"local-cloud:sensor/sensor1\" />\n  <removeHeaders pattern=\"CamelKuraCloudService.topic\"/>\n  <to   uri=\"upstream-cloud:gateway1/all-sensors\" />\n</route>\n
                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#simple-xml-routes","title":"Simple XML routes","text":"

                    Eclipse Kura 2.1.0 introduces a new \"out-of-the-box\" component which allows to configure a set of XML based routes. The component is called \"Camel XML router\" and can be configured with a simple set of XML routes.

                    The following example logs all messages received on the topic foo/bar to a logger named MESSAGE_FROM_CLOUD:

                    <routes xmlns=\"http://camel.apache.org/schema/spring\">\n  <route id=\"cloudConsumer\">\n    <from uri=\"kura-cloud:foo/bar\"/>\n    <to uri=\"log:MESSAGE_FROM_CLOUD\"/>\n  </route>\n</routes>\n

                    But it is also possible to generate data and push to upstream to the cloud service:

                    <route id=\"route1\">\n  <from uri=\"timer:foo\"/>\n  <setBody>\n    <method ref=\"payloadFactory\" method=\"create('random',${random(10)})\"/>\n  </setBody>\n  <bean ref=\"payloadFactory\" method=\"append('foo','bar')\"/>\n  <to uri=\"stream:out\"/>\n  <to uri=\"kura-cloud:myapp/test\"/>\n</route>\n

                    This example to run a timer named \"foo\" every second. It uses the \"Payload Factory\" bean, which is pre-registered, to create a new payload structure and then append a second element to it.

                    The output is first sent to a logger and then to the cloud source.

                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#defining-dependencies-on-components","title":"Defining dependencies on components","text":"

                    It is possible to use the Web UI to define a list of Camel components which must be present in order for this configuration to work. For example if the routes make use of the \"milo-server\" adapter for providing OPC UA support then \"milo-server\" can be added and the setup will wait for this component to be registered with OSGi before the Camel context gets started.

                    The field contains a list of comma separated component names: e.g. milo-server, timer, log

                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#selecting-a-cloud-service","title":"Selecting a cloud service","text":"

                    It is also possible to define a map of cloud services which will be available for upstream connectivity. This makes use of Kura's \"multi cloud client\" feature. CloudService instances will get mapped from either a Kura Service PID (kura.service.pid, as shown in the Web UI) or a full OSGi filter. The string is a comma seperated, key=value string, where the key is the name of the Camel cloud the instance will be registered as and the value is the Kura service PID or the OSGi filter string.

                    For example: cloud=org.eclipse.kura.cloud.CloudService, cloud-2=foobar

                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#custom-camel-routers","title":"Custom Camel routers","text":"

                    If a standard XML route configuration is not enough then it is possible to use XML routes in combination with a custom OSGi bundle or a Java DSL based Camel approach. For this to work a Kura development setup is required, please see Getting started for more information.

                    The implementation of such Camel components follow the standard Kura guides for developing components, like, for example, the ConfigurableComponent pattern. This section only describes the Camel specifics.

                    Of course it is also possible to follow a very simple approach and directly use the Camel OSGi functionalities like org.apache.camel.core.osgi.OsgiDefaultCamelContext.

                    Note

                    Kura currently doesn't support the OSGi Blueprint approach

                    Kura support for Camel is split up in two layers. There is a more basic support, which helps in running a raw Camel router. This is CamelRunner which is located in the package org.eclipse.kura.camel.router. And then there are a few abstract basic components in the package org.eclipse.kura.camel.component which help in creating Kura components based on Camel.

                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#camel-components","title":"Camel components","text":"

                    The base classes in org.eclipse.kura.camel.component are intended to help creating new OSGi DS components base on Camel.

                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#xml-based-component","title":"XML based component","text":"

                    For an XML based approach which can be configured through the Kura ConfigurationService the base class AbstractXmlCamelComponent can be used. The constructor expectes the name of a property which will contain the Camel XML router information when it gets configured through the configuration service. It will automatically parse and apply the Camel routes.

                    The method void beforeStart(CamelContext camelContext) may be used in order to configure the Camel context before it gets started.

                    Every time the routes get updated using the modified(Map<String, Object>) method, the route XML will be re-parsed and routes will be added, removed or updated according to the new XML.

                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#java-dsl-based-component","title":"Java DSL based component","text":"

                    In order to create a Java DSL based router setup the base class AbstractJavaCamelComponent may be used, which implements and RouteBuilder class, a simple setup might look like:

                    import org.eclipse.kura.camel.component.AbstractJavaCamelComponent;\n\nclass MyRouter extends AbstractJavaCamelComponent {\n   public void configure() throws Exception {\n      from(\"direct:test\")\n         .to(\"mock:test\");\n   }\n}\n
                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#using-the-camelrunner","title":"Using the CamelRunner","text":"

                    The CamelRunner class is not derived from any OSGi or Kura base class and can be used in scenarios where more flexibility is required. It allows to define a set of pre-requisites for the Camel context. It is for example possible to define a dependency on a Kura cloud service instance and a Camel component provider. Once the runner is started it will listen for OSGi services resolving those dependencies and then starting up the Camel context. The following example shows how to set up a Camel context using the CamelRunner:

                    // create a new camel Builder\n\nBuilder builder = new CamelRunner.Builder();\n\n// add service dependency\n\nbuilder.cloudService(\"kura.service.pid\", \"my.cloud.service.pid\");\n\n// add Camel component dependency to 'milo-server'\n\nbuilder.requireComponent(\"milo-server\");\n\nCamelRunner runner = builder.build();\n\n// set routes\n\nrunner.setRoutes ( new RouteBuilder() {\n  public void configure() throws Exception {\n    from(\"direct:test\")\n      .to(\"mock:test\");\n  }\n} );\n\n// set routes\n\nrunner.start ();\n

                    It is also possible to later update routes with a call to setRoutes:

                    // maybe update routes at a later time\n\nrunner.setRoutes ( /* different routes */ );\n
                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#examples","title":"Examples","text":"

                    The following examples can help in getting started.

                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#kura-camel-example-publisher","title":"Kura Camel example publisher","text":"

                    The Camel example publisher (org.eclipse.kura.example.camel.publisher) can be used as an reference for starting. The final OSGi bundle can be dropped into a Kura application an be started. It allows to configure dynamically during runtime and is capable of switching CloudService instances dynamically.

                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#kura-camel-quickstart","title":"Kura Camel quickstart","text":"

                    The Camel quickstart project (org.eclipse.kura.example.camel.quickstart) shows two components, Java and XML based, working together. The bundle can also be dropped into Kura for testing.

                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-app/#kura-camel-aggregation","title":"Kura Camel aggregation","text":"

                    The Camel quickstart project (org.eclipse.kura.example.camel.aggregation) shows a simple data aggregation pattern with Camel by processing data and publishing the result.

                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel-cloud/","title":"Apache Camel\u2122 as a Kura cloud service","text":"

                    The default way to create a new cloud service instance backed by Camel is to use the new Web UI for cloud services. A new cloud service instance of the type org.eclipse.kura.camel.cloud.factory.CamelFactory has to be created. In addition to that a set of Camel routes have to be provided.

                    The interface with the Kura application is the Camel vm component. Information set \"upstream\" from the Kura application can be received by the Camel cloud service instance of the following endpoint vm:camel:example. Where camel is the application id and example is the topic.

                    The following code snippet writes out all of the Kura payload structure received on this topic to the logger system:

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<routes xmlns=\"http://camel.apache.org/schema/spring\">\n\n  <route id=\"camel-example-topic\">\n    <from uri=\"vm:camel:example\"/>\n    <split>\n      <simple>${body.metrics().entrySet()}</simple>\n      <setHeader headerName=\"item\">\n        <simple>${body.key()}</simple>\n      </setHeader>\n      <setBody>\n        <simple>${body.value()}</simple>\n      </setBody>\n      <toD uri=\"log:kura.data.${header.item}\"/>\n    </split>\n  </route>\n\n</routes>\n

                    The snippet splits up the incoming KuraPayload structure and creates a logger called kura.data.<metric> for each metric and writes out the actual value to it. The output in the log file should look like:

                    2016-11-14 16:14:34,539 [Camel (camel-10) thread #18 - vm://camel:example] INFO  k.d.intValue - Exchange[ExchangePattern: InOnly, BodyType: Long, Body: 19]\n2016-11-14 16:14:34,566 [Camel (camel-10) thread #18 - vm://camel:example] INFO  k.d.doubleValue - Exchange[ExchangePattern: InOnly, BodyType: Double, Body: 10.226808617581144]\n2016-11-14 16:14:35,575 [Camel (camel-10) thread #18 - vm://camel:example] INFO  k.d.intValue - Exchange[ExchangePattern: InOnly, BodyType: Long, Body: 19]\n2016-11-14 16:14:35,602 [Camel (camel-10) thread #18 - vm://camel:example] INFO  k.d.doubleValue - Exchange[ExchangePattern: InOnly, BodyType: Double, Body: 10.27218775669447]\n2016-11-14 16:14:36,539 [Camel (camel-10) thread #18 - vm://camel:example] INFO  k.d.intValue - Exchange[ExchangePattern: InOnly, BodyType: Long, Body: 19]\n2016-11-14 16:14:36,567 [Camel (camel-10) thread #18 - vm://camel:example] INFO  k.d.doubleValue - Exchange[ExchangePattern: InOnly, BodyType: Double, Body: 10.314456684208022]\n
                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel/","title":"Apache Camel\u2122 integration overview","text":"

                    Note

                    This document describes the Camel integration for Kura 2.1.0

                    Kura provides two main integration points for Camel:

                    • Camel as a Kura application
                    • Camel as a Kura cloud service

                    The first allows one to configure Camel to provide data and receive commands from any CloudService instance which is configured in Kura. For example the default CloudService instance which is backed by MQTT.

                    The second approach allows one to create a custom CloudService implementation and route data coming from other Kura applications with the routes provided by this Camel context.

                    "},{"location":"cloud-platform/apache-camel-integration/kura-camel/#deploying-additional-camel-components","title":"Deploying additional Camel components","text":"

                    Kura comes with the following Camel components pre-installed:

                    • camel-core
                    • camel-core-osgi
                    • camel-stream

                    If additional Camel components are required, they can be installed using deployment packages (DP), as common with Kura.

                    There are pre-packaged DPs available for e.g. AMQP, OPC UA, MQTT and other Camel components outside of the Kura project.

                    "},{"location":"connect-field-devices/IO-apis/","title":"I/O APIs","text":"

                    The full Eclipse Kura API reference is available here.

                    In this page, the developer can find a synthetic grouping of the I/O APIs added starting from Kura 3.1.0.

                    • Drivers

                      • ChannelDescriptor
                      • ChannelListener
                      • ChannelRecord
                      • ConnectionException

                    • Assets

                      • AssetConfiguration
                      • Channel
                    "},{"location":"connect-field-devices/asset-implemetation/","title":"Asset implementation","text":"

                    An Asset is a logical representation of a field device, described by a list of Channels. The Asset uses a specific Driver instance to communicate with the underlying device and it models a generic device resource as a Channel. A register in a PLC or a GATT Characteristic in a Bluetooth device are examples of Channels. In this way, each Asset has multiple Channels for reading and writing data from/to an Industrial Device.

                    Assets can be used as Wire Components to access the resources referenced by the defined channels inside a Wire Graph, see the Assets as Wire Components guide for more details.

                    "},{"location":"connect-field-devices/asset-implemetation/#channel-example","title":"Channel Example","text":"

                    To further describe the concept of Channel and Asset, the following table shows a set of PLC register addresses as provided in a typical PLC documentation.

                    Name Entity Address LED1 COILS 2049 LED2 COILS 2050 LED3 COILS 2051 LED4_RED COILS 2052 LED4_GREEN COILS 2053 LED4_BLUE COILS 2054 Counter_3 INPUT REGISTERS 515 Quad_Counter INPUT REGISTERS 520 Toggle_4 DISCRETE INPUTS 2052 Toggle_5 DISCRETE INPUTS 2053 Toggle_6 DISCRETE INPUTS 2054 Reset_Counter_3 COILS 3075 Reset_Quad_Counter COILS 3084

                    The corresponding Channels definition in the Asset is as follows:

                    As shown in the previous image, the Channel definition in an Asset results easily mappable to what available in a generic PLC documentation.

                    Once defined the Channels in an Asset, a simple Java application that leverages the Asset API can easily communicate with the Field device by simply referring to the specific Channel of interest.

                    "},{"location":"connect-field-devices/asset-implemetation/#channel-definition","title":"Channel Definition","text":"
                    • enabled: each channel can be separately enabled using this flag.
                    • name: unique user-friendly name for a channel
                    • type: represents the type of operation supported. Possible values are: READ, WRITE, READ/WRITE
                    • value.type: represents the data type that will be used when creating the Wire Envelope for the connected components and the output value for READ channel.
                    • scale: an optional scaling factor to be applied only to the numeric values retrieved from the field. It is parsed as a double. See below for more details.
                    • offset: an optional offset value that will be added only to the numeric values retrieved from the field. It is parsed as a double. See below for more details.
                    • scaleoffset.type: Allows to customise the way scale and offset is applied. See below for more details.
                    • unit: an optional string value that will be added to the asset channel read to represent the unit of measure associated to that specific channel.
                    • listen: if supported by the associated driver, allows to receive notifications by the driver on events. This flag currently has effect only inside Kura Wires.

                    For the READ and READ/WRITE channels, the Asset typically asks the driver to provide a value based on the value.type. If the scaleoffset.type is LONG or DOUBLE, the type requested will be one of these and the final value (after the scale and offset operation) will be transformed into the data type expected by value.type.

                    "},{"location":"connect-field-devices/asset-implemetation/#arithmetic-with-scale-and-offset","title":"Arithmetic with scale and offset","text":"

                    The Asset supports applying a scale and offset to the values obtained by the attached Driver during read operations and to the values received in listen mode.

                    Warning

                    Application of scale and offset for write operations is not supported.

                    The following modes are implemented for computing scale and offset:

                    • DOUBLE
                    • INTEGER
                    • LONG
                    • FLOAT

                    The values of the scale and offset configuration parameters and the value obtained from the Driver are all converted to the mode type using the Java casting and then the following operation is performed: channel_value * scale + offset. The operation result is casted again to value.type to produce the final channel value.

                    The values of the scale and offset parameters are parsed from channel configuration as doubles.

                    The mode can be selected in the following way:

                    • If the scaleoffset.type is set to DOUBLE or LONG the corrisponding mode will be used. The largest representable LONG is 2^53
                    • If the scaleoffset.type value is DEFINED_BY_VALUE_TYPE the operation mode is determinated by value.type.

                    Example of DOUBLE mode: channel configured with:

                    • value.type: INTEGER
                    • scaleoffset.type: DOUBLE
                    • scale: 3.25
                    • offset: 1.5

                    Since scaleoffset.type is DOUBLE, the scale and offset mode is forced to DOUBLE.

                    If channel_value is 5 (INTEGER) the result is: (int) ((double) channel_value * (double) 3.25d + (double) 1.5d) = 17.

                    Example of INTEGER mode: channel configured with:

                    • value.type: INTEGER
                    • scaleoffset.type: DEFINED_BY_VALUE_TYPE
                    • scale: 3.25
                    • offset: 1.5

                    Since scaleoffset.type is DEFINED_BY_VALUE_TYPE, the mode determined by the value.type parameter (INTEGER) will be used.

                    If channel_value is 5 (INTEGER) the result is: (int) (channel_value * (int) 3.25d + (int) 1.5d) = 16.

                    Example of DOUBLE mode: channel configured with:

                    • value.type: DOUBLE
                    • scaleoffset.type: DEFINED_BY_VALUE_TYPE
                    • scale: 3.25
                    • offset: 1.5

                    If channel_value is 5 (DOUBLE) the result is: (double) (channel_value * (double) 3.25d + (double) 1.5d) = 17.75.

                    Warning

                    If the mode is LONG or INTEGER the decimal part of the scale and offset value will be discarded.

                    As the examples show the final result can be different depending on the used mode and value.type.

                    "},{"location":"connect-field-devices/asset-implemetation/#driver-specific-parameters","title":"Driver specific parameters","text":"

                    The parameters that are not included in list of driver independent parameters above are driver specific. These parameters are used to identify the resource addressed by the channel.

                    Driver specific parameters are described in the driver documentation.

                    "},{"location":"connect-field-devices/asset-implemetation/#other-asset-configurations","title":"Other Asset Configurations","text":"
                    • asset.desc: a user friendly description of the asset
                    • emit.all.channels: specifies whether the values of all READ or READ_WRITE channels should be emitted in case of a channel event. If set to true, the values for all channels will be read and emitted, if set to false, only the value for the channel related to the event will be emitted.
                    • timestamp.mode: if set to PER_CHANNEL, the component will emit a driver-generated timestamp per channel property. If set to SINGLE_ASSET_GENERATED, the component will emit a single timestamp per request, generated by the Asset itself before emitting the envelope. If set to SINGLE_DRIVER_GENERATED_MAX or SINGLE_DRIVER_GENERATED_MIN, the component will emit a single driver generated timestamp being respectively the max (most recent) or min (oldest) among the timestamps of the channels.
                    • emit.errors: Specifies whether errors should be included or not in the emitted envelope. Default is false.
                    • emit.on.change: If set to true, this component will include a channel value in the output emitted in Kura Wires only if it is different than the one from the previous read operation or event. Channel errors will always be emitted if emit.errors is set to true.
                    • emit.empty.envelopes: If set to false, this component will not emit empty envelopes. This property can be useful if combined with emit.on.change.
                    "},{"location":"connect-field-devices/asset-implemetation/#channels-download","title":"Channels download","text":"

                    The creation of the channels is a process that could be very time and effort consuming. For this reason, once the user has created the desired channels, it is possible to download the entire list from the web UI, by clicking the Download Channels button:

                    The list is downloaded in csv format and is represented in the form of a table, whose columns represent the entries for the options in the channel definition, while each row is equivalent to a specific channel. For example, the resulting csv file retrieved from downloading the list of channels in the image above is:

                    The resulting table is composed by some static, pre-defined options (the ones mentioned in Channel Definition section above, from enabled to listen) that are the same for each component and the ones introduced by the specific bundle under analisys. In this case, the modbus driver introduces these driver-specific options:

                    • unit.id
                    • primary.table
                    • memory.address
                    • data.order
                    • data.type
                    • array.data.length

                    The download tool is extremely useful in all those situations where the user wants to quickly load a long list of channels at once: for example, it can easily clone the same list in multiple assets, export it to another device, or simply save it locally to always have a copy of the channels ready.

                    "},{"location":"connect-field-devices/asset-implemetation/#csv-upload","title":"CSV upload","text":"

                    The Upload Channels button allows the user to load a local csv file to create the channel list in one shot: the uploading file must implement the same table-structure described in the \"Channels download\" section above, so with each rows representing a channels, and each column one entry of the channel's options.

                    Once the user clicks on the button, will be shown a pop-up in which there are a button to locate the file in the user's filesystem and two checkboxes to allow the uploading phase customization. After clicking on Upload, if the process is succesful, the new channels list will be shown, and the user is just asked to click on the Apply button to save the asset variation.

                    "},{"location":"connect-field-devices/asset-implemetation/#force-import-empty-string-policy","title":"Force import empty string policy","text":"

                    The Force import empty string policy checkbox forces the parsing of all empty values present in the csv as empty strings, for all those channel's options that are typed to String and \"not required\" by the metatype.

                    So, this box must be checked when the user wants that all empty values from the csv are considered as empty strings (\"\") when parsed to driver-specific channel option, defined by the metatype as String type and not required. So, those values that are null in the csv, will be set as \"\" in the channel options. The user must be cautious, because the framework supposes that it's consciously leaving empty values in the csv.

                    Otherwise, if the box is unchecked, all the csv empty values will be considered as null strings and parsed to the default value set in the metatype of the driver.

                    If, for example, the user downloads the channels list following the steps described in the precious section, it could upload the same csv file into an other asset, or another device, to get the exactly same asset configuration.

                    "},{"location":"connect-field-devices/asset-implemetation/#replace-current-channels","title":"Replace current channels","text":"

                    The Replace current channels must be checked when the user wants to replace all the channels currently present in the asset, with the ones that will be created by the csv uploading.

                    "},{"location":"connect-field-devices/asset-v1-mqtt-namespace/","title":"ASSET-V1 MQTT Namespace","text":"

                    The ASSET-V1 namespace allows to perform remote operations on the assets defined in an Kura-powered device. The requests and responses are represented as JSON arrays placed in the body of the MQTT payload.

                    The namespace includes the following topics.

                    "},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#getassets","title":"GET/assets","text":"

                    This topic is used to retrieve metadata describing the assets defined on a specific device and their channel configuration.

                    "},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#request-format","title":"Request format","text":"

                    The request can contain JSON array containing a list of asset names for which the metadata needs to be returned. The request JSON must have the following structure:

                    [\n  {\n    \"name\": \"asset1\"\n  },\n  {\n    \"name\": \"otherAsset\"\n  }\n]\n

                    The request JSON is an array with all elements of the type object. The array object has the following properties:

                    • name (string, required): the name of the Asset for which the metadata needs to be returned.

                    If the provided array is empty or the request payload is empty, the metadata describing all assets present on the device will be returned.

                    "},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#response-format","title":"Response format","text":"

                    The response payload contains a JSON array with the following structure:

                    [\n  {\n    \"name\": \"asset1\",\n    \"channels\": [\n      {\n        \"name\": \"first_channel\",\n        \"type\": \"INTEGER\",\n        \"mode\": \"READ\"\n      },\n      {\n        \"name\": \"second_channel\",\n        \"type\": \"BOOLEAN\",\n        \"mode\": \"READ_WRITE\"\n      },\n      {\n        \"name\": \"other_channel\",\n        \"type\": \"STRING\",\n        \"mode\": \"WRITE\"\n      }\n    ]\n  },\n  {\n    \"name\": \"otherAsset\",\n    \"channels\": []\n  },\n  {\n    \"name\": \"nonExistingAsset\",\n    \"error\": \"Asset not found\"\n  }\n]\n

                    All elements of the array are of the type object. The array object has the following properties:

                    • name (string, required): the name of the asset
                    • error (string): this property is present only if the metadata for a not existing asset was explicitly requested, it contains an error message.
                    • channels (array): the list of channels defined on the asset, it can be empty if no channels are defined. This property and the error property are mutually exclusive. This object is an array with all elements of the type object and they have the following properties:
                      • name (string, required): the name of the channel.
                      • mode (string, required): the mode of the channel. The possible values are READ, WRITE or READ_WRITE.
                      • type (string, required): the value type of the channel. The possible values are BOOLEAN, BYTE_ARRAY, DOUBLE, INTEGER, LONG, FLOAT, STRING.
                    "},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#execread","title":"EXEC/read","text":"

                    This topic is used to perform a read operation on a specified set of assets and channels.

                    "},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#request-format_1","title":"Request format","text":"

                    The request can contain a JSON array with the following structure:

                    [\n  {\n    \"name\": \"asset1\",\n    \"channels\": [\n      {\n        \"name\": \"channel1\"\n      },\n      {\n        \"name\": \"channel2\"\n      },\n      {\n        \"name\": \"otherChannel\"\n      }\n    ]\n  },\n  {\n    \"name\": \"otherAsset\"\n  }\n]\n

                    The request JSON is an array with all elements of the type object. If the list is empty or if the request payload is empty all channels of all assets will be read. The array object has the following properties:

                    • name (string, required): the name of the asset involved in the read operation
                    • channels (array): the list of the names of the channels to be read, if this property is not present or if its value is an empty array, all channels for the specified asset will be read. The object is an array with all elements of the type object. The array object has the following properties:
                    • name (string, required): the name of the channel to be read
                    "},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#response-format_1","title":"Response Format","text":"

                    The response is returned as a JSON array placed in the body of the response:

                    [\n  {\n    \"name\": \"asset1\",\n    \"channels\": [\n      {\n        \"name\": \"first_channel\",\n        \"type\": \"INTEGER\",\n        \"value\": \"432\",\n        \"timestamp\": 1234550\n      },\n      {\n        \"name\": \"second_channel\",\n        \"type\": \"BOOLEAN\",\n        \"value\": \"true\",\n        \"timestamp\": 1234550\n      },\n      {\n        \"name\": \"other_channel\",\n        \"error\": \"Read failed\",\n        \"timestamp\": 1234550\n      },\n      {\n        \"name\": \"binary_channel\",\n        \"type\": \"BYTE_ARRAY\",\n        \"value\": \"dGVzdCBzdHJpbmcK\",\n        \"timestamp\": 1234550\n      }\n    ]\n  },\n  {\n    \"name\": \"nonExistingAsset\",\n    \"error\": \"Asset not found\"\n  }\n]\n

                    The response JSON is an array with all elements of the type object. The array object has the following properties:

                    • name (string, required): the name of the asset.
                    • error (string): an error message. This property is present only if a read operation for a not existing asset was explicitly requested.
                    • channels (array): the object is an array with all elements of the type object. The array object has the following properties:
                    • name (string, required): the name of the channel.
                    • timestamp (integer, required): the device timestamp associated with the result in milliseconds since the Unix Epoch.
                    • type (string): the type of the result. This property is present only if the operation succeeded. The possible values are BOOLEAN, BYTE_ARRAY, DOUBLE, INTEGER, LONG, FLOAT, STRING.
                    • value (string): the result value of the read request encoded as a String. This property is present only if the operation succeeded. If the channel type is BYTE_ARRAY, the result will be represented using the base64 encoding.
                    • error (string): an error message. This property is present only if the operation failed.
                    "},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#execwrite","title":"EXEC/write","text":"

                    Performs a write operation on a specified set of channels and assets.

                    "},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#request-format_2","title":"Request format","text":"

                    The request must contain a JSON array with the following structure:

                    [\n  {\n    \"name\": \"asset1\",\n    \"channels\": [\n      {\n        \"name\": \"first_channel\",\n        \"type\": \"INTEGER\",\n        \"value\": \"432\",\n      },\n      {\n        \"name\": \"second_channel\",\n        \"type\": \"BOOLEAN\",\n        \"value\": \"true\",\n      },\n      {\n        \"name\": \"binary_channel\",\n        \"type\": \"BYTE_ARRAY\",\n        \"value\": \"dGVzdCBzdHJpbmcK\",\n      }\n    ]\n  }\n]\n

                    The array object has the following properties:

                    • name (string, required): the name of the asset.
                    • channels (array, required): the list of channel names and values to be written. The object is an array with all elements of the type object. The array object has the following properties:
                      • name (string, required): the name of the channel.
                      • type (string, required): the type of the value to be written. The allowed values are BOOLEAN, BYTE_ARRAY, DOUBLE, INTEGER, LONG, FLOAT, STRING.
                      • value (string, required): the value to be written encoded as a String. If the channel type is BYTE_ARRAY, the base64 encoding must be used.
                    "},{"location":"connect-field-devices/asset-v1-mqtt-namespace/#response-format_2","title":"Response format","text":"

                    The response uses the same format as the EXEC/read request, in case of success the type and value properties in the response will report the same values specified in the request.

                    "},{"location":"connect-field-devices/driver-and-assets/","title":"Drivers, Assets and Channels","text":"

                    Eclipse Kura introduces a model based on the concepts of Drivers and Assets to simplify the communication with the field devices attached to a gateway.

                    A Driver encapsulates the communication protocol and its configuration parameters, dealing with the low-level characteristics of the field protocol. It opens, closes and performs the communication with the end field device. It also exposes field protocol specific information that can be used by upper levels of abstraction to simplify the interaction with the end devices.

                    An Asset is a logical representation of a field device, described by a list of Channels. The Asset uses a specific Driver instance to communicate with the underlying device and it models a generic device resource as a Channel. A register in a PLC or a GATT Characteristic in a Bluetooth device are examples of Channels. In this way, each Asset has multiple Channels for reading and writing data from/to an Industrial Device.

                    "},{"location":"connect-field-devices/driver-and-assets/#channel-example","title":"Channel Example","text":"

                    To further describe the concept of Channel and Asset, the following table shows a set of PLC register addresses as provided in a typical PLC documentation.

                    Name Entity Address LED1 COILS 2049 LED2 COILS 2050 LED3 COILS 2051 LED4_RED COILS 2052 LED4_GREEN COILS 2053 LED4_BLUE COILS 2054 Counter_3 INPUT REGISTERS 515 Quad_Counter INPUT REGISTERS 520 Toggle_4 DISCRETE INPUTS 2052 Toggle_5 DISCRETE INPUTS 2053 Toggle_6 DISCRETE INPUTS 2054 Reset_Counter_3 COILS 3075 Reset_Quad_Counter COILS 3084

                    The corresponding Channels definition in the Asset is as follows:

                    As shown in the previous image, the Channel definition in an Asset results easily mappable to what available in a generic PLC documentation.

                    Once defined the Channels in an Asset, a simple Java application that leverages the Asset API can easily communicate with the Field device by simply referring to the specific Channel of interest.

                    "},{"location":"connect-field-devices/driver-and-assets/#drivers-and-assets-in-kura-administrative-ui","title":"Drivers and Assets in Kura Administrative UI","text":"

                    Kura provides a specific section of the UI to allow users to manage the different instances of Drivers and Assets. Using the Kura Web UI the user can instantiate and manage Drivers

                    but also can manage Assets instances based on existing drivers. By default the following columns are hidden: scale, offset, scaleoffset.type, unit. You can manage the visible columns with the related button in the button bar.

                    The user interface allows also to perform specific reads on the configured Assets' channels clicking on the Data tab for the selected Asset.

                    "},{"location":"connect-field-devices/driver-implemetation/","title":"Driver implementation","text":"

                    A Driver encapsulates the communication protocol and its configuration parameters.

                    The Driver API abstracts the specificities of the end Fieldbus protocols providing a clean and easy to use set of calls that can be used to develop end-applications.

                    Using the Driver APIs, an application can simply use the connect and disconnect methods to open or close the connection with the Field device. Furthermore, the read and write methods allow exchanging data with the Field device.

                    A Driver instance can be associated with an Asset to abstract even more the low-level specificities and allow an easy and portable development of the Java applications that need to interact with sensors, actuators, and PLCs.

                    The Asset will use the Driver's protocol-specific channel descriptor to compose the Asset Channel description.

                    "},{"location":"connect-field-devices/driver-implemetation/#driver-configuration","title":"Driver Configuration","text":"

                    Generally, a Driver instance is a configurable component which parameters can be updated in the Drivers and Assets section of the Kura Administrative User Interface.

                    "},{"location":"connect-field-devices/driver-implemetation/#supported-field-protocols-and-availability","title":"Supported Field Protocols and Availability","text":"

                    Drivers will be provided as add-ons available in the Eclipse IoT Marketplace. Please see here for a complete list.

                    "},{"location":"connect-field-devices/driver-implemetation/#driver-specific-optimizations","title":"Driver-Specific Optimizations","text":"

                    The Driver API provides a simple method to read a list of Channel Records:

                    public void read(List<ChannelRecord> records) throws ConnectionException;\n

                    Typically, since the records to read do not change until the Asset configuration is changed by the user, a Driver can perform some optimisations to efficiently read the requested records at once. For example, a Modbus driver can read a range of holding registers using a single request.

                    Since these operations are costly, the Kura API adds methods to ask the driver to prepare reading a given list of records and execute the prepared read:

                    public PreparedRead prepareRead(List<ChannelRecord> records);\n

                    Invocation of the preparedRead method will result in a PreparedRead instance returned.

                    On a PreparedRead, the execute method will perform the optimized read request.

                    "},{"location":"connect-field-devices/eddystone-driver/","title":"Eddystone\u2122 Driver","text":"

                    Eclipse Kura offers support for Eddystone\u2122 protocol via a specific driver. It can be used into the Wires framework, the Asset model or directly using the Driver itself.

                    "},{"location":"connect-field-devices/eddystone-driver/#features","title":"Features","text":"

                    The Eddystone\u2122 driver is designed to listen for incoming beacon packets and to recognise the specific protocol. Of course it's not possible to write data to the beacons, since this is outside the protocol specification. The frame format to be filtered can be chosen from the channel definition. For more information about Eddystone\u2122 frame format, see here.

                    "},{"location":"connect-field-devices/eddystone-driver/#installation","title":"Installation","text":"

                    As the others Drivers supported by Eclipse Kura, it is distributed as a deployment package on the Eclipse Marketplace here. It can be installed following the instructions provided here.

                    "},{"location":"connect-field-devices/eddystone-driver/#instance-creation","title":"Instance creation","text":"

                    A new Eddystone Driver instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.eddsytone factory must be selected and a unique name must be provided for the new instance. Once instantiated, the Driver has to be configured setting the Bluetooth interface name (i.e. hci0) that will be used to connect to the device.

                    "},{"location":"connect-field-devices/eddystone-driver/#channel-configuration","title":"Channel configuration","text":"

                    The Eddystone Driver channel can be configured with the following parameters:

                    • enabled: it allows to enable/disable the channel. If it isn't selected the channel will be ignored.
                    • name: the channel name.
                    • type: the channel type, (READ, WRITE, or READ_WRITE).
                    • value.type: the Java type of the channel value. The value read by the Driver will be converted to the value.type.
                    • listen: when selected, a listener will be attached to this channel. Any event on the channel will be reported using a callback and the value will be emitted.
                    • eddystone.type: the type of the frame. Currently only UID and URL typed are supported.
                    "},{"location":"connect-field-devices/field-protocols/","title":"Field Protocols","text":"

                    Eclipse Kura provides support for field protocol implementations as add-ons deployable directly from the Eclipse Marketplace for IoT site. Moreover, several devices are supported using the Kura Driver model.

                    Currently, the following field protocols and devices are supported and downloadable from the Eclipse Marketplace in form of Kura Drivers:

                    Protocol/Device Kura 3.x Kura 4.x Kura 5.x OPC-UA link link link S7 link link link iBeacon N.A. link link Eddystone N.A. link link TiSensorTag link link link GPIO link link link SenseHat link link link"},{"location":"connect-field-devices/gpio-driver/","title":"GPIO Driver","text":"

                    The GPIO Driver manages the General Purpose IOs on a gateway using the Driver model. Based on the GPIO Service, the driver can be used in the Wires framework, the Asset model or directly using the Driver itself.

                    "},{"location":"connect-field-devices/gpio-driver/#features","title":"Features","text":"

                    The GPIO Driver includes the following features:

                    • support for digital input and output
                    • support for unsolicited inputs
                    • the trigger event can be configured directly through the Driver
                    "},{"location":"connect-field-devices/gpio-driver/#installation","title":"Installation","text":"

                    As the other Drivers supported by Eclipse Kura, it is distributed as a deployment package on the Eclipse Marketplace for Kura 3.x and 4.x/5.x. It can be installed following the instructions provided here.

                    "},{"location":"connect-field-devices/gpio-driver/#instance-creation","title":"Instance creation","text":"

                    A new GPIO Driver instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.gpio factory must be selected and a unique name must be provided for the new instance. Once instantiated, the GPIO Driver is ready to use and no configuration is needed.

                    "},{"location":"connect-field-devices/gpio-driver/#channel-configuration","title":"Channel configuration","text":"

                    The GPIO Driver channel can be configured with the following parameters:

                    • enabled: it allows to enable/disable the channel. If it isn't selected the channel will be ignored.
                    • name: the channel name.
                    • type: the channel type, (READ, WRITE, or READ_WRITE).
                    • value.type: the Java type of the channel value. The value read by the Driver will be converted to the value.type. Conversely, in write operations the Driver will accept value of this kind.
                    • listen: when selected, a listener will be attached to this channel. Any event on the channel will be reported using a callback and the value will be emitted.
                    • resource.name: the name of the GPIO resource as reported by the GPIO Service. The #select resource selection has no effect on the channel.
                    • resource.direction: the direction of the GPIO. Possible values are INPUTand OUTPUT. The #select direction selection has no effect on the channel.

                    • resource.trigger: the type of event that triggers the listener, if selected. Possible values are:

                    • NONE: no event will trigger the listener.

                    • RISING_EDGE, FALLING_EDGE, BOTH_EDGES: the listeners will be triggered respectively by a low-high transition, a high-low transition or both.
                    • HIGH_LEVEL,LOW_LEVEL, BOTH_LEVELS: the listeners will be triggered respectively by the detection of a high, low or both levels. Please note that these options aren't supported by all the devices.
                    "},{"location":"connect-field-devices/gpio-driver/#drive-a-led-using-the-gpio-driver","title":"Drive a LED using the GPIO Driver","text":"

                    In this section a simple example on the GPIO Driver using a RaspberryPi will be presented. Before configuring the Driver, arrange a setup as shown in the following picture, using a breadboard, a led, a 120-ohm resistor and some wires. Connect the yellow wire to a ground pin on the RasperryPi connector (i.e. pin 6) and the red one to pin 40 (a.k.a. gpio21).

                    From the Drivers and Assets tab, create a new GPIO Driver, call it GPIODriver and add an Asset as shown in the following picture.

                    The asset is configured to manage a gpio, called LED, as an output and drives it writing a boolean value. The LED channel is attached to the gpio21 on the RaspberryPi. In the Data tab, fill the Value form with true and press Apply: the green led will switch on. Writing a false will switch off the led.

                    "},{"location":"connect-field-devices/ibeacon-driver/","title":"iBeacon\u2122 Driver","text":"

                    Eclipse Kura provides a driver specifically developed to manage iBeacon\u2122 protocol. They can be used into the Wires framework, the Asset model or directly using the Driver itself.

                    "},{"location":"connect-field-devices/ibeacon-driver/#features","title":"Features","text":"

                    The iBeacon\u2122 driver is designed to listen for incoming beacon packets and to recognise the specific protocol. Of course it's not possible to write data to the beacons, since this is outside the protocol specification.

                    "},{"location":"connect-field-devices/ibeacon-driver/#installation","title":"Installation","text":"

                    As the others Drivers supported by Eclipse Kura, it is distributed as a deployment package on the Eclipse Marketplace here. It can be installed following the instructions provided here.

                    "},{"location":"connect-field-devices/ibeacon-driver/#instance-creation","title":"Instance creation","text":"

                    A new iBeacon instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.ibeacon factory must be selected and a unique name must be provided for the new instance. Once instantiated, the Driver has to be configured setting the Bluetooth interface name (i.e. hci0) that will be used to connect to the device.

                    "},{"location":"connect-field-devices/ibeacon-driver/#channel-configuration","title":"Channel configuration","text":"

                    The iBeacon Driver channel can be configured with the following parameters:

                    • enabled: it allows to enable/disable the channel. If it isn't selected the channel will be ignored.
                    • name: the channel name.
                    • type: the channel type, (READ, WRITE, or READ_WRITE).
                    • value.type: the Java type of the channel value. The value read by the Driver will be converted to the value.type.
                    • listen: when selected, a listener will be attached to this channel. Any event on the channel will be reported using a callback and the value will be emitted.
                    "},{"location":"connect-field-devices/opcua-driver/","title":"OPC UA Driver","text":"

                    This Driver implements the client side of the OPC UA protocol using the Driver model. The Driver can be used to interact as a client with OPC UA servers using different abstractions, such as the Wires framework, the Asset model or by directly using the Driver itself.

                    The Driver is distributed as a deployment package on Eclipse Marketplace for Kura 3.x and 4.x/5.x. It can be installed following the instructions provided here.

                    "},{"location":"connect-field-devices/opcua-driver/#features","title":"Features","text":"

                    The OPC UA Driver features include:

                    • Support for the OPC UA protocol over TCP.
                    • Support for reading and writing OPC UA variable nodes by node ID.
                    "},{"location":"connect-field-devices/opcua-driver/#instance-creation","title":"Instance creation","text":"

                    A new OPC UA instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.opcua factory must be selected and a unique name must be provided for the new instance.

                    "},{"location":"connect-field-devices/opcua-driver/#channel-configuration","title":"Channel configuration","text":"

                    The OPC UA Driver channel configuration is composed of the following parameters:

                    • name: the channel name.
                    • type: the channel type, (READ, WRITE, or READ_WRITE).
                    • value type: the Java type of the channel value.
                    • node.id: The node id of the variable node to be used, the format of the node id depends on the value of the node.id.type property.
                    • node.namespace.index: The namespace index of the variable node to be used.

                    • opcua.type: The OPC-UA built-in type of the attribute to be read/written. If set to DEFINED_BY_JAVA_TYPE (default), the driver will attempt to determine the OPC-UA type basing on the value type parameter value. If the read/write operation fails, it may be necessary to use one of the other values of this configuration parameter to explicitly select the type.

                      This parameter also lists the OPC-UA types currently supported by the driver.

                      Not all value type and opcua.type combinations are valid, the allowed ones are the following:

                      opcua.type Allowed value.types Recommended value.type BOOLEAN BOOLEAN BOOLEAN SBYTE INTEGER, LONG, FLOAT, DOUBLE, STRING INTEGER INT16 INTEGER, LONG, FLOAT, DOUBLE, STRING INTEGER INT32 INTEGER, LONG, FLOAT, DOUBLE, STRING INTEGER INT64 INTEGER, LONG, FLOAT, DOUBLE, STRING LONG BYTE INTEGER, LONG, FLOAT, DOUBLE, STRING INTEGER UINT16 INTEGER, LONG, FLOAT, DOUBLE, STRING INTEGER UINT32 INTEGER, LONG, FLOAT, DOUBLE, STRING LONG UINT64 INTEGER, LONG, FLOAT, DOUBLE, STRING STRING FLOAT FLOAT, STRING FLOAT DOUBLE DOUBLE, STRING DOUBLE STRING STRING STRING BYTE_STRING BYTE_ARRAY BYTE_ARRAY BYTE_ARRAY BYTE_ARRAY BYTE_ARRAY SBYTE_ARRAY BYTE_ARRAY BYTE_ARRAY

                      Using a non allowed value.type will result in read/write operation failures. It should be noted that there is not a one to one match between the opcua.type and Java value.type. It is recommended to compare the allowed ranges for numeric types specified in OPC-UA Reference and Java reference for selecting the best match.

                    • node.id.type: The type of the node id (see the Node Id types section)

                    • attribute: The attribute of the referenced variable node.

                    If the listen flag is enabled for an OPC-UA channel, the driver will request the server to send notifications if it detects changes in the referenced attribute value.

                    In order to enable this, the driver will create a global subscription (one per Driver instance), and a monitored item for each channel. See [1] for more details. The Subscription publish interval global configuration parameter can be used to tune the subscription publishing interval.

                    • listen.sampling.interval: The sampling interval for the monitored item. See the Sampling interval section of [1] for more details.
                    • listen.queue.size: The queue size for the monitored item. See the Queue parameters section of [1] for more details.
                    • listen.discard.oldest: The value of the discardOldest flag for the monitored item. See the Queue parameters section of [1] for more details.

                    The listen.subscribe.to.children parameter can be used to enable the Subtree Subscription feature.

                    [1] MonitoredItem model

                    "},{"location":"connect-field-devices/opcua-driver/#node-id-types","title":"Node ID types","text":"

                    The Driver supports the following node id types:

                    Node ID Type Format of node.id NUMERIC node.id must be parseable into an integer STRING node.id can be any string OPAQUE Opaque node ids are represented by raw byte arrays. In this case node.id must be the base64 encoding of the node id. GUID node.id must be a string conforming to the format described in the documentation of the java.util.UUID.toString() method."},{"location":"connect-field-devices/opcua-driver/#certificate-setup","title":"Certificate setup","text":"

                    In order to use settings for Security Policy different than None, the OPCUA driver must be configured to trust the server certificate and a new client certificate - private key pair must be generated for the driver. These items can be placed in a Java keystore that can be referenced from driver configuration. The keystore does not exist by default and without it connections that use Security Policy different than None will fail.

                    The following steps can be used to generate the keystore:

                    1. Download the certificate used by the server, usually this can be done from server management UI.
                    2. Copy the downloaded certificate to the gateway using SSH.

                    3. Copy the following example script to the device using SSH, it can be used to import the server certificate and generate the client key pair. It can be modified if needed:

                      #!/bin/bash\n\n# the alias for the imported server certificate\nSERVER_ALIAS=\"server-cert\"\n\n# the file name of the generated keystore\nKEYSTORE_FILE_NAME=\"opcua-keystore.ks\"\n# the password of the generated keystore and private keys, it is recommended to change it\nKEYSTORE_PASSWORD=\"changeit\"\n\n# server certificate to be imported is expected as first argument\nSERVER_CERTIFICATE_FILE=\"$1\"\n\n# import existing certificate\nkeytool -import \\\n        -alias \"${SERVER_ALIAS}\" \\\n        -file \"${SERVER_CERTIFICATE_FILE}\" \\\n        -keystore \"${KEYSTORE_FILE_NAME}\" \\\n        -noprompt \\\n        -storepass \"${KEYSTORE_PASSWORD}\"\n\n# alias for client certificate\nCLIENT_ALIAS=\"client-cert\"\n# client certificate distinguished name, it is recommended to change it \nCLIENT_DN=\"CN=MyCn, OU=MyOu, O=MyOrganization, L=Amaro, S=UD, C=IT\"\n# the application id, must match the corresponding parameter in driver configuration\nAPPLICATION_ID=\"urn:kura:opcua:client\"\n\n# generate the client private key and certificate\nkeytool -genkey \\\n        -alias \"${CLIENT_ALIAS}\" \\\n        -keyalg RSA \\\n        -keysize 4096 \\\n        -keystore \"${KEYSTORE_FILE_NAME}\" \\\n        -dname \"${CLIENT_DN}\" \\\n        -ext ku=digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment \\\n        -ext eku=clientAuth \\\n        -ext \"san=uri:${APPLICATION_ID}\" \\\n        -validity 1000 \\\n        -noprompt \\\n        -storepass ${KEYSTORE_PASSWORD} \\\n        -keypass ${KEYSTORE_PASSWORD}\n

                    4. Update the following parameters in driver configuration:

                    5. Keystore Path : Set the absolute path of the opcua-keystore.ks file created at step 3.
                    6. **Security Policy ** -> Set the desired option
                    7. Client Certificate Alias -> Set the value of the CLIENT_ALIAS script variable (the default is client-cert)
                    8. Enable Server Authentication -> true
                    9. Keystore type -> JKS
                    10. Keystore Password -> Set the value of the KEYSTORE_PASSWORD script variable (the default value is changeit)

                    11. Application URI -> Set the value of the APPLICATION_ID script variable (default value should be already ok).

                    12. Configurare the server to trust the client certificate generated at step 3. The steps required to do this vary depending on the server. Usually the following steps are needed:

                    13. Make a connection attempt using OPC-UA driver, this will likely fail because the server does not trust client certificate.
                    14. After the failed connection attempt, the server should display the certificate used by the driver in the administration UI. The server UI should allow to set it as trusted.
                    15. Make another connection attempt once the certificate has been set to trusted, this connection attempt should succeed.
                    "},{"location":"connect-field-devices/opcua-driver/#substree-subscription","title":"Substree Subscription","text":"

                    The driver can be configured to recursively visit the children of a folder node and create a Monitored Item for the value of each discovered variable node with a single channel in Asset configuration.

                    Warning: This feature should be used with care since it can cause high load on both the gateway and the server if the referenced folder contains a large number of nodes and/or the notification rate is high.

                    "},{"location":"connect-field-devices/opcua-driver/#channel-configuration_1","title":"Channel configuration","text":"

                    In order to configure the driver to perform the discovery operation, a single channel can be defined with the following configuration:

                    • type: READ
                    • value.type: STRING (see below)
                    • listen: true
                    • node.id: the node id of the root of the subtree to visit
                    • node.namespace.index: the namespace index of the root of the subtree to visit
                    • node.id.type the node id type of the root of the subtree to visit
                    • listen.subscribe.to.children (NEW): true

                    The rest of the configuration parameters can be specified in the same way as for the single node subscription use case.

                    The listen.sampling.interval, listen.queue.size and listen.discard.oldest parameters of the root will be used for all subscriptions on the subtree.

                    "},{"location":"connect-field-devices/opcua-driver/#discovery-procedure","title":"Discovery procedure","text":"

                    The driver will consider as folders to visit all nodes that whose type definition is FolderType, or more precisely all nodes with the following reference:

                    HasTypeDefinition: * namespace index: 0 * node id: 61 (numeric) * URN: http://opcfoundation.org/UA/

                    The driver will subscribe to all the variable nodes found.

                    "},{"location":"connect-field-devices/opcua-driver/#event-reporting","title":"Event reporting","text":"

                    If the Driver is used by a Wire Asset, it will emit on the wire a single message per received event.

                    All emitted events will contain a single property. Depending on the value of the Subtree subscription events channel name format global configuration parameter, the name of this property is the node id or the browsed path of the source OPCUA node relative to the root folder defined in the channel configuration.

                    "},{"location":"connect-field-devices/opcua-driver/#type-conversion","title":"Type conversion","text":"

                    The current version of the driver tries to convert the values received for all the events on a subtree to the type defined in the value.type configuration parameter.

                    Since the value types of the discovered nodes are heterogeneous, the conversion might fail if the types are not compatible (e.g. if value.type is set to INTEGER and the received value is a string).

                    Setting value.type to STRING should allow to perform safe conversions for most data types.

                    "},{"location":"connect-field-devices/s7-driver/","title":"S7comm Driver","text":"

                    This Driver implements the s7comm protocol and can be used to interact with Siemens S7 PLCs using different abstractions, such as the Wires framework, the Asset model or by directly using the Driver itself.

                    The Driver is distributed as a deployment package on the Eclipse Marketplace for Kura 3.x and 4.x/5.x. It can be installed following the instructions provided here.

                    "},{"location":"connect-field-devices/s7-driver/#features","title":"Features","text":"

                    The S7comm Plc Driver features include:

                    • Support for the s7comm protocol over TCP.
                    • Support for reading and writing data from the Data Blocks (DB) memory areas.
                    • The driver is capable of automatically aggregating reads/writes for contiguous data in larger bulk requests in order to reduce IO times.
                    "},{"location":"connect-field-devices/s7-driver/#instance-creation","title":"Instance creation","text":"

                    A new S7comm driver instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.s7plc factory must be selected and a unique name must be provided for the new instance.

                    "},{"location":"connect-field-devices/s7-driver/#channel-configuration","title":"Channel configuration","text":"

                    The S7 Driver channel configuration is composed of the following parameters:

                    • name: the channel name.
                    • type: the channel type, (READ, WRITE, or READ_WRITE).
                    • value type: the Java type of the channel value.
                    • s7.data.type: the S7 data type involved in channel operation.
                    • data.block.no: the data block number involved in channel operation.
                    • offset: the start address of the data.
                    • byte.count: the size in bytes of the transferred data. This parameter is required only if the value type parameter is set to STRING or BYTE_ARRAY. In the other cases, this parameter is ignored and the data size is automatically derived from the s7.data.type.
                    • bit.index: the index of the bit involved in channel operation inside its containing byte, index 0 is the least significant bit. This parameter is required only if the value type parameter is set to BOOLEAN and s7.data.type is set to BOOL. In the other cases, this parameter is ignored.
                    "},{"location":"connect-field-devices/s7-driver/#data-types","title":"Data Types","text":"

                    When performing operations that deal with numeric data, two data types are involved:

                    1. The Java primitive type that is used in the ChannelRecords exchanged between the driver and Java applications. (the Java type of the value received/supplied by external applications from/to the Driver in case of a read/write operation). This value type is specified by the value type configuration property.

                    2. The S7 type of the data on the PLC. This value type is specified by the s7.data.type configuration property. The following S7 data types are supported:

                      S7 Data Type Size Sign INT 16 bits signed DINT 32 bits signed WORD 16 bits unsigned DWORD 32 bits unsigned REAL 32 bits signed BOOL 1 bit n.d. BYTE 1 byte unsigned CHAR 1 byte (only supported as char arrays using the String Java data type) n.d.

                    The Driver automatically adapts the data type used by external applications and the S7 device depending on the value of the two configuration properties mentioned above.

                    The adaptation process involves the following steps:

                    • Each device data type is internally converted by the driver from/to a Java type large enough to represent the value of the device data without losing precision. The type mappings are the following:

                      S7 Data Type Java Type INT int DINT int WORD int DWORD long REAL float BOOL boolean BYTE int

                    • If the value type of the channel does not match the Java type specified in mapping above, a conversion is performed by the Driver to convert it to/from the matching type, choosing appropriately between the Number.toInt(), Number.toLong(), Number.toFloat() or Number.toDouble() methods. Precision losses may occur if the Java type used by the external application is not suitable to represent all possible values of the device data type.

                    "},{"location":"connect-field-devices/s7-driver/#array-data","title":"Array Data","text":"

                    The driver supports transferring data as raw byte arrays or ASCII strings:

                    • Byte arrays: For transferring data as byte arrays the channel value type property must be set to BYTE_ARRAY, the data.type configuration property must be set to BYTE and the byte.count property must be set to the data length in bytes.
                    • Strings: For transferring data as ASCII strings the channel value type property must be set to STRING, the data.type configuration property must be set to CHAR and the array.data.length property must be set to the data length in bytes.
                    "},{"location":"connect-field-devices/s7-driver/#writing-single-bits","title":"Writing Single Bits","text":"

                    The Driver supports setting the value of single bits without overwriting the other bits of the same byte. This operation can be performed defining a channel having BOOLEAN as value type, BOOL as s7.data.type and the proper index set to the bit.index property.

                    The Driver will fetch the byte containing the bit to be written, update its contents and then write back the obtained value. If multiple bits on the same byte need to be modified, the driver will perform only one read and write for that byte. If bits that need to be changed are located in contiguous bytes, the driver will perform only one bulk read and one bulk write transferring all the required data in a single request.

                    "},{"location":"connect-field-devices/sensehat-driver/","title":"RaspberryPi SenseHat driver","text":"

                    The SenseHat driver allows to interact to a RaspberryPi SenseHat device using Kura Driver, Asset and Wires frameworks. The driver allows access to the following resources:

                    • Sensors
                    • Joystick
                    • LED Matrix

                    The driver-specific channel configuration contains a single parameter, resource, which allows to select the specific device resource that the channel is addressing (a sensor, a joystick event, etc).

                    Note about running on OpenJDK

                    If some exceptions reporting Locked by other application are visible in the log and the driver fails to start, try switching to the Oracle JVM by installing the oracle-java8-jdk package. For more information on the problem, please see this GitHub issue.

                    "},{"location":"connect-field-devices/sensehat-driver/#installation","title":"Installation","text":"

                    As the others Drivers supported by Kura, it is distributed as a deployment package on the Eclipse Marketplace here. It can be installed following the instructions provided here.

                    In order to use the driver, the Sensehat Support Library Bundle for Eclipse Kura needs to be installed as a prerequisite dependency. It is available from Eclipse Marketplace here.

                    "},{"location":"connect-field-devices/sensehat-driver/#sensors","title":"Sensors","text":"

                    The following values of the resource parameters refer to device sensors:

                    Resource Unit Description ACCELERATION_X, ACCELERATION_Y, ACCELERATION_Z G The proper acceleration for each axis GYROSCOPE_X, GYROSCOPE_Y, GYROSCOPE_Z rad/S The angular acceleration for each axis MAGNETOMETER_X, MAGNETOMETER_Y, MAGNETOMETERE_Z uT The magnetometer value for each axis HUMIDITY %rH The relative humidity PRESSURE mbar The pressure value TEMPERATURE_FROM_HUMIDITY \u00b0C The temperature obtained from the humidity sensor TEMPERATURE_FROM_PRESSURE \u00b0C The temperature obtained from the pressure sensor

                    The channels referencing sensor resources can only be used for reads and only in polling mode. The driver will attempt to convert the value obtained from the sensor into the data type selected using the value.type parameter

                    Example sensors Asset configuration:

                    "},{"location":"connect-field-devices/sensehat-driver/#joystick","title":"Joystick","text":"

                    The SenseHat joystick provides four buttons:

                    • UP
                    • DOWN
                    • LEFT
                    • RIGHT
                    • ENTER

                    For each button, the driver allows to listen to the following events:

                    • PRESS: Fired once when a button is pressed
                    • RELEASE: Fired once when a button is released
                    • HOLD: Fired periodically every few seconds if the button is kept pressed

                    The values of the resource parameter related to joystick have the following structure:

                    JOYSTICK_{BUTTON}_{EVENT}

                    Channels referencing joystick events must use LONG as value.type. The channel value supplied by the driver is the Java timestamp in milliseconds of the Joystick event, a value of 0 signifies that no events have been observed yet.

                    Joystick related channels can be only used for reading and both in polling and event-driven mode.

                    Example joystick Asset configuration:

                    "},{"location":"connect-field-devices/sensehat-driver/#led-matrix","title":"LED Matrix","text":"

                    The driver allows accessing the SenseHat LED matrix in two ways:

                    • Using a monochrome framebuffer
                    • Using a RGB565 framebuffer
                    "},{"location":"connect-field-devices/sensehat-driver/#coordinates","title":"Coordinates","text":"

                    The coordinate system used by the driver defines the x coordinate as increasing along the direction identified by the joystick RIGHT button and the y coordinate increasing along the direction identified by the DOWN joystick button.

                    "},{"location":"connect-field-devices/sensehat-driver/#monochrome-framebuffer","title":"Monochrome framebuffer","text":"

                    In monochrome mode, only two colors will be used: the front color and the back color.

                    "},{"location":"connect-field-devices/sensehat-driver/#front-and-back-colors","title":"Front and back colors","text":"

                    Front and back colors can be configured using channels having the following values for the resource parameter:

                    • LED_MATRIX_FRONT_COLOR_R
                    • LED_MATRIX_FRONT_COLOR_G
                    • LED_MATRIX_FRONT_COLOR_B
                    • LED_MATRIX_BACK_COLOR_R
                    • LED_MATRIX_BACK_COLOR_G
                    • LED_MATRIX_BACK_COLOR_B

                    These channel types allow to set the rgb components of the front and back color and can only be used in write mode. The supplied value must be a floating point number between 0 (led turned off) and 1 (full brightness). Note: Front and back colors are internally represented using the RGB565 format. The available colors are only the ones that can be represented using RGB565 and are supported by the device. Front and back color are retained for successive draw operations, the initial value for both colors is black (led turned off).

                    "},{"location":"connect-field-devices/sensehat-driver/#drawing","title":"Drawing","text":"

                    The following resources can be used for modifying framebuffer contents:

                    • LED_MATRIX_FB_MONOCHROME:

                      A channel of this type allows to set the framebuffer contents in monochrome mode. It can only be used in write mode and its value.type must be BYTE_ARRAY.

                      The supplied value must be a byte array of length 64 that represent the state of the 8x8 led matrix. The offset in the array of a pixel having coordinates (x, y) is y*8 + x. The back/front color will be used for a pixel if the corresponding byte in the array is zero/non-zero.

                    • LED_MATRIX_CHARS:

                      A channel of this type allows showing a text message using the LED matrix. It can only be used for writing and its value.type must be STRING. The characters of the message will be rendered using the front color and the background using the back color.

                    "},{"location":"connect-field-devices/sensehat-driver/#rgb565-framebuffer","title":"RGB565 framebuffer","text":"

                    The following resource allows writing the framebuffer using the RGB565 format:

                    • LED_MATRIX_FB_RGB565:

                      A channel of this type allows to set the framebuffer contents in RGB565 mode. It can only be used in write mode and its value.type must be BYTE_ARRAY.

                      The supplied value must be a byte array of length 128 that represents the state of the 8x8 led matrix. Each pixel is represented by two consecutive bytes in the following way:

                      |    MSB    |    LSB    |\n|  RRRRRGGG |  GGGBBBBB |\n|  15 ... 8 |  7 ... 0  |\n

                      The LSB must be stored first in the array, the offset of the LSB and MSB for a pixel at coordinates (x, y) is the following:

                      • LSB: 2*(y*8 + x)
                      • MSB: 2*(y*8 + x) + 1
                    "},{"location":"connect-field-devices/sensehat-driver/#mode-independent-resources","title":"Mode independent resources","text":"

                    • LED_MATRIX_CLEAR:

                      Writing anything to a LED_MATRIX_CLEAR channel will clear the framebuffer turning off all leds.

                    • LED_MATRIX_ROTATION:

                      Allows to rotate the framebuffer of 0, 90, 180, and 170 degrees clockwise. Rotation setting will be retained for successive draw operations. The default value is 0. Writes to a LED_MATRIX_ROTATION channel can be performed using any numeric type as value.type.

                    Example framebuffer Asset configuration:

                    "},{"location":"connect-field-devices/sensehat-driver/#examples","title":"Examples","text":"

                    This section contains some examples describing how to use the driver using Kura Wires and the Wires Script filter.

                    "},{"location":"connect-field-devices/sensehat-driver/#moving-a-pixel-using-the-joystick","title":"Moving a pixel using the Joystick","text":"
                    1. Open the Wires section of the Kura Web UI.
                    2. Create an Asset that emits joystick events like the one described in the Joystick section. Only left_release, right_release, up_release and down_release channels will be used. Make sure to enable the listen flag for the channels.
                    3. Create the Asset described in the LED Matrix section.
                    4. Create a Script Filter and paste the code below in the script field.
                    5. Connect the Joystick Asset to the input port of the Script Filter, and the output port of the Script filter to the framebuffer Asset.
                    6. Open the Drivers and Assets section of the Kura Web UI, select the framebuffer Asset, click on the Data tab and select front and back colors. For example for using green as front color and red as back color, write 1 as Value for the front_g and back_r channels.
                    7. You should now be able to move the green pixel with the joystick.
                    var FB_SIZE = 8\n\nif (typeof(state) === 'undefined') {\n  // framebuffer as byte array (0 -> back color, non zero -> front color)\n  var fb = newByteArray(FB_SIZE*FB_SIZE|0)\n  // record to be emitted for updating the fb\n  var outRecord = newWireRecord()\n  // property in emitted record containing fb data\n  // change the name if needed\n  // should match the name of a channel configured as LED_MATRIX_FB_MONOCHROME\n  outRecord['fb_mono'] = newByteArrayValue(fb)\n\n  state = {\n    fb: fb,\n    outRecord: outRecord,\n    x: 0, // current pixel position\n    y: 0,\n    dx: 0, // deltas to be added to pixel position\n    dy: 0,\n  }\n}\n\nif (typeof(actions) === 'undefined') {\n  // associations between input property names\n  // and position update actions,\n  // input can be supplied using an Asset\n  // with joystick event channels\n  actions = {\n    'up_release' : function () {\n      // decrease y coordinate\n      state.dy = -1\n    },\n    'down_release' : function () {\n      // increase y coordinate\n      state.dy = 1\n    },\n    'left_release' : function () {\n      // decrease x coordinate\n      state.dx = -1\n    },\n    'right_release' : function () {\n      // increase x coordinate\n      state.dx = 1\n    }\n  }\n}\n\nif (input.records.length) {\n  var input = input.records[0]\n  var update = false\n\n  for (var prop in input) {\n    var action = actions[prop]\n    // if there is an action associated with the received property, execute it\n    if (action) {\n      action()\n      // request framebuffer update\n      update = true\n    }\n  }\n\n  if (update) {\n    // framebuffer update requested\n    // clear old pixel\n    state.fb[state.y*FB_SIZE + state.x] = 0\n    // compute new pixel position\n    state.x = (state.x + state.dx + FB_SIZE) % FB_SIZE\n    state.y = (state.y + state.dy + FB_SIZE) % FB_SIZE\n    // set new pixel\n    state.fb[state.y*FB_SIZE + state.x] = 1\n    // clear deltas\n    state.dx=0\n    state.dy=0\n    // emit record\n    output.add(state.outRecord)\n  }\n}\n
                    "},{"location":"connect-field-devices/sensehat-driver/#using-rgb565-framebuffer","title":"Using RGB565 framebuffer","text":"
                    1. Open the Wires section of the Kura Web UI.
                    2. Create the Asset described in the LED Matrix section.
                    3. Create a Script Filter and paste the code below in the script field.
                    4. Create a Timer that ticks every 16 milliseconds.
                    5. Connect the Timer to the input port of the Script Filter, and the output port of the Script filter to the framebuffer Asset.
                    6. The framebuffer should now display an animation, the animation can be changed by modifying the wave parameters and setting script.context.drop to false.
                    var FB_SIZE = 8\nvar BYTES_PER_PIXEL = 2\n\nif (typeof(state) === 'undefined') {\n  // framebuffer as RGB565 byte array\n  var fb = newByteArray(FB_SIZE * FB_SIZE * BYTES_PER_PIXEL | 0)\n  // record to be emitted for updating the fb\n  var outRecord = newWireRecord()\n  // property in emitted record containing fb data\n  // change the name if needed\n  // must match the name of a channel configured as LED_MATRIX_FB_565\n  outRecord['fb_rgb565'] = newByteArrayValue(fb)\n\n  // framebuffer array and output record\n  state = {\n    fb: fb,\n    outRecord: outRecord,\n  }\n\n  RMASK = ((1 << 5) - 1)\n  GMASK =  ((1 << 6) - 1)\n  BMASK = RMASK\n\n  // converts the r, g, b values provided as a floating point\n  // number between 0 and 1 to RGB565 and stores the result\n  // inside the output array\n  function putPixel(off, r, g, b) {\n    var _r = Math.floor(r * RMASK) & 0xff\n    var _g = Math.floor(g * GMASK) & 0xff\n    var _b = Math.floor(b * BMASK) & 0xff\n\n    var b0 = (_r << 3 | _g >> 3)\n    var b1 = (_g << 5 | _b)\n\n    state.fb[off + 1] = b0\n    state.fb[off] = b1\n  }\n\n  // parameters for 3 sin waves, one per color component\n  RED_WAVE_PARAMS = {\n    a: 5,\n    b: 10,\n    c: 10,\n    d: 0\n  }\n\n  GREEN_WAVE_PARAMS = {\n    a: 5,\n    b: 10,\n    c: 10,\n    d: 1\n  }\n\n  BLUE_WAVE_PARAMS = {\n    a: 5,\n    b: 10,\n    c: 10,\n    d: 2\n  }\n\n  function wave(x, y, t, params) {\n    return Math.abs(Math.sin(2*Math.PI*(t + x/params.b + y/params.c + params.d)/params.a))\n  }\n}\n\nvar t = new Date().getTime() / 1000\n\nvar off = 0\nfor (var y = 0; y < FB_SIZE; y++)\n  for (var x = 0; x < FB_SIZE; x++) {\n    var r = wave(x, y, t, RED_WAVE_PARAMS)\n    var g = wave(x, y, t, GREEN_WAVE_PARAMS)\n    var b = wave(x, y, t, BLUE_WAVE_PARAMS)\n    putPixel(off, r, g, b)\n    off += 2\n  }\n\noutput.add(state.outRecord)\n
                    "},{"location":"connect-field-devices/sensortag-driver/","title":"TI SensorTag Driver","text":"

                    Eclipse Kura provides a specific driver that can be used to interact with Texas Instruments SensorTag devices. It can be used in the Wires framework, the Asset model or directly using the Driver itself.

                    Warning

                    The SensorTag driver can be used only with TI SensorTags with firmware version >1.20. If your device has an older firmware, please update it.

                    "},{"location":"connect-field-devices/sensortag-driver/#features","title":"Features","text":"

                    The SensorTag Driver can be used to get the values from all the sensor installed on the tag (both in polling mode and notification):

                    • ambient and target temperature
                    • humidity
                    • pressure
                    • three-axis acceleration
                    • three-axis magnetic field
                    • three-axis orientation
                    • light
                    • push buttons

                    Moreover, the following resources can be written by the driver: - read and green leds - buzzer

                    When a notification is enabled for a specific channel (sensor), the notification period can be set.

                    "},{"location":"connect-field-devices/sensortag-driver/#installation","title":"Installation","text":"

                    As the other Drivers supported by Kura, it is distributed as a deployment package on the Eclipse Marketplace here and here. It can be installed following the instructions provided here.

                    "},{"location":"connect-field-devices/sensortag-driver/#instance-creation","title":"Instance creation","text":"

                    A new TiSensorTag Driver instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.ble.sensortag factory must be selected and a unique name must be provided for the new instance. Once instantiated, the SensorTag Driver has to be configured setting the Bluetooth interface name (i.e. hci0) that will be used to connect to the device.

                    "},{"location":"connect-field-devices/sensortag-driver/#channel-configuration","title":"Channel configuration","text":"

                    The SensorTag Driver channel can be configured with the following parameters:

                    • enabled: it allows to enable/disable the channel. If it isn't selected the channel will be ignored.
                    • name: the channel name.
                    • type: the channel type, (READ, WRITE, or READ_WRITE).
                    • value.type: the Java type of the channel value. The value read by the Driver will be converted to the value.type. Conversely, in write operations the Driver will accept value of this kind.
                    • listen: when selected, a listener will be attached to this channel. Any event on the channel will be reported using a callback and the value will be emitted.
                    • sensortag.address: the address of the specific SensorTag (i.e. aa:bb:cc:dd:ee:ff)
                    • sensor.name: the name of the sensor. It can be selected from a drop-down list
                    • notification.period: the period in milliseconds used to receive notification for a specific sensor. The value will be ignored it the listen option is not checked.
                    "},{"location":"connect-field-devices/xdk-driver/","title":"Xdk Driver","text":"

                    Eclipse Kura provides a specific driver that can be used to interact with Bosch Xdk110 devices. The driver is available only for gateways that support the new Bluetooth LE APIs. It can be used in to the Wires framework, the Asset model or directly using the Driver itself.

                    Info

                    The Xdk driver can only be used with Xdk110 with VirtualXdkDemo installed and with firmware version > 3.5.0. If your device has an older firmware, please update it.

                    "},{"location":"connect-field-devices/xdk-driver/#features","title":"Features","text":"

                    The Xdk Driver can be used to get the values from all the sensor provider by the xdk110 (both in polling mode and notification):

                    • three-axis acceleration (or four-axis quaternion rappresentation)
                    • three-axis gyroscope (or four-axis quaternion rappresentation)
                    • light
                    • noise
                    • pressure
                    • ambient temperature
                    • humidity
                    • sd-card detect status
                    • push buttons
                    • three-axis magnetic field
                    • magnetometer resistence
                    • led status
                    • rms voltage of LEM sensor
                    Resource Unit Description ACCELERATION_X, ACCELERATION_Y, ACCELERATION_Z G The proper acceleration for each axis* GYROSCOPE_X, GYROSCOPE_Y, GYROSCOPE_Z rad/S The angular acceleration for each axis* LIGHT lux The light value NOISE DpSpl The acustic pressure value PRESSURE Pa The pressure value TEMPERATURE C The temperature value HUMIDITY %rH The relative humidity SD_CARD_DETECTION_STATUS boolean SD-Card detect status PUSH_BUTTONS bit Button status, encoded as bit field: Bit 0, Button 1; Bit 1, Button 2 MAGNETOMETER_X, MAGNETOMETER_Y, MAGNETOMETERE_Z uT The magnetometer value for each axis MAGNETOMETER_RESISTENCE ohm The magnetometer resistence value LED_STATUS bit Led status, encoded as a bit field: Bit 0: yellow Led; Bit 1: orange Led; Bit 2: red Led VOLTAGE_LEM mV RMS voltage of LEM sensor

                    *If the Quaternion rappresentation is selected, then:

                    Resource Unit Description QUATERNION_M, QUATERNION_X, QUATERNION_Y, QUATERNION_Z number The rotation-quaternion for each axis

                    When a notification is enabled for a specific channel (sensor), the notification period can't be set. Use the Timer in Wire Graph to set polling.

                    "},{"location":"connect-field-devices/xdk-driver/#documentation","title":"Documentation","text":"

                    All the information regarding the Xdk110 is available in the Xdk Bosch Connectivity here website. The XDK-Workbench is the tool that can be used to develop software for the Xdk110. It can be downloaded from here. XDK-Workbench is required to install VirtualXdkDemo.

                    Warning

                    We found connection problems with Xdk, probably due to issues with XDK-Workbench version 3.6.0. We recommend installing version 3.5.0.

                    The Virtual XDK application user guide contains all the information regarding the XDK110 UUIDs and data formats here.

                    Info

                    To switch between quaternion and sensor representation, the XDK110 needs to be instructed using the 55b741d5-7ada-11e4-82f8-0800200c9a66 UUID. Set it to 0x01 to enable Quaternions.

                    If quaternion representation is enabled, the data format is as follows:

                    Bytes Data Type 0,1,2 & 3 Rotation Quaternion M float 4,5,6 & 7 Rotation Quaternion X float 8,9,10 & 11 Rotation Quaternion Y float 12,13,14 & 15 Rotation Quaternion Z float"},{"location":"connect-field-devices/xdk-driver/#installation","title":"Installation","text":"

                    As the others Drivers supported by Kura, it is distributed as a deployment package on the Eclipse Marketplace here. It can be installed following the instructions provided here.

                    "},{"location":"connect-field-devices/xdk-driver/#instance-creation","title":"Instance creation","text":"

                    A new Xdk Driver instance can be created either by clicking the New Driver button in the dedicated Drivers and Assets Web UI section or by clicking on the + button under Services. In both cases, the org.eclipse.kura.driver.ble.xdk factory must be selected and a unique name must be provided for the new instance. Once instantiated, the Xdk Driver has to be configured setting the Bluetooth interface name (i.e. hci0). Other options available are related to the quaternion/sensor representation and the sensor sampling rate (in Hz).

                    "},{"location":"connect-field-devices/xdk-driver/#channel-configuration","title":"Channel configuration","text":"

                    The Xdk Driver channel can be configured with the following parameters:

                    • enabled: it allows to enable/disable the channel. If it isn't selected the channel will be ignored.
                    • name: the channel name.

                    • type: the channel type, (READ, WRITE, or READ_WRITE).

                      Warning

                      The Xdk driver can only be used with READ.

                    • value.type: the Java type of the channel value. The value read by the Driver will be converted to the value.type.

                    • listen: when selected, a listener will be attached to this channel. Any event on the channel will be reported using a callback and the value will be emitted.
                    • xdk.address: the address of the specific xdk (i.e. aa:bb:cc:dd:ee:ff)
                    • sensor.name: the name of the sensor. It can be selected from a drop-down list.
                    "},{"location":"core-services/active-mq-artemis-broker/","title":"ActiveMQ Artemis MQTT Broker","text":"

                    Apart from using the simple ActiveMQ-7 MQTT instance available in the Simple Artemis MQTT Broker Service, this service allows to configure, in a more detailed way, the characteristics of the ActiveMQ-7 broker instance running in Kura.

                    This service exposes the following configuration parameters:

                    • Enabled - (Required) - Enables the broker instance
                    • Broker XML - Broker XML configuration. An empty broker configuration will disable the broker.
                    • Required protocols - A comma seperated list of all required protocol factories (e.g. AMQP or MQTT)
                    • User configuration - (Required) - User configuration in the format: user=password|role1,role2,...
                    • Default user name - The name of the default user

                    Please refer to the official documentation for more details on how to configure the ActiveMQ broker service.

                    "},{"location":"core-services/active-mq-artemis-broker/#service-usage-example","title":"Service Usage Example","text":"

                    Setting the Broker XML field as follows:

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\n<configuration xmlns=\"urn:activemq\"\nxmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"\nxsi:schemaLocation=\"\nurn:activemq https://raw.githubusercontent.com/apache/activemq-artemis/master/artemis-server/src/main/resources/schema/artemis-server.xsd\nurn:activemq:core https://raw.githubusercontent.com/apache/activemq-artemis/master/artemis-server/src/main/resources/schema/artemis-configuration.xsd\nurn:activemq:jms https://raw.githubusercontent.com/apache/activemq-artemis/master/artemis-jms-server/src/main/resources/schema/artemis-jms.xsd\n\">\n\n    <core xmlns=\"urn:activemq:core\">\n        <persistence-enabled>false</persistence-enabled>\n\n        <acceptors>\n            <acceptor name=\"netty-acceptor\">tcp://localhost:61616</acceptor>\n            <acceptor name=\"amqp-acceptor\">tcp://localhost:5672?protocols=AMQP</acceptor>\n            <acceptor name=\"mqtt-acceptor\">tcp://localhost:1883?protocols=MQTT</acceptor>\n        </acceptors>\n\n        <resolve-protocols>false</resolve-protocols>\n\n        <security-settings>\n        <!-- WARNING: this is only for testing and completely insecure -->\n            <security-setting match=\"#\">\n                <permission type=\"createDurableQueue\" roles=\"guest\"/>\n                <permission type=\"deleteDurableQueue\" roles=\"guest\"/>\n                <permission type=\"createNonDurableQueue\" roles=\"guest\"/>\n                <permission type=\"deleteNonDurableQueue\" roles=\"guest\"/>\n                <permission type=\"consume\" roles=\"guest\"/>\n                <permission type=\"send\" roles=\"guest\"/>\n            </security-setting>\n        </security-settings>\n\n    </core>\n\n    <jms xmlns=\"urn:activemq:jms\">\n    <topic name=\"TEST.T.1\" />\n    </jms>\n\n</configuration>\n

                    the User configuration to:

                    guest=test12|guest\n

                    while setting the Default user name to:

                    guest\n

                    will determine that the TCP ports 1883, 5672 and 61616 are now open (you can verify that via netstat -antup).

                    Configuring the MqttDataTransport in System -> Cloud Services -> MqttDataTransport to use:

                    • broker-url - mqtt://localhost:1883
                    • username - guest
                    • password - test12

                    Clicking on the Connect button will result in a successful connection of Kura cloud service to the ActiveMQ-7 MQTT broker.

                    Note

                    The XML configuration above only allows connections originating from the gateway itself. In order to allow external connection the bind URLs specified using the acceptor tag must be modified by specifying an external accessible address instead of localhost. If the bind address is set to 0.0.0.0, the broker will listen on all available addresses.

                    "},{"location":"core-services/clock-service/","title":"Clock Service","text":"

                    The ClockService handles the date and time management of the system. If enabled, it tries to update the system date and time using a Network Time Protocol (NTP) server. NTP can use NTS as authentication mechanism through chrony.

                    "},{"location":"core-services/clock-service/#service-configuration","title":"Service Configuration","text":"

                    To manage the system date and time, select the ClockService option located in the Services area as shown in the screen capture below.

                    The ClockService provides the following configuration parameters:

                    • enabled: sets whether or not this service is enabled or disabled (Required field).

                    • clock.set.hwclock: defines if the hardware clock of the gateway must be synced after the system time is set. If enabled, the service calls the Linux command hwclock --utc --systohc.

                    • clock.provider: specifies one among Java NTP client (java-ntp), Linux chrony command (chrony-advanced), Linux ntpdate command (ntpd) (Required field). If chrony-advanced is used, Kura will not change system and/or hardware clock directly, delegating these operations to chrony.

                    • clock.ntp.host: sets a valid NTP server host address.

                    • clock.ntp.port: sets a valid NTP port number (not supported by ntpd, use the port 123 in that case).

                    • clock.ntp.timeout: specifies the NTP timeout in milliseconds.

                    • clock.ntp.max-retry: defines the number of retries when a sync fails (retry at every minute). Subsequently, the next retry occurs on the next refresh interval.

                    • clock.ntp.retry.interval: defines the interval in seconds between each retry when a sync fails. If the clock.ntp.refresh-interval parameter is less than zero, there is no update. If the clock.ntp.refresh-interval parameter is equal to zero, there is only one try at startup (Required field).

                    • clock.ntp.refresh-interval: defines the frequency (in seconds) at which the service tries to sync the clock. Note that at the start of Kura, when the ClockService is enabled, it tries to sync the clock every minute until it is successful. After a successful sync, this operation is performed at the frequency defined by this parameter. If the value is less than zero, there is no update. If the value is equal to zero, syncs only once at startup.

                    • chrony.advanced.config: specifies the content of the chrony configuration file. If this field is left blank, the default system configuration will be used. All fields above will be ignored. To obtain the hardware clock synchronization the directive rtcsync could be used. The rtcsync directive provides the hardware clock synchronization made by the linux kernel every 11 minutes. For further information reference the chrony website.

                    Two example configuration are shown below.

                    "},{"location":"core-services/clock-service/#nts-secure-configuration-example","title":"NTS Secure configuration example","text":"
                    server time.cloudflare.com iburst nts\nserver nts.sth1.ntp.se iburst nts\nserver nts.sth2.ntp.se iburst nts\n\nsourcedir /etc/chrony/sources.d\n\ndriftfile /var/lib/chrony/chrony.drift\n\nlogdir /var/log/chrony\n\nmaxupdateskew 100.0\n\nrtcsync\n\nmakestep 1 -1\n\nleapsectz right/UTC\n

                    Note

                    If the system stays disconnected from the network for a long time or if the backup battery is not working properly or is depleted, there is the possibility of a synchronization failure due to the client inability to verify the server certificates.

                    If this happens and no counter action has been taken in the chrony configuration file, the risk is that the gateway will be unable to synchronise again its date and therefore will not be able to connect to the cloud and/or be fully operational.

                    A possible way to prevent this issue is to temporary disable the certificate verification using the directive nocerttimecheck. This directory will disable the security checks of the activation and expiration times of certificates for the specified number of clock updates and should be used with caution due to the important security implications.

                    As reported by the official Chrony documentation, disabling the time checks has important security implications and should be used only as a last resort, preferably with a minimal number of trusted certificates. The default value is 0, which means the time checks are always enabled.

                    An example of the directive is nocerttimecheck 1 This would disable the time checks until the clock is updated for the first time, assuming the first update corrects the clock and later checks can work with correct time.

                    "},{"location":"core-services/clock-service/#simple-configuration-example","title":"Simple configuration example","text":"
                    # Use public NTP servers from the pool.ntp.org project.\npool pool.ntp.org iburst\n\n# Record the rate at which the system clock gains/losses time.\ndriftfile /var/lib/chrony/drift\n\n# Allow the system clock to be stepped in the first three updates\n# if its offset is larger than 1 second.\nmakestep 1 -1\n\n# Enable kernel synchronization of the real-time clock (RTC).\nrtcsync\n
                    "},{"location":"core-services/command-service/","title":"Command Service","text":"

                    The Command Service provides methods for running system commands from the Kura web console or from Kapua. In the Kura web console, the service is available clicking on the Command tab under the Device section, while for the cloud platform please refer to the official documentation.

                    To run a command simply fill the Execute field with the command and click the Execute button. The service also provides the ability for a script to execute using the File option of the Command tab in the Kura web console or the Kapua Cloud Console. This script must be compressed into a zip file with the eventual, associated resource files.

                    Once the file is selected and Execute is clicked, the zip file is sent embedded in an MQTT message on the device. The Command Service in the device stores the file in /tmp, unzips it, and tries to execute a shell script if one is present in the file. Note that in this case, the Execute parameter cannot be empty; a simple command, such as ls -l /tmp, may be entered.

                    Warning

                    When decompressed, the script loses its executable attribute. To fix this problem, if you plan to execute a script, the command entered into the Execute line must trigger the execution: ** bash [name of the script] **.

                    The configuration of the service is in the CommandService tab located in the Services area as shown in the screen capture below.

                    The Command Service provides the following configuration parameters:

                    • Command Enable: sets whether this service is enabled or disabled in the cloud platform (Required field).

                    • Command Password Value: sets a password to protect this service.

                    • Command Working Directory: specifies the working directory where the command execution is performed.

                    • Command Timeout: sets the timeout (in seconds) for the command execution.

                    • Command Environment: supplies a space-separated list of environment variables in the format key=value.

                    • Privileged/Unprivileged Command Service Selection: sets the modality of the command service. When set to privileged, the commands are run using the (privileged) user that started Kura, tipically kurad or root. When set to unprivileged, a standard user will run the commands.

                    When a command execution is requested in the cloud platform, it sends an MQTT control message to the device requesting that the command be executed. On the device, the Command Service opens a temporary shell in the command.working.directory, sets the command.environment variables (if any), and waits command.timeout seconds to get command response.

                    "},{"location":"core-services/configuration-service/","title":"Configuration Service","text":"

                    The Configuration Service is responsible to manage the framework configuration by creating and persisting the framework snapshot. Built on top of the OSGi Configuration Admin and Metatype services, it is also responsible to track and manage the creation and deletion of service instances as well as OSGi component factories.

                    The ConfigurationService is accessible using the following REST APIs and cloud request handlers:

                    • Configuration v1 REST APIs (deprecated) and CONF-V1 MQTT Request Handler (deprecated)
                    • Configuration v2 REST APIs and CONF-V2 MQTT Request Handler
                    "},{"location":"core-services/container-orchestration-image-auth/","title":"Eclipse Eclipse Kura Container Image Authenticity and Allowlist Enforcement feature","text":"

                    Containerized applications are becoming increasingly popular in the software ecosystem as a way to deploy and distribute applications. As a result, ensuring the security of software supply chains has become a critical concern. Implementing best practices, such as signing and verifying images to mitigate man-in-the-middle (MITM) attacks and validating their authenticity and freshness, play a pivotal role in safeguarding the integrity of the software supply chain.

                    To ensure the authenticity and integrity of the code within the container images, binding the image to a specific entity or organization via signature verification is crucial and increasingly common.

                    The purpose of this document is to provide a high-level understanding of the Eclipse Kura container authenticity and allowlist enforcement feature introduced with Eclipse Kura version 5.5.0.

                    "},{"location":"core-services/container-orchestration-image-auth/#high-level-flow","title":"High-level flow","text":"

                    The Eclipse Kura container authenticity and allowlist enforcement feature is designed to address container authenticity concerns by providing a mechanism to perform the signature verification of container images and restricting which container images can be deployed on the Eclipse Kura instance.

                    This is achieved by implementing the following flow:

                    Description of the flow:

                    • Monitoring: Eclipse Kura monitors the container engine events. When a \"container start\" event is triggered it intercepts the information regarding the image used to spin up the container and starts performing the container authenticity checks.
                    • Allowlist: Firstly, it checks if the digest of the image used to run the container can be found in the Eclipse Kura allowlist. If so, the container is allowed to run. If not, Eclipse Kura proceeds with the image signature verification.
                    • Signature verification: If no trust anchor (i.e. a public key or a X509 certificate depending on the signature mechanism) is available for the verification process to happen, the container is not allowed to run. If one is available, the image signature is verified and the allowlist is updated accordingly.

                    This flow applies to both containers managed by Eclipse Kura itself and containers ran directly by the user via CLI, allowing for a fine-grained control over the container images that can be deployed on the Eclipse Kura instance.

                    • Unmanaged containers: Eclipse Kura allows the user to define a list of container images that can be deployed on the platform. This is done by adding the image digests to the allowlist. When a container is started, Eclipse Kura checks if the image digest is in the allowlist and, if so, allows the container to run. This is meant to be used by users who, for any reason, need to run a container outside the Eclipse Kura framework but still want the safety guarantees provided by pinning the images to a specific digest.
                    • Managed containers: For containers ran by the framework, Eclipse Kura also allows the user to provide a trust anchor to be used for the signature verification process. This allows the user to use a mutable tag when specifying the container image, without giving up the required authenticity checks. Once the image is verified, its digest is stored within the Eclipse Kura allowlist, permitting it to be ran both from Eclipse Kura and the CLI without the need for an Internet connection. When a new image is published, the user can simply trigger the pull. The verification process will update the digest automatically.

                    Note that the user can still directly provide an image digest when running an Eclipse Kura-managed container. This will prevent the Eclipse Kura automatic signature verification process to run. This feature is meant to be used when:

                    • the user already ensured the image authenticity and does not want to go through the verification process again
                    • the image was not signed but the user still wants the enforcement trust guarantees provided by Eclipse Kura
                    "},{"location":"core-services/container-orchestration-image-auth/#unmanaged-containers","title":"Unmanaged containers","text":"

                    Regarding the containers not managed by Eclipse Kura, the Container Orchestration service provides a security feature which enforces the containers allowed to run on the system. This feature can be enabled or disabled through the Allowlist Enforcement Enabled option.

                    This mechanism leverages the concept of digest, which is a unique and immutable identifier for a container image: it is therefore an excellent mean to identify the image from which a container was created.

                    Given the above, Eclipse Kura allows the user to provide a list of container image digests in the Container Image Allowlist field, in the form of newline-separated strings: when a container is started on the host system (whether it is launched by Eclipse Kura or by a terminal CLI), Eclipse Kura retrieves the image from which the container was created, extracts the digest and verifies that it is present in the allowlist provided during service configuration.

                    If the image digest is present and matches the container's one, it is then allowed to run without interference. Otherwise, it is immediately stopped and deleted from the host system.

                    A similar behaviour is performed at Eclipse Kura startup or when the enforcement is enabled at runtime: if there are already containers on the device (whether they are started or stopped) and the enforcement is activated, Eclipse Kura extracts the digests from the containers and compares them with those in the allowlist. Containers that have been created from images whose digests are in the allowlist will be left running, otherwise they will be stopped and deleted from the descriptors list.

                    The verification is performed by intersecting the list of digests extracted by the containers and the one provided in the configuration: in this way, an empty intersection will result in a failing verification, while a non-empty one means that the image digests is equal to one of the allowlist entries.

                    "},{"location":"core-services/container-orchestration-image-auth/#example-scenarios","title":"Example scenarios","text":"

                    A user wants to leverage the container enforcement in order to let only docker containers started from an image named foo_image to be run on the device. To do this, they should enable the Container Enforcement by setting the Allowlist Enforcement Enabled to true, and fill the Container Image Allowlist field with the digest of the foo_image docker image (i.e.sha256:0000000000000000000000000000000000000000000000000000000000000000 in the example below).

                    "},{"location":"core-services/container-orchestration-image-auth/#startup-of-the-enforcement-feature","title":"Startup of the Enforcement Feature","text":"

                    Let's suppose that on the device there are already two containers running, one created from the foo_image an one from an image named unwanted_image with digest sha256:9999999999999999999999999999999999999999999999999999999999999999. Once the enforcement starts with the configuration previously described, it extracts the digests of both containers and checks if they're included in the provided allowlist: in this case, the container originating from the foo_image will be allowed to run, while the one created from the unwanted_image will be stopped and deleted, because its digest is not included in the allowlist.

                    The same happens also for already stopped containers: if the digests is verified, they'll be left in the descriptors list in the Stopped state, otherwise they'll be deleted.

                    "},{"location":"core-services/container-orchestration-image-auth/#running-container-after-enforcement-feature-startup","title":"Running Container After Enforcement Feature Startup","text":"

                    After the starting phase just described, Eclipse Kura will continuously monitor the activity of the docker engine. Whenever a container is started on the device, it will check the image digest from which the container was created, comparing it to the ones inside the allowlist: if the container is created from the foo_image docker image, it will be allowed to start, otherwise it will be stopped and deleted. If the user wants to add more than one allowed image, for example one named wanted_image with digest sha256:1111111111111111111111111111111111111111111111111111111111111111), it just needs to add it to the newline-separated list.

                    "},{"location":"core-services/container-orchestration-image-auth/#managed-containers","title":"Managed containers","text":"

                    As explained in the previous section, Managed Containers (i.e. org.eclipse.kura.container.provider.ContainerInstances) support Container Signature validation. To do so a new API has been introduced: the ContainerSignatureValidationService.

                    Currently, there are three main mechanism for container signature verification:

                    • Docker Content Trust (DCT) a.k.a. Notary V1
                    • Notation a.k.a. Notary V2
                    • Sigstore's Cosign

                    This newly introduced service allows Eclipse Kura to have multiple different Services implementing this interface and, thus, support all major signature mechanisms. A reference implementation for the ContainerSignatureValidationService is the DummyContainerSignatureValidationService available in Kura examples folder for anyone wanting to implement an alternative ContainerSignatureValidationService.

                    When a ContainerSignatureValidationService is installed on Eclipse Kura, it gets automatically registered among the available validators and will be used to perform the signature validation. Under the hood, the ContainerInstance has a list of the available ContainerSignatureValidationService providers that, upon receiving a configuration update, it interrogates to check whether the requested container image is authentic using the provided Trust Anchor.

                    • If even only one service reports the signature as valid, the image signature is considered valid.
                    • If none of the available services reports the signature as valid, the image signature is considered not valid.

                    This means that Eclipse Kura doesn't need to prompt the user for selecting the correct ContainerSignatureValidationService when performing the check.

                    Once the image signature is validated, the image digest is stored in the Eclipse Kura snapshot and added to the ContainerOrchestratorService allowlist (see section above). A container whose image digest is available in the allowlist won't be validated again, therefore after the initial check, the internet connection is no longer required for it to work.

                    "},{"location":"core-services/container-orchestration-image-auth/#example-scenarios_1","title":"Example Scenarios","text":""},{"location":"core-services/container-orchestration-image-auth/#container-instance-digest","title":"Container Instance Digest","text":"

                    Let's suppose to have a device on which Eclipse Eclipse Kura is running with the Container Orchestration Service enabled, its Enforcement feature disabled and a Container Instance named test-container up and running on the system.

                    A user wants to activate the Enforcement feature, so it enables the Allowlist Enforcement Enabled option in the Container Orchestration Service, but leaves the Container Image Allowlist option blank because it wants that no containers are started outside the framework.

                    As the feature starts, it checks all the container running on the device, including the test-container, which will be stopped and deleted: this happens because the container digest is not included in the Container Orchestration Service Allowlist and the Container Instance is not providing any information through its Container Image Enforcement Digest option.

                    In order to allow the Container Instance, the user should provide the correct digest in the instance settings. Let's suppose that the digest of the image from which the container is created is sha256:0000000000000000000000000000000000000000000000000000000000000000 and that the user fills the corresponding option with it: once the Container Instance is updated, the provided digest is included in the Enforcement feature allowlist, so the container will be allowed to run without interference. This case can be summarised as:

                    Once the instance digest is added to the enforcement feature, it can be used also to authorise container run by the Command Line Interface, or other instances on Eclipse Eclipse Eclipse Kura without providing the digest option. But what happen if the Container Instance is disabled? The aim of the Container Instance Enforcement Digest is to be used as an authorization method of the instance itself: this means that its digest is added to the enforcement feature allowlist only if the instance is enabled.

                    As it can be seen from the image, the merged Enforcement Allowlist box doesn't contain the digest associated to the Container Instance, because, being it disabled, the corresponding digest is ignored. If the enforcement is enabled and a container with digest DIGEST Z is started, it will then be stopped and deleted, because its digest won't be included in the allowlist.

                    Finally, everytime a Container Image Enforcement Digest option is modified, or the ContainerInstance is disabled or deleted, the enforcement feature will perform a check on all the already running containers. This is done because, if the digest that was previously provided has changed after an instance update, or removed due to disabling or deleting the instance, those containers that were previously authorised by this digest are no longer allowed to run. So they must be stopped and deleted.

                    Warning

                    The digests provided through Container Instances allow running also container started by the CommandLineInterface or by other Container Instances in the framework, even without providing the digest.

                    It has to be considered that, if the ContainerInstance is disabled (or its digest option changes), the enforcement feature will stop and delete the containers that are no longer matching the provided digest.

                    The user needs to be careful, then, to rely only on the digests set in the ContainerInstances options. If the user will need to run containers from the CLI, it is preferable to use the allowlist of the Container Orchestration Service. For the Container Instances, is a good practise to provide a digest.

                    "},{"location":"core-services/container-orchestration-image-auth/#container-signature-verification","title":"Container Signature Verification","text":"

                    If the Container Image Enforcement Digest option is not provided, Eclipse Eclipse Kura will proceed with the Signature Verification: this process tries to extract the digest of the image from which the container was started.

                    Let's then suppose that we are back at the beginning of the previous example, with a blank Container Orchestration Service allowlist and a not given Container Instance Digest, but this time a Trust Anchor option is given: in this case Eclipse Eclipse Kura will start the Signature Verification Process, in order to extract the digest.

                    If, for whatever reason, the Signature Verification fails, no digests will be added to the allowlist: if the enforcement feature is enabled, the started container will be then stopped and deleted by the Enforcement Monitor, because no digests are included in the final Enforcement Allowlist.

                    While, if the procedure completes correctly, the extracted digest will be added to the Enforcement Allowlist and written in the snapshot: in this way the container will pass the enforcement feature check, and the obtained digest will be stored as part of the Container Instance's configuration just started.

                    If the user wants to check again the digest through the Signature Verification Service, it just needs to erase the Container Image Enforcement Digest option from the configuration of the Container Instance: in this way the Signature feature will be triggered again and the digest recalculated.

                    Warning

                    Even in this situation, the digest could be used to authenticate container started from the CommandLineInterface: also in this case keep in mind that if the Container Instance is disabled, stopped or updated with different digest, those CLI-based container could be stopped and deleted.

                    "},{"location":"core-services/container-orchestration-provider-apis/","title":"Container Orchestration Provider APIs","text":""},{"location":"core-services/container-orchestration-provider-apis/#java-api","title":"Java API","text":""},{"location":"core-services/container-orchestration-provider-apis/#containerorchestrationservice","title":"ContainerOrchestrationService","text":"

                    The ContainerOrchestrationService is used to directly communicate with the running container engine. It exposes methods for listing, creating, and stopping containers. This class utilizes an instantiated ContainerConfiguration object as a parameter for container creation.

                    "},{"location":"core-services/container-orchestration-provider-apis/#containerconfiguration","title":"ContainerConfiguration","text":"

                    The ContainerConfiguration class, allows you to define a container to create. Using the embedded builder class, one can define many container-related parameters such as name, image, ports and volume mounts.

                    "},{"location":"core-services/container-orchestration-provider-apis/#containerinstancedescriptor","title":"ContainerInstanceDescriptor","text":"

                    The ContainerInstanceDescriptor class is used to describe a container that has already been created. This class contains runtime information such as the ID of the container.

                    "},{"location":"core-services/container-orchestration-provider-apis/#containerstate","title":"ContainerState","text":"

                    The ContainerState is a class that exposes an enum of container states tracked by the framework.

                    "},{"location":"core-services/container-orchestration-provider-apis/#passwordregistrycredentials","title":"PasswordRegistryCredentials","text":"

                    The PasswordRegistryCredentials class stores password credentials when provisioning a container to pull from an alternative password-protected registry.

                    "},{"location":"core-services/container-orchestration-provider-apis/#passwordregistrycredentials_1","title":"PasswordRegistryCredentials","text":"

                    The PasswordRegistryCredentials class stores password credentials when provisioning a container to pull from an alternative password-protected registry.

                    Note

                    The Container Orchestration Provider exports an MQTT-Namespace API. This API can be used to manage containers via MQTT requests from external applications. Please visit the Remote Gateway Inventory via MQTT documentation for more information.

                    "},{"location":"core-services/container-orchestration-provider-authenticated-registries/","title":"Container Orchestration Provider Authenticated Registries","text":"

                    The Container Orchestrator provider allows the user to pull images from private and password-protected registries. The following document will provide examples of how to connect to some popular registries.

                    Note

                    These guides make the following two assumptions.

                    1. That you have already configured the Container Orchestrator and have a container instance already created. Please see the usage doc, to learn the basics of the orchestrator.
                    2. That the image you are trying to pull supports the architecture of the gateway.
                    "},{"location":"core-services/container-orchestration-provider-authenticated-registries/#private-docker-hub-registries","title":"Private Docker-Hub Registries","text":""},{"location":"core-services/container-orchestration-provider-authenticated-registries/#preparation","title":"Preparation:","text":"
                    • have a Docker Hub account (its credentials), and a private image ready to pull.
                    "},{"location":"core-services/container-orchestration-provider-authenticated-registries/#procedure","title":"Procedure:","text":"
                    1. Populate the image name field. The username containing the private image must be placed before the image name separated by a forward slash. This is demonstrated below:

                    2. **Image Name: ** <Docker-Hub username>/<image name> for exampleeclipse/kura.

                    3. Populate the credential fields:

                    4. Authentication Registry URL: This field should be left blank.
                    5. Authentication Username: Your Docker Hub username.
                    6. Password: Your Docker Hub password.

                    "},{"location":"core-services/container-orchestration-provider-authenticated-registries/#amazon-web-services-elastic-container-registries-aws-ecr","title":"Amazon Web Services - Elastic Container Registries (AWS-ECR)","text":""},{"location":"core-services/container-orchestration-provider-authenticated-registries/#preparation_1","title":"Preparation:","text":"
                    • Have access to an Amazon ECR instance.
                    • Have the AWS-CLI tool installed and appropriately configured on your computer.
                    • Have access to your AWS ECR web console.
                    "},{"location":"core-services/container-orchestration-provider-authenticated-registries/#procedure_1","title":"Procedure:","text":"

                    1. Sign in to your amazon web console, navigate to ECR and identify which container you will like to pull onto the gateway. Copy the URI of the container. This URI will reveal the information required for the following steps. Here is how to decode the URI <identifier>.dkr.ecr.<ecr-region>.amazonaws.com/<directory>/<image name>:<image tag>.

                    2. Generating an AWS-ECR access password. Open a terminal window on the machine with aws-cli installed and enter the following command aws ecr get-login-password --region <ecr-region>. Your ECR region can be found by inspecting the container URI string copied in the previous step. This command will return a long string which will be used as the repo password in the gateway.

                    3. Populating information on the gateway.

                    4. **Image Name: ** enter the full URI without the tag.<identifier>.dkr.ecr.<ecr-region>.amazonaws.com/<directory>/<image name>
                    5. Image Tag: enter only the image tag found at the end of the URI <image tag>
                    6. Authentication Registry URL: Paste only the part of the URI before the image name <identifier>.dkr.ecr.<ecr-region>.amazonaws.com/<directory>/
                    7. Authentication Username: will be AWS
                    8. Password: will be the string created in step two.

                    A fully configured container set to pull AWS will look like the following.

                    "},{"location":"core-services/container-orchestration-provider-usage/","title":"Container Orchestration Provider Usage","text":""},{"location":"core-services/container-orchestration-provider-usage/#before-starting","title":"Before Starting","text":"

                    For this bundle to function appropriately, the gateway must have a supported container engine installed and running. Currently, the only officially supported engine is Docker.

                    "},{"location":"core-services/container-orchestration-provider-usage/#starting-the-service","title":"Starting the Service","text":"

                    To use this service select the ContainerOrchestrationService option located in the Services area. The ContainerOrchestrationService provides the following parameters:

                    • Enabled--activates the service when set to true
                    • Container Engine Host URL--provides a string that tells the service where to find the container engine (best left to the default value).
                    • Allowlist Enforcement Enabled--activates the container enforcement of the service, which let only the allowed containers to run
                    • Container Image Allowlist Content--the comma-separated list of conainer's digests allowed to be run

                    "},{"location":"core-services/container-orchestration-provider-usage/#creating-your-first-container","title":"Creating your first container.","text":"

                    To create a container, select the + icon (Create a new component) under services. A popup dialogue box will appear. In the field Factory select org.eclipse.kura.container.provider.ContainerInstance from the drop-down. Then, use the Name field to specify a name for the container.

                    Note

                    The name specified in the 'Name' field will also be the name of the container when it is spun up by the orchestrator.

                    After pressing submit, a new component will be added under the services tab, with the name that was selected in the dialogue. Select this component to finish configuring the container.

                    "},{"location":"core-services/container-orchestration-provider-usage/#configuring-the-container","title":"Configuring the container","text":"

                    To begin configuring the container, look under Services and select the item which has the name set in the previous step. Containers may be configured using the following fields:

                    • Enabled - When true, the service will create the defined container. When false the API will not create the container or will destroy the container if already running.

                    • Image Name - Describes the image that will be used to create the container. Remember to ensure that the selected image supports the architecture of the host machine, or else the container will not be able to start.

                    • Image Tag - Describes the version of the container image that will be used to create the container.

                    • Trust Anchor - Trust anchor used to verify the container image Signature Verification

                    • Verify in transparency log - Sets the transparency log verification, to be used when a container image signature has been uploaded to the transparency log.

                    • Container Image Enforcement Digest - A string representing the digest for the image that will be allowed to run by this container instance (eg: sha256:0000000000000000000000000000000000000000000000000000000000000000). It is used in the Container Enforcement service provided by the Container Orchestration Service.

                    • Authentication Registry URL - URL for an alternative registry to pull images from. (If the field is left blank, credentials will be applied to Docker-Hub). Please see the Authenticated Registries document for more information about connecting to different popular registries.

                    • Authentication Username - Describes the username to access the container registry entered above.

                    • Password - Describes the password to access the alternative container registry.

                    • Image Download Retries - Describes the number of retries the framework will attempt to pull the image before giving up.

                    • Image Download Retry Interval - Describes the amount of time the framework will wait before attempting to pull the image again.

                    • Image Download Timeout - Describes the amount of time the framework will let the image download before timeout.

                    • Internal Ports - This field accepts a comma-separated list of ports that will be internally exposed on the spun-up container. In this field, you can also specify which protocol to run at the port by appending a port with a colon and typing in the name of the network protocol. Example: 80, 443:tcp, 8080:udp.

                    • External Ports - This field accepts a comma-separated list of ports that will be externally exposed on the host machine.

                    • Privileged Mode - This flag if enabled will give the container root capabilities to all devices on the host system. Please be aware that setting this flag can be dangerous, and must only be used in exceptional situations.

                    • Environment Variables (optional) - This field accepts a comma-separated list of environment variables, which will be set inside the container when spun up.

                    • Entrypoint Override (optional) - This field accepts a comma-separated list which is used to override the command used to start a container. Example: ./test.sh,-v,-d,--human-readable.

                    • Memory (optional) - This field allows the configuration of the maximum amount of memory the container can use in bytes. The value is a positive integer, optionally followed by a suffix of b, k, m, g, to indicate bytes, kilobytes, megabytes, or gigabytes. The minimum and default values depends by the native container orchestrator. If left empty, the memory assigned to the container will be set to a default value.

                    • CPUs (optional) - This value specifies how many CPUs a container can use. Decimal values are allowed, so if set to 1.5, the container will use at most one and a half cpu resource.

                    • GPUs (optional) - This field configures how many Nvidia GPUs a container can use. Allowed values are all or an integer number. If there's no Nvidia GPU installed, leave it empty. The Nvidia Container Toolkit must be installed on the system to correctly configure the service, otherwise the container will not start. If the Nvidia Container Runtime is used, leave the field empty.

                    • Volume Mount (optional) - This field accepts a comma-separated list of system-to-container file mounts. This allows for the container to access files on the host machine.

                    • Peripheral Device (optional) - This field accepts a comma-separated list of device paths. This parameter allows devices to be passed through from the host to the container.

                    • Runtime (optional): Specifies the fully qualified name of an alternate OCI-compatible runtime, which is used to run commands specified by the 'run' instruction. Example: nvidia corresponds to --runtime=nvidia. Note: when using the Nvidia Container Runtime, leave the GPUs field empty. The GPUs available on the system will be accessible from the container by default.

                    • Networking Mode (optional) - Use this field to specify what networking mode the container will use. Possible Drivers include: bridge, none, container:{container id}, host. Please note that this field is case-sensitive. This field can also be used to connect to any of the networks listed by the cli command docker network ls.

                    • Logger Type - This field provides a drop-down selection of supported container logging drivers.

                    • Logger Parameters (optional) - This field accepts a comma-separated list of logging parameters. More information can be found in the container-engine logger documentation, for instance here.

                    • Restart Container On Failure - A boolean that tells the container engine to automatically restart the container when it has failed or shut down.

                    After specifying container parameters, ensure to set Enabled to true and press Apply. The container engine will then pull the respective image, spin up and start the container. If the gateway or the framework is power cycled, and the container and Container Orchestration Service are set to enabled, the framework will automatically start the container again upon startup.

                    "},{"location":"core-services/container-orchestration-provider-usage/#stopping-the-container","title":"Stopping the container","text":"

                    Warning

                    Stopping a container will delete it in an irreversible way. Please be sure to only use stateless containers and/or save their data in external volumes.

                    To stop the container without deleting the component, set the Enabled field to false, and then press Apply. This will delete the running container, but leave this component available for running the container again in the future. If you want to completely remove the container and component, press the Delete button to the top right of the screen, and press Yes on the confirmation dialogue.

                    "},{"location":"core-services/container-orchestration-provider-usage/#container-management-dashboard","title":"Container Management Dashboard","text":"

                    The Container Orchestration service also provides the user with an intuitive container dashboard. This dashboard shows all containers running on a gateway, including containers created with the framework and those created manually through the command-line interface. To utilize this dashboard the org.eclipse.container.orchestration.provider (ContainerOrchestrationService) must be enabled, and the dashboard can be opened by navigating to Device > Containers.

                    "},{"location":"core-services/container-orchestration-provider/","title":"Container Orchestration Provider","text":"

                    The Container Orchestration Provider allows Kura to manage Docker. With this tool, you can arbitrarily pull and deploy containerized software packages and run them on your gateway. This Service allows the user to create, configure, start, and stop containers all from the browser. The bundle will also restart containers if the gateway is restarted.

                    The feature is composed of two bundles, one that exposes APIs for container management and one that implements those APIs. This API is exposed so that you can leverage it to implement containerization in your own Kura plugins.

                    "},{"location":"core-services/deployment-service/","title":"Deployment Service","text":"

                    The Deployment Service allows to download files to the gateway and to perform actions on them. In the configuration tab it is possible to specify which is the directory that has to be used to store the downloaded files and the list of actions declared as deployment hooks that will be invoked when a corresponding metric is received with the download request.

                    The configuration requires to specify two parameters:

                    • downloads.directory - The directory to be used to store the downloaded files;
                    • deployment.hook.associations - The list of DeploymentHook associations in the form <request_type>=<hook_pid>, where <hook_pid> is the Kura Service Pid of a DeploymentHook instance and <request_type> is the value of the request.type metric received with the request.
                    "},{"location":"core-services/device-configuration-changes/","title":"Device Configuration Changes","text":"

                    Kura can detect changes to the components and publish them using a selected Cloud Publisher. There are two main components that enable this:

                    • org.eclipse.kura.configuration.change.manager, and
                    • org.eclipse.kura.event.publisher

                    The org.eclipse.kura.configuration.change.manager is responsible for detecting changes to any of the configurations currently running on the system and to publish a notification to a user-defined cloud publisher. By default, the org.eclipse.kura.event.publisher is used.

                    "},{"location":"core-services/device-configuration-changes/#configuration-change-manager","title":"Configuration Change Manager","text":"

                    The configuration change manager allows to collection of the PIDs of the components that have changed in the system. The configurable properties of this component are:

                    • Enable: whether to enable or not this component.
                    • CloudPublisher Target Filter: allows to specify the cloud publisher to use for sending the produced messages.
                    • Notification send delay (sec): allows to stack the changed PIDs for a given time before sending. In other words, it allows to group together sequences of PIDs that are changed in that time frame. This is to prevent message flooding at reboot or rollback.

                    The collected PIDs are sent to the Cloud Publisher as a KuraMessage with a payload body in JSON format. The timestamp of the KuraMessage is set to the last detected configuration change event. An example of message body is:

                    [\n    {\n        \u201cpid\u201d: \u201corg.eclipse.kura.clock.ClockService\u201d\n    },\n    {\n        \u201cpid\u201d: \u201corg.eclipse.kura.log.filesystem.provider.FilesystemLogProvider\u201d\n    }\n]\n

                    In the example above, a ClockService update triggered the delay timer, which was then reset by a configuration update on the FilesystemLogProvider. Afterward, no configuration updates reset the timer so the message containing the two PIDs was sent after expiration.

                    "},{"location":"core-services/device-configuration-changes/#event-publisher","title":"Event Publisher","text":"

                    By default, the org.eclipse.kura.event.publisher used by the configuration change manager does the actual publishing on a user-defined topic of the form:

                    $EVT/#account_id/#client_id/CONF/V1/CHANGE

                    This topic is adjusted for integration with EC, but the $EVT and the CONF/V1/CHANGE parts can be customized according to user needs by tweaking the Topic prefix and Topic properties.

                    The #account_id and #client_id fields are substituted at runtime with the account name and client ID at the Data Transport Service layer of the associated Cloud Connection.

                    The Qos, Retain, and Priority properties are the usual ones defined in the standard Cloud Publisher.

                    "},{"location":"core-services/h2db-service/","title":"H2Db Service","text":"

                    Kura integrates a Java SQL database named H2. The main features of this SQL Database are:

                    • Very fast, open source, JDBC API
                    • Embedded and server modes; in-memory databases
                    • Browser-based Console application
                    • Small footprint
                    "},{"location":"core-services/h2db-service/#supported-features","title":"Supported Features","text":"

                    Kura supports the following H2 database features:

                    • Persistence modes: The H2 implementation currently supports in-memory and file-based database instances. See the Persistence Modes section for more details.

                    • Multiple database instances: It is possible to create and configure multiple database instances from the Kura Administration UI, these instances can be selectively consumed by applications. A default database instance is created automatically.

                    • TCP Server: The current implementation allows external processes to access the database instances managed by Kura using TCP. This enables the integration of external applications that can share data with Kura components using the database.

                    • Web-based console: It is possible to start the H2 Web console directly from the Kura Administration UI. The console can be used to inspect the database contents and perform arbitrary queries for debug purposes.

                    • Basic credential management: The current implementation allows to change the password of the admin DB user from the Kura Administration UI. This allows the access restriction to the existing database instances.

                    By default, the DataService in Kura uses the H2 database to persist the messages.

                    "},{"location":"core-services/h2db-service/#limitations","title":"Limitations","text":"

                    • Private in-memory instances: Only named in-memory instances are supported (e.g. jdbc:h2:mem:<dbname>, where <dbname> is not the empty string), private instances represented by the jdbc:h2:mem: URL are currently not supported.

                    • Remote connections: The current implementation only supports embedded database instances. Connecting to remote instances using the jdbc:h2:tcp:* and jdbc:h2:ssl:* connector URLs is not supported.

                    Note

                    The new DbWireRecordFilter and DbWireRecordStore Wire components have been added. These components provide the same functionalities offered by the old H2DbWireRecordFilter and H2DbWireRecordStore components, but they can be used for connectiong to a generic relational database (i.e. H2DB, MySQL or MariaDB). The legacy components will continue to be available in order to keep backward compatibility, but will be deprecated since Kura 5.2.0 and should not be used for new installations.

                    "},{"location":"core-services/h2db-service/#usage","title":"Usage","text":""},{"location":"core-services/h2db-service/#creating-a-new-h2-database-instance","title":"Creating a new H2 database instance","text":"

                    To create a new H2 database instance, use the following procedure:

                    1. Open the Administrative UI and press the + button in the side menu, under the Services section. A pop-up dialog should appear.
                    2. Select org.eclipse.kura.core.db.H2DbService from the Factory drop-down list, enter an arbitrary name for the new instance and click Apply.
                    3. An entry for the newly created instance should appear in the side menu under Services, click on it to review its configuration. It is not possible to create different DB instances that manage the same DB URL. When creating a new instance please make sure that the URL specified in the field db.connector.url is not managed by another instance.
                    "},{"location":"core-services/h2db-service/#configuration-parameters","title":"Configuration Parameters","text":"

                    The H2DbService provides the following configuration parameters:

                    • Connector URL: JDBC connector URL of the database instance. Passing the USER and PASSWORD parameters in the connector URL is not supported, these paramters will be ignored if present. Please use the db.user and db.password fields to provide the credentials.

                    Warning

                    If the database is created in persisted mode, please make sure that the Linux user running Eclipse Kura has the permissions required to create the database file. If the permissions are not ok, Eclipse Kura may be able to create the database (by default it runs with the CAP_DAC_OVERRIDE capability) but it may not be able to perform the periodic defragmentation process, this may cause the database file size to grow expecially if the write rate is high.

                    Executing the following commands as root can be useful to detect potential issues, replace database_parent_directory with the parent directory of the database file and kura_linux_user with the Linux user that is executing Eclipse Kura (e.g. kurad): 

                    export TARGET=\"$(readlink -f database_parent_directory)\"\nexport KURA_USER=\"kura_linux_user\"\nsudo -u \"${KURA_USER}\" sh -c \"touch '${TARGET}/.testfile' && rm '${TARGET}/.testfile'\"\n

                    If command fails it may be necessary to change the database directory or adjust the permissions.

                    • User: Specifies the user for the database connection. Furthermore

                    • Password: Specifies the password. The default password is the empty string.

                    • Checkpoint interval (seconds): H2DbService instances support running periodic checkpoints to ensure data consistency. This parameter specifies the interval in seconds between two successive checkpoints. This setting has no effect for in-memory database instances.

                    • Defrag interval (minutes): H2DbService instances support running periodic defragmentation (compaction). This parameter specifies the interval in minutes between two successive checkpoints, set to zero to disable. This setting has no effect for in-memory database instances. Existing database connections will be closed during the defragmentation process and need to be reopened by the applications.

                    • Connection pool max size: The H2DbService manages connections using a connection pool. This parameter defines the maximum number of connections for the pool

                    "},{"location":"core-services/h2db-service/#selecting-a-database-instance-for-existing-components","title":"Selecting a database instance for existing components","text":"

                    A database instance is identified by its Kura service PID. The PID for the default instance is org.eclipse.kura.db.H2DbService while the PID for instances created using the Web UI is the string entered in the Name field at step 2 of the previous section.

                    The built-in components that use database functionalities allow to specify which instance to use in their configuration. These components are the DataService component of the cloud stack, the DbWireRecordFilter and DbWireRecordStore wire components. The configuration of each component contains a property that allows to specify the service PID of the desired instance.

                    "},{"location":"core-services/h2db-service/#usage-through-wires","title":"Usage through Wires","text":"

                    It is possible to store and extract Wire Records into/from a H2 database instance using the Wire Record Store and Wire Record Query wire components.

                    When a Wire Record is received by a Wire Record Store attached to a H2 based database instance, the data will be stored in a table whose name is the current value of the Record Collection Name configuration parameter of the Wire Component.

                    Each property contained in a Wire Record will be appended to a column with the same name as the property key. A new column will be created if it doesn't already exists.

                    Note

                    Storing wire record properties with the FLOAT data type using the Wire Record Store is not recommended since the type information will be lost. Values inserted as FLOAT using the Wire Record Store will be retrieved as DOUBLE using the Wire Record Query component.

                    Warning

                    It is not recommended to store Wire Records having properties with the same key and different value type. If the value type changes, the target column will be dropped and recreated with the type derived from the last received record. All existing data in the target column will be lost. The purpose of this is to allow changing the type of a column with a Wire Graph configuration update.

                    "},{"location":"core-services/h2db-service/#enabling-the-tcp-server","title":"Enabling the TCP Server","text":"

                    Danger

                    This feature is intended to be used only for debugging/development purposes. The server created by H2 is not running on a secure protocol. Only enable the server for a limited time and make sure to properly secure the firewall ports on which it is running.

                    The TCP server can be used by creating a H2DbServer instance:

                    1. Open the Web UI and press the + button in the side menu, under the Services section. A pop-up dialog should appear.
                    2. Select org.eclipse.kura.core.db.H2DbServer from the Factory drop-down\u200b list, enter an arbitrary name for the new instance and click Apply.
                    3. Clicking on the name of the new server instance on the left side of the Web UI\u200b. The configuration of the server component will appear.
                    4. Set the db.server.type field to TCP.
                    5. Review the server options under db.server.commandline, check the official documentation for more information about the available options.
                    6. Set the db.server.enabled to true.

                    The server, with the default configuration, will be listening on port 9123.

                    Tip

                    Make sure to review the firewall configuration in order to ensure that the server is reachable from an external process.

                    "},{"location":"core-services/h2db-service/#enabling-the-web-console","title":"Enabling the Web Console","text":"

                    Danger

                    This feature is intended to be used only for debugging/development purposes. The server created by H2 is not running on a secure protocol. Only enable the server for a limited time and make sure to properly secure the firewall ports on which it is running.

                    In order to enable the H2 Web console, proceed as follows:

                    1. Create a new H2DbServer instance.
                    2. Set the db.server.type field to WEB.
                    3. Enter appropriate parameters for the Web server in the db.server.commandline field. An example of valid settings can be: -webPort 9123 -webAllowOthers -ifExists -webExternalNames <device-ip>.
                    4. Set the db.server.enabled to true.

                    The server is now listening on the specified port.

                    Tip

                    Make sure to review the firewall configuration in order to ensure that the server is reachable from an external process.

                    Use a browser to access the console. Open the http://: URL, where is the IP address of the gateway and is the port specified at step 3.

                    Enter the DB URL as specified in the Kura configuration in the JDBC URL field and the credentials. Click on Connect, you should be able to access the console.

                    "},{"location":"core-services/h2db-service/#change-the-database-password","title":"Change the Database Password","text":"

                    To change the database password the System Administrator needs to:

                    1. Open the configuration of the desired database instance in the Web UI.
                    2. Enter the new password in the db.password field.
                    3. Click Apply.

                    Warn

                    If the H2DbServer instance fails to open a database, it will delete and recreate all database files. This behavior\u200b is aimed at preventing potential issues caused by incorrect credentials in the configuration snapshots. It is highly recommended to perform a backup of an existing database before trying to open it using a H2DbService instance and before changing the password.

                    "},{"location":"core-services/h2db-service/#persistence-modes","title":"Persistence Modes","text":"

                    The H2 database supports several persistence modes.

                    "},{"location":"core-services/h2db-service/#in-memory","title":"In Memory","text":"

                    An in-memory database instance can be created using the following URL structure: jdbc:h2:mem:, where is a non-empty string that represents the database name. This configuration is suggested for database instances that are frequently updated. Examples:

                    • jdbc:h2:mem:kuradb
                    • jdbc:h2:mem:mydb

                    The default database instance is in-memory by default and uses the jdbc:h2:mem:kuradb URL.

                    "},{"location":"core-services/h2db-service/#persistent","title":"Persistent","text":"

                    A persistent database instance can be created using the jdbc:h2:file:, where is a non-empty string that represents the database path.

                    If no URL parameters are supplied the database will enable the transaction log by default. The transaction log is used to restore the database to a consistent state after a crash or power failure. This provides good protection against data losses but causes a lot of writes to the storage device, reducing both performance and the lifetime of flash-based storage devices.

                    Examples: - jdbc:h2:file:/opt/db/mydb

                    Make sure to use absolute paths in the DB URL since H2 does not support DB paths relative to the working directory.

                    "},{"location":"core-services/introduction/","title":"Introduction","text":"

                    This section describes the administrative tools available using the Gateway Administration Console. This web interface provides the ability to configure all services and applications that are installed and running on the gateway.

                    "},{"location":"core-services/network-status-rest-v1/","title":"Network Status Service V1 REST APIs and MQTT Request Handler","text":"

                    The NET-STATUS-V1 cloud request handler and the corresponding REST APIs allow to retrieve the current status of the network interfaces available on the system.

                    This cloud request handler and rest API is available only on the systems that provide a NetworkStatusService implementation, at the moment this corresponds to the devices that include the NetworkManager integration.

                    Accessing the REST APIs requires to use an identity with the rest.network.status permission assigned.

                    • Request definitions
                      • GET/interfaceIds
                      • GET/status
                      • POST/status/byInterfaceId
                    • JSON definitions
                      • InterfaceIds
                      • InterfaceStatusList
                      • LoopbackInterfaceStatus
                      • EthernetInterfaceStatus
                      • WifiInterfaceStatus
                      • ModemInterfaceStatus
                      • NetworkInterfaceStatus
                      • IPAddressString
                      • HardwareAddress
                      • NetworkInterfaceIpAddress
                      • NetworkInterfaceIpAddressStatus
                      • WifiChannel
                      • WifiAccessPoint
                      • ModemModePair
                      • Sim
                      • Bearer
                      • ModemPorts
                      • NetworkInterfaceType
                      • NetworkInterfaceState
                      • WifiCapability
                      • WifiMode
                      • WifiSecurity
                      • ModemPortType
                      • ModemCapability
                      • ModemMode
                      • ModemBand
                      • SimType
                      • ESimStatus
                      • BearerIpType
                      • ModemConnectionType
                      • ModemConnectionStatus
                      • AccessTechnology
                      • RegistrationStatus
                      • FailureReport
                      • GenericFailureReport
                    "},{"location":"core-services/network-status-rest-v1/#request-definitions","title":"Request definitions","text":""},{"location":"core-services/network-status-rest-v1/#getinterfaceids","title":"GET/interfaceIds","text":"
                    • REST API path : /services/networkStatus/v1/interfaceIds
                    • description : Returns the identifiers of the network interfaces detected in the system. For Ethernet and WiFi interfaces, the identifier is typically the interface name. For the modems, instead, it is the usb or pci path.
                    • responses :
                      • 200
                        • description : The list of the identifiers of the network interfaces detected in the system.
                        • response body :
                          • InterfaceIds
                      • 500
                        • description : If an unexpected failure occurs while retrieving the interface list.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"core-services/network-status-rest-v1/#getstatus","title":"GET/status","text":"
                    • REST API path : /services/networkStatus/v1/status
                    • description : Returns the status for all interfaces currently available on the system. Failures in retrieving the status of specific interfaces will be reported using the failures field of the response.
                    • responses :
                      • 200
                        • description : The status of the network interfaces in the system.
                        • response body :
                          • InterfaceStatusList
                      • 500
                        • description : If an unexpected failure occurs while retrieving the interface list.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"core-services/network-status-rest-v1/#poststatusbyinterfaceid","title":"POST/status/byInterfaceId","text":"
                    • REST API path : /services/networkStatus/v1/status/byInterfaceId
                    • description : Returns the status for the network interfaces whose id is specified in the request. Failures in retrieving the status of specific interfaces, or the fact that an interface with the requested id cannot be found will be reported using the failures field of the responses.
                    • request body :
                      • InterfaceIds
                    • responses :
                      • 200
                        • description : The status of the network interfaces in the system.
                        • response body :
                          • InterfaceStatusList
                      • 400
                        • description : If the request object does not contain the interfaceIds field, it is null or if it contains empty or null interface ids.
                        • response body :
                          • GenericFailureReport
                      • 500
                        • description : If an unexpected failure occurs while retrieving the interface list.
                        • response body :
                          • GenericFailureReport
                    "},{"location":"core-services/network-status-rest-v1/#json-definitions","title":"JSON definitions","text":""},{"location":"core-services/network-status-rest-v1/#interfaceids","title":"InterfaceIds","text":"

                    An object containing a list of network interface identifiers

                    Properties:

                    • interfaceIds: array The list of network interface identifiers

                      • array element type: string An interface identifier
                    {\n  \"interfaceIds\": [\n    \"lo\"\n  ]\n}\n
                    "},{"location":"core-services/network-status-rest-v1/#interfacestatuslist","title":"InterfaceStatusList","text":"

                    An object reporting a list of network interface status. If a failure occurs retrieving the status for a specific interface, the reason will be reported in the failures list.

                    Properties:

                    • interfaces: array A list of network interface status

                      • array element type: variant
                        • Variants:
                          • object
                            • LoopbackInterfaceStatus
                          • object
                            • EthernetInterfaceStatus
                          • object
                            • WifiInterfaceStatus
                          • object
                            • ModemInterfaceStatus

                    • failures: array

                      • array element type: object
                        • FailureReport

                    {\n  \"failures\": [],\n  \"interfaces\": [\n    {\n      \"autoConnect\": true,\n      \"driver\": \"unknown\",\n      \"driverVersion\": \"\",\n      \"firmwareVersion\": \"\",\n      \"hardwareAddress\": \"00:00:00:00:00:00\",\n      \"id\": \"lo\",\n      \"interfaceIp4Addresses\": {\n        \"addresses\": [\n          {\n            \"address\": \"127.0.0.1\",\n            \"prefix\": 8\n          }\n        ],\n        \"dnsServerAddresses\": []\n      },\n      \"interfaceName\": \"lo\",\n      \"mtu\": 65536,\n      \"state\": \"UNMANAGED\",\n      \"type\": \"LOOPBACK\",\n      \"virtual\": true\n    }\n  ]\n}\n
                    {\n  \"failures\": [\n    {\n      \"interfaceId\": \"foo\",\n      \"reason\": \"Not found.\"\n    }\n  ],\n  \"interfaces\": []\n}\n

                    "},{"location":"core-services/network-status-rest-v1/#loopbackinterfacestatus","title":"LoopbackInterfaceStatus","text":"

                    Object that contains specific properties to describe the status of an Loopback interface. It contains also all of the properties specified by NetworkInterfaceStatus.

                    Properties:

                    {\n  \"autoConnect\": true,\n  \"driver\": \"unknown\",\n  \"driverVersion\": \"\",\n  \"firmwareVersion\": \"\",\n  \"hardwareAddress\": \"00:00:00:00:00:00\",\n  \"id\": \"lo\",\n  \"interfaceIp4Addresses\": {\n    \"addresses\": [\n      {\n        \"address\": \"127.0.0.1\",\n        \"prefix\": 8\n      }\n    ],\n    \"dnsServerAddresses\": []\n  },\n  \"interfaceName\": \"lo\",\n  \"mtu\": 65536,\n  \"state\": \"UNMANAGED\",\n  \"type\": \"LOOPBACK\",\n  \"virtual\": true\n}\n
                    "},{"location":"core-services/network-status-rest-v1/#ethernetinterfacestatus","title":"EthernetInterfaceStatus","text":"

                    Object that contains specific properties to describe the status of an Ethernet interface. It contains also all of the properties specified by NetworkInterfaceStatus.

                    Properties:

                    • linkUp: bool 
                    {\n  \"autoConnect\": true,\n  \"driver\": \"igb\",\n  \"driverVersion\": \"5.6.0-k\",\n  \"firmwareVersion\": \"3.25, 0x800005d0\",\n  \"hardwareAddress\": \"00:E0:C7:0A:5F:89\",\n  \"id\": \"eno1\",\n  \"interfaceIp4Addresses\": {\n    \"addresses\": [\n      {\n        \"address\": \"172.16.0.1\",\n        \"prefix\": 24\n      }\n    ],\n    \"dnsServerAddresses\": [],\n    \"gateway\": \"0.0.0.0\"\n  },\n  \"interfaceName\": \"eno1\",\n  \"linkUp\": true,\n  \"mtu\": 1500,\n  \"state\": \"ACTIVATED\",\n  \"type\": \"ETHERNET\",\n  \"virtual\": false\n}\n
                    "},{"location":"core-services/network-status-rest-v1/#wifiinterfacestatus","title":"WifiInterfaceStatus","text":"

                    Object that contains specific properties to describe the status of a WiFi interface. It contains also all of the properties specified by NetworkInterfaceStatus.

                    Properties:

                    • capabilities: array

                      • array element type: string (enumerated)
                        • WifiCapability

                    • channels: array

                      • array element type: object
                        • WifiChannel

                    • countryCode: string

                    • mode: string (enumerated)

                      • WifiMode

                    • activeWifiAccessPoint: object (optional)

                      • WifiAccessPoint

                    • availableWifiAccessPoints: array

                      • array element type: object
                        • WifiAccessPoint

                    {\n  \"activeWifiAccessPoint\": {\n    \"channel\": {\n      \"channel\": 11,\n      \"frequency\": 2462\n    },\n    \"hardwareAddress\": \"11:22:33:44:55:66\",\n    \"maxBitrate\": 130000,\n    \"mode\": \"INFRA\",\n    \"rsnSecurity\": [\n      \"GROUP_CCMP\",\n      \"KEY_MGMT_PSK\",\n      \"PAIR_CCMP\"\n    ],\n    \"signalQuality\": 100,\n    \"signalStrength\": -20,\n    \"ssid\": \"MyAccessPoint\",\n    \"wpaSecurity\": [\n      \"NONE\"\n    ],\n    \"flags\": [\n      \"PRIVACY\"\n    ]\n  },\n  \"autoConnect\": true,\n  \"availableWifiAccessPoints\": [\n    {\n      \"channel\": {\n        \"channel\": 11,\n        \"frequency\": 2462\n      },\n      \"hardwareAddress\": \"11:22:33:44:55:66\",\n      \"maxBitrate\": 130000,\n      \"mode\": \"INFRA\",\n      \"rsnSecurity\": [\n        \"GROUP_CCMP\",\n        \"KEY_MGMT_PSK\",\n        \"PAIR_CCMP\"\n      ],\n      \"signalQuality\": 100,\n      \"signalStrength\": -20,\n      \"ssid\": \"MyAccessPoint\",\n      \"wpaSecurity\": [\n        \"NONE\"\n      ],\n      \"flags\": [\n        \"PRIVACY\"\n      ]\n    },\n    {\n      \"channel\": {\n        \"channel\": 5,\n        \"frequency\": 2432\n      },\n      \"hardwareAddress\": \"22:33:44:55:66:77\",\n      \"maxBitrate\": 270000,\n      \"mode\": \"INFRA\",\n      \"rsnSecurity\": [\n        \"GROUP_CCMP\",\n        \"KEY_MGMT_PSK\",\n        \"PAIR_CCMP\"\n      ],\n      \"signalQuality\": 42,\n      \"signalStrength\": -69,\n      \"ssid\": \"OtherSSID\",\n      \"wpaSecurity\": [\n        \"NONE\"\n      ],\n      \"flags\": [\n        \"PRIVACY\"\n      ]\n    }\n  ],\n  \"capabilities\": [\n    \"CIPHER_WEP40\",\n    \"WPA\",\n    \"AP\",\n    \"FREQ_VALID\",\n    \"ADHOC\",\n    \"RSN\",\n    \"CIPHER_TKIP\",\n    \"CIPHER_WEP104\",\n    \"CIPHER_CCMP\",\n    \"FREQ_2GHZ\"\n  ],\n  \"channels\": [\n    {\n      \"attenuation\": 20.0,\n      \"channel\": 1,\n      \"disabled\": false,\n      \"frequency\": 2412,\n      \"noInitiatingRadiation\": false,\n      \"radarDetection\": false\n    },\n    {\n      \"attenuation\": 20.0,\n      \"channel\": 2,\n      \"disabled\": false,\n      \"frequency\": 2417,\n      \"noInitiatingRadiation\": false,\n      \"radarDetection\": false\n    }\n  ],\n  \"countryCode\": \"IT\",\n  \"driver\": \"brcmfmac\",\n  \"driverVersion\": \"7.45.98.94\",\n  \"firmwareVersion\": \"01-3b33decd\",\n  \"hardwareAddress\": \"44:55:66:77:88:99\",\n  \"id\": \"wlan0\",\n  \"interfaceIp4Addresses\": {\n    \"addresses\": [\n      {\n        \"address\": \"192.168.0.113\",\n        \"prefix\": 24\n      }\n    ],\n    \"dnsServerAddresses\": []\n  },\n  \"interfaceName\": \"wlan0\",\n  \"mode\": \"INFRA\",\n  \"mtu\": 1500,\n  \"state\": \"ACTIVATED\",\n  \"type\": \"WIFI\",\n  \"virtual\": false\n}\n
                    {\n  \"activeWifiAccessPoint\": {\n    \"channel\": {\n      \"channel\": 1,\n      \"frequency\": 2412\n    },\n    \"hardwareAddress\": \"44:55:66:77:88:99\",\n    \"maxBitrate\": 0,\n    \"mode\": \"INFRA\",\n    \"rsnSecurity\": [\n      \"GROUP_CCMP\",\n      \"KEY_MGMT_PSK\",\n      \"PAIR_CCMP\"\n    ],\n    \"signalQuality\": 0,\n    \"signalStrength\": -104,\n    \"ssid\": \"kura_gateway_raspberry_pi\",\n    \"wpaSecurity\": [\n      \"NONE\"\n    ],\n    \"flags\": [\n      \"PRIVACY\"\n    ]\n  },\n  \"autoConnect\": true,\n  \"availableWifiAccessPoints\": [\n    {\n      \"channel\": {\n        \"channel\": 1,\n        \"frequency\": 2412\n      },\n      \"hardwareAddress\": \"44:55:66:77:88:99\",\n      \"maxBitrate\": 0,\n      \"mode\": \"INFRA\",\n      \"rsnSecurity\": [\n        \"GROUP_CCMP\",\n        \"KEY_MGMT_PSK\",\n        \"PAIR_CCMP\"\n      ],\n      \"signalQuality\": 0,\n      \"signalStrength\": -104,\n      \"ssid\": \"kura_gateway_raspberry_pi\",\n      \"wpaSecurity\": [\n        \"NONE\"\n      ],\n      \"flags\": [\n        \"PRIVACY\",\n        \"WPS\"\n      ]\n    }\n  ],\n  \"capabilities\": [\n    \"CIPHER_WEP40\",\n    \"WPA\",\n    \"AP\",\n    \"FREQ_VALID\",\n    \"ADHOC\",\n    \"RSN\",\n    \"CIPHER_TKIP\",\n    \"CIPHER_WEP104\",\n    \"CIPHER_CCMP\",\n    \"FREQ_2GHZ\"\n  ],\n  \"channels\": [\n    {\n      \"attenuation\": 20.0,\n      \"channel\": 1,\n      \"disabled\": false,\n      \"frequency\": 2412,\n      \"noInitiatingRadiation\": false,\n      \"radarDetection\": false\n    },\n    {\n      \"attenuation\": 20.0,\n      \"channel\": 2,\n      \"disabled\": false,\n      \"frequency\": 2417,\n      \"noInitiatingRadiation\": false,\n      \"radarDetection\": false\n    }\n  ],\n  \"countryCode\": \"00\",\n  \"driver\": \"brcmfmac\",\n  \"driverVersion\": \"7.45.98.94\",\n  \"firmwareVersion\": \"01-3b33decd\",\n  \"hardwareAddress\": \"44:55:66:77:88:99\",\n  \"id\": \"wlan0\",\n  \"interfaceIp4Addresses\": {\n    \"addresses\": [\n      {\n        \"address\": \"172.16.1.1\",\n        \"prefix\": 24\n      }\n    ],\n    \"dnsServerAddresses\": []\n  },\n  \"interfaceName\": \"wlan0\",\n  \"mode\": \"MASTER\",\n  \"mtu\": 1500,\n  \"state\": \"ACTIVATED\",\n  \"type\": \"WIFI\",\n  \"virtual\": false\n}\n

                    "},{"location":"core-services/network-status-rest-v1/#modeminterfacestatus","title":"ModemInterfaceStatus","text":"

                    Object that contains specific properties to describe the status of a Modem interface. It contains also all of the properties specified by NetworkInterfaceStatus.

                    Properties:

                    • model: string

                    • manufacturer: string

                    • serialNumber: string

                    • softwareRevision: string

                    • hardwareRevision: string

                    • primaryPort: string

                    • ports: object

                      • ModemPorts

                    • supportedModemCapabilities: array

                      • array element type: string (enumerated)
                        • ModemCapability

                    • currentModemCapabilities: array

                      • array element type: string (enumerated)
                        • ModemCapability

                    • powerState: string (enumerated)

                      • ModemPowerState

                    • supportedModes: array

                      • array element type: object
                        • ModemModePair

                    • currentModes: object

                      • ModemModePair

                    • supportedBands: array

                      • array element type: string (enumerated)
                        • ModemBand

                    • currentBands: array

                      • array element type: string (enumerated)
                        • ModemBand

                    • gpsSupported: bool

                    • availableSims: array

                      • array element type: object
                        • Sim

                    • simLocked: bool

                    • bearers: array

                      • array element type: object
                        • Bearer

                    • connectionType: string (enumerated)

                      • ModemConnectionType

                    • connectionStatus: string (enumerated)

                      • ModemConnectionStatus

                    • accessTechnologies: array

                      • array element type: string (enumerated)
                        • AccessTechnology

                    • signalQuality: number

                    • signalStrength: number

                    • registrationStatus: string (enumerated)

                      • RegistrationStatus

                    • operatorName: string 

                    {\n  \"accessTechnologies\": [\n    \"LTE\"\n  ],\n  \"autoConnect\": true,\n  \"availableSims\": [\n    {\n      \"active\": true,\n      \"primary\": true,\n      \"eSimStatus\": \"UNKNOWN\",\n      \"eid\": \"\",\n      \"iccid\": \"1111111111111111111\",\n      \"imsi\": \"111111111111111\",\n      \"operatorName\": \"MyOperator\",\n      \"operatorIdentifier\": \"12345\",\n      \"simType\": \"PHYSICAL\"\n    }\n  ],\n  \"bearers\": [\n    {\n      \"apn\": \"apn.myoperator.com\",\n      \"bytesReceived\": 0,\n      \"bytesTransmitted\": 0,\n      \"connected\": true,\n      \"ipTypes\": [\n        \"IPV4\"\n      ],\n      \"name\": \"wwp11s0f2u3i4\"\n    }\n  ],\n  \"connectionStatus\": \"CONNECTED\",\n  \"connectionType\": \"DirectIP\",\n  \"currentBands\": [\n    \"DCS\",\n    \"EUTRAN_3\",\n    \"EUTRAN_19\",\n    \"EUTRAN_40\",\n    \"EUTRAN_26\",\n    \"EUTRAN_28\",\n    \"EUTRAN_41\",\n    \"UTRAN_6\",\n    \"EUTRAN_13\",\n    \"EUTRAN_25\",\n    \"EUTRAN_5\",\n    \"EUTRAN_7\",\n    \"EUTRAN_8\",\n    \"UTRAN_2\",\n    \"EUTRAN_38\",\n    \"UTRAN_1\",\n    \"EUTRAN_12\",\n    \"UTRAN_8\",\n    \"EUTRAN_18\",\n    \"UTRAN_19\",\n    \"G850\",\n    \"EUTRAN_20\",\n    \"UTRAN_5\",\n    \"EUTRAN_1\",\n    \"EUTRAN_39\",\n    \"EUTRAN_2\",\n    \"EUTRAN_4\",\n    \"EGSM\",\n    \"PCS\",\n    \"UTRAN_4\"\n  ],\n  \"currentModemCapabilities\": [\n    \"GSM_UMTS\",\n    \"LTE\"\n  ],\n  \"currentModes\": {\n    \"modes\": [\n      \"MODE_2G\",\n      \"MODE_3G\",\n      \"MODE_4G\"\n    ],\n    \"preferredMode\": \"MODE_4G\"\n  },\n  \"driver\": \"qmi_wwan, option1\",\n  \"driverVersion\": \"\",\n  \"firmwareVersion\": \"\",\n  \"gpsSupported\": true,\n  \"hardwareAddress\": \"00:00:00:00:00:00\",\n  \"hardwareRevision\": \"10000\",\n  \"id\": \"1-3\",\n  \"interfaceIp4Addresses\": {\n    \"addresses\": [\n      {\n        \"address\": \"1.2.3.4\",\n        \"prefix\": 30\n      }\n    ],\n    \"dnsServerAddresses\": [\n      \"1.2.3.6\",\n      \"1.2.3.7\"\n    ],\n    \"gateway\": \"1.2.3.5\"\n  },\n  \"interfaceName\": \"wwp11s0f2u3i4\",\n  \"manufacturer\": \"QUALCOMM INCORPORATED\",\n  \"model\": \"QUECTEL Mobile Broadband Module\",\n  \"mtu\": 1500,\n  \"operatorName\": \"MyOperator\",\n  \"ports\": {\n    \"cdc-wdm0\": \"QMI\",\n    \"ttyUSB0\": \"QCDM\",\n    \"ttyUSB1\": \"GPS\",\n    \"ttyUSB2\": \"AT\",\n    \"ttyUSB3\": \"AT\",\n    \"wwp11s0f2u3i4\": \"NET\"\n  },\n  \"powerState\": \"ON\",\n  \"primaryPort\": \"cdc-wdm0\",\n  \"registrationStatus\": \"HOME\",\n  \"serialNumber\": \"111111111111111\",\n  \"signalQuality\": 55,\n  \"signalStrength\": -80,\n  \"simLocked\": true,\n  \"softwareRevision\": \"EG25GGBR07A08M2G\",\n  \"state\": \"ACTIVATED\",\n  \"supportedBands\": [\n    \"DCS\",\n    \"EUTRAN_3\",\n    \"EUTRAN_19\",\n    \"EUTRAN_40\",\n    \"EUTRAN_26\",\n    \"EUTRAN_28\",\n    \"EUTRAN_41\",\n    \"UTRAN_6\",\n    \"EUTRAN_13\",\n    \"EUTRAN_25\",\n    \"EUTRAN_5\",\n    \"EUTRAN_7\",\n    \"EUTRAN_8\",\n    \"UTRAN_2\",\n    \"EUTRAN_38\",\n    \"UTRAN_1\",\n    \"EUTRAN_12\",\n    \"UTRAN_8\",\n    \"EUTRAN_18\",\n    \"UTRAN_19\",\n    \"G850\",\n    \"EUTRAN_20\",\n    \"UTRAN_5\",\n    \"EUTRAN_1\",\n    \"EUTRAN_39\",\n    \"EUTRAN_2\",\n    \"EUTRAN_4\",\n    \"EGSM\",\n    \"PCS\",\n    \"UTRAN_4\"\n  ],\n  \"supportedModemCapabilities\": [\n    \"NONE\"\n  ],\n  \"supportedModes\": [\n    {\n      \"modes\": [\n        \"MODE_4G\"\n      ],\n      \"preferredMode\": \"NONE\"\n    },\n    {\n      \"modes\": [\n        \"MODE_2G\",\n        \"MODE_3G\",\n        \"MODE_4G\"\n      ],\n      \"preferredMode\": \"MODE_4G\"\n    }\n  ],\n  \"type\": \"MODEM\",\n  \"virtual\": false\n}\n
                    "},{"location":"core-services/network-status-rest-v1/#networkinterfacestatus","title":"NetworkInterfaceStatus","text":"

                    This object contains the common properties contained by the status object reported for a network interface. A network interface is identified by Kura using the id field. It is used to internally manage the interface. The interfaceName, instead, is the IP interface as it may appear on the system. For Ethernet and WiFi interfaces the two values coincide (i.e. eth0, wlp1s0, ...). For modems, instead, the id is typically the usb or pci path, while the interfaceName is the IP interface created when they are connected. When the modem is disconnected the interfaceName can have a different value.

                    Properties:

                    • id: string

                    • interfaceName: string

                    • hardwareAddress: string

                      • HardwareAddress

                    • driver: string

                    • driverVersion: string

                    • firmwareVersion: string

                    • virtual: bool

                    • state: string (enumerated)

                      • NetworkInterfaceState

                    • autoConnect: bool

                    • mtu: number

                    • interfaceIp4Addresses: array (optional)

                      • array element type: object
                        • NetworkInterfaceIpAddressStatus

                    • interfaceIp6Addresses: array (optional)

                      • array element type: object
                        • NetworkInterfaceIpAddressStatus
                    "},{"location":"core-services/network-status-rest-v1/#ipaddressstring","title":"IPAddressString","text":"

                    Represents an IPv4 or IPv6 addresses as a string.

                    "},{"location":"core-services/network-status-rest-v1/#hardwareaddress","title":"HardwareAddress","text":"

                    Represents an hardware address as its bytes reported as two characters hexadecimal strings separated by the ':' character. e.g. 00:11:22:33:A4:FC:BB.

                    "},{"location":"core-services/network-status-rest-v1/#networkinterfaceipaddress","title":"NetworkInterfaceIpAddress","text":"

                    This object describes an IP address with its prefix. It can be used for IPv4 or IPv6 addresses.

                    Properties:

                    • address: string

                      • IPAddressString

                    • prefix: number

                    "},{"location":"core-services/network-status-rest-v1/#networkinterfaceipaddressstatus","title":"NetworkInterfaceIpAddressStatus","text":"

                    This class describes the IP address status of a network interface: a list of IP addresses, an optional gateway and a list of DNS servers address. It can be used for IPv4 or IPv6 addresses.

                    Properties:

                    • addresses: array

                      • array element type: object
                        • NetworkInterfaceIpAddress

                    • gateway: string (optional This field can be missing if the interface has no gateway.)

                      • IPAddressString

                    • dnsServerAddresses: array

                      • array element type: string
                        • IPAddressString
                    "},{"location":"core-services/network-status-rest-v1/#wifichannel","title":"WifiChannel","text":"

                    This class represent a WiFi channel, providing the channel number, frequency, status and other useful information.

                    Properties:

                    • channel: number

                    • frequency: number

                    • disabled: bool (optional)

                    • attenuation: number (optional)

                    • noInitiatingRadiation: bool (optional)

                    • radarDetection: bool (optional)

                    "},{"location":"core-services/network-status-rest-v1/#wifiaccesspoint","title":"WifiAccessPoint","text":"

                    This object describes a Wifi Access Point. It can be used both for describing a detected AP after a WiFi scan when in Station mode and the provided AP when in Master (or Access Point) mode.

                    Properties:

                    • ssid: string The Service Set IDentifier of the WiFi network

                    • hardwareAddress: string

                      • HardwareAddress

                    • channel: object

                      • WifiChannel

                    • mode: string (enumerated)

                      • WifiMode

                    • maxBitrate: number The maximum bitrate this access point is capable of.

                    • signalQuality: number The current signal quality of the access point in percentage.

                    • signalStrength: number The current signal strength of the access point in dBm.

                    • wpaSecurity: array The WPA capabilities of the access point

                      • array element type: string (enumerated)
                        • WifiSecurity

                    • rsnSecurity: array The RSN capabilities of the access point

                      • array element type: string (enumerated)
                        • WifiSecurity

                    • flags: array The capabilities of the access point

                      • array element type: string (enumerated)
                        • WifiFlags
                    "},{"location":"core-services/network-status-rest-v1/#modemmodepair","title":"ModemModePair","text":"

                    This object represents a pair of Modem Mode list and a preferred one.

                    Properties:

                    • modes: array

                      • array element type: string (enumerated)
                        • ModemMode

                    • preferredMode: string (enumerated)

                      • ModemMode
                    "},{"location":"core-services/network-status-rest-v1/#sim","title":"Sim","text":"

                    This class contains all relevant properties to describe a SIM (Subscriber Identity Module).

                    Properties:

                    • active: bool

                    • primary: bool

                    • iccid: string

                    • imsi: string

                    • eid: string

                    • operatorName: string

                    • operatorIdentifier: string

                    • simType: string (enumerated)

                      • SimType

                    • eSimStatus: string (enumerated)

                      • ESimStatus
                    "},{"location":"core-services/network-status-rest-v1/#bearer","title":"Bearer","text":"

                    This object describes the Bearer or Context associated to a modem connection.

                    Properties:

                    • name: string

                    • connected: bool

                    • apn: string

                    • ipTypes: array

                      • array element type: string (enumerated)
                        • BearerIpType

                    • bytesTransmitted: number

                    • bytesReceived: number

                    "},{"location":"core-services/network-status-rest-v1/#modemports","title":"ModemPorts","text":"

                    An object representing a set of modem ports. The members of this object represent modem ports, the member names represent the modem port name. This object can have a variable number of members.

                    Properties:

                    • propertyName: string (enumerated)
                      • ModemPortType
                    "},{"location":"core-services/network-status-rest-v1/#networkinterfacetype","title":"NetworkInterfaceType","text":"

                    The type of a network interface.

                    • Possible values
                      • UNKNOWN: The device type is unknown
                      • ETHERNET: The device is a wired Ethernet device.
                      • WIFI: The device is an 802.11 WiFi device.
                      • UNUSED1
                      • UNUSED2
                      • BT: The device is a Bluetooth device.
                      • OLPC_MESH: The device is an OLPC mesh networking device.
                      • WIMAX: The device is an 802.16e Mobile WiMAX device.
                      • MODEM: The device is a modem supporting one or more of analog telephone, CDMA/EVDO, GSM/UMTS/HSPA, or LTE standards to access a cellular or wireline data network.
                      • INFINIBAND: The device is an IP-capable InfiniBand interface.
                      • BOND: The device is a bond master interface.
                      • VLAN: The device is a VLAN interface.
                      • ADSL: The device is an ADSL device.
                      • BRIDGE: The device is a bridge master interface.
                      • GENERIC: This is a generic support for unrecognized device types.
                      • TEAM: The device is a team master interface.
                      • TUN: The device is a TUN or TAP interface.
                      • TUNNEL: The device is an IP tunnel interface.
                      • MACVLAN: The device is a MACVLAN interface.
                      • VXLAN: The device is a VXLAN interface.
                      • VETH: The device is a VETH interface.
                      • MACSEC: The device is a MACsec interface.
                      • DUMMY: The device is a dummy interface.
                      • PPP: The device is a PPP interface.
                      • OVS_INTERFACE: The device is a Open vSwitch interface.
                      • OVS_PORT: The device is a Open vSwitch port
                      • OVS_BRIDGE: The device is a Open vSwitch bridge.
                      • WPAN: The device is a IEEE 802.15.4 (WPAN) MAC Layer Device.
                      • SIXLOWPAN: The device is a 6LoWPAN interface.
                      • WIREGUARD: The device is a WireGuard interface.
                      • WIFI_P2P: The device is an 802.11 Wi-Fi P2P device.
                      • VRF: The device is a VRF (Virtual Routing and Forwarding) interface.
                      • LOOPBACK: The device is a loopback device.
                    "},{"location":"core-services/network-status-rest-v1/#networkinterfacestate","title":"NetworkInterfaceState","text":"

                    The state of a network interface.

                    • Possible values
                      • UNKNOWN: The device is in an unknown state.
                      • UNMANAGED: The device cannot be used (carrier off, rfkill, etc).
                      • UNAVAILABLE: The device is not connected.
                      • DISCONNECTED: The device is preparing to connect.
                      • PREPARE: The device is being configured.
                      • CONFIG: The device is awaiting secrets necessary to continue connection.
                      • NEED_AUTH: The IP settings of the device are being requested and configured.
                      • IP_CONFIG: The device's IP connectivity ability is being determined.
                      • IP_CHECK: The device is waiting for secondary connections to be activated.
                      • SECONDARIES: The device is waiting for secondary connections to be activated.
                      • ACTIVATED: The device is active.
                      • DEACTIVATING: The device's network connection is being turn down.
                      • FAILED: The device is in a failure state following an attempt to activate it.
                    "},{"location":"core-services/network-status-rest-v1/#wificapability","title":"WifiCapability","text":"

                    The capability of a WiFi interface.

                    • Possible values
                      • NONE: The device has no encryption/authentication capabilities
                      • CIPHER_WEP40: The device supports 40/64-bit WEP encryption.
                      • CIPHER_WEP104: The device supports 104/128-bit WEP encryption.
                      • CIPHER_TKIP: The device supports the TKIP encryption.
                      • CIPHER_CCMP: The device supports the AES/CCMP encryption.
                      • WPA: The device supports the WPA1 encryption/authentication protocol.
                      • RSN: The device supports the WPA2/RSN encryption/authentication protocol.
                      • AP: The device supports Access Point mode.
                      • ADHOC: The device supports Ad-Hoc mode.
                      • FREQ_VALID: The device reports frequency capabilities.
                      • FREQ_2GHZ: The device supports 2.4GHz frequencies.
                      • FREQ_5GHZ: The device supports 5GHz frequencies.
                      • MESH: The device supports mesh points.
                      • IBSS_RSN: The device supports WPA2 in IBSS networks
                    "},{"location":"core-services/network-status-rest-v1/#wifimode","title":"WifiMode","text":"

                    Modes of operation for wifi interfaces

                    • Possible values
                      • UNKNOWN: Mode is unknown.
                      • ADHOC: Uncoordinated network without central infrastructure.
                      • INFRA: Client mode - Coordinated network with one or more central controllers.
                      • MASTER: Access Point Mode - Coordinated network with one or more central controllers.
                    "},{"location":"core-services/network-status-rest-v1/#wifisecurity","title":"WifiSecurity","text":"

                    Flags describing the security capabilities of an access point.

                    • Possible values
                      • NONE: None
                      • PAIR_WEP40: Supports pairwise 40-bit WEP encryption.
                      • PAIR_WEP104: Supports pairwise 104-bit WEP encryption.
                      • PAIR_TKIP: Supports pairwise TKIP encryption.
                      • PAIR_CCMP: Supports pairwise CCMP encryption.
                      • GROUP_WEP40: Supports a group 40-bit WEP cipher.
                      • GROUP_WEP104: Supports a group 104-bit WEP cipher.
                      • GROUP_TKIP: Supports a group TKIP cipher.
                      • GROUP_CCMP: Supports a group CCMP cipher.
                      • KEY_MGMT_PSK: Supports PSK key management.
                      • KEY_MGMT_802_1X: Supports 802.1x key management.
                      • SECURITY_NONE: Supports no encryption.
                      • SECURITY_WEP: Supports WEP encryption.
                      • SECURITY_WPA: Supports WPA encryption.
                      • SECURITY_WPA2: Supports WPA2 encryption.
                      • SECURITY_WPA_WPA2: Supports WPA and WPA2 encryption.
                    "},{"location":"core-services/network-status-rest-v1/#wififlags","title":"WifiFlags","text":"

                    Flags describing the capabilities of an access point.

                    • Possible values
                      • NONE: None
                      • PRIVACY: supports authentication and encryption
                      • WPS: supports WPS (Wi-Fi Protected Setup)
                      • WPS_PBC: supports push-button based WPS
                      • WPS_PIN: supports PIN based WPS
                    "},{"location":"core-services/network-status-rest-v1/#modemporttype","title":"ModemPortType","text":"

                    The type of a modem port.

                    • Possible values
                      • UNKNOWN
                      • NET
                      • AT
                      • QCDM
                      • GPS
                      • QMI
                      • MBIM
                      • AUDIO
                      • IGNORED
                    "},{"location":"core-services/network-status-rest-v1/#modemcapability","title":"ModemCapability","text":"

                    The generic access technologies families supported by a modem.

                    • Possible values
                      • NONE: The modem has no capabilities.
                      • POTS: The modem supports the Plain Old Telephone Service (analog wired telephone network).
                      • EVDO: The modem supports EVDO revision 0, A or B.
                      • GSM_UMTS: The modem supports at least one of GSM, GPRS, EDGE, UMTS, HSDPA, HSUPA or HSPA+ technologies.
                      • LTE: The modem has LTE capabilities.
                      • IRIDIUM: The modem supports Iridium technology.
                      • FIVE_GNR: The modem supports 5GNR.
                      • TDS: The modem supports TDS.
                      • ANY: The modem supports all capabilities.
                    "},{"location":"core-services/network-status-rest-v1/#modemmode","title":"ModemMode","text":"

                    The generic access mode a modem supports.

                    • Possible values
                      • NONE
                      • CS
                      • MODE_2G
                      • MODE_3G
                      • MODE_4G
                      • MODE_5G
                      • ANY
                    "},{"location":"core-services/network-status-rest-v1/#modemband","title":"ModemBand","text":"

                    The radio bands supported by a modem when connected to a mobile network.

                    • Possible values
                      • UNKNOWN
                      • EGSM
                      • DCS
                      • PCS
                      • G850
                      • UTRAN_1
                      • UTRAN_3
                      • UTRAN_4
                      • UTRAN_6
                      • UTRAN_5
                      • UTRAN_8
                      • UTRAN_9
                      • UTRAN_2
                      • UTRAN_7
                      • G450
                      • G480
                      • G750
                      • G380
                      • G410
                      • G710
                      • G810
                      • EUTRAN_1
                      • EUTRAN_2
                      • EUTRAN_3
                      • EUTRAN_4
                      • EUTRAN_5
                      • EUTRAN_6
                      • EUTRAN_7
                      • EUTRAN_8
                      • EUTRAN_9
                      • EUTRAN_10
                      • EUTRAN_11
                      • EUTRAN_12
                      • EUTRAN_13
                      • EUTRAN_14
                      • EUTRAN_17
                      • EUTRAN_18
                      • EUTRAN_19
                      • EUTRAN_20
                      • EUTRAN_21
                      • EUTRAN_22
                      • EUTRAN_23
                      • EUTRAN_24
                      • EUTRAN_25
                      • EUTRAN_26
                      • EUTRAN_27
                      • EUTRAN_28
                      • EUTRAN_29
                      • EUTRAN_30
                      • EUTRAN_31
                      • EUTRAN_32
                      • EUTRAN_33
                      • EUTRAN_34
                      • EUTRAN_35
                      • EUTRAN_36
                      • EUTRAN_37
                      • EUTRAN_38
                      • EUTRAN_39
                      • EUTRAN_40
                      • EUTRAN_41
                      • EUTRAN_42
                      • EUTRAN_43
                      • EUTRAN_44
                      • EUTRAN_45
                      • EUTRAN_46
                      • EUTRAN_47
                      • EUTRAN_48
                      • EUTRAN_49
                      • EUTRAN_50
                      • EUTRAN_51
                      • EUTRAN_52
                      • EUTRAN_53
                      • EUTRAN_54
                      • EUTRAN_55
                      • EUTRAN_56
                      • EUTRAN_57
                      • EUTRAN_58
                      • EUTRAN_59
                      • EUTRAN_60
                      • EUTRAN_61
                      • EUTRAN_62
                      • EUTRAN_63
                      • EUTRAN_64
                      • EUTRAN_65
                      • EUTRAN_66
                      • EUTRAN_67
                      • EUTRAN_68
                      • EUTRAN_69
                      • EUTRAN_70
                      • EUTRAN_71
                      • EUTRAN_85
                      • CDMA_BC0
                      • CDMA_BC1
                      • CDMA_BC2
                      • CDMA_BC3
                      • CDMA_BC4
                      • CDMA_BC5
                      • CDMA_BC6
                      • CDMA_BC7
                      • CDMA_BC8
                      • CDMA_BC9
                      • CDMA_BC10
                      • CDMA_BC11
                      • CDMA_BC12
                      • CDMA_BC13
                      • CDMA_BC14
                      • CDMA_BC15
                      • CDMA_BC16
                      • CDMA_BC17
                      • CDMA_BC18
                      • CDMA_BC19
                      • UTRAN_10
                      • UTRAN_11
                      • UTRAN_12
                      • UTRAN_13
                      • UTRAN_14
                      • UTRAN_19
                      • UTRAN_20
                      • UTRAN_21
                      • UTRAN_22
                      • UTRAN_25
                      • UTRAN_26
                      • UTRAN_32
                      • ANY
                      • NGRAN_1
                      • NGRAN_2
                      • NGRAN_3
                      • NGRAN_5
                      • NGRAN_7
                      • NGRAN_8
                      • NGRAN_12
                      • NGRAN_13
                      • NGRAN_14
                      • NGRAN_18
                      • NGRAN_20
                      • NGRAN_25
                      • NGRAN_26
                      • NGRAN_28
                      • NGRAN_29
                      • NGRAN_30
                      • NGRAN_34
                      • NGRAN_38
                      • NGRAN_39
                      • NGRAN_40
                      • NGRAN_41
                      • NGRAN_48
                      • NGRAN_50
                      • NGRAN_51
                      • NGRAN_53
                      • NGRAN_65
                      • NGRAN_66
                      • NGRAN_70
                      • NGRAN_71
                      • NGRAN_74
                      • NGRAN_75
                      • NGRAN_76
                      • NGRAN_77
                      • NGRAN_78
                      • NGRAN_79
                      • NGRAN_80
                      • NGRAN_81
                      • NGRAN_82
                      • NGRAN_83
                      • NGRAN_84
                      • NGRAN_86
                      • NGRAN_89
                      • NGRAN_90
                      • NGRAN_91
                      • NGRAN_92
                      • NGRAN_93
                      • NGRAN_94
                      • NGRAN_95
                      • NGRAN_257
                      • NGRAN_258
                      • NGRAN_260
                      • NGRAN_261
                    "},{"location":"core-services/network-status-rest-v1/#simtype","title":"SimType","text":"

                    The SIM (Subscriber Identity Module) type.

                    • Possible values
                      • UNKNOWN
                      • PHYSICAL
                      • ESIM
                    "},{"location":"core-services/network-status-rest-v1/#esimstatus","title":"ESimStatus","text":"

                    The status of an ESIM.

                    • Possible values
                      • UNKNOWN
                      • NO_PROFILES
                      • WITH_PROFILES
                    "},{"location":"core-services/network-status-rest-v1/#beareriptype","title":"BearerIpType","text":"

                    The type of Bearer or Context associated to a modem connection.

                    • Possible values
                      • NONE
                      • IPV4
                      • IPV6
                      • IPV4V6
                      • NON_IP
                      • ANY
                    "},{"location":"core-services/network-status-rest-v1/#modemconnectiontype","title":"ModemConnectionType","text":"
                    • Possible values
                      • PPP: Point to Point Protocol
                      • DirectIP: Direct IP
                    "},{"location":"core-services/network-status-rest-v1/#modemconnectionstatus","title":"ModemConnectionStatus","text":"

                    The status of a modem.

                    • Possible values
                      • FAILED: The modem is unavailable
                      • UNKNOWN: The modem is in an unknown state.
                      • INITIALIZING: The modem is being initialised.
                      • LOCKED: The modem is locked.
                      • DISABLED: The modem is disabled and powered off.
                      • DISABLING: The modem is disabling.
                      • ENABLING: The modem is enabling..
                      • ENABLED: The modem is enabled but not registered to a network provider.
                      • SEARCHING: The modem is searching for a network provider.
                      • REGISTERED: The modem is registered to a network provider.
                      • DISCONNECTING: The modem is disconnecting.
                      • CONNECTING: The modem is connecting.
                      • CONNECTED: The modem is connected.
                    "},{"location":"core-services/network-status-rest-v1/#accesstechnology","title":"AccessTechnology","text":"

                    The specific technology types used when a modem is connected or registered to a network.

                    • Possible values
                      • UNKNOWN
                      • POTS
                      • GSM
                      • GSM_COMPACT
                      • GPRS
                      • EDGE
                      • UMTS
                      • HSDPA
                      • HSUPA
                      • HSPA
                      • HSPA_PLUS
                      • ONEXRTT
                      • EVDO0
                      • EVDOA
                      • EVDOB
                      • LTE
                      • FIVEGNR
                      • LTE_CAT_M
                      • LTE_NB_IOT
                      • ANY
                    "},{"location":"core-services/network-status-rest-v1/#registrationstatus","title":"RegistrationStatus","text":"

                    The registration status of a modem when connected to a mobile network.

                    • Possible values
                      • IDLE
                      • HOME
                      • SEARCHING
                      • DENIED
                      • UNKNOWN
                      • ROAMING
                      • HOME_SMS_ONLY
                      • ROAMING_SMS_ONLY
                      • EMERGENCY_ONLY
                      • HOME_CSFB_NOT_PREFERRED
                      • ROAMING_CSFB_NOT_PREFERRED
                      • ATTACHED_RLOS
                    "},{"location":"core-services/network-status-rest-v1/#failurereport","title":"FailureReport","text":"

                    An object reporting a failure while retrieving the status of a specific network interface

                    Properties:

                    • interfaceId: string The identifier of the interface whose status cannot be retrieved.

                    • reason: string A message describing the reason of the failure.

                    "},{"location":"core-services/network-status-rest-v1/#genericfailurereport","title":"GenericFailureReport","text":"

                    An object reporting a failure message.

                    Properties:

                    • message: string A message describing the failure.
                    "},{"location":"core-services/nvidia-triton-server-inference-engine/","title":"Nvidia\u2122 Triton Server Inference Engine","text":"

                    The Nvidia\u2122 Triton Server is an open-source inference service software that enables the user to deploy trained AI models from any framework on GPU or CPU infrastructure. It supports all major frameworks like TensorFlow, TensorRT, PyTorch, ONNX Runtime, and even custom framework backend. With specific backends, it is also possible to run Python scripts, mainly for pre-and post-processing purposes, and exploit the DALI building block for optimized operations. For more detail about the Triton Server, please refer to the official website.

                    Kura provides three components for exposing the Triton Server service functionality which implement the inference engine APIs and provides methods for interacting with a local or remote Nvidia\u2122 Triton Server:

                    • TritonServerRemoteService: provides methods for interacting with a remote Nvidia\u2122 Triton Server without managing the server lifecycle. Can be used both for connecting to a remote instance or a local non-managed instance. It exposes a simpler but more limited configuration.
                    • TritonServerNativeService: provides methods for interacting with a local native Nvidia\u2122 Triton Server. Requires the Triton Server executable to be already available on the device and offers more options and features (like AI Model Encryption).
                    • TritonServerContainerService: provides methods for interacting with a local container running Nvidia\u2122 Triton Server. Requires the Triton Server container image to be already available on the device and offers more options and features (like AI Model Encryption).
                    • TritonServerService: provides methods for interacting with a local or remote Nvidia\u2122 Triton Server within the same component. Note: deprecated since 5.2.0
                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#nvidiatm-triton-server-installation","title":"Nvidia\u2122 Triton Server installation","text":"

                    Before running Kura's Triton Server Service, you must install the Triton Inference Server. Here you can find the necessary steps for the available suggested installation methods.

                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#native-triton-installation-on-jetson-devices","title":"Native Triton installation on Jetson devices","text":"

                    A release of Triton for JetPack is provided in the tar file in the Triton Inference Server release notes. Full documentation is available here.

                    Installation steps:

                    • Before running the executable you need to install the Runtime Dependencies for Triton.
                    • After doing so you can extract the tar file and run the executable in the bin folder.
                    • It is highly recommended to add the tritonserver executable to your path or symlinking the executable to /usr/local/bin.
                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#triton-docker-image-installation","title":"Triton Docker image installation","text":"

                    Before you can use the Triton Docker image you must install Docker. If you plan on using a GPU for inference you must also install the NVIDIA Container Toolkit.

                    Pull the image using the following command.

                    $ docker pull nvcr.io/nvidia/tritonserver:<xx.yy>-py3\n

                    Where <xx.yy> is the version of Triton that you want to pull.

                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#native-triton-installation-on-supported-devices","title":"Native Triton installation on supported devices","text":"

                    The official docs mention the possibility to perform a native installation on supported platform by extracting the binaries from the Docker images. To do so you must install the necessary dependencies (some can be found in the Jetson runtime dependencies docs) on the system. For Triton to support NVIDIA GPUs you must install CUDA, cuBLAS and cuDNN referencing the support matrix.

                    Note

                    For Python models the libraries available to the Python model are the ones available for the user running the Triton server. Therefore you'll need to install the libraries through pip for the kurad user.

                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#triton-server-setup","title":"Triton Server setup","text":"

                    The Triton Inference Server serves models from one or more model repositories that are specified when the server is started. The model repository is the directory where you place the models that you want Triton to serve. Be sure to follow the instructions to setup the model repository directory.

                    Further information about an example Triton Server setup can be found in the official documentation.

                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#triton-server-remote-service-component","title":"Triton Server Remote Service component","text":"

                    The Kura Triton Server Remote Service component is the implementation of the inference engine APIs and provides methods for interacting with a remote (i.e. unmnanaged) Nvidia\u2122 Triton Server. As presented below, the component enables the user to communicate to an external server to load specific models. With this component the server lifecycle (startup, shutdown) won't be handled by Kura and it's the user responsibility to make it available to Kura for connecting.

                    The parameters used to configure the Triton Service are the following:

                    • Nvidia Triton Server address: the address of the Nvidia Triton Server.
                    • Nvidia Triton Server ports: the ports used to connect to the server for HTTP, GRPC, and Metrics services.
                    • Inference Models: a comma-separated list of inference model names that the server will load. The models have to be already present in the filesystem where the server is running. This option simply tells the server to load the given models from a local or remote repository.
                    • Timeout (in seconds) for time consuming tasks: Timeout (in seconds) for time consuming tasks like server startup, shutdown or model load. If the task exceeds the timeout, the operation will be terminated with an error.
                    • Max. GRPC message size (bytes): this field controls the maximum allowed size for the GRPC calls to the server instance. By default, size of 4194304 bytes (= 4.19 MB) is used. Increase this value to be able to send large amounts of data as input to the Triton server (like Full HD images). The Kura logs will show the following error when exceeding such limit: 
                      io.grpc.StatusRuntimeException: RESOURCE_EXHAUSTED: gRPC message exceeds maximum size 4194304\n

                    Note

                    Pay attention on the ports used for communicating with the Triton Server. The default ports are the 8000-8002, but these are tipically used by Kura for debug purposes.

                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#triton-server-native-service-component","title":"Triton Server Native Service component","text":"

                    The Kura Triton Server component is the implementation of the inference engine APIs and provides methods for interacting with a local native Nvidia\u2122 Triton Server. As presented below, the component enables the user to configure a local server running on the gateway and handles its lifecycle. This operating mode supports more features for interacting with the server like the AI Model Encryption.

                    Note

                    Requirement: tritonserver executable needs to be available in the path to the kurad user. Be sure to have a working Triton Server installation before configuring the local native Triton Server instance through Kura UI.

                    The parameters used to configure the Triton Service are the following:

                    • Nvidia Triton Server ports: the ports used to connect to the server for HTTP, GRPC, and Metrics services.
                    • Local model repository path: Specify the path on the filesystem where the models are stored.
                    • Local model decryption password: Specify the password to be used for decrypting models stored in the model repository. If none is specified, models are supposed to be plaintext.
                    • Inference Models: a comma-separated list of inference model names that the server will load. The models have to be already present in the filesystem where the server is running. This option simply tells the server to load the given models from a local or remote repository.
                    • Local backends path: Specify the path on the filesystem where the backends are stored.
                    • Optional configuration for the local backends: A semi-colon separated list of configuration for the backends. i.e. tensorflow,version=2;tensorflow,allow-soft-placement=false
                    • Timeout (in seconds) for time consuming tasks: Timeout (in seconds) for time consuming tasks like server startup, shutdown or model load. If the task exceeds the timeout, the operation will be terminated with an error.
                    • Max. GRPC message size (bytes): this field controls the maximum allowed size for the GRPC calls to the server instance.

                    Note

                    Pay attention on the ports used for communicating with the Triton Server. The default ports are the 8000-8002, but these are tipically used by Kura for debug purposes.

                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#triton-server-container-service-component","title":"Triton Server Container Service component","text":"

                    The Kura Triton Server component is the implementation of the inference engine APIs and provides methods for interacting with a local container running the Nvidia\u2122 Triton Server. As presented below, the component enables the user to configure a local server running on the gateway and handles its lifecycle. This operating mode supports more features for interacting with the server like the AI Model Encryption.

                    Note

                    Requirement: 1. Triton Server container image already installed on the device. For instructions refer to the installation section in this page. 2. Kura's Container Orchestration Service enabled.

                    The parameters used to configure the Triton Service are the following:

                    • Container Image: The image the container will be created with.
                    • Container Image Tag: Describes which image version that should be used for creating the container.
                    • Nvidia Triton Server ports: The ports used to connect to the server for HTTP, GRPC, and Metrics services.
                    • Local model repository path: Specify the path on the filesystem where the models are stored.
                    • Local model decryption password: Specify the password to be used for decrypting models stored in the model repository. If none is specified, models are supposed to be plaintext.
                    • Inference Models: A comma-separated list of inference model names that the server will load. The models have to be already present in the filesystem where the server is running. This option simply tells the server to load the given models from a local or remote repository.
                    • Local Backends Path: Specifies the host filesystem path where the backends are stored. This folder will be mounted as a volume inside the Triton container and will override the existing backends. If left blank, the backends provided by the Triton container will be used.
                    • Optional configuration for the local backends: A semi-colon separated list of configuration for the backends. i.e. tensorflow,version=2;tensorflow,allow-soft-placement=false
                    • Memory: The maximum amount of memory the container can use in bytes. Set it as a positive integer, optionally followed by a suffix of b, k, m, g, to indicate bytes, kilobytes, megabytes, or gigabytes. The minimum allowed value is platform dependent (i.e. 6m). If left empty, the memory assigned to the container will be set to a default value by the native container orchestrator.
                    • CPUs: Specify how many CPUs the Triton container can use. Decimal values are allowed, so if set to 1.5, the container will use at most one and a half cpu resource.
                    • GPUs: Specify how many Nvidia GPUs the Triton container can use. Allowed values are 'all' or an integer number. If there's no Nvidia GPU installed, leave the field empty. If the Nvidia Container Runtime is used, leave the field empty.
                    • Runtime: Specifies the fully qualified name of an alternate OCI-compatible runtime, which is used to run commands specified by the 'run' instruction for the Triton container. Example: nvidia corresponds to --runtime=nvidia. Note: when using the Nvidia Container Runtime, leave the GPUs field empty. The GPUs available on the system will be accessible from the container by default.
                    • Devices: A comma-separated list of device paths passed to the Triton server container (e.g. /dev/video0).
                    • Timeout (in seconds) for time consuming tasks: Timeout (in seconds) for time consuming tasks like server startup, shutdown or model load. If the task exceeds the timeout, the operation will be terminated with an error.
                    • Max. GRPC message size (bytes): this field controls the maximum allowed size for the GRPC calls to the server instance.

                    Note

                    Pay attention on the ports used for communicating with the Triton Server. The default ports are the 8000-8002, but these are typically used by Kura for debug purposes.

                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#triton-server-service-component-deprecated-since-520","title":"Triton Server Service component [deprecated since 5.2.0]","text":"

                    The Kura Triton Server component is the implementation of the inference engine APIs and provides methods for interacting with a local or remote Nvidia\u2122 Triton Server. As presented below, the component enables the user to configure a local server running on the gateway or to communicate to an external server to load specific models.

                    The parameters used to configure the Triton Service are the following:

                    • Local Nvidia Triton Server: If enabled, a local native Nvidia Triton Server is started on the gateway. In this case, the model repository and backends path are mandatory. Moreover, the server address property is overridden and set to localhost. Be aware that the Triton Server has to be already installed on the system.
                    • Nvidia Triton Server address: the address of the Nvidia Triton Server.
                    • Nvidia Triton Server ports: the ports used to connect to the server for HTTP, GRPC, and Metrics services.
                    • Local model repository path: Only for a local instance, specify the path on the filesystem where the models are stored.
                    • Local model decryption password: Only for local instance, specify the password to be used for decrypting models stored in the model repository. If none is specified, models are supposed to be plaintext.
                    • Inference Models: a comma-separated list of inference model names that the server will load. The models have to be already present in the filesystem where the server is running. This option simply tells the server to load the given models from a local or remote repository.
                    • Local backends path: Only for a local instance, specify the path on the filesystem where the backends are stored.
                    • Optional configuration for the local backends: Only for local instance, a semi-colon separated list of configuration for the backends. i.e. tensorflow,version=2;tensorflow,allow-soft-placement=false
                    • Timeout (in seconds) for time consuming tasks: Timeout (in seconds) for time consuming tasks like server startup, shutdown or model load. If the task exceeds the timeout, the operation will be terminated with an error.
                    • Max. GRPC message size (bytes): this field controls the maximum allowed size for the GRPC calls to the server instance.

                    Note

                    Pay attention on the ports used for communicating with the Triton Server. The default ports are the 8000-8002, but these are tipically used by Kura for debug purposes.

                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#configuration-for-a-local-native-triton-server-with-triton-server-service-component-deprecated-since-520","title":"Configuration for a local native Triton Server with Triton Server Service component [deprecated since 5.2.0]","text":"

                    Note

                    Requirement: tritonserver executable needs to be available in the path to the kurad user. Be sure to have a working Triton Server installation before configuring the local native Triton Server instance through Kura UI.

                    When the Local Nvidia Triton Server option is set to true, a local instance of the Nvidia\u2122 Triton Server is started on the gateway. The following configuration is required:

                    • Local Nvidia Triton Server: true
                    • Nvidia Triton Server address: localhost
                    • Nvidia Triton Server ports: mandatory
                    • Local model repository path: mandatory
                    • Inference Models: mandatory. Note that the models have to be already present on the filesystem.
                    • Local backends path: mandatory

                    The typical command used to start the Triton Server is like this:

                    tritonserver --model-repository=<model_repository_path> \\\n--backend-directory=<backend_repository_path> \\\n--backend-config=<backend_config> \\\n--http-port=<http_port> \\\n--grpc-port=<grpc_port> \\\n--metrics-port=<metrics_port> \\\n--model-control-mode=explicit \\\n--load-model=<model_name_1> \\\n--load-model=<model_name_2> \\\n...\n
                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#configuration-for-a-local-triton-server-running-in-a-docker-container-with-triton-server-service-component-deprecated-since-520","title":"Configuration for a local Triton Server running in a Docker container with Triton Server Service component [deprecated since 5.2.0]","text":"

                    If the Nvidia\u2122 Triton Server is running as a Docker container in the gateway, the following configuration is required:

                    • Local Nvidia Triton Server: false
                    • Nvidia Triton Server address: localhost
                    • Nvidia Triton Server ports: \\<mandatory>
                    • Inference Models: \\<mandatory>. The models have to be already present on the filesystem.

                    In order to correctly load the models at runtime, configure the server with the --model-control-mode=explicit option. The typical command used for running the docker container is as follows. Note the forward of the ports to not interfere with Kura.

                    docker run --rm \\\n-p4000:8000 \\\n-p4001:8001 \\\n-p4002:8002 \\\n--shm-size=150m \\\n-v path/to/models:/models \\\nnvcr.io/nvidia/tritonserver:[version] \\\ntritonserver --model-repository=/models --model-control-mode=explicit\n
                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#configuration-for-a-remote-triton-server-with-triton-server-service-component-deprecated-since-520","title":"Configuration for a remote Triton Server with Triton Server Service component [deprecated since 5.2.0]","text":"

                    When the Nvidia\u2122 Triton Server is running on a remote server, the following configuration is needed:

                    • Local Nvidia Triton Server: false
                    • Nvidia Triton Server address: mandatory
                    • Nvidia Triton Server ports: mandatory
                    • ** Inference Models**: mandatory. The models have to be already present on the filesystem.
                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#ai-model-encryption-support","title":"AI Model Encryption Support","text":"

                    For ensuring inference integrity and providing copyright protection of deep-learning models on edge devices, Kura provides decryption capabilities for trained models to be served through the Triton Server.

                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#how-it-works","title":"How it works","text":"

                    Prerequisites: a deep-learning trained model (or more) exists with the corresponding necessary configuration for running on the Triton Server without encryption. A folder containing the required files (model, configuration etc) has been tested on a Triton Server.

                    Restrictions: if model encryption is used, the following restrictions apply:

                    • model encryption support is only available for a local Triton Server instance
                    • all models in the folder containing the encrypted models must be encrypted
                    • all models must be encrypted with OpenPGP-compliant AES 256 cipher algorithm
                    • all models must be encrypted with the same password

                    Once the development of the deep-learning model is complete, the developer who wants to deploy the model on the edge device in a secure manner can proceed with encrypting the Triton model using the procedure detailed below. After encrypting the model he/she can transfer the file on the edge device using his/her preferred method.

                    Kura will keep the stored model protected at all times and have the model decrypted in runtime only for use by the Inference Server Runtime. As soon as the model is correctly loaded into memory the decrypted model will be removed from the filesystem.

                    As an additional security measure, the Model Repository containing the decrypted models will be stored in a temporary subfolder and will feature restrictive permission such that only Kura, the Inference Server and the root user will be able to access it.

                    "},{"location":"core-services/nvidia-triton-server-inference-engine/#encryption-procedure","title":"Encryption procedure","text":"

                    Given a trained model inside the folder tf_autoencoder_fp32 (for example) with the following layout (see the official documentation for details):

                    tf_autoencoder_fp32\n\u251c\u2500\u2500 1\n\u2502\u00a0\u00a0 \u2514\u2500\u2500 model.savedmodel\n\u2502\u00a0\u00a0     \u251c\u2500\u2500 assets\n\u2502\u00a0\u00a0     \u251c\u2500\u2500 keras_metadata.pb\n\u2502\u00a0\u00a0     \u251c\u2500\u2500 saved_model.pb\n\u2502\u00a0\u00a0     \u2514\u2500\u2500 variables\n\u2502\u00a0\u00a0         \u251c\u2500\u2500 variables.data-00000-of-00001\n\u2502\u00a0\u00a0         \u2514\u2500\u2500 variables.index\n\u2514\u2500\u2500 config.pbtxt\n

                    Compress the model into a zip archive with the following command:

                    zip -vr tf_autoencoder_fp32.zip tf_autoencoder_fp32/\n

                    then encrypt it with the AES 256 algorithm using the following gpg command:

                    gpg --armor --symmetric --cipher-algo AES256 tf_autoencoder_fp32.zip\n

                    The resulting archive tf_autoencoder_fp32.zip.asc can be transferred to the Local Model Repository Path on the target machine and will be decrypted by Kura.

                    "},{"location":"core-services/position-service/","title":"Position Service","text":"

                    The PositionService provides the geographic position of the gateway if a GPS component is available and enabled.

                    When this service is enabled and provides a valid geographic position, this position is published in the gateway birth certificate with its location.

                    The GPS connection parameters must be defined in order to allow the service to receive the GPS frames. The PositionService supports direct access to gps device or the connection to that through gpsd.

                    For a device that is not connected to a GPS, it is possible to define a static position by entering latitude, longitude,, altitude and GNSS Type. In this case, the position, date and time information is returned by the PositionService as if it were an actual GPS position. This may be useful when a gateway is installed in a known place and does not move.

                    To use this service, select the PositionService option located in the Services area as shown in the screen capture below.

                    This service provides the following configuration parameters:

                    • enabled - defines whether or not this service is enabled or disabled. (Required field.)

                    • static - specifies true or false whether to use a static position instead of a GPS. (Required field.)

                    • provider - species which position provider use, can be gpsd or serial.

                      • gpsd - gpsd service daemon if is available on the system.
                      • serial - direct access to gps device through serial or usb port.
                      • modemManager - location information retrieved through a Modem Manager controlled modem

                    Warning

                    The Modem Manager based provider exploits the Location service offered by an enabled modem controlled by the ModemManager daemon: to work properly, MM requires that the modem has a SIM card inserted. When selecting this mode make sure you meet this necessary condition. It is possible to check the status of the modem through the OS running the command mmcli -m <numberOfModem>, the status of the location service through: mmcli -m <numberOfModem> --location-status; while the location data can be retrieved by running mmcli -m <numberOfModem> --location-get.

                    • modem.manager.refresh.rate.seconds - refresh time of the position when using the ModemManager base provider.

                    • gpsd.host - host where gpsd service deamon is running. (required only if gpsd provider is selected.)

                    • gpsd.port - port where gpsd service is listening. (required only if gpsd provider is selected.)

                    • gpsd.max.fix.validity.interval.seconds - maximum time waited for a new position info before considering the fix lost.

                    • latitude - provides the static latitude value in degrees.

                    • longitude - provides the static longitude value in degrees.

                    • altitude - provides the static altitude value in meters.

                    • GNSS Type - provides the gnss system used to retrieve static information.

                    • port - supplies the USB or serial port of the GPS device.

                    • baudRate - supplies the baud rate of the GPS device.

                    • bitsPerWord - sets the number of bits per word (databits) for the serial communication to the GPS device.

                    • stopbits - sets the number of stop bits for the serial communication to the GPS device.

                    • parity - sets the parity for the serial communication to the GPS device.

                    "},{"location":"core-services/rest-service/","title":"REST Service","text":"

                    Kura provides a built-in REST Service based on the osgi-jax-rs-connector project.

                    By default, REST service providers register their services using the context path /services. The REST service provides the BASIC Authentication support and HTTPS client certificate authentication support.

                    Starting from Kura 5.4.0, REST service provides built in session management support, the Session REST APIs can be used to establish a session. Using sessions is the recommended way for interacting with Kura REST APIs from a browser based application, for this use case it is also possible to disable the default session-less BASIC and certificate based authentication (see the Basic Authentication Enabled and Enable Certificate Authentication Whitout Session Management configuration parameters below).

                    REST API access is available on all HTTP ports defined in the HTTP/HTTPS Configuration section, unless access is restricted to dedicated ports using the corresponding configuration parameter (see below).

                    Certificate authentication support is only available on the HTTPS With Certificate Authentication Ports configured in HTTP/HTTPS Configuration section.

                    Kura Identity names and passwords can be used for BASIC Authentication. Certificate authentication follows the same rules as Gateway Administration Console Authentication.

                    Warning

                    If the forced password change feature for a given identity is enabled, REST API password authentication will be blocked for that identity until the password is updated by the user or the feature is manually disabled. Certificate authentication will continue to be allowed even if the forced password change feature is enabled.

                    JAX-RS roles are mapped to Kura permissions, the name of a permission associated with a JAX-RS role is the rest. prefix followed by the role name. For example the assets role is mapped to the rest.assets permission. REST related permissions can be assigned to an identity using the Gateway Administration Console in the Identities section.

                    "},{"location":"core-services/rest-service/#rest-service-configuration","title":"Rest Service configuration","text":"

                    The available configuration parameters are the following:

                    • Allowed Ports: If set to a non empty list, REST API access will be allowed only on the specified ports. If set to an empty list, access will be allowed on all ports. Please make sure that the allowed ports are open in HttpService and Firewall configuration. (Default: empty)

                    • Password Authentication Enabled: Enables or disables the built-in password authentication support. (Default: true)

                    • Certificate Authentication Enabled: Enables or disables the built-in certificate authentication support. (Default: true)

                    • Session Based Authentication Enabled: If set to true, enables authentication using the dedicated /services/session/v1 endpoints and cookie based session management. (Default: true)

                    • Session Inactivity Interval (Seconds): The session inactivity interval, sessions will expire if no request is performed for the amount of time specified by this parameter in seconds. This parameter is ignored if Session Based Authentication Enabled is set to false. (Default: 900)

                    • Basic Authentication Enabled: Allows to perform authentication by providing identity name and password as BASIC credentials in the request to any resource endpoint. Requires that the Password Authentication Enabled parameter is set to true. (Default: true)

                    • Enable Certificate Authentication Without Session Management: If set to true, calling /services/session/v1/certificate to create a session will not be necessary in order to perform certificate based authentication. Presenting a valid HTTPS client certificate and accessing resource endpoint directly is enough for authentication to succeed. Requires that the Certificate Authentication Enabled parameter is set to true. (Default: true)

                    "},{"location":"core-services/rest-service/#custom-authentication-methods","title":"Custom authentication methods","text":"

                    Starting from Kura 5.2.0 it is also possible to develop custom REST authentication method providers by registering an implementation of the org.eclipse.kura.rest.auth.AuthenticationProvider interface as an OSGi service. The org.eclipse.kura.example.rest.authentication.provider bundle in Kura repository provides an example on how to implement a custom authentication method.

                    "},{"location":"core-services/rest-service/#assets-rest-apis","title":"Assets REST APIs","text":"

                    Kura exposes REST APIs for the Asset instances instantiated in the framework. Assets REST APIs are available in the context path /services/assets. Following, the supported REST endpoints.

                    Method Path Allowed roles Encoding Request parameters Description GET / assets JSON None Returns the list of available assets GET /{pid} assets JSON None Returns the list of available channels for the selected asset (specified by the corresponding PID) GET /{pid}/_read assets JSON None Returns the read for all the READ channels in the selected Asset POST /{pid}/_read assets JSON The list of channels where the READ operation should be performed. Returns the result of the read operation for the specified channels POST /{pid}/_write assets JSON The list of channels and associated values that will be used for the WRITE operation. Performs the write operation for the specified channels returning the result of the operation."},{"location":"core-services/simple-artemis-mqtt-broker/","title":"Simple Artemis MQTT Broker","text":"

                    By default, this instance is disabled but, selecting the Simple Artemis MQTT Broker option in Services it is possible to enable a basic instance of an \u200bActiveMQ-7 broker with MQTT capabilities.

                    The service has the following configuration fields:

                    • Enabled - (Required) - Enables the broker instance
                    • MQTT address - MQTT broker listener address. In order to allow access to the broker from processes running on external nodes, make sure to bind the server to an externally accessible address. Setting this parameter to 0.0.0.0 binds to all addresses.
                    • MQTT port - (Required) - MQTT broker port, make sure to open the specified port in the firewall configuration section if external access to the broker is required.
                    • User name - The username\u200b required to access to the broker
                    • Password of the user - The password required to connect. If the password is empty, no password will be required to connect.
                    "},{"location":"core-services/sqlite-db-service/","title":"SQLite Db Service","text":"

                    Starting from version 5.3, Kura provides provides an integration of the SQLite database, based on the org.xerial:sqlite-jdbc wrapper .

                    The database integration is not included in the official distribution, but it can be downloaded from Eclipse Marketplace as a deployment package.

                    Warning

                    Note about Raspberry PI: Recent versions of Raspberry Pi OS 32 bit on Raspberry PI 4 will use by default a 64 bit kernel with a 32 bit userspace. This can cause issues to applications that use the result of uname -m to decide which native libraries to load (see https://github.com/raspberrypi/firmware/issues/1795). This currently affects the Kura SQLite database connector. It should be possible to solve by switching to the 32 bit kernel setting arm_64bit=0 in /boot/config.txt and restarting the device.

                    "},{"location":"core-services/sqlite-db-service/#supported-features","title":"Supported Features","text":"

                    Kura supports the following SQLite database features:

                    • Persistence modes: The implementation currently supports in-memory and file-based database instances.

                    • Multiple database instances: It is possible to create and configure multiple database instances from the Kura Administration UI, these instances can be selectively consumed by applications.

                    • Journaling modes: The implementation currently supports the WAL and rollback journal journaling modes.

                    • Periodic database defrag and checkpoint: The implementations currently supports periodic defrag (VACUUM) and periodic WAL checkpoint.

                    "},{"location":"core-services/sqlite-db-service/#usage","title":"Usage","text":""},{"location":"core-services/sqlite-db-service/#creating-a-new-sqlite-database-instance","title":"Creating a new SQLite database instance","text":"

                    To create a new SQLite database instance, use the following procedure:

                    1. Open the Administrative UI and press the + button in the side menu, under the Services section. A pop-up dialog should appear.
                    2. Select org.eclipse.kura.db.SQLiteDbService from the Factory drop-down list, enter an arbitrary name for the new instance and click Apply.
                    3. An entry for the newly created instance should appear in the side menu under Services, click on it to review its configuration. It is not possible to create different DB instances that manage the same database file.
                    "},{"location":"core-services/sqlite-db-service/#configuration-parameters","title":"Configuration Parameters","text":"

                    The SQLite DB provides the following configuration parameters:

                    • Database Mode: Defines the database mode. If In Memory is selected, the database will not be persisted on the filesystem, all data will be lost if Kura is restarted and/or the database instance is deleted. If Persisted is selected, the database will be stored on disk in the location specified by the Persisted Database Path parameter.

                    • Persisted Database Path: Defines the path to the database file (it must include the database file name). This parameter is only relevant for persisted databases.

                    • Encryption Key: Allows to specify a key/passphrase for encrypting the database file. This feature requires a SQLite binary with an encryption extension, and is only relevant for persisted databases. The key format can be specified using the Encryption Key Format parameter. If the value of this parameter is changed, the encryption key of the database will be updated accordingly. This parameter can be left empty to create an unencrypted database or to decrypt an encrypted one.

                    Note

                    The sqlite-jdbc version distributed with Kura does not contain any encryption extension, encryption features will not be available out of the box. See sqlite-jdbc documentaton for instructions about how to use a security extension.

                    • Encryption Key Format: Allows to specify the format of the Encryption Key parameter value. The possible values are ASCII (an ASCII string), Hex SSE (the key is an hexadecimal string to be used with the SSE extension) or Hex SQLCipher (the key is an hexadecimal string to be used with the SQLCipher extension).

                    • Journal Mode: The database journal mode. The following options are available:

                      • Rollback Journal: The database instance will use the rollback journal for more details. More specifically, the DELETE argument will be passed to the pragma journal_mode command.

                      • WAL: The database instance will use WAL mode. This is the default mode.

                      The WAL mode description page contains a comparison of the two modes.

                    • Defrag enabled: Enables or disables the database defragmentation. Use the Defrag Interval parameter to specify the interval.

                    • Defrag interval (seconds): The implementation supports running periodic defragmentation using the VACUUM command. This parameter specifies the interval in minutes between two successive checkpoints, set to zero to disable. This parameter is only relevant for persisted databases.

                    Warning

                    The total disk space used by SQLite database files might temporarily increase during defragmentation and/or if transactions that modify a lot of data are performed (including deletion). In particular:

                    • Defragmentation is implemented by copying all non-free database pages to a new file and then deleting the original file.
                    • If transactions that involve a lot of data are performed, in case of rollback journal the old content of the modified pages will be stored in the journal until the transaction is completed, and in WAL mode the new content of modified pages will be stored to the WAL file until the next checkpoint is performed.

                    It is recommended to perform some tests to determine the maximum database files size that will be used by the application and ensure that the size of the partition containing the database is at least twice as the expected db size.

                    • Checkpoint enabled: Enables or disables checkpoints in WAL journal mode. Use the WAL Checkpoint Interval parameter to specify the interval.

                    • WAL Checkpoint Interval (Seconds): The implementation supports running periodic periodic WAL checkpoints. Checkpoints will be performed in TRUNCATE mode. This parameter specifies the interval in seconds between two consecutive checkpoints, set to zero to disable. This parameter is only relevant for persisted databases in WAL Journal Mode. In WAL mode a checkpoint will be performed after a periodic defragmentation regardless of the value of this parameter.

                    • Connection pool max size: The implementation manages connections using a connection pool. This parameter defines the maximum number of connections for the pool. If a new connection is requested

                    • Delete Database Files On Failure: If set to true, the database files will be deleted in case of failure in opening a persisted database. This is intended as a last resort measure for keeping the database service operational, especially in the case when it is used as a cloud connection message store.

                    • Debug Shell Access Enabled: Enables or disables the interaction with this database instance using the sqlitedbg:excuteQuery OSGi console command. (see #debug-shell)

                    "},{"location":"core-services/sqlite-db-service/#selecting-a-database-instance-for-existing-components","title":"Selecting a database instance for existing components","text":"

                    A database instance is identified by its Kura service PID. The PID for instances created using the Web UI is the string entered in the Name field at step 2 of the previous section.

                    The built-in components that use database functionalities allow to specify which instance to use in their configuration. These components are the DataService component of the cloud stack, the Wire Record Store and Wire Record Query wire components. The configuration of each component contains a property that allows to specify the Kura Service PID of the desired instance.

                    Warning

                    Using SQLite database instances through the deprecated DbFilter and DbStore components is not supported.

                    "},{"location":"core-services/sqlite-db-service/#usage-through-wires","title":"Usage through Wires","text":"

                    It is possible to store and extract Wire Records into/from a SQLite database instance using the Wire Record Store and Wire Record Query wire components.

                    When a Wire Record is received by a Wire Record Store attached to a SQLite based database instance, the data will be stored in a table whose name is the current value of the Record Collection Name configuration parameter of the Wire Component.

                    Each property contained in a Wire Record will be appended to a column with the same name as the property key. A new column will be created if it doesn't already exists.

                    Since it is not possible to establish a one to one mapping between SQLite storage classes and the data types available on the Wires, the implementation will assign a custom type name to the created columns in order to keep track of the inserted Wire Record property type.

                    The custom types will be assigned according to the following table:

                    Wires Data Type Column Type Name Storage Class Type Affinity BOOLEAN BOOLEAN INTEGER INTEGER INT INTEGER LONG BIGINT INTEGER FLOAT FLOAT REAL DOUBLE DOUBLE REAL STRING TEXT TEXT BYTE_ARRAY BLOB BLOB

                    The custom column type makes it possible to preserve the original type when data is extracted with the Wire Record Query component. Please note that the resulting type may change in case of queries that build computed columns.

                    Warning

                    It is not recommended to store Wire Records having properties with the same key and different value type. If the value type changes, the target column will be dropped and recreated with the type derived from the last received record. All existing data in the target column will be lost. The purpose of this is to allow changing the type of a column with a Wire Graph configuration update.

                    "},{"location":"core-services/sqlite-db-service/#debug-shell","title":"Debug shell","text":"

                    It is possible to inspect the contents of the database file using the OSGi console with the following command:

                    sqlitedbg:executeQuery dbServicePid 'query'\n

                    or more simply 

                    executeQuery dbServicePid 'query'\n

                    where dbServicePid is the user defined pid of the target database instance and query is an arbitrary SQL query to be executed (make sure to properly quote the query string with the ' character). The command will print the result set or changed row count on the console.

                    It is only possible to access database instances whose Debug Shell Access Enabled configuration parameter is set to true. The default of this parameter is false.

                    The OSGi console is disabled by default, it can be accessed by starting the framework with the /opt/eclipse/kura/bin/start_kura_debug.sh script and running the following command on the gateway: 

                    telnet localhost 5002\n

                    Warning

                    This feature is intended for debug purposes only, the Debug Shell Access Enabled parameter as well as the OSGi console should not be left enabled on production systems.

                    "},{"location":"core-services/watchdog-service/","title":"Watchdog Service","text":"

                    The WatchdogService provides methods for starting, stopping, and updating a hardware watchdog if it is present on the system. Once started, the watchdog must be updated to prevent the system from rebooting.

                    To use this service, select the WatchdogService option located in the Services area as shown in the screen capture below.

                    This service provides the following configuration parameters:

                    • enabled - sets whether or not this service is enabled or disabled. (Required field)

                    • pingInterval - defines the maximum time interval between two watchdogs' refresh to prevent the system from rebooting. (Required field)

                    • Watchdog device path - sets the watchdog device path. (Required field)

                    • Reboot Cause File Path - sets the path to the file that will contain the reboot cause information. (Required field)

                    "},{"location":"gateway-configuration/authentication-and-authorization/","title":"Authentication and authorization","text":"

                    Kura 5 introduces a centralized authentication and authorization framework based on the OSGi UserAdmin specification. This framework introduces the concepts of identities and permissions:

                    • Identity: A Kura identity is related to authentication, an identity has a name and a set of associated credentials, for example a password.

                    • Permission: A Kura permission is related to authorization. Zero or more permissions can be assigned to a given identity. Each permission allows to access a set of resources and/or perform certain operations. Permissions can be defined by applications.

                    Examples of applications that use the new authentication and authorization framework are the Web Console and the REST API framework:

                    • Kura Web Console provides multi user support, Web Console users are mapped to Kura identities, the Web Console also defines a set of permissions that allow to restrict the operations that a given identity is allowed to perform.
                    • The Kura REST API framework users are now mapped to Kura identities and REST roles are mapped to Kura permissions. The old ConfigurationService based user and role definition mechanism has been dropped.

                    The authentication and authorization framework only allows to define and store identities and permissions, it does not provide implementation of authentication methods and/or session management. These aspects are left to applications.

                    "},{"location":"gateway-configuration/authentication-and-authorization/#permission-and-identity-representation","title":"Permission and identity representation","text":"

                    Permissions and identities are implemented on top of the UserAdmin User and Group concepts. See OSGi UserAdmin specification for more details on the Role, User and Group concepts.

                    "},{"location":"gateway-configuration/authentication-and-authorization/#identityservice-java-apis","title":"IdentityService Java APIs","text":"

                    Kura 5.5 introduces a new set of Java APIs that allow to manage Kura identities, the implementation is based on the UserAdmin conventions described in this page, and allows to manipulate Kura identities without interacting directly with the UserAdmin. Please refer to the Javadoc for more details.

                    The new APIs also provide the capability to implement and register IdentityConfigurationExtensions in the framework.

                    An IdentityConfigurationExtension can define additional custom configuration parameters for each identity. The custom configuration can be inspected and modified in the Identities section of Kura Web UI and using the identity/v2 rest APIs and MQTT request handler. The IdentityConfigurationExtension implementation can store the additional configuration in the way that is most suitable for the application, for example by adding custom UserAdmin properties or credentials.

                    "},{"location":"gateway-configuration/authentication-and-authorization/#identities","title":"Identities","text":"

                    A Kura identity is represented as a UserAdmin User with the following properties:

                    • The User name must be in the kura.user.${identity_name} form where ${identity_name} is a non empty string representing the identity name. The name of an User representing a Kura identity must start with the kura.user. prefix.

                    • A password may be assigned to an identity by defining a property in User credentials with the following format:

                    • The property name must be kura.password
                    • The property value must be a string containing SHA256 hash of the password, as computed by the 
                      String org.eclipse.kura.crypto.CryptoService.sha256Hash(String)\n
                      method.

                    Starting from Kura 5.1, it is possible to force an identity to change the password at next login by setting the following property in User properties: - kura.need.password.change : true encoded as a JSON string. - The property will be cleared automatically after a successful password change on next login.

                    Starting from Kura 5.5 the following restrictions will be applied by the IdentityService:

                    • New Identity Names:
                      • must be at least 3 and at most 255 characters long.
                      • can only be composed by one or more sequences of alphanumeric characters ([A-Za-z0-9]+) separated by the dot or underscore symbols, dot and underscore is not allowed at the beginning or at the end of the permission name, sequences of consecutive dots and/or underscores are not allowed (examples of valid names are foo1.bAr, foo, a.b.c, foo.bar_baz).
                    • New Passwords:
                      • cannot be empty.
                      • must satisfy the password strenght requirements configured on the system.
                      • the maximum allowed length is 255 characters.
                      • cannot contain whitespace characters.
                    "},{"location":"gateway-configuration/authentication-and-authorization/#permissions","title":"Permissions","text":"

                    A Kura permission is represented as a UserAdmin Group with the following properties:

                    • The Group name must be in the kura.permission.${permission_name} form where ${permission_name} is a non empty string representing the permission name. The name of a Group representing a Kura permission must start with the kura.permission. prefix.

                    • Assigning a permission to a specific identity can be done by adding the User representing the identity to the basic members of the Group representing the permission.

                    Starting from Kura 5.5 the following restrictions will be applied by the IdentityService to the name new permissions:

                    • must be at least 3 and at most 255 characters long.
                    • can only be composed by one or more sequences of alphanumeric characters ([A-Za-z0-9]+) separated by the dot symbol, the dot is not allowed at the beginning or at the end of the permission name (examples of valid permission names are foo1.bAr, foo, a.b.c).
                    "},{"location":"gateway-configuration/authentication-and-authorization/#useradmin-persistence","title":"UserAdmin persistence","text":"

                    The org.eclipse.kura.internal.useradmin.store.RoleRepositoryStoreImpl Kura service allows to persist the UserAdmin state in Kura configuration snapshot, this includes the defined identities and permissions.

                    The following configuration properties are used to store the UserAdmin concepts in Json format:

                    • Role configuration (id roles.config):

                    Stores the UserAdmin Roles, plain Roles are non used for representing Kura identities and permissions. The value must be a JSON array of Role elements.

                    • User configuration (id users.config):

                    Stores the UserAdmin Users. The value must be a JSON array of User elements.

                    • Group configuration (id groups.config):

                    Stores the UserAdmin Groups. The value must be a JSON array of Group elements.

                    "},{"location":"gateway-configuration/authentication-and-authorization/#json-representation-details","title":"JSON representation details","text":"

                    This section describes the JSON format used in org.eclipse.kura.internal.useradmin.store.RoleRepositoryStoreImpl configuration.

                    "},{"location":"gateway-configuration/authentication-and-authorization/#useradmindictvalue","title":"UserAdminDictValue","text":"

                    A value appearing in UserAdmin dictionaries like properties and credentials

                    • type : variant Variants:

                    • a String property

                      • type : string
                    • a byte[] property
                      • type : array, element description: a byte of the array encoded as an unsigned integer
                      • type : number

                    Examples:

                    \"A string property\"\n
                    [1, 2, 3, 4, 5]\n
                    "},{"location":"gateway-configuration/authentication-and-authorization/#useradmindict","title":"UserAdminDict","text":"

                    A UserAdmin property dictionary, there are no well known property names, property values must be of UserAdminDictValue type

                    • type : object

                    Example:

                    {\n  \"stringProperty\": \"A string property\",\n  \"byteArrayProperty\": [1, 2, 3, 4, 5]\n}\n
                    "},{"location":"gateway-configuration/authentication-and-authorization/#role","title":"Role","text":"

                    An object describing and UserAdmin Role

                    • type : object Properties:

                    • name The role name

                    • type : string

                    • properties

                    • optional If the dictionary is empty
                      • UserAdminDict
                    "},{"location":"gateway-configuration/authentication-and-authorization/#user","title":"User","text":"

                    An object describing and UserAdmin User

                    • type : object Properties:

                    • name The role name

                    • type : string

                    • properties

                    • optional If the dictionary is empty

                      • UserAdminDict

                    • credentials

                    • optional If the dictionary is empty
                      • UserAdminDict

                    Example:

                    {\n  \"name\": \"kura.user.appadmin\",\n  \"credentials\": {\n    \"kura.password\": \"3hPckF8Zc+IF3pVineBvck3zJERUl8itosySULE1hpM=\"\n  }\n}\n
                    "},{"location":"gateway-configuration/authentication-and-authorization/#group","title":"Group","text":"

                    An object describing and UserAdmin Group

                    • type : object Properties:

                    • name The role name

                    • type : string

                    • properties

                    • optional If the dictionary is empty

                      • UserAdminDict

                    • credentials

                    • optional If the dictionary is empty

                      • UserAdminDict

                    • basicMembers

                    • optional If the list is empty The list of the group basic members

                      • type : array, element description: A role name
                      • type : string

                    • requiredMembers

                    • optional If the list is empty The list of the group required members
                      • type : array, element description: A role name
                      • type : string

                    Example:

                    {\n  \"name\": \"kura.permission.kura.wires.admin\",\n  \"basicMembers\": [\"kura.user.appadmin\"]\n}\n
                    "},{"location":"gateway-configuration/cellular-configuration/","title":"Cellular Configuration","text":"

                    If it is not configured, the cellular interface is presented on the interface list by modem USB address (i.e. 2-1). This 'fake' interface name is completed by 'proper' interface name (e.g., ppp0) when the first modem configuration is submitted.

                    The cellular interface should be configured by first enabling it in the IPv4 or IPv6 tab, and then setting the Cellular tab. Note that the cellular interface can only be set as WAN using DHCP, Disabled or Not Managed (only for IPv4 connections). The cellular interface configuration options are described below.

                    "},{"location":"gateway-configuration/cellular-configuration/#cellular-configuration_1","title":"Cellular Configuration","text":"

                    The Cellular tab contains the following configuration parameters:

                    • Model: specifies the modem model.

                    • Network Technology: describes the network technology used by this modem.

                      • HSDPA
                      • EVDO
                      • EDGE

                    • Connection Type: specifies the type of connection to the modem.

                    • Modem Identifier: provides a unique name for this modem.

                    • Interface #: provides a unique number for the modem interface (e.g., an interface # of 0 would name the modem interface ppp0).

                    • Dial String: instructs how the modem should attempt to connect. Typical dial strings are as follows:

                      • HSPA modem: atd*99***1#
                      • EVDO/CDMA modem: atd#777

                    • APN: defines the modem access point name.

                      This is an optional parameter. If left empty, the value is automatically picked up from the Mobile Broadband Provider the modem is registered to. If a value is filled, the APN value is explicitly configured.

                      To avoid misconfiguration issues, it is strongly recommended to set it manually.

                      Note

                      APN value configuration

                      A good practice is to set the interface status to Disabled and then Enable For WAN when the APN is explicitly set. NetworkManager, indeed, may fallback to the default value if a wrong APN is specified, causing misleading behaviors. This does not happen if the interface is disabled and re-enabled after APN changes.

                    • Auth Type: specifies the authentication type.

                      • None
                      • Auto
                      • CHAP
                      • PAP

                    • Username: supplies the username; disabled if no authentication method is specified.

                    • Password: supplies the password; disabled if no authentication method is specified.

                    • Modem Reset Timeout: sets the modem reset timeout in minutes. If set to a non-zero value, the modem is reset after n consecutive minutes of unsuccessful connection attempts. If set to zero, the modem keeps trying to establish a PPP connection without resetting. The default value is 5 minutes.

                    • Reopen Connection on Termination: sets the persist option of the PPP daemon that specifies if PPP daemon should exit after connection is terminated. Note that the maxfail option still has an effect on persistent connections.

                    • Connection Attempts Retry Delay: Sets the holdoff parameter to instruct the PPP daemon on how many seconds to wait before re-initiating the link after it terminates. This option only has any effect if the persist option (Reopen Connection on Termination) is set to true. The holdoff period is not applied if the link was terminated because it was idle. The default value is 1 second.

                    • Connection Attempts: sets the maxfail option of the PPP daemon that limits the number of consecutive failed PPP connection attempts. The default value is 5 connection attempts. A value of zero means no limit. The PPP daemon terminates after the specified number of failed PPP connection attempts and restarts by the ModemMonitor thread.

                    • Disconnect if Idle: sets the idle option of the PPP daemon, which terminates the PPP connection if the link is idle for a specified number of seconds. The default value is 95 seconds. To disable this option, set it to zero.

                    • Active Filter: sets the active-filter option of the PPP daemon. This option specifies a packet filter (filter-expression) to be applied to data packets in order to determine which packets are regarded as link activity, and thereby, reset the idle timer. The filter-expression syntax is as described for tcpdump(1); however, qualifiers that do not apply to a PPP link, such as ether and arp, are not permitted. The default value is inbound. To disable the active-filter option, leave it blank.

                    • LCP Echo Interval: sets the lcp-echo-interval option of the PPP daemon. If set to a positive number, the modem sends LCP echo request to the peer at the specified number of seconds. To disable this option, set it to zero. This option may be used with the lcp-echo-failure option to detect that the peer is no longer connected.

                    • LCP Echo Failure: sets the lcp-echo-failure option of the PPP daemon. If set to a positive number, the modem presumes the peer to be dead if a specified number of LCP echo-requests are sent without receiving a valid LCP echo-reply. To disable this option, set it to zero.

                    "},{"location":"gateway-configuration/cellular-configuration/#gps","title":"GPS","text":"

                    The GPS tab allows the user to enable or disable the GPS module provided by the cellular modem. The available properties are:

                    • Enable GPS: enables GPS module for the selected modem.
                    • GPS Mode: specifies the GPS mode.
                      • UNMANAGED: the GPS device of the modem will be setup but not directly managed, therefore freeing the serial port for other services to use. This can be used in order to perform the setup of the GPS and then have another service (like gpsd) parse the NMEA strings in order to extract the position informations.
                      • MANAGED_GPS: the GPS device of the modem will be setup and directly managed (typically by ModemManager) therefore the serial port won't be available for other services to use.

                    GPS modes availability

                    GPS modes available for the modem are dependent on the modem model, modem firmware version and ModemManager version installed on the system. Some modes may not be selectable if the modem does not support them.

                    Therefore, to use the GPS module provided by the cellular modem with Kura's PositionService, the following considerations should be taken into account:

                    • The PositionService should be enabled. Serial settings of the PositionService should not be changed; it will be redirected to the modem GPS port automatically.
                    • To use the gpsd and serial PositionService providers with the GPS module provided by the cellular modem, the GPS mode should be set to UNMANAGED.
                    • To use the modemmanager PositionService provider with the GPS module provided by the cellular modem, the GPS mode should be set to MANAGED_GPS.

                    Refer to the Position Service section for more information.

                    "},{"location":"gateway-configuration/cloud-connections/","title":"Cloud Connections","text":"

                    The Cloud Connections section of the Kura Gateway Administration Console allows to create and manage cloud connections.

                    By default, Kura starts with a single cloud connection, as depicted in the following image:

                    The cloud services page allows to: - create a new cloud connection; - delete an existing cloud connection; - connect a selected cloud stack to the configured cloud platform; - disconnect the selected cloud stack from the connected cloud platform; - refresh the existing cloud connections.

                    When clicking on the New button, a dialog is displayed as depicted in the image below:

                    The user can select one of the existing cloud connection factories and give it a name (depending on the implementation, a name format can be suggested or forced).

                    Selecting a created Cloud Connection it is possible to associate a new publisher/subscriber by clicking the New Pub/Sub button. As for the connection creation case, the user can select one of the existing publisher/subscriber factories and give it a name.

                    "},{"location":"gateway-configuration/cloud-service-configuration/","title":"Cloud Service Configuration","text":"

                    The CloudService provides an easy-to-use API layer for the M2M application to communicate with a remote server. It operates as a decorator for the DataService, providing add-on features over the management of the DataTransport layer.

                    In addition to simple publish/subscribe, the Cloud Connection API simplifies the implementation of more complex interaction flows like request/response or remote resource management. The Cloud Connection abstracts the developers from the complexity of the transport protocol and payload format used in the communication.

                    The Cloud Connection allows a single connection to a remote server to be shared across more than one application in the gateway, providing the necessary topic partitioning. Its functions include:

                    • Adds application topic prefixes to allow a single remote server connection to be shared across applications.

                    • Defines a payload data model and provides default encoding/decoding serializers.

                    • Publishes life-cycle messages when the device and applications start and stop.

                    To use this service, select the CloudService option located in the Cloud Services area as shown in the screen capture below.

                    The CloudService provides the following configuration parameters:

                    • device.display-name: defines the device display name given by the system. (Required field).

                    • device.custom-name: defines the custom device display name if the device.display-name parameter is set to \"Custom\".

                    • topic.control-prefix: defines the topic prefix used for system and device management messages.

                    • encode.gzip: defines if the message payloads are sent compressed.

                    • republish.mqtt.birth.cert.on.gps.lock: when set to true, forces a republish of the MQTT Birth Certificate when a GPS correct position lock is received. The device is then registered with its real coordinates. (Required field).

                    • enable.default.subscriptions: manages the default subscriptions to the gateway management MQTT topics. When disabled, the gateway will not be remotely manageable.

                    • payload.encoding: specifies the encoding for the messages sent by the specific CloudService instance.

                      • Kura Protobuf - when this option is selected, the Kura Protobuf encoding will be used
                      • Simple JSON - the simple JSON encoding will be used instead. More information is available here. An example below.
                    {\n\"sentOn\" : 1491298822,\n\"position\" : {\n    \"latitude\" : 45.234,\n    \"longitude\" : -7.3456,\n    \"altitude\" : 1.0,\n    \"heading\" : 5.4,\n    \"precision\" : 0.1,\n    \"speed\" : 23.5,\n    \"timestamp\" : 1191292288,\n    \"satellites\" : 3,\n    \"status\" : 2\n},\n\"metrics\": {\n    \"code\" : \"A23D44567Q\",\n    \"distance\" : 0.26456E+4,\n    \"temperature\" : 27.5,\n    \"count\" : 12354,\n    \"timestamp\" : 23412334545,\n    \"enable\" : true,\n    \"rawBuffer\" : \"cGlwcG8gcGx1dG8gcGFwZXJpbm8=\"\n},\n\"body\": \"UGlwcG8sIHBsdXRvLCBwYXBlcmlubywgcXVpLCBxdW8gZSBxdWEu\"\n}\n

                    The default CloudService implementations publishes the following lifecycle messages:

                    1. BIRTH message: sent immediately when device is connected to the cloud platform;
                    2. DISCONNECT message: sent immediately before device is disconnected from the cloud platform;
                    3. delayed BIRTH message: sent when new cloud application handler becomes available, a DP is installed or removed, or when the GPS position is locked (can be disabled). These messages are cached for 30 seconds before sending. If no other message of such type arrives the message is sent; otherwise the BIRTH is cached and the timeout restarts. This is to avoid sending multiple messages when the framework starts.
                    "},{"location":"gateway-configuration/data-service-configuration/","title":"Data Service Configuration","text":"

                    The DataService provides the ability to connect to a remote broker, publish messages, subscribe to topics, receive messages on the subscribed topics, and disconnect from the remote message broker. The DataService delegates to the MqttDataTransport service the implementation of the transport protocol that is used to interact with the remote server.

                    The DataService also adds the capability of storing published messages in a persistent store function and sending them over the wire at a later time. The purpose of this feature is to relieve service users from implementing their own persistent store. Service users may publish messages independently on the DataService connection status.

                    Info

                    Starting from Kura 5.3.0, the DataService allows to bind to custom persistent stores. A custom persistent store can be defined by creating an implementation the new org.eclipse.kura.message.store.provider.MessageStoreProvider service interface and registering it as an OSGi service.

                    In order to overcome the potential latencies introduced by buffering messages, the DataService allows a priority level to be assigned to\u200b each published message. Depending on the store configuration, there are certain guarantees that stored messages are not lost due to sudden crashes or power outages.

                    To use this service, select the DataService option located in the Cloud Connections area as shown in the screen capture below.

                    The DataService offers methods and configuration options to manage the connection to the remote server including the following (all required) parameters described below.

                    • Connect Auto-on-startup - When set to true, the service tries to auto-connect to the remote server on start-up and restore the connection every time the device is disconnected. These attempts are made at the frequency defined in the Connect Retry-interval parameter until the connection is established. Using the Connect/Disconnect button disables this function.
                    • Connect Retry-interval - Frequency in seconds to retry a connection of the Data Publishers after a disconnect.
                    • Enable Recovery On Connection Failure - Enables the recovery feature on connection failure. If the device is not able to connect to a remote cloud platform, the service will wait for a specified amount of connection retries. If the recovery fails, the device will be rebooted. Being based on the Watchdog service, it needs to be activated as well.
                    • Connection Recovery Max Failure - Number of failures in Data Publishers connection before forcing a reboot.
                    • Disconnect Quiesce-timeout - Allows the delivery of in-flight messages to be completed before disconnecting from the broker when a disconnection from the broker is being forced.
                    • Message Store Provider Service PID - The Kura service pid of the Message Store instance to be used. The pid of the default instance is org.eclipse.kura.db.H2DbService. The Message Store instance must implement the org.eclipse.kura.message.store.provider.MessageStoreProvider interface.
                    • Store Housekeeper-interval - Defines the interval in seconds used to run the Data Store housekeeper task.
                    • Store Purge-age - defines the age in seconds of completed messages (either published with QoS = 0 or confirmed with QoS > 0) after which they are deleted (minimum 5).
                    • Store Capacity - Defines the maximum number of messages persisted in the Data Store.
                    • In-flight-messages parameters - Define the management of messages that have been published and not yet confirmed, including:
                    • In-flight-messages Republish-on-new-session - Whether to republish in-flight messages on a new MQTT session.
                    • In-flight-messages Max-number - The maximum number of in-flight messages.
                    • In-flight-messages Congestion-timeout - Timeouts the in-flight messages congestion condition. The service will force a disconnect attempting to reconnect (0 to disable).
                    "},{"location":"gateway-configuration/data-service-configuration/#connection-monitors","title":"Connection Monitors","text":"

                    The DataService offers methods and configuration options to monitor the connection to the remote server and, eventually, cause a system reboot to recover from transient network problems.

                    This feature, if enabled, leverages the watchdog service and reboots the gateway if the maximum number of configured connection attempts has been made.

                    A reboot is not requested if the connection to the remote broker succeeds but an authentication error, an invalid client id or an authorization error is thrown by the remote cloud platform and causes a connection drop.

                    The image below shows the parameters that need to be tuned in order to enable this connection monitor feature.

                    To configure this functionality, the System Administrator needs to specify the following configuration elements:

                    • Enable Recovery On Connection Failure: when enabled, activates the recovery feature on connection failure: if the device is not able to connect to a remote cloud platform, the service will wait for a specified amount of connection retries. If the recovery fails, the device will be rebooted. Being based on the Watchdog service, it needs to be activated as well.

                    • Connection Recovery Max Failure: related to the previous parameter. It specifies the number of failures before a reboot is requested. !!! warning To be fully working, this feature needs the enabling of the Watchdog Service.

                    "},{"location":"gateway-configuration/data-service-configuration/#message-publishing-backoff-delay","title":"Message Publishing Backoff Delay","text":"

                    In order to have a finer control on the data flow, when a device reconnects to a remote cloud platform, Kura integrates into the Data Service a Backoff delay feature that limits the rate of messages sent.

                    This feature, enabled by default, integrates the Token Bucket concept to limit the bursts of messages sent to a remote cloud platform.

                    In the image below, the parameters that need to be tuned, in the Data Service, to take advantage of this feature:

                    • Enable Rate Limit - Enables the token bucket message rate limiting.

                    • Rate Limit Average - he average message publish rate in number of messages per unit of time (e.g. 10 messages per MINUTE).

                      Danger

                      The maximum allowed message rate is 1 message per millisecond, so the following limitations are applied:

                      • 86400000 per DAY
                      • 3600000 per HOUR
                      • 60000 messages per MINUTE
                      • 1000 messages per SECOND
                      • Rate Limit Time Unit - The time unit for the Rate Limit Average.
                      • Rate Limit Burst Size - The token bucket burst size.

                    The default setup limits the data flow to 1 message per second with a bucket size of 1 token.

                    Warning

                    This feature needs to be properly tuned by the System Administrator in order to prevent delays in the remote cloud platform due to messages stacked at the edge.

                    If not sure of the number of messages that your gateways will try to push to the remote platform, we suggest to disable this feature.

                    "},{"location":"gateway-configuration/data-service-configuration/#connection-schedule","title":"Connection schedule","text":"

                    Starting from Kura 5.3.0, the Data Service supports a configurable time based connection schedule. If this functionality is enabled, the Data Service will connect at specific time instants represented by a configurable Cron expression, keep the connection open until it becomes idle and then disconnect until the next instant that matches the expression.

                    More in detail, the connection logic is as follows:

                    1. The DataService parses the confgiured Cron expression and schedules a connection attempt at the next instant that matches the expression. When the connection instant is reached, the logic continues from step 2.

                    2. The Data Service will start the auto connect logic. One or more connection attempts will be performed until the connection is established honoring the connect.retry-interval parameter.

                    3. The Data Service starts a timer that ticks after connection.schedule.inactivity.interval.seconds seconds. When the timer ticks the connection will be closed, and the logic resumed from step 1. The timer is reset delaying the disconnection when a message is published or confirmed (for QoS >= 1). The connection will not be closed if there are messages with QoS >= 1 that have not been confirmed yet. If an unexpected connection drop occurs in this phase, the logic will resume from step 2.

                    The Data Service will attempt to detect large time shifts in system clock, if a time shift is detected, the logic will switch to step 1, rescheduling the next connection attempt.

                    The relevant configuration parameters are the following:

                    • Enable Connection Schedule: Enables or disables the connection schedule feature. Please note that in order to enable the connection logic, the Connect Auto-on-startup parameter must be set to true as well.

                    • Connection Schedule CRON Expression: A CRON expression that specifies the instants when the gateway should perform a connection attempt. This parameter is only used if Enable Connection Schedule is set to true. The default expression schedules a connection every day at midnight.

                    • Allow priority message to overide connection schedule - Allows messages beyond a specified priority to force a connection and be sent regardless of connection schedule.

                    • Message schedule priority override threshold - A message with a priority equal to or less than this threshold will cause the framework to automatically re-connect and send regardless of the connection schedule.

                    • Connection Schedule Disconnect Inactivity Interval Second: Specifies an inactivity timeout in seconds. If the timeout expires, the cloud connection will be automatically closed. This parameter is only used if Enable Connection Schedule is set to true.

                    "},{"location":"gateway-configuration/data-service-configuration/#payload-size-limiting","title":"Payload size limiting","text":"

                    Starting from Kura 5.3.0, the DataService allows to limit the maximum payload size for published messages. Attempts to publish a payload larger than the configured threshold will fail with a KuraStoreException. The threshold can be configured with the following parameter:

                    • Maximum Payload Size: The maximum allowed size in bytes for the message payload.

                    In order to keep backwards compatibility, the default value for the parameter is set to 16777216 bytes, which is the maximum allowed size by the current H2DbService implementation.

                    "},{"location":"gateway-configuration/data-transport-service-configuration/","title":"Data Transport Service Configuration","text":"

                    The DataTransport service provides the ability to connect to a remote broker, publish messages, subscribe to topics, receive messages on the subscribed topics, and disconnect from the remote message broker. To use this service, select the MqttDataTransport option located in the Cloud Connections area as shown in the screen captures below.

                    The MqttDataTransport service provides the following configuration parameters:

                    • broker-url: defines the URL of the MQTT broker to connect to. For the Everyware Cloud sandbox, this address is either mqtt://broker-sbx.everyware.io:1883/ or mqtts://broker-sbx.everyware.io:8883/ for an encrypted connection. (Required field).

                    • topic.context.account-name: defines the name of the account to which the device belongs.

                    • username and password: define the username and password that have been assigned to the device by the account administrator (generally username is account-name_broker). (Required field).

                    • client-id: defines the identifier of the MQTT client representing the device when connecting to the MQTT broker. If left empty, it is automatically determined by the client software as the MAC address of the main network interface (in general numbers and uppercase letters without ':'). This identifier has to be unique within your account.

                    • keep-alive: defines the \"keep alive\" interval measured in seconds. It specifies the maximum amount of time that should pass without communication between the client and the server. The client will ensure that at least one message travels across the network within each keep alive period. In the absence of a data-related message during this time period, the client will send a very small MQTT \"ping\" message that the server will acknowledge. The keep alive interval enables the client to detect when the server is no longer available without having to wait for the long TCP/IP timeout. (Required field).

                      Warning

                      The keep-alive interval may \"conflict\" with the TCP idle timeout set at the TCP/IP level. As a best practice the TCP idle timeout should be at least 1,5 times the keep-alive time interval. If the TCP idle timeout is less or equal the keep-alive, the MQTT connection may be dropped due to the TCP idle timeout expiration.

                    • timeout: sets the timeout used for all interactions with the MQTT broker. (Required field).

                    • clean-session: controls the behavior of both the client and the server at the time of connection and disconnection. When this parameter is set to true, the state information is discarded at connection and disconnection; when set to false, the state information is maintained. (Required field).

                    • lwt parameters: define the MQTT \"Last Will and Testament\" (LWT) settings for the client. In the event that the client unexpectedly loses its connection to the server, the server publishes the LWT message (lwt.payload) to the LWT topic on behalf of the client. This allows other clients (subscribed to the LWT topic) to be made aware that the client has disconnected. LWT parameters that may be configured include:

                      • lwt.topic
                      • lwt.payload
                      • lwt.qos
                      • lwt.retain

                    • in-flight.persistence: defines the storage type where in-flight messages are persisted across reconnections. They may be stored in memory, or in a file on the disk. (Required field).

                    • protocol-version: defines the MQTT Protocol version to be used. This value may be 3.1 or 3.1.1.

                    • SSL parameters: define the SSL specific settings for the client. SSL parameters that can be configured include:

                      • ssl.default.protocol
                      • ssl.hostname.verification
                      • ssl.default.cipherSuites
                      • ssl.certificate.alias
                    "},{"location":"gateway-configuration/device-information/","title":"Device Information","text":"

                    The Device section provides several information about the gateway where Kura is running on. This section can be accessed by selecting the Device option located in the System area.

                    "},{"location":"gateway-configuration/device-information/#profile","title":"Profile","text":"

                    The Profile tab shows several information about the gateway, organized under the Device, Hardware, Software and Java Information.

                    "},{"location":"gateway-configuration/device-information/#bundles","title":"Bundles","text":"

                    This tab lists all the bundles installed on Kura, with details about the name, version, id, state and signature status. The signature value will be true if the corresponding bundle is signed, false otherwise.

                    The buttons in the upper part of the tab allows the user to manage the listed bundles:

                    • Start Bundle: starts a bundle that is in Resolved or Installed state;
                    • Stop Bundle: stops a bundle that is in Active state;
                    • Refresh: reloads the bundles states list.

                    "},{"location":"gateway-configuration/device-information/#containers","title":"Containers","text":"

                    The Containers tab lists the containers and images that are currently managed by the Container Orchestration Service. From this tab, the user can start and stop containers and delete images.

                    "},{"location":"gateway-configuration/device-information/#threads","title":"Threads","text":"

                    The Threads tab shows a list of the threads that are currently running in the JVM.

                    "},{"location":"gateway-configuration/device-information/#system-packages","title":"System Packages","text":"

                    The System Packages tab shows the list of all the Linux packages installed on the OS. The package is detailed with the name, version and type (DEB/RPM/APK).

                    Note

                    In Debian based systems, if a package is removed without the purge option, the package will be still listed on the System Packages tab.

                    "},{"location":"gateway-configuration/device-information/#system-properties","title":"System Properties","text":"

                    The System Properties tab shows a list of relevant properties including OS and JVM parameters.

                    "},{"location":"gateway-configuration/device-information/#command","title":"Command","text":"

                    A detailed description of this tab is presented in the Command Service page.

                    "},{"location":"gateway-configuration/device-information/#system-logs","title":"System Logs","text":"

                    The System Logs tab allows downloading a compressed file containing all the relevant log files from the gateway. The download button creates and downloads a compressed file with the following items:

                    • all the files in /var/log or the content of the folder defined by the kura.log.download.sources property;
                    • the content of the journal for the Kura process (kura-journal.log);
                    • the content of the journal for the whole system (system-journal.log).

                    In addition to this feature, the page also allows the real-time displaying of system logs, if the framework has the availability of one or more components that implement the LogProvider API. The UI also provides a useful button to open a new Kura instance in a new browser window. A reference implementation of the LogProvider API is provided in the org.eclipse.kura.log.filesystem.provider bundle. This bundle exposes in the framework a factory that can be used to read filesystem files. By default, Eclipse Kura creates two log providers at startup: one that reads from /var/log/kura.log and the other that reads from /var/log/kura-audit.log.

                    The device logs are stored in a server-side cache and are collected from the point in time where the log providers get attached to the UI (usually, from the login or after a refresh of the browser's window). When the section \"System Logs\" is accessed, the new log entries are polled from the server's cache and stored client-side.

                    Note

                    The default log provider, that is the first log provider shown in the dropdown menu, is filesystem-kura-log. It is used to collect logs from the /var/log/kura.log file. The default value can be changed using the kura.default.log.manager property in the kura.properties file.

                    "},{"location":"gateway-configuration/ethernet-configuration/","title":"Ethernet Configuration","text":"

                    As described in the Network Configuration section, Ethernet interfaces have four configuration tabs: IPv4, IPv6, DHCPv4 & NAT and Advanced. Each Ethernet interface may be configured either as LAN or WAN; it may also be disabled.

                    If the interface is designated as LAN in the IPv4 tab and is manually configured, the DHCPv4 & NAT tab is enabled to allow DHCP server and/or 'many-to-one' NAT setup; otherwise, the DHCPv4 & NAT tab is disabled.

                    For more information on IPv4, IPv6 and DHCPv4 & NAT settings, please refer to the Network Configuration section. For the advanced settings, see the Advanced Settings section.

                    "},{"location":"gateway-configuration/firewall-configuration/","title":"Firewall Configuration","text":"

                    Kura offers easy management of the Linux firewall iptables and ip6tables included in an IoT Gateway. Additionally, Kura provides the ability to manage network access security to an IoT Gateway for both IPv4 and IPv6 through the following:

                    • Open Ports (local service rules)
                    • Port Forwarding
                    • IP Forwarding and Masquerading (NAT service rules)
                    • 'Automatic' NAT service rules

                    Open Ports, Port Forwarding, and IP Forwarding and Masquerading are configured via respective Firewall configuration tabs. 'Automatic' NAT is enabled for each local (LAN) interface using the DHCP & NAT tab of the respective interface configuration. While the IPv4 Firewall configuration capability is present on all IoT Gateways, the IPv6 Firewall is present only on devices that support IPv6 Networking.

                    "},{"location":"gateway-configuration/firewall-configuration/#firewall-linux-configuration","title":"Firewall Linux Configuration","text":"

                    This section describes the changes applied by Kura at the Linux networking configuration. Please read the following note before proceeding with manual changes of the Linux networking configuration.

                    Warning

                    It is NOT recommended performing manual editing of the Linux networking configuration files when the gateway configuration is being managed through Kura. While Linux may correctly accept manual changes, Kura may not be able to interpret the new configuration resulting in an inconsistent state.

                    When a new firewall configuration is submitted, Kura immediately applies it using the iptables service provided by the OS. Moreover, the rules are stored in the filesystem and a new Kura snapshot is generated containing the new configuration. At the next startup, the firewall service in the OS will re-apply them and Kura will check the firewall configuration against the one contained in the last snapshot. In this way, the user can update the snapshot with the needed rules and apply them to the system using the webUI or modify the snapshot_0.xml before the first start of Kura.

                    In order to allow a better coexistence between Kura and external applications that need to modify firewall rules, Kura writes its rules to a set of custom iptables chains. They are input-kura, output-kura, forward-kura, forward-kura-pf and forward-kura-ipf for the filter table and input-kura, output-kura, prerouting-kura, prerouting-kura-pf, postrouting-kura, postrouting-kura-pf and postrouting-kura-ipf for the nat table. The custom chains are then put in their respective standard iptables chains, as shown in the following:

                    iptables -t filter -I INPUT -j input-kura\niptables -t filter -I OUTPUT -j output-kura\niptables -t filter -I FORWARD -j forward-kura\niptables -t filter -I forward-kura -j forward-kura-pf\niptables -t filter -I forward-kura -j forward-kura-ipf\niptables -t nat -I PREROUTING -j prerouting-kura\niptables -t nat -I prerouting-kura -j prerouting-kura-pf\niptables -t nat -I INPUT -j input-kura\niptables -t nat -I OUTPUT -j output-kura\niptables -t nat -I POSTROUTING -j postrouting-kura\niptables -t nat -I postrouting-kura -j postrouting-kura-pf\niptables -t nat -I postrouting-kura -j postrouting-kura-ipf\n

                    The same custom chains are used in the IPv6 case.

                    Even if many firewall rules can be handled by Kura, it could be that some rules cannot be filled through the Web Console. In this case, custom firewall rules may be added to the /etc/init.d/firewall_cust script manually. These rules are applied/reapplied every time the firewall service starts, that is at the gateway startup. These custom rules should not be applied to the Kura custom chains, but to the standard ones.

                    "},{"location":"gateway-configuration/firewall-configuration/#open-ports","title":"Open Ports","text":"

                    If Kura is running on a gateway, all TCP/UDP ports are closed by default unless they are listed in the Open Ports IPv4 or Open Ports IPv6 tab of the Firewall section in the Gateway Administration Console, or in the /etc/sysconfig/iptables script. Therefore, if a user needs to connect to a specific port on a gateway, it is insufficient to have an application listening on the desired port; the port also needs to be opened in the firewall.

                    To open a port using the Gateway Administration Console, select the Firewall option located in the System area. The Firewall configuration display appears in the main window. With the Open Ports IPv4 or Open Ports IPV6 tab selected, click the New button. The New Open Port Entry form appears.

                    The New Open Port Entry form contains the following configuration parameters:

                    • Port: specifies the port to be opened. (Required field.)
                    • Protocol: defines the protocol (tcp or udp). (Required field.)
                    • Permitted Network: only allows packets originated by a host on this network.
                    • Permitted Interface Name: only allows packets arrived on this interface.
                    • Unpermitted Interface Name: blocks packets arrived on this interface.
                    • Permitted MAC Address: only allows packets originated by this host.
                    • Source Port Range: only allows packets with source port in the defined range.

                    Complete the New Open Port Entry form and click the Submit button when finished. Once the form is submitted, a new port entry will appear. Click the Apply button for the change to take effect.

                    The firewall rules related to the open ports section are stored in the input-kura custom chain of the IPv4/IPv6 filter table.

                    "},{"location":"gateway-configuration/firewall-configuration/#port-forwarding","title":"Port Forwarding","text":"

                    Port forwarding rules are needed to establish connectivity from the WAN side to a specific port on a host that resides on a LAN behind the gateway. In this case, a routing solution may be avoided since the connection is made to a specified external port on a gateway, and packets are forwarded to an internal port on the destination host; therefore, it is not necessary to add the external port to the list of open ports.

                    To add a port forwarding rule, select the Port Forwarding IPv4 or Port Forwarding IPv6 tab on the Firewall display and click the New button. The Port Forward Entry form appears.

                    The Port Forward Entry form contains the following configuration parameters:

                    • Input Interface: specifies the interface through which a packet is going to be received. (Required field).

                    • Output Interface: specifies the interface through which a packet is going to be forwarded to its destination. (Required field).

                    • LAN Address: supplies the IP address of destination host. (Required field).

                    • Protocol: defines the protocol (tcp or udp). (Required field).

                    • External Port: provides the external destination port on gateway unit. (Required field).

                    • Internal Port: provides the port on a destination host. (Required field).

                    • Enable Masquerading: defines whether masquerading is used (yes or no). If enabled, the gateway replaces the IP address of the originating host with the IP address of its own output (LAN) interface. This is needed when the destination host does not have a back route to the originating host (or default gateway route) via the gateway unit. The masquerading option is provided with port forwarding to limit gateway forwarding only to the destination port. (Required field).

                    • Permitted Network: only forwards if the packet is originated from a host on this network.

                    • Permitted MAC Address: only forwards if the packet is originated by this host.

                    • Source Port Range: only forwards if the packet's source port is within the defined range.

                    Complete the Port Forward Entry form and click the Apply button for the desired port forwarding rules to take effect.

                    The firewall rules related to the port forwarding section are stored in the forward-kura-pf custom chain of the IPv4/IPv6 filter table and in the postrouting-kura-pf and prerouting-kura-pf chains of the IPv4/IPv6 nat table.

                    "},{"location":"gateway-configuration/firewall-configuration/#port-forwarding-example","title":"Port Forwarding example","text":"

                    This section describes an example of port forwarding rules applied to the IPv4 case. The initial setup is described below.

                    • A couple of RaspberryPi that shares the same LAN over Ethernet.

                    • The first RaspberryPi running Kura is configured as follows:

                      • The eth0 interface static with IP address of 172.16.0.5.
                      • There is no default gateway.

                    • The second RaspberryPi running Kura is configured as follows:

                      • The eth0 interface LAN/static with IP address of 172.16.0.1/24 and no NAT.
                      • The wlan0 interface is WAN/DHCP client.

                    • A laptop is connected to the same network of the wlan0 of the second RaspberryPi and can ping its wlan0 interface.

                    The purpose of the second RaspberryPi configuration is to enable access to the Administration Console running on the first one (port 80) by connecting to the second RaspberryPi's port 8080 over the wlan. This scenario assumes that IP addresses are assigned as follows:

                    • Second RaspberryPi wlan0 - 10.200.12.6

                    • Laptop wlan0 - 10.200.12.10

                    The following port forwarding entries are added to the second RaspberryPi configuration as described above using the Port Forward Entry form:

                    • Input Interface - wlan0

                    • Output Interface - eth0

                    • LAN Address - 172.16.0.5

                    • Protocol - tcp

                    • External Port - 8080

                    • Internal Port - 80

                    • Masquerade - yes

                    The Permitted Network, Permitted MAC Address, and Source Port Range fields are left blank.

                    The following iptables rules are applied and added to the /etc/sysconfig/iptables file:

                    iptables -t nat -A prerouting-kura-pf -i wlan0 -p tcp -s 0.0.0.0/0 --dport 8080 -j DNAT --to 172.16.0.5:80\niptables -t nat -A postrouting-kura-pf -o eth0 -p tcp -d 172.16.0.5 -j MASQUERADE\niptables -A forward-kura-pf -i wlan0 -o eth0 -p tcp -s 0.0.0.0/0 --dport 80 -d 172.16.0.5 -j ACCEPT\niptables -A forward-kura-pf -i eth0 -o wlan0 -p tcp -s 172.16.0.5 -m state --state RELATED,ESTABLISHED -j ACCEPT\n

                    The following iptables commands may be used to verify that the new rules have been applied:

                    sudo iptables -v -n -L\nsudo iptables -v -n -L -t nat\n

                    At this point, it is possible to try to connect to http://10.200.12.6 and to http://10.200.12.6:8080 from the laptop. Note that when a connection is made to the device on port 80, it is to the Kura configuration page on the device itself (the second RaspberryPi). When the gateway is connected on port 8080, you are forwarded to the Kura Gateway Administration Console on the first RaspberryPi. The destination host can only be reached by connecting to the gateway on port 8080.

                    Another way to connect to the Kura Gateway Administration Console on the first RaspberryPi would be to add an IP Forwarding/Masquerading entry as described in the next section.

                    "},{"location":"gateway-configuration/firewall-configuration/#ip-forwardingmasquerading","title":"IP Forwarding/Masquerading","text":"

                    The advantage of the Automatic NAT method is its simplicity. However, this approach does not handle reverse NATing, and it cannot be used for interfaces that are not listed in the Gateway Administration Console (such as VPN tun0 interface). To set up generic (one-to-many) NATing, select the IP Forwarding/Masquerading IPv4 or IP Forwarding/Masquerading IPv6 tab on the Firewall display. Press the New button and the IP Forwarding/Masquerading form appears.

                    The IP Forwarding/Masquerading form contains the following configuration parameters:

                    • Input Interface: specifies the interface through which a packet is going to be received. (Required field).

                    • Output Interface: specifies the interface through which a packet is going to be forwarded to its destination. (Required field).

                    • Protocol: defines the protocol of the rule to check (all, tcp, or udp). (Required field).

                    • Source Network/Host: identifies the source network or host name (CIDR notation). Set to IPv4 0.0.0.0/0 or IPv6 ::/0 if empty.

                    • Destination Network/Host: identifies the destination network or host name (CIDR notation). Set to IPv4 0.0.0.0/0 or IPv6 ::/0 if empty.

                    • Enable Masquerading: defines whether masquerading is used (yes or no). If set to 'yes', masquerading is enabled. If set to 'no', only FORWARDING rules are be added. (Required field).

                    The rules will be added to the forward-kura-ipf chain in the IPv4/IPv6 filter table and in the postrouting-kura-ipf one in the IPv4/IPv6 nat table.

                    As a use-case scenario, consider the same setup as in port forwarding, but with cellular interface disabled and eth1 interface configured as WAN/DHCP client. In this case, the interfaces of the gateway are configured as follows:

                    • eth0: LAN/Static/No NAT 172.16.0.1/24

                    • eth1: WAN/DHCP 10.11.5.4/24

                    To reach the gateway sitting on the 172.16.0.5/24 from a specific host on the 10.11.0.0/16 network, set up the following Reverse NAT entry:

                    • Input Interface: eth1 (WAN interface)

                    • Output Interface: eth0 (LAN interface)

                    • Protocol: all

                    • Source Network/Host: 10.11.5.21/32

                    • Destination Network/Host: 172.16.0.5/32

                    • Enable Masquerading: yes

                    This case applies the following iptables rules:

                    iptables -t nat -A postrouting-kura-ipf -p tcp -s 10.11.5.21/32 -d 172.16.0.5/32 -o eth0 -j MASQUERADE\niptables -A forward-kura-ipf -p tcp -s 172.16.0.5/32 -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT\niptables -A forward-kura-ipf -p tcp -s 10.11.5.21/32 -d 172.16.0.5/32 -i eth1 -o eth0 -m tcp -j ACCEPT\n

                    Additionally, a route to the 172.16.0.0/24 network needs to be configured on a connecting laptop as shown below:

                    sudo route add -net 172.16.0.0 netmask 255.255.255.0 gw 10.11.5.4\n

                    Since masquerading is enabled, there is no need to specify the back route on the destination host. Note that with this setup, the gateway only forwards packets originating on the 10.11.5.21 laptop to the 172.16.0.5 destination.

                    If the Source Network/Host and Destination Network/Host fields are empty, iptables rules appear as follows:

                    iptables -t nat -A postrouting-kura-ipf -p tcp -s 0.0.0.0/0 -d 0.0.0.0/0 -o eth0 -j MASQUERADE\niptables -A forward-kura-ipf -p tcp -s 0.0.0.0/0 -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT\niptables -A forward-kura-ipf -p tcp -s 0.0.0.0/0 -d 0.0.0.0/0 -i eth1 -o eth0 -j ACCEPT\n

                    The gateway forwards packets from any external host (connected to eth1) to any destination on the local network (eth0 interface).

                    "},{"location":"gateway-configuration/gateway-administration-console-authentication/","title":"Gateway Administration Console Authentication","text":"

                    The Gateway Administration Console supports multiple login identities with associated permissions and HTTPS client side authentication with certificates.

                    The identity and permission configuration and credentials is stored externally the UserAdmin service (see Authentication and Authorization for more details).

                    "},{"location":"gateway-configuration/gateway-administration-console-authentication/#permissions","title":"Permissions","text":"

                    The Gateway Administration Console defines the following permissions, that allow to restrict the operations that an identity is allowed to perform:

                    • kura.cloud.connection.admin: Allows to manage cloud connections using Cloud Connections tab.
                    • kura.packages.admin: Allows to install deployment packages using the Packages tab.
                    • kura.device: Allows to interact with the Device and Status tabs.
                    • kura.network.admin: Allows to manage network connectivity and firewall configuration using the Network and Firewall tabs.
                    • kura.wires.admin: Allows to manage Wire Graph and Driver and Asset configurations using the Wires and Drivers and Assets tabs.
                    • kura.admin: This permission implies all other permissions, including the ones defined by external applications.
                    "},{"location":"gateway-configuration/gateway-administration-console-authentication/#default-identities","title":"Default identities","text":"

                    Kura provides the following identities by default:

                    Name Password Permissions admin admin kura.admin appadmin appadmin kura.cloud.connection.admin, kura.packages.admin, kura.wires.admin netadmin netadmin kura.cloud.connection.admin, kura.device, kura.network.admin

                    It is possible to modify/remove the default identity configuration.

                    "},{"location":"gateway-configuration/gateway-administration-console-authentication/#login","title":"Login","text":"

                    The login screen can be accessed by entering the https://${device.ip} URL in a browser window, where ${device.ip} is the IP address. Replace https with http if HTTPS support has been disabled on the gateway.

                    "},{"location":"gateway-configuration/gateway-administration-console-authentication/#identity-name-and-password","title":"Identity name and password","text":"

                    In order to login with identity name and password, select Password as authentication method and enter the credentials.

                    Note

                    Password authentication method might not be available if it has been disabled by the administrator using the Security -> Web Console section.

                    "},{"location":"gateway-configuration/gateway-administration-console-authentication/#forced-password-change-on-login","title":"Forced password change on login","text":"

                    Kura supports forcing an identity to change the password at login, before accessing the Administration Console. This functionality is enabled by default after a fresh installation. At login the following prompt will appear forcing the user to define a new password.

                    This functionality can be configured by an admin identity using the Identities section of the Administration Console.

                    The forced password change can also be disabled by editing the snapshot_0.xml file removing the kura.need.password.change property for the desired identity in the org.eclipse.kura.internal.useradmin.store.RoleRepositoryStoreImpl configuration before Kura first boot. If this functionality is enabled, REST API username and password authentication is will be disabled for the specific identity until the password is updated, REST API certificate authentication will still work.

                    "},{"location":"gateway-configuration/gateway-administration-console-authentication/#certificate-authentication","title":"Certificate authentication","text":"

                    In order to perform HTTPS certificate authentication, select the Certificate authentication method and click Login, the browser may prompt to select the certificate to use.

                    Note

                    Certificate authentication method might not be available if no HTTPS with client authentication ports have been configured or if it has been explicitly disabled by the administrator using the Security -> Web Console section.

                    "},{"location":"gateway-configuration/gateway-administration-console-authentication/#identity-and-permission-management","title":"Identity and Permission management","text":"

                    The Gateway Administration Console allows the management of identity and permission configuration in a dedicated view, accessible by navigating to the Identities section:

                    The section above allows to:

                    "},{"location":"gateway-configuration/gateway-administration-console-authentication/#create-new-identities","title":"Create new identities","text":"

                    New identities can be created by clicking the New Identity button.

                    "},{"location":"gateway-configuration/gateway-administration-console-authentication/#remove-existing-identities","title":"Remove existing identities","text":"

                    Existing identities can be removed by selecting the corresponding entry in the list and pressing the Delete Identity button.

                    "},{"location":"gateway-configuration/gateway-administration-console-authentication/#manage-password-authentication","title":"Manage password authentication","text":"

                    Password authentication can be enabled or disabled by changing the Password authentication enabled parameter. Changing this parameter will not modify the existing stored password. Enabling password authentication for a new identity requires to define a new password. The password can be set/modified by clicking the Change password button.

                    "},{"location":"gateway-configuration/gateway-administration-console-authentication/#assign-or-remove-permissions","title":"Assign or remove permissions","text":"

                    Permissions can be assigned or removed by ticking the corresponding entries in the Permissions table. No changes will be applied to the gateway until the Apply button is pressed.

                    "},{"location":"gateway-configuration/gateway-administration-console-authentication/#certificate-based-authentication","title":"Certificate based authentication","text":"

                    The Gateway Administration Console supports HTTPS certificate based client side authentication. The authentication process works as follows:

                    • One or more Https client certificate must be added to keystore, this can be done using the Certificate Management section.

                    • The user must provide a certificate or certificate chain signed by one of the CAs added as Https client certificate.

                    • The common name field of the leaf certificate provided by the user must be the name of the identity that should be used for the session.

                    • HTTPS with certificate based authentication must be enabled in the HTTP/HTTPS Configuration section.

                    Log in with certificate can be performed by selecting the Certificate authentication method in Gateway Administration Console login screen or by connecting directly to the HTTPS port with client side authentication specified in gateway configuration.

                    "},{"location":"gateway-configuration/gateway-administration-console/","title":"Gateway Administration Console","text":""},{"location":"gateway-configuration/gateway-administration-console/#accessing-the-kura-gateway-administration-console","title":"Accessing the Kura Gateway Administration Console","text":"

                    Kura provides a web-based, user interface for the administration and management of your IoT gateway. The Kura Gateway Administration Console enables you to monitor the gateway status, manage the network configuration, and manage the installed application and services. Access to the Kura Gateway Administration Console requires that a unit running Eclipse Kura is reachable via its Ethernet primary interface.

                    Connections on HTTP port 443 for these interfaces are allowed by default through the built-in firewall. The Kura Gateway Administration Console can be accessed by typing the IP address of the gateway into the browser's URL bar. Once the URL is submitted, the user is required to log in and is then redirected to the Administration Console (e.g., https://192.168.2.8/admin/console) shown in the screen capture below. The default login name and password is admin/admin.

                    Warning

                    It is recommended to change the default password after initial setup and before deployment, as well as limiting access to the Administration Console to a trusted local network interface using appropriate firewall rules.

                    "},{"location":"gateway-configuration/gateway-administration-console/#password-change","title":"Password change","text":"

                    Once logged in, the user can modify its password (recommended after the first login). To access the option, click on the button near the username in the header section. A dropdown menu appears with the logout and the password modification options. When clicking on \"Change password\", the following dialog will appear:

                    After confirming the changes, the user will be logged out.

                    "},{"location":"gateway-configuration/gateway-administration-console/#accessing-the-kura-gateway-administration-console-over-a-cellular-link","title":"Accessing the Kura Gateway Administration Console over a Cellular Link","text":"

                    In order to connect to the Gateway Administration Console via a cellular interface, the following requirements must be met:

                    • The service plan must allow for a static, public IP address to be assigned to the cellular interface.
                    • The used ports must not be blocked by the provider.
                    • The user must add Open Port entries for the cellular interface. This may be done either through the Firewall tab.

                    If some of the used ports are blocked by the service provider, there is an option to reconfigure the gateway to use another port (i.e., 8080). In order to do so, the following requirements must be met:

                    • The HttpService configuration must be changed to use the new ports.
                    • The new ports must be open in the firewall for all network interfaces.
                    "},{"location":"gateway-configuration/gateway-administration-console/#https-related-warnings","title":"HTTPS related warnings","text":"

                    Most browsers will probably warn the user that the connection is not secure when Gateway Administration Console is accessed using HTTPS.

                    In order to remove the warning, the browser must be able to verify the identity of the gateway as an HTTPS server. The verification process will fail with default server certificate provided by Kura because it is self-signed and it is not suitable for hostname verification.

                    Fixing this might require to configure the browser to trust the certificate provided by the gateway and/or using a server certificate signed by a CA trusted by the browser and assigning a DNS name to the gateway in order to pass hostname verification.

                    "},{"location":"gateway-configuration/gateway-administration-console/#system-use-notification-banner","title":"System Use Notification Banner","text":"

                    For security reasons, it may be needed to display to the user a banner that describes the intended system use before authenticating. The system use notification message is customisable by authorised personnel in the Security section of the Kura Web UI, in the Web Console tab.

                    "},{"location":"gateway-configuration/gateway-status/","title":"Gateway Status","text":"

                    The status of the gateway may be viewed from the Status window, which is accessed by selecting the Status option located in the System area. The Status window provides a summary of the key information regarding the status of the gateway including its IoT Cloud connection and network configuration.

                    The values reported in the page can be reloaded using the Refresh button. This will read the current values from the system and update the page. Since the update procedure can take time, the update can be performed at most every 30 seconds.

                    "},{"location":"gateway-configuration/gateway-status/#cloud-services","title":"Cloud Services","text":"

                    This section provides a summary of the IoT Cloud connection status including the following details:

                    • Account - defines the name of the account used by the MqttDataTransport service when an MQTT connection is opened.
                    • Broker URL - defines the URL of the MQTT broker.
                    • Client ID - specifies the client identifier used by the MqttDataTransport service when an MQTT connection is opened.
                    • Service Status - provides the status of the DataService and DataTransport connection. Valid values are CONNECTED or DISCONNECTED.
                    • Username - supplies the name of the user used by the MqttDataTransport service when an MQTT connection is opened.
                    "},{"location":"gateway-configuration/gateway-status/#ethernet-wireless-and-cellular-settings","title":"Ethernet, Wireless, and Cellular Settings","text":"

                    This section provides information about the currently configured network interfaces.

                    "},{"location":"gateway-configuration/gateway-status/#position-status","title":"Position Status","text":"

                    This section provides the GPS status and latest known position (if applicable) including the following details:

                    • Longitude - longitude as reported by the PositionService in radians.
                    • Latitude - latitude as reported by the PositionService in radians.
                    • Altitude - altitude as reported by the PositionService in meters.

                    Warning

                    The status reported in the page may not be synchronized with the real state of the system. In this case, use the Refresh button to updated the values in the page.

                    "},{"location":"gateway-configuration/keys-and-certificates/","title":"Keys and Certificates","text":"

                    The framework manages directly different key pairs and trusted certificates from different keystores. To simplify the management of such complex objects, the framework provides a dedicated section of its Administrative Web UI, a set of REST APIs for local management and a request handler (KEYS-V1 and KEYS-V2) for cloud remote interaction.

                    "},{"location":"gateway-configuration/keys-and-certificates/#web-ui","title":"Web UI","text":"

                    The Certificates List tab in the Security section of the Kura Web UI provides a simple way for the user to get the list of all the managed keys and certificates of the framework:

                    The page allows the user to add a new Keypair or trusted certificate or to delete an existing element.

                    Every key pair or trusted certificate is listed by its alias, identified by the corresponding type and further identified by the keystore that is managing that element.

                    If the user needs to add a new entry to one of the managed KeystoreService instances, can click on the Add button on the top left part of the page. The user will be guided through a process that will allow to identify the type of entry to add:

                    It can be either a:

                    • Private/Public Key Pair
                    • Trusted Certificate

                    If the user decides to add a key pair, then the wizard will provide a page like the following:

                    Here the user can specify: - Key Store: the KeystoreService instance that will store and maintain the key pair - Storage Alias: the alias that will be used to identify the key pair - Private Key: the private key part of the key pair - Certificate: the public key part of the key pair

                    After clicking on the Apply button, the new entry will be stored in the selected Keystore and listed along the other entries managed by the framework.

                    The following cryptographic algorithms are supported for Key Pairs: - RSA - DSA

                    Instead, if the user wants to load a Trusted Certificate, the Ui will change as follows:

                    Here the user can specify: - Key Store: the KeystoreService instance that will store and maintain the trusted certificate - Storage Alias: the alias that will be used to identify the trusted certificate - Certificate: the trusted certificate

                    The following cryptographic algorithms are supported for Trusted Certificates: - RSA - DSA - EC

                    "},{"location":"gateway-configuration/keys-and-certificates/#rest-apis","title":"REST APIs","text":""},{"location":"gateway-configuration/keys-and-certificates/#keystoresv1","title":"keystores/v1","text":"

                    The org.eclipse.kura.core.keystore bundle exposes a REST endpoint under the /services/keystores/v1 path. The Kura REST APIs for Keys and Certificates support the following calls and are allowed to any user with rest.keystores permission.

                    Method Path Roles allowed Encoding Request parameters Description GET / keystores JSON None Returns the list of all the KeystoreService instances. GET /entries keystores JSON None Returns the list of all the entries managed by the KeystoreService instances. GET /entries?keystoreServicePid={keystoreServicePid} keystores JSON keystoreServicePid Returns the list of all the entries managed by the specified KeystoreService instance. GET /entries?alias={alias} keystores JSON alias Returns the list of all the entries specified by the defined alias and managed in all the available KeystoreService instances in the framework. GET /entries/entry?keystoreServicePid={keystoreServicePid}&alias={alias} keystores JSON keystoreServicePid and alias Returns the entry identified by the specified keystoreServicePid and alias. POST /entries/csr keystores JSON The reference to the key pair in a specified KeystoreService instance that will be used to generate the CSR. The request has to be associated with additional parameters that identify the algorithm used to compute and sign the CSR and the DN or the corresponding public key that needs to be countersigned. Generates a CSR for the specified key pair in the specified KeystoreService instance, based on the parameters provided in the request. POST /entries/certificate keystores JSON The reference to the KeystoreService instance and the alias that will be used for storage. A type filed identifies the type of key that needs to be managed. This request allows the user to upload a TrustedCertificate. POST /entries/keypair keystores JSON To generate a new KeyPair directly in the device, the request format need to follow the references in the following paragraphs. This request allows the user to generate a new KeyPair into the device. DELETE /entries keystores JSON A JSON identifying the resource to delete. The format of the request is described in in one of the following sections. Deletes the entry in the specified KeystoreService instance."},{"location":"gateway-configuration/keys-and-certificates/#list-all-the-keystoreservices","title":"List All the KeystoreServices","text":"

                    Request: URL - https://<gateway-ip>/services/keystores/v1

                    Response:

                    [\n    {\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.SSLKeystore\",\n        \"type\": \"jks\",\n        \"size\": 4\n    },\n    {\n        \"keystoreServicePid\": \"org.eclipse.kura.crypto.CryptoService\",\n        \"type\": \"jks\",\n        \"size\": 3\n    },\n    {\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n        \"type\": \"jks\",\n        \"size\": 1\n    },\n    {\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.DMKeystore\",\n        \"type\": \"jks\",\n        \"size\": 1\n    }\n]\n
                    "},{"location":"gateway-configuration/keys-and-certificates/#get-all-the-managed-entries","title":"Get all the Managed Entries","text":"

                    Request: URL - https://<gateway-ip>/services/keystores/v1/entries

                    Response:

                    [\n    {\n        \"subjectDN\": \"OU=Go Daddy Class 2 Certification Authority, O=\\\"The Go Daddy Group, Inc.\\\", C=US\",\n        \"issuer\": \"OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\\\\, Inc.,C=US\",\n        \"startDate\": \"Tue, 29 Jun 2004 17:06:20 GMT\",\n        \"expirationDate\": \"Thu, 29 Jun 2034 17:06:20 GMT\",\n        \"algorithm\": \"SHA1withRSA\",\n        \"size\": 2048,\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.SSLKeystore\",\n        \"alias\": \"ca-godaddyclass2ca\",\n        \"type\": \"TRUSTED_CERTIFICATE\"\n    },\n    {\n        \"algorithm\": \"RSA\",\n        \"size\": 4096,\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n        \"alias\": \"localhost\",\n        \"type\": \"PRIVATE_KEY\"\n    }\n]\n
                    "},{"location":"gateway-configuration/keys-and-certificates/#get-all-the-entries-by-keystoreservice","title":"Get All the Entries by KeystoreService","text":"

                    Request: URL - https://<gateway-ip>/services/keystores/v1/entries?keystoreServicePid=org.eclipse.kura.core.keystore.HttpsKeystore

                    Response:

                    [\n    {\n        \"algorithm\": \"RSA\",\n        \"size\": 4096,\n        \"certificateChain\": [\n            \"-----BEGIN CERTIFICATE-----\\n<CERTIFICATE>\\n-----END CERTIFICATE-----\"\n        ],\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n        \"alias\": \"localhost\",\n        \"type\": \"PRIVATE_KEY\"\n    }\n]\n
                    "},{"location":"gateway-configuration/keys-and-certificates/#get-all-the-entries-by-alias","title":"Get All the Entries by Alias","text":"

                    Request: URL - https://<gateway-ip>/services/keystores/v1/entries?alias=localhost

                    Response:

                    [\n    {\n        \"algorithm\": \"RSA\",\n        \"size\": 4096,\n        \"certificateChain\": [\n            \"-----BEGIN CERTIFICATE-----\\n<CERTIFICATE>\\n-----END CERTIFICATE-----\"\n        ],\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n        \"alias\": \"localhost\",\n        \"type\": \"PRIVATE_KEY\"\n    }\n]\n
                    "},{"location":"gateway-configuration/keys-and-certificates/#get-specific-entry","title":"Get Specific Entry","text":"

                    Request: URL - https://<gateway-ip>/services/keystores/v1/entries/entry?keystoreServicePid=org.eclipse.kura.core.keystore.HttpsKeystore&alias=localhost

                    Response:

                    {\n    \"algorithm\": \"RSA\",\n    \"size\": 4096,\n    \"certificateChain\": [\n        \"-----BEGIN CERTIFICATE-----\\n<CERTIFICATE>-----END CERTIFICATE-----\"\n    ],\n    \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n    \"alias\": \"localhost\",\n    \"type\": \"PRIVATE_KEY\"\n}\n
                    "},{"location":"gateway-configuration/keys-and-certificates/#get-the-csr-for-a-keypair","title":"Get the CSR for a KeyPair","text":"

                    Request: URL - https://<gateway-ip>/services/keystores/v1/entries/csrkeystoreServicePid=org.eclipse.kura.core.keystore.HttpsKeystore&alias=localhost`

                    Request body:

                    { \n    \"keystoreServicePid\":\"org.eclipse.kura.core.keystore.HttpsKeystore\",\n    \"alias\":\"localhost\",\n    \"signatureAlgorithm\" : \"SHA256withRSA\",\n    \"attributes\" : \"CN=Kura, OU=IoT, O=Eclipse, C=US\"\n}\n
                    "},{"location":"gateway-configuration/keys-and-certificates/#store-trusted-certificate","title":"Store Trusted Certificate","text":"

                    Request: URL - https://<gateway-ip>/services/keystores/v1/entries/certificate

                    Request body:

                    {\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"myCertTest99\",\n    \"certificate\":\"-----BEGIN CERTIFICATE-----\n        <CERTIFICATE>\n        -----END CERTIFICATE-----\"\n}\n
                    "},{"location":"gateway-configuration/keys-and-certificates/#generate-keypair","title":"Generate KeyPair","text":"

                    Request: URL - https://<gateway-ip>/services/keystores/v1/entries/keypair

                    Request body:

                    {\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"keypair1\",\n    \"algorithm\" : \"RSA\",\n    \"size\": 1024,\n    \"signatureAlgorithm\" : \"SHA256WithRSA\",\n    \"attributes\" : \"CN=Kura, OU=IoT, O=Eclipse, C=US\"\n}\n
                    "},{"location":"gateway-configuration/keys-and-certificates/#delete-entry","title":"Delete Entry","text":"

                    Request: URL - https://<gateway-ip>/services/keystores/v1/entries

                    Request body:

                    {\n    \"keystoreServicePid\" : \"MyKeystore\",\n    \"alias\" : \"mycerttestec\"\n}\n
                    "},{"location":"gateway-configuration/keys-and-certificates/#keys-v1-request-handler","title":"KEYS-V1 Request Handler","text":"

                    Mapping the previously defined REST APIs, the framework exposed to the remote cloud platforms a request handler named KEYS-V1 that allows the remote user to list and manage the keystores, the keys and the certificates in the framework.

                    The request handler exposes also the capability to generate on the edge a CSR that can be countersigned remotely by a trusted CA.

                    "},{"location":"gateway-configuration/keys-and-certificates/#keystoresv2","title":"keystores/v2","text":"

                    Starting from Kura 5.4.0, the keystores/v2 REST API is also available, it supports all of the request endpoints of keystores/v1 plus an additional endpoint that allows to upload and modify private key entries:

                    Method Path Roles allowed Encoding Request parameters Description POST /entries/privatekey keystores JSON To upload a new private key entry directly in the device, the request format need to follow the references in the following paragraphs. This request allows the user to upload a new private key entry into the device or to modify the certificate chain of an existing one."},{"location":"gateway-configuration/keys-and-certificates/#uploading-a-private-key-entry","title":"Uploading a Private Key Entry","text":"

                    Request: URL - https://<gateway-ip>/services/keystores/v2/entries/privatekey

                    Request body:

                    The request should include the private key in unencrypted PEM format and the certificate chain in PEM format, the first certificate in the certificateChain list must use the public key associated with the private key supplied as the privateKey parameter.

                    The device will overwrite the entry with the provided alias if it already exists.

                    WARINING: Please use this endpoint through a secure connection.

                    {\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"keypair1\",\n    \"privateKey\":\"-----BEGIN RSA PRIVATE KEY-----\\n...\\n-----END RSA PRIVATE KEY-----\",\n    \"certificateChain\":[\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n    ]\n}\n
                    "},{"location":"gateway-configuration/keys-and-certificates/#updating-a-private-key-entry","title":"Updating a Private Key Entry","text":"

                    Request: URL - https://<gateway-ip>/services/keystores/v2/entries/privatekey

                    Request body:

                    In order to update the certificate chain associated to a specific private key entry it is possible to use the same format as previous request and omit the privateKey parameter.

                    In this case the certificate chain of the existing entry will be replaced with the one specified in the request and the existing private key will be retained.

                    This request can be useful for example to create a CSR on the device, sign it externally and then updating the corresponding entry with the resulting certificate.

                    {\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"keypair1\",\n    \"certificateChain\":[\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n    ]\n}\n
                    "},{"location":"gateway-configuration/keystores-management/","title":"Keystores Management","text":"

                    The framework manages different types of cryptographic keys and certificates. In order to simplify the interaction with those objects, Kura provides a KeystoreService API and a specific section in the Kura Web UI that lists all the available KeystoreService instances.

                    From the Security section, a user with Security permissions can access the Keystore Configuration section. A list of all the framework managed keystores will be available to the user with the Service PID that will be used by other components to reference the selected keystore. Associated to the Service PID, the UI shows the Factory PID that identifies the specific KeystoreService API implementation that is providing the service to the framework.

                    In order to modify the configuration of a specific keystore service instance, the user can select one of the available rows, obtaining the corresponding keystore service configuration.

                    The following KeystoreService factories are available:

                    "},{"location":"gateway-configuration/keystores-management/#filesystemkeystoreserviceimpl","title":"FilesystemKeystoreServiceImpl","text":"

                    The org.eclipse.kura.core.keystore.FilesystemKeystoreServiceImpl factory provides a KeystoreService implementation that stores the private keys and certificates as a file. The user can customise the following options:

                    • Keystore Path: identifies the path in the filesystem. If the keystore file does not exists, a new file will be created. The value cannot be empty.
                    • Keystore Password: the corresponding keystore password.
                    • Randomize Password: a boolean flag that allows the user to specify if the keystore password needs to be randomised at the next framework boot. If set true, the framework will try to access the identified keystore and randomise the password. The new password will be persisted in the framework snapshot. Once successfully randomised, the flag will be automatically set to false by the framework.
                    "},{"location":"gateway-configuration/keystores-management/#pkcs11keystoreserviceimpl","title":"PKCS11KeystoreServiceImpl","text":"

                    The org.eclipse.kura.core.keystore.PKCS11KeystoreServiceImpl factory provides a KeystoreService implementation that allows to access a PKCS11 token through the SunPKCS11 implementation.

                    At the moment this type of KeystoreService provides read only access to the underlying token, operations such as adding or removing entries will fail.

                    It is possible to use the entries provided by a PKCS11KeystoreServiceImpl for SSL authentication.

                    The available configuration options closely match the parameters provided by the SunPKCS11 implementation, see the official documentation for more details.

                    In particular, the official documentation contains a section that explains how the PKCS11 objects are mapped to Java KeyStore entries.

                    The only required parameter is the PKCS11 Implementation Library Path parameter. It is usually also necessary to specify the token user pin as the Pin parameter.

                    The configuration parameters are mapped to the SunPKCS11 provider parameters in the following way:

                    Kura Parameter SunPKCS11 Parameter Notes Slot slot Slot List Index slotListIndex Enabled Mechanisms enabledMechanisms The curly braces must be omitted Disabled Mechanisms disabledMechanisms The curly braces must be omitted. Attributes attributes The value of this field will be appended to the provider configuration."},{"location":"gateway-configuration/network-advanced/","title":"Advanced Network Settings","text":"

                    The Advanced configuration tab is designed for users who seek a higher level of control and customization over their network experience. Whether you are an IT professional, network administrator, or enthusiast looking to fine-tune specific aspects of your network, this tab provides access to advanced parameters like Maximum Transmission Unit (MTU) and Promiscuous Mode. Adjusting these settings allows for optimized performance in unique network environments, troubleshooting capabilities, and enhanced security monitoring. Please exercise caution when modifying these settings, ensuring that you have a clear understanding of their implications on your network's behavior.

                    Tip

                    Some parameters requires a minimum version of NetworkManager, as described below and in Kura UI. The System Component Inventory can be used to check what version is available on your device.

                    The Advanced tab allow configuration of:

                    • MTU (Maximum Transmission Unit)
                      • MTU determines the maximum size of data packets transmitted over your network. While most users can leave this at the default setting, adjusting the MTU may be necessary for optimizing performance in specialized environments or overcoming network constraints.
                      • Use Case: Modify MTU if you encounter issues related to packet size, especially in scenarios involving VPNs, specific network equipment, or other unique requirements.
                    • Promiscuous Mode
                      • Promiscuous mode is a specialized network mode where your device captures and analyzes all network packets, regardless of their destination. This is particularly useful for network monitoring, troubleshooting, and security analysis.
                      • Use Case: Enable promiscuous mode when you need to closely inspect network traffic, diagnose connectivity issues, or enhance your device's capabilities for security monitoring.
                    "},{"location":"gateway-configuration/network-advanced/#advanced-configuration","title":"Advanced Configuration","text":"

                    The Advanced tab contains the following configuration parameters:

                    • IPv4 MTU - defines the Maximum Trasmission unit for IPv4 traffic on the selected interface, a value of 0 or empty delegates the MTU definition to the link layer.
                    • IPv6 MTU - defines the Maximum Trasmission unit for IPv6 traffic on the selected interface, a value of 0 or empty delegates the MTU definition to the link layer. Requires NetworkManager 1.40 or above.

                    Warning

                    The MTU value for a VLAN is limited by the configured MTU of its parent interface as an upper bound.

                    • Promiscuous Mode - enable promiscuous mode for the selected interface; Requires NetworkManager 1.32 or above.
                      • System default - This delegates to the underlying OS setting. In most cases the system default equates to Disabled
                      • Enabled
                      • Disabled
                    "},{"location":"gateway-configuration/network-configuration/","title":"Network Configuration","text":"

                    To configure the gateway network interfaces using the Gateway Administration Console, select the Network option located in the System area. With this option selected, the Network display appears with a list of available interfaces. Configuration tabs for the selected interface appear on the right side of the screen. By default, the loopback (lo) interface is selected when the network interfaces are displayed. Choose the desired network interface (e.g., eth0, eth1, wlan0, ppp0) and apply the necessary configuration changes using the tabs on the right. Submit the modified configuration by clicking the Apply button.

                    In case of typing errors, the Reset button can be used to reload the prior configuration on the screen. Since the network configuration shown on the screen may not be synchronized with the current state of the system, it can be updated pressing the Refresh button. This can be used also to force the reload of specific parameters like the RSSI or dynamic IP addresses. The refresh procedure reads all the needed parameters from the system and can take several seconds before updating.

                    Tip

                    It is recommended that the IPv4 or IPv6 tab is configured first since it defines how the interface is going to be used.

                    "},{"location":"gateway-configuration/network-configuration/#tcpip-configuration","title":"TCP/IP Configuration","text":"

                    The IPv4 and IPv6 tabs contain the following configuration parameters:

                    • Status
                      • Disabled: disables the selected interface (i.e., administratively down).
                      • Enabled for LAN: designates the interface for a local network. It can be set as a DHCP server for hosts on the local network and can serve as a default gateway for those hosts; however, it cannot be set as an actual gateway interface for this device. That is, packets must be routed from this interface to another interface that is configured as WAN. The interface is automatically brought up at boot.
                      • Enabled for WAN: designates the interface as a gateway to an external network. The interface is automatically brought up at boot.
                      • Not Managed: the interface will be ignored by Kura (available only for IPv4).
                      • Layer 2 Only: only the Layer 2 portion of the interface will be configured. The interface is automatically brought up at boot (available only for IPv4).
                    • WAN Priority - configure the network failover. See here for more details.
                    • Configure
                      • Manually: allows manual entry of the IP Address and Netmask fields, if the interface is configured as LAN; allows manual entry of the IP Address, Netmask, Gateway, and DNS Servers fields, if the interface is designated as WAN.
                      • Using DHCP/DHCPv6: configures the interface as a DHCP client obtaining the IP address from a network DHCP server.
                      • Stateless Address Auto-Configuration (SLAAC): automatically assign an IP address (available only for IPv6).
                    • Address Generation Mode - defines the method used to automatically generate the IP address with SLAAC (available only for IPv6)
                      • EUI64: use EUI-64 method for address generation
                      • Stable-privacy: use RFC7217 method for address generation
                    • IP Address - defines the IP address of the interface, if manually configured.
                    • Subnet Mask - defines the subnet mask of the interface, if manually configured.
                    • Gateway - specifies the default gateway for the unit. (Required field if the interface is designated as WAN and manually configured.)
                    • DNS Servers - provides a list of DNS servers, if the interface is designated as WAN and is manually configured.
                    • Privacy - configure privacy extension for SLAAC (available only for IPv6).
                      • Disabled: disables the privacy extension.
                      • Prefer public addresses: use public address for outgoing traffic.
                      • Prefer temporary addresses: prefer temporary address for outgoing traffic.

                    If the network interface is configured as Enabled for LAN and manually configured (i.e., not a DHCP client) in the IPV4 tab, the DHCPv4 & NAT tab allows the DHCP server to be configured and/or NAT (IP forwarding with masquerading) to be enabled.

                    "},{"location":"gateway-configuration/network-configuration/#more-details-about-the-not-managed-interface-status-tbd-not-applicable-in-nm","title":"More details about the Not Managed interface Status - (TBD: not applicable in NM)","text":"

                    When a network interface is configured as Not Managed, Kura will ignore it and the configuration will not be touched. The user can configure the interface with the network tools provided by the OS, allowing unusual network setups.

                    Regarding DNS, both Kura and the external tools store the DNS addresses in the /etc/resolv.conf file. So, if multiple interfaces are configured to get the DNS information and store it in the same file, the device can be misconfigured. To avoid that, the following table presents who is responsible to update the DNS file depending on the network interfaces configurations.

                    Is there at least an interface set as WAN? Is there at least one interface set as Not Managed? Does Kura manage resolv.conf? NO NO YES NO YES NO YES NO YES YES YES YES

                    So, the only way to configure the DNS addresses with external tools, is to configure at least one interface as Not Managed and not to set any interface as Enabled For Wan using Kura. If at least one WAN interface is configured by Kura, it will take the control of the /etc/resolv.conf/ file. Finally, if any interface is configured in Enabled For Wan or Not Managed mode, Kura will empty the file.

                    To avoid device misconfigurations when Not Managed interfaces are used, don't use the dns-nameservers directive in the /etc/network/interfaces file. Please add the DNS addresses directly to the /etc/resolv.conf file.

                    "},{"location":"gateway-configuration/network-configuration/#dhcpv4-nat-configuration","title":"DHCPv4 & NAT Configuration","text":"

                    The DHCPv4 & NAT tab contains the following configuration parameters:

                    • Router Mode
                      • DHCP and NAT: indicates that both DHCP server and NAT are enabled.
                      • DHCP Only: indicates that DHCP server is enabled and NAT is disabled.
                      • NAT Only: indicates that NAT is enabled and DHCP server is disabled.
                      • Off: indicates that both DHCP server and NAT are disabled.
                    • DHCP Beginning Address: specifies the first address of DHCP pool (i.e., first available client IP address).
                    • DHCP Ending Address: specifies the last address of DHCP pool (i.e., last IP address that can be assigned to a client).
                    • DHCP Subnet Mask: defines the subnet mask that is assigned to a client.
                    • DHCP Default Lease Time: sets the default time (in minutes) that the client retains the provided IP address. It must be greater than 0.
                    • DHCP Max Lease Time: sets the maximum time (in minutes) that the client retains the provided IP address. It must be greater than 0.
                    • Pass DNS Servers through DHCP: enables DNS Proxy (i.e., passing DNS servers through DHCP).

                    If NAT is enabled and there is another interface designated as WAN (e.g., ppp0), the following iptables rules are added to the custom automatic NAT service rules section of the /etc/init.d/firewall script:

                    # custom automatic NAT service rules (if NAT option is enabled for LAN interface)\niptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE\niptables -A FORWARD -i ppp0 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT\niptables -A FORWARD -i eth0 -o ppp0 -j ACCEPT\n

                    Also, IP forwarding is enabled in the kernel as follows:

                    # allow fowarding if any masquerade is defined\necho 1 > /proc/sys/net/ipv4/ip_forward\n

                    The rules shown above create an Overloaded (i.e., many-to-one) NAT. This type of network address translation maps multiple IP addresses on the LAN side to a single IP address on the WAN side, allowing internet access from hosts on a local network via a gateway (WAN) interface. Note that for NAT rules to be added, it is insufficient to enable NATing through the DHCPv4 & NAT tab of the LAN interface; there must also be another interface designated as WAN.

                    "},{"location":"gateway-configuration/network-configuration/#network-linux-configuration","title":"Network Linux Configuration","text":"

                    When applying a new network configuration, Kura changes the configuration files of the Linux networking subsystem. Please read the following note before proceeding with manual changes of the Linux networking configuration.

                    Warning

                    It is NOT recommended performing manual editing of the Linux networking configuration files when the gateway configuration is being managed through Kura. While Linux may correctly accept manual changes, Kura may not be able to interpret the new configuration resulting in an inconsistent state.

                    "},{"location":"gateway-configuration/network-configuration/#network-configuration-properties","title":"Network Configuration properties","text":"

                    The Network configuration can be modified using the Kura Gateway Administration Console, as described above, the Configuration Service or appling a proper snapshot.

                    The following table describes all the properties related to the Network Configuration. It includes the name of the property, the type, a description and the default value (if applicable). The network configuration pid is org.eclipse.kura.net.admin.NetworkConfigurationService.

                    "},{"location":"gateway-configuration/network-configuration/#common-properties","title":"Common properties","text":"Name Type Description Default value net.interfaces String Comma-separated list of the interface names in the device net.interface.<interface>.type String The type of the network interface; possible values are: ETHERNET, WIFI, MODEM, VLAN, LOOPBACK and UNKNOWN UNKNOWN net.interface.<interface>.config.wifi.mode String For wifi interfaces, specify the modality; possible values are INFRA, MASTER and UNKNOWN UNKNOWN net.interface.<interface>.config.nat.enabled Boolean Enable the NAT feature false net.interface.<interface>.config.promisc Integer Enable the Promiscuous Mode; possible values are: -1 (System default), 0 (Disabled), 1 (Enabled) -1"},{"location":"gateway-configuration/network-configuration/#ipv4-properties","title":"IPv4 properties","text":"Name Type Description Default value net.interface.<interface>.config.ip4.status String The status of the interface for the IPv4 configuration; possibile values are: netIPv4StatusDisabled, netIPv4StatusUnmanaged, netIPv4StatusL2Only, netIPv4StatusEnabledLAN, netIPv4StatusEnabledWAN, netIPv4StatusUnknown netIPv4StatusDisabled (see note below) net.interface.<interface>.config.ip4.wan.priority Integer (NetworkManager only) Priority used to determine which interface select as primary WAN. Allowed values range from -1 to 2147483647, inclusive. See Network Failover for further details -1 net.interface.<interface>.config.ip4.address String The IPv4 address assigned to the network interface net.interface.<interface>.config.ip4.prefix Short The IPv4 netmask assigned to the network interface -1 net.interface.<interface>.config.ip4.gateway String The IPv4 address of the default gateway net.interface.<interface>.config.ip4.dnsServers String Comma-separated list of dns servers net.interface.<interface>.config.ip4.mtu Integer The Maximum Transition Unit (MTU) for this interface

                    Note

                    For physical interfaces the default status is netIPv4StatusDisabled. For virtual ones, instead, the default status is defined by the kura.net.virtual.devices.config property in the kura.properties file.

                    "},{"location":"gateway-configuration/network-configuration/#ipv4-dhcp-server-properties","title":"IPv4 DHCP Server properties","text":"Name Type Description Default value net.interface.<interface>.config.dhcpServer4.enabled Boolean Specify if the DHCP server is enabled false net.interface.<interface>.config.dhcpServer4.rangeStart String First IP address available for clients net.interface.<interface>.config.dhcpServer4.rangeEnd String Last IP address available for clients net.interface.<interface>.config.dhcpServer4.defaultLeaseTime Integer The default lease time -1 net.interface.<interface>.config.dhcpServer4.maxLeaseTime Integer The maximum lease time -1 net.interface.<interface>.config.dhcpServer4.prefix Short The netmask for the available IP addresses -1 net.interface.<interface>.config.dhcpServer4.passDns Boolean Specify if the DNS server addresses has to be passed through DHCP false"},{"location":"gateway-configuration/network-configuration/#ipv4-dhcp-client-properties","title":"IPv4 DHCP Client properties","text":"Name Type Description Default value net.interface.<interface>.config.dhcpClient4.enabled Boolean Specify if the DHCP client is enabled false"},{"location":"gateway-configuration/network-configuration/#ipv6-properties","title":"IPv6 properties","text":"Name Type Description Default value net.interface.<interface>.config.ip6.status String The status of the interface for the IPv6 configuration; possibile values are: netIPv6StatusDisabled, netIPv6StatusUnmanaged, netIPv6StatusL2Only, netIPv6StatusEnabledLAN, netIPv6StatusEnabledWAN, netIPv6StatusUnknown netIPv6StatusDisabled (see note below) net.interface.<interface>.config.ip6.wan.priority Integer (NetworkManager only) Priority used to determine which interface select as primary WAN. Allowed values range from -1 to 2147483647, inclusive. See Network Failover for further details -1 net.interface.<interface>.config.ip6.address.method String The IPv6 configuration method; possible values are: AUTO, DHCP, MANUAL. AUTO net.interface.<interface>.config.ip6.address String The IPv6 address assigned to the network interface net.interface.<interface>.config.ip6.prefix Short The IPv6 netmask assigned to the network interface -1 net.interface.<interface>.config.ip6.gateway String The IPv6 address of the default gateway net.interface.<interface>.config.ip6.dnsServers String Comma-separated list of dns servers net.interface.<interface>.config.ip6.addr.gen.mode String The IPv6 address generation mode; possible values are EUI64, STABLE_PRIVACY net.interface.<interface>.config.ip6.privacy String The IPv6 Privacy Extensions for SLAAC; possible values are DISABLED, ENABLED_PUBLIC_ADD, ENABLED_TEMP_ADD net.interface.<interface>.config.ip6.mtu Integer The Maximum Transition Unit (MTU) for Ipv6 traffic on this interface. Requires NetworkManager 1.40 or newer

                    Note

                    For physical interfaces the default status is netIPv6StatusDisabled. For virtual ones, instead, the default status is defined by the kura.net.virtual.devices.config property in the kura.properties file.

                    "},{"location":"gateway-configuration/network-configuration/#wifi-master-access-point-properties","title":"WiFi Master (Access Point) properties","text":"Name Type Description Default value net.interface.<interface>.config.wifi.master.driver String The driver used for the connection net.interface.<interface>.config.wifi.master.passphrase Password The password for the access point net.interface.<interface>.config.wifi.master.ssid String The SSID of the access point net.interface.<interface>.config.wifi.master.securityType String The security protocol for the wireless network; possible values are SECURITY_NONE, SECURITY_WEP, SECURITY_WPA, SECURITY_WPA2, SECURITY_WPA_WPA2 SECURITY_NONE net.interface.<interface>.config.wifi.master.mode String The mode of the wireless connection; for the access point mode set it to MASTER MASTER net.interface.<interface>.config.wifi.master.channel String The channel to be used for the access point 1 net.interface.<interface>.config.wifi.master.radioMode String Specify the 802.11 radio mode; possible values are RADIO_MODE_80211a, RADIO_MODE_80211b, RADIO_MODE_80211g, RADIO_MODE_80211nHT20, RADIO_MODE_80211_AC RADIO_MODE_80211b net.interface.<interface>.config.wifi.master.ignoreSSID Boolean Specify if the SSID broadcast is ignored false net.interface.<interface>.config.wifi.master.groupCiphers String Group ciphers i.e. group/broadcast encryption algorithms which prevents connections to Wi-Fi networks that do not utilize one of the algorithms set, possible values are CCMP, TKIP, and CCMP_TKIP CCMP_TKIP net.interface.<interface>.config.wifi.master.pairwiseCiphers String Pairwise ciphers i.e. pairwise encryption algorithms which prevents connections to Wi-Fi networks that do not utilize one of the algorithms set, possible values are CCMP, TKIP, and CCMP_TKIP CCMP_TKIP"},{"location":"gateway-configuration/network-configuration/#wifi-infra-station-mode-properties","title":"WiFi Infra (Station Mode) properties","text":"Name Type Description Default value net.interface.<interface>.config.wifi.infra.ssid String The SSID of the wireless network to connect to net.interface.<interface>.config.wifi.infra.channel String The channel of the wireless network to connect to 1 net.interface.<interface>.config.wifi.infra.bgscan String Set the background scans; possible values have the form <mode>:<shortInterval>:<rssiThreshold>:<longInterval> where mode (String) is one of NONE, SIMPLE, or LEARN, shortInterval (Integer) sets the Bgscan short interval (secs), rssiThreshold (Integer) sets the Bgscan Signal strength threshold (dBm), and longInterval (Integer) sets the Bgscan long interval (secs) net.interface.<interface>.config.wifi.infra.passphrase Password The password for the wireless network net.interface.<interface>.config.wifi.infra.ignoreSSID Boolean Specify if a scan for SSID is required before attempting to associate false net.interface.<interface>.config.wifi.infra.mode String The mode of the wireless connection; for station mode set to INFRA INFRA net.interface.<interface>.config.wifi.infra.pingAccessPoint Boolean Enable pinging the access point after connection is established false net.interface.<interface>.config.wifi.infra.driver String The driver used for the connection net.interface.<interface>.config.wifi.infra.securityType String The security protocol for the wireless network; possible values are SECURITY_NONE, SECURITY_WEP, SECURITY_WPA, SECURITY_WPA2, SECURITY_WPA_WPA2 SECURITY_NONE net.interface.<interface>.config.wifi.infra.groupCiphers String Group ciphers i.e. group/broadcast encryption algorithms which prevents connections to Wi-Fi networks that do not utilize one of the algorithms set, possible values are CCMP, TKIP, and CCMP_TKIP CCMP_TKIP net.interface.<interface>.config.wifi.infra.pairwiseCiphers String Pairwise ciphers i.e. pairwise encryption algorithms which prevents connections to Wi-Fi networks that do not utilize one of the algorithms set, possible values are CCMP, TKIP, and CCMP_TKIP CCMP_TKIP"},{"location":"gateway-configuration/network-configuration/#cellular-modem-properties","title":"Cellular Modem properties","text":"Name Type Description Default value net.interface.<interface>.config.enabled Boolean Enable the interface false net.interface.<interface>.config.idle Integer The idle option of the PPP daemon 95 net.interface.<interface>.config.username String The username used for the connection net.interface.<interface>.config.password Password The password used for the connection net.interface.<interface>.config.pdpType String The PdP type; possible values are IP, PPP and IPv6 IP net.interface.<interface>.config.maxFail Integer The maxfail option of the PPP daemon 5 net.interface.<interface>.config.authType String The authentication type; possible values are NONE, AUTO, CHAP and PAP NONE net.interface.<interface>.config.lpcEchoInterval Integer The lcp-echo-interval option of the PPP daemon 0 net.interface.<interface>.config.activeFilter String The active-filter option of the PPP daemon inbound net.interface.<interface>.config.lpcEchoFailure Integer The lcp-echo-failure option of the PPP daemon 0 net.interface.<interface>.config.diversityEnabled Boolean Enable the LTE diversity antenna false net.interface.<interface>.config.resetTimeout Integer The modem reset timeout in minutes 5 net.interface.<interface>.config.gpsEnabled Boolean Enable the GPS device in the modem if available false net.interface.<interface>.config.gpsMode String Select the GPS mode to activate for the modem if available kuraModemGpsModeUnmanaged net.interface.<interface>.config.persist Boolean The persist option of the PPP daemon true net.interface.<interface>.config.apn String The modem Access Point Name net.interface.<interface>.config.dialString String The dial string used for connecting to the APN net.interface.<interface>.config.holdoff Integer The holdoff option of the PPP daemon (in seconds) 1 net.interface.<interface>.config.pppNum Integer Assigned ppp interface number 0"},{"location":"gateway-configuration/network-configuration/#gps-mode","title":"GPS Mode","text":"

                    The GPS mode can be set to one of the following values:

                    • kuraModemGpsModeUnmanaged: the GPS device of the modem will be setup but not directly managed, therefore freeing the serial port for other services to use. This can be used in order to perform the setup of the GPS and then have another service (like gpsd) parse the NMEA strings in order to extract the position informations. This is the default value.
                    • kuraModemGpsModeManagedGps: the GPS device of the modem will be setup and directly managed (typically by ModemManager) therefore the serial port won't be available for other services to use.

                    For older versions compatibility, if the net.interface.<interface>.config.gpsMode property is not set, the GPS mode will be automatically set to the kuraModemGpsModeUnmanaged equivalent.

                    "},{"location":"gateway-configuration/network-configuration/#vlan-properties","title":"VLAN properties","text":"Name Type Description Default value net.interface.<interface>.config.vlan.parent String Physical interface Vlan is bound to net.interface.<interface>.config.vlan.id Integer Vlan tag identifier, between 0 and 4094 net.interface.<interface>.config.vlan.ingress String Incoming traffic priorities in the format from:to, as comma separated pairs of unsigned integers (Optional) net.interface.<interface>.config.vlan.egress String Outgoing traffic priorities in the format from:to, as comma separated pairs of unsigned integer (Optional) net.interface.<interface>.config.vlan.flags String Configuration flags, between 0 and 15 (Optional) 1"},{"location":"gateway-configuration/network-configuration/#8021x-properties","title":"802.1x properties","text":"Name Type Description net.interface.<interface>.config.802-1x.eap String The EAP method to be used when authenticating to the network with 802.1x. Supported methods: \"Kura8021xEapTls\", \"Kura8021xEapPeap\", \"Kura8021xEapTtls\". net.interface.<interface>.config.802-1x.innerAuth String Specifies the \"phase 2\" inner authentication method when an EAP method that uses an inner TLS tunnel is specified in the \"eap\" property. Supported methods: \"Kura8021xInnerAuthNone\", \"Kura8021xInnerAuthMschapv2\". net.interface.<interface>.config.802-1x.identity String Identity string for EAP authentication methods. Typically the user's user or login name. net.interface.<interface>.config.802-1x.password String Password used for EAP authentication methods. net.interface.<interface>.config.802-1x.client-cert-name String Name referring to the corresponding Kura keystore entry containing the client certificate if used by the EAP method specified in the \"eap\" property. Typically is set to the same name as the net.interface.<interface>.config.802-1x.private-key-name when using EAP-TLS. net.interface.<interface>.config.802-1x.private-key-name String Name referring to the corresponding Kura keystore entry containing the private key when the \"eap\" property is set to \"Kura8021xEapTls\". Typically is set to the same name as the net.interface.<interface>.config.802-1x.client-cert-name. net.interface.<interface>.config.802-1x.ca-cert-name String Name referring to the corresponding Kura keystore entry containing the CA certificate if used by the EAP method specified in the \"eap\" property. This parameter is optional but this allows man-in-the-middle attacks and is NOT recommended. net.interface.<interface>.config.802-1x.anonymous-identity String Anonymous identity string for EAP authentication methods. Used as the unencrypted identity with EAP types that support different tunneled identity like EAP-TTLS (Optional)"},{"location":"gateway-configuration/network-configuration/#network-configuration-recipes","title":"Network Configuration recipes","text":"

                    This section presents some snapshot examples to perform basic operations on networking. The snippets can be modified adapting them to the required configuration (i.e. changing the interface name in the property to be applied).

                    Warning

                    Be aware that an inconsitent or wrong configuration can compromise the network functionality of the gateway. Try the new configuration on a test device before appling it in a production environment!

                    Moreover, if a property is not present in the new snapshot, the old value is used for the configuration. So, the best practice is to set all the needed properties in the snapshot.

                    "},{"location":"gateway-configuration/network-configuration/#disable-a-network-interface","title":"Disable a network interface","text":"
                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.type\" type=\"String\">\n                <esf:value>ETHERNET</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusDisabled</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
                    "},{"location":"gateway-configuration/network-configuration/#configure-an-ethernet-interface-for-wan-with-dhcp-client-enabled-and-custom-dns-server","title":"Configure an ethernet interface for WAN with DHCP client enabled and custom DNS server","text":"
                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.type\" type=\"String\">\n                <esf:value>ETHERNET</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.dnsServers\" type=\"String\">\n                <esf:value>1.2.3.4</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledWAN</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
                    "},{"location":"gateway-configuration/network-configuration/#configure-an-ethernet-interface-for-lan-with-dhcp-server-enabled-and-nat-disabled","title":"Configure an ethernet interface for LAN with DHCP server enabled and NAT disabled","text":"
                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.type\" type=\"String\">\n                <esf:value>ETHERNET</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.dnsServers\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.rangeEnd\" type=\"String\">\n                <esf:value>192.168.4.110</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.defaultLeaseTime\" type=\"Integer\">\n                <esf:value>900</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.passDns\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.rangeStart\" type=\"String\">\n                <esf:value>192.168.4.100</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.dhcpServer4.maxLeaseTime\" type=\"Integer\">\n                <esf:value>900</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.address\" type=\"String\">\n                <esf:value>192.168.4.1</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.ip4.gateway\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.enp5s0.config.nat.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
                    "},{"location":"gateway-configuration/network-configuration/#configure-a-wireless-interface-as-access-point-with-dhcp-server-and-nat-enabled","title":"Configure a wireless interface as access point with DHCP server and NAT enabled","text":"
                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.type\" type=\"String\">\n                <esf:value>WIFI</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.gateway\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.dnsServers\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.address\" type=\"String\">\n                <esf:value>172.16.1.1</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.rangeStart\" type=\"String\">\n                <esf:value>172.16.1.100</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.maxLeaseTime\" type=\"Integer\">\n                <esf:value>900</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.defaultLeaseTime\" type=\"Integer\">\n                <esf:value>900</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.rangeEnd\" type=\"String\">\n                <esf:value>172.16.1.110</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.passDns\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.nat.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.mode\" type=\"String\">\n                <esf:value>MASTER</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.driver\" type=\"String\">\n                <esf:value>nl80211</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"true\" name=\"net.interface.wlp1s0.config.wifi.master.passphrase\" type=\"Password\">\n                <esf:value>ZW5hYmxlbWVwbGVhc2U=</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.ssid\" type=\"String\">\n                <esf:value>kura_gateway_19</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.securityType\" type=\"String\">\n                <esf:value>SECURITY_WPA2</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.mode\" type=\"String\">\n                <esf:value>MASTER</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.channel\" type=\"String\">\n                <esf:value>11</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.radioMode\" type=\"String\">\n                <esf:value>RADIO_MODE_80211g</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.ignoreSSID\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.master.pairwiseCiphers\" type=\"String\">\n                <esf:value>CCMP</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
                    "},{"location":"gateway-configuration/network-configuration/#configure-a-wireless-interface-as-station-mode-with-dhcp-client-enabled","title":"Configure a wireless interface as station mode with DHCP client enabled","text":"
                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.type\" type=\"String\">\n                <esf:value>WIFI</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.ip4.dnsServers\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.mode\" type=\"String\">\n                <esf:value>INFRA</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.ssid\" type=\"String\">\n                <esf:value>MyWirelessNetwork</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.bgscan\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"true\" name=\"net.interface.wlp1s0.config.wifi.infra.passphrase\" type=\"Password\">\n                <esf:value>MyPasswordBase64</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.ignoreSSID\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.mode\" type=\"String\">\n                <esf:value>INFRA</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.pingAccessPoint\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.driver\" type=\"String\">\n                <esf:value>nl80211</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.wlp1s0.config.wifi.infra.securityType\" type=\"String\">\n                <esf:value>SECURITY_WPA2</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
                    "},{"location":"gateway-configuration/network-configuration/#enable-a-cellular-interface","title":"Enable a cellular interface","text":"
                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>  \n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.type\" type=\"String\">\n                <esf:value>MODEM</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledWAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.ip4.dnsServers\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.idle\" type=\"Integer\">\n                <esf:value>95</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"true\" name=\"net.interface.1-1.config.password\" type=\"Password\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.pdpType\" type=\"String\">\n                <esf:value>IP</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.ipAddress\" type=\"String\">\n                <esf:value/>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.maxFail\" type=\"Integer\">\n                <esf:value>5</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.authType\" type=\"String\">\n                <esf:value>NONE</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.lcpEchoInterval\" type=\"Integer\">\n                <esf:value>0</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.activeFilter\" type=\"String\">\n                <esf:value>inbound</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.lcpEchoFailure\" type=\"Integer\">\n                <esf:value>0</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.diversityEnabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.resetTimeout\" type=\"Integer\">\n                <esf:value>5</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.gpsEnabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.persist\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.dialString\" type=\"String\">\n                <esf:value>atd*99***2#</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.1-1.config.apn\" type=\"String\">\n                <esf:value>web.omnitel.it</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
                    "},{"location":"gateway-configuration/network-configuration/#create-a-vlan","title":"Create a VLAN","text":"
                    <?xml version=\"1.0\" encoding=\"UTF-8\"?><esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interfaces\" type=\"String\">\n                <esf:value>wlan0,lo,ens33,vlanFull,ens34</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.nat.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.type\" type=\"String\">\n                <esf:value>VLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.vlan.parent\" type=\"String\">\n                <esf:value>ens33</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.vlan.id\" type=\"Integer\">\n                <esf:value>41</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.vlan.flags\" type=\"Integer\">\n                <esf:value>1</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.vlan.ingress\" type=\"String\">\n                <esf:value>1:2,3:4</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.vlan.egress\" type=\"String\">\n                <esf:value>5:6</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.ip4.address\" type=\"String\">\n                <esf:value>192.168.41.100</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.ip4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
                    "},{"location":"gateway-configuration/network-failover/","title":"Network Failover","text":"

                    For devices configured to use NetworkManager, it is possible to configure multiple WAN interfaces and a basic network failover functionality.

                    As in the picture below, the Kura UI allows for multiple WAN interfaces to be defined. Each WAN interface can be configured with a WAN Priority. WAN Priority is used to determine which interface will be selected for primary WAN. In the case where the primary WAN interface loses connection, then the next highest priority interface is assigned.

                    Kura uses NetworkManager's implementation to achieve network failover (see NetworkManager). Lower values correspond to higher priority. Allowed values range from -1 to 2147483647. Value -1 means that the metric is chosen automatically based on the device type (see NetworkManager DBUS properties).

                    To observe changes to the applied configuration, use the following command on your device's shell:

                    route -n\n\nKernel IP routing table\nDestination     Gateway         Genmask         Flags Metric Ref    Use Iface\n0.0.0.0         192.168.2.1     0.0.0.0         UG    100    0        0 eth0\n172.16.1.0      0.0.0.0         255.255.255.0   U     600    0        0 wlan0\n172.17.0.0      0.0.0.0         255.255.0.0     U     0      0        0 docker0\n192.168.2.0     0.0.0.0         255.255.255.0   U     100    0        0 eth0\n

                    The metric flag will correspond to the set WAN Priority. NetworkManager will always prioritize lower metric routes.

                    "},{"location":"gateway-configuration/network-failover/#operating-modes","title":"Operating modes","text":"

                    The NetworkManager failover mechanism can work at two different levels:

                    • by detecting disruptions at physical level (i.e. an ethernet cable that disconnects);
                    • by performing a connectivity check to an upstream URI.

                    NetworkManager brings a network interface down when it detects the loss of its physical link. In such case, the next highest priority interface is selected as the main one.

                    When the connectivity check fails, NetworkManager penalizes the metric of that interface in the routing table. NetworkManager continues to perform connectivity checks over all the other interfaces. As soon as the connectivity is restored over a previously failing interface, the metric is also restored to the original value and the routing table goes back to the original state.

                    "},{"location":"gateway-configuration/network-failover/#configuring-the-connectivity-check","title":"Configuring the connectivity check","text":"

                    The connectivity check is enabled by default in Kura and is configured to probe the connection to http://network-test.debian.org/nm every 60 seconds. To set a specific URI and a different interval edit /etc/NetworkManager/conf.d/99kura-nm.conf (reference NetworkManager):

                    [connectivity]\nuri=http://network-test.debian.org/nm\ninterval=60\nresponse=\"NetworkManager is online\"\n

                    The minimun interval is 60 seconds, if no interval is specified it defaults to 300 seconds.

                    The response should match what the URI is returning when probed. Some examples of web pages with NetworkManager responses:

                    URI Response http://network-test.debian.org/nm NetworkManager is online https://fedoraproject.org/static/hotspot.txt OK http://nmcheck.gnome.org/check_network_status.txt NetworkManager is online https://www.pkgbuild.com/check_network_status.txt NetworkManager is online

                    To disable the connectivity check feature:

                    • remove the [connectivity] section from the configuration file; or
                    • set interval=0; or
                    • remove uri; or
                    • set an empty URI, like uri=
                    "},{"location":"gateway-configuration/network-hardware/","title":"Hardware Tab","text":"

                    Each interface in the Network page contains inside its specific box the tab Hardware: this collects the most significant information about the current state of the interface.

                    In this way the user can have a quick and complete view of what are the settings and physical specifications of a network interface.

                    These information are respectively:

                    • Status: the current state of the network interface, from the framework point of view. Some examples of status are UNMANAGED, ACTIVATED, FAILED, UNKNOWN.
                    • Name: name of the interface
                    • Type: physical interface type like WIFI or ETHERNET
                    • Hardware Address: MAC address of the interface
                    • Serial #: serial number of the hardware interface
                    • Driver: Linux driver used for the interface
                    • Version: Linux driver version
                    • Firmware: firmware version of the interface module
                    • MTU: Maximum Transmission Unit, is the measurement in bytes of the largest data packets that the interface can accept
                    • USB Device: path of the usb device
                    • Received Signal Strength (dBm): power of the received radio signal from a wireless interface
                    • Current WLAN Channel: actual channel used by the wifi connection

                    These entries are filled only if the associated data is available. This means, for example, that no information will be shown under Current WLAN Channel if the interface is of Ethernet type. Conversely, if the interface is Wifi type and no information is shown, it is possible that there has been some problem with the configuration or connection of the interface.

                    So this tab, could be also an intuitive way to check if the interface is working properly or not.

                    "},{"location":"gateway-configuration/network-threat-manager/","title":"Network Threat Manager","text":"

                    Eclipse Kura provides a set of features to detect and prevent network attacks. The Security section in the Gateway Administration Console shows the Network Threat Manager tab where is it possible to activate these functions.

                    Warning

                    The Network Threat Manager tab is not available for the No Network version of Eclipse Kura.

                    "},{"location":"gateway-configuration/network-threat-manager/#flooding-protection","title":"Flooding protection","text":"

                    The flooding protection function is used to prevent DDos (Distributed Denial-of-Service) attacks using the firewall. When enabled, the feature adds a set of firewall rules to the mangle table.

                    "},{"location":"gateway-configuration/network-threat-manager/#flooding-protection-for-ipv4","title":"Flooding protection for IPv4","text":"

                    The following rules are added to the mangle table and they are implemented to block invalid or malicious network packets:

                    iptables -A prerouting-kura -m conntrack --ctstate INVALID -j DROP\niptables -A prerouting-kura -p tcp ! --syn -m conntrack --ctstate NEW -j DROP\niptables -A prerouting-kura -p tcp -m conntrack --ctstate NEW -m tcpmss ! --mss 536:65535 -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags FIN,SYN FIN,SYN -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags SYN,RST SYN,RST -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags FIN,RST FIN,RST -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags FIN,ACK FIN -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ACK,URG URG -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ACK,FIN FIN -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ACK,PSH PSH -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ALL ALL -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ALL NONE -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ALL SYN,FIN,PSH,URG -j DROP\niptables -A prerouting-kura -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP\niptables -A prerouting-kura -p icmp -j DROP\niptables -A prerouting-kura -f -j DROP\n

                    To further filter the incoming TCP fragmented packets, specific system configuration files are configured. The flooding.protection.enabled property is used to enable the feature.

                    "},{"location":"gateway-configuration/network-threat-manager/#flooding-protection-for-ipv6","title":"Flooding protection for IPv6","text":"

                    The same rules applied to the IPv4 are used for preventing attack on IPv6. In addition, some rules are implemented to drop specific IPv6 headers and limit the incoming ICMPv6 packets. Moreover, the incoming TCP fragmented packets are dropped configuring specific system files.

                    The following rules are applied to the mangle table:

                    ip6tables -A prerouting-kura -m conntrack --ctstate INVALID -j DROP\nip6tables -A prerouting-kura -p tcp ! --syn -m conntrack --ctstate NEW -j DROP\nip6tables -A prerouting-kura -p tcp -m conntrack --ctstate NEW -m tcpmss ! --mss 536:65535 -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags FIN,SYN FIN,SYN -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags SYN,RST SYN,RST -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags FIN,RST FIN,RST -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags FIN,ACK FIN -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ACK,URG URG -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ACK,FIN FIN -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ACK,PSH PSH -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ALL ALL -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ALL NONE -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ALL SYN,FIN,PSH,URG -j DROP\nip6tables -A prerouting-kura -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP\nip6tables -A prerouting-kura -p ipv6-icmp -m ipv6-icmp --icmpv6-type 128 -j DROP\nip6tables -A prerouting-kura -p ipv6-icmp -m ipv6-icmp --icmpv6-type 129 -j DROP\nip6tables -A prerouting-kura -m ipv6header --header dst --soft -j DROP\nip6tables -A prerouting-kura -m ipv6header --header hop --soft -j DROP\nip6tables -A prerouting-kura -m ipv6header --header route --soft -j DROP\nip6tables -A prerouting-kura -m ipv6header --header frag --soft -j DROP\nip6tables -A prerouting-kura -m ipv6header --header auth --soft -j DROP\nip6tables -A prerouting-kura -m ipv6header --header esp --soft -j DROP\nip6tables -A prerouting-kura -m ipv6header --header none --soft -j DROP\nip6tables -A prerouting-kura -m rt --rt-type 0 -j DROP\nip6tables -A output-kura -m rt --rt-type 0 -j DROP\n

                    Also in this case, to enable the feature and add the rules to the firewall, the flooding.protection.enabled.ipv6 property has to be set to true. If the device doesn't support IPv6, this property is ignored.

                    Warning

                    To recover the device state when the IPv6 flooding protection feature is disabled, a reboot is required. So, to disable the feature, set the flooding.protection.enabled.ipv6 property to false tha reboot the device.

                    "},{"location":"gateway-configuration/ssl-configuration/","title":"SSL Configuration","text":"

                    A SSL Service instance manages the configuration of the SSL connections. It uses the associated KeystoreService to access the trust certificates, private keys pairs needed to setup a SSL connection. It also enforces best practices that are not enabled by default in the Java VM, such as, enabling hostname verification, disabling the legacy SSL-2.0-compatible Client Hello, and disabling the Nagle algorithm.

                    The list of all available SSL Service instances is available in the SSL Configuration tab of the Security section, accessible only by the users with the corresponding permission.

                    By default, the framework creates a SSLManagerService instance with the org.eclipse.kura.ssl.SslManagerService PID. This instance is generally used by all the core services of the framework.

                    A new SSL Service instance can be created using the New Button, by specifying the desired factory and the Service PID that will be associated with this new instance.

                    An instance of the default org.eclipse.kura.ssl.SslManagerService factory has the following configuration parameters:

                    • KeystoreService Target Filter - specifies, as an OSGi target filter, the pid of the KeystoreService used to manage the SSL key store (Required field).

                    • Truststore Target Filter - specifies, as an OSGi target filter, the pid of the KeystoreService used to manage the SSL trust store. If the target service cannot be found, the service configured with the Keystore Target Filter parameter will be used as truststore.

                    • ssl.default.protocol - defines the allowed SSL protocol.

                    • ssl.hostname.verification - indicates whether hostname verification is enabled or disabled.

                    • ssl.default.cipherSuites - defines the allowed cipher suites.

                    By selecting the Select available targets button, the user can associate the SSLManagerService instance with the corresponding KeystoreService instances available in the framework runtime.

                    "},{"location":"gateway-configuration/ssl-configuration/#server-ssl-certificate","title":"Server SSL Certificate","text":"

                    The device requires a public key in its trust store in order to authenticate the broker and be able to setup an SSL connection. Kura is distributed with a pre-initialized SSL keystore that contains only some of the major Certification Authorities (CA) public keys.

                    If the broker uses a certificate signed by a different CA, or uses an auto-signed certificate, the system administrator must setup Kura with the correct certificates used to trust the remote cloud broker.

                    The inclusion of public certificates is accomplished with the Server SSL Certificate feature. To do so, the SSL Certificates form must be completed by providing a certificate or a certificates chain to be trusted and defining the alias used to register this new data in the device's trust store.

                    With this feature, when the device tries to instantiate an SSL connection with the broker, it receives the broker's public key chain. The SSL connection is secured only if the received chain is trusted. This connection can only happen if one of the certificates that compose the broker chain are available in the device's trust store.

                    When instantiating the device's trust store, the user decides whether to add a single certificate (leaf or CA certificate) or the full chain.

                    In the latter case, the chain should be provided by specifying the leaf certificate, followed by the CA certificate that is signing it, and so on, until the root CA is reached. An example of this scenario is depicted in the following image:

                    "},{"location":"gateway-configuration/ssl-configuration/#device-ssl-certificate-mutual-authentication","title":"Device SSL Certificate & Mutual Authentication","text":"

                    Mutual authentication is a technique that allows authentication of the device that is connecting to the broker. The form available in Certificates List may be used to specify the keys needed to enable mutual authentication.

                    This authentication may be accomplished by specifying a couple of certificates (private and public keys) to be used by the client device to authenticate itself to the broker. This authentication is possible because the broker has the root CA certificate that has been used to sign the couple held by the device. In this way, the authenticity of the couple of certificates held by the device may be verified, and therefore, enable the two communicating parts (the broker and the device) to trust each other.

                    To enable mutual authentication, the user must complete the form with a well-formed key pair (public and private), and with an alias value that corresponds with the account name used to connect to the broker.

                    "},{"location":"gateway-configuration/ssl-configuration/#key-pair-generation","title":"Key Pair Generation","text":"

                    The keys may be generated using specific software, such as OpenSSL or Keytool. This section describes how to use OpenSSL to generate a couple of private and public keys.

                    The private key may be created using the following command:

                    openssl genrsa -out certsDirectory/certs/certificate.key 1024\n

                    This command creates a new, 1024-bit private key in the specified path. This key is used to generate a Certificate Signing Request (CSR) file, which is used by a CA to authenticate the certificate's creator. A CSR file is created with OpenSSL using the following command:

                    openssl req -new -key certsDirectory/certs/certificate.key -out certsDirectory/crl/certificate.csr\n

                    If the user is creating their own certificate chain, the CSR file may be signed using a personal CA. This process may be accomplished using OpenSSL with the following command:

                    openssl ca -config certsDirectory/openssl.cnf -days 3650 -keyfile certsDirectory/ca/ca.key -cert certsDirectory/ca/ca.pem -out certsDirectory/certs/certificate.pem -infiles certsDirectory/crl/certificate.csr\n

                    The parameters are defined as follows:

                    • -config: specifies the OpenSSL configuration file that must be used to sign the certificate.

                    • -days: specifies how long the certificate is valid.

                    • -keyfile and -cert: allow the specification of the CA that will sign the CSR file.

                    • -out: identifies the location and the name of the signed certificate that will be created.

                    • -infiles: identifies the location of the CSR file that has to be signed.

                    Tip

                    The private key may not be placed into the Kura Gateway Administration Console without a format conversion.

                    OpenSSL offers the following command to convert the input private key to a non-encrypted PKCS#8 format that may be processed by the Kura code:

                    openssl pkcs8 -topk8 -inform PEM -outform PEM -in inPrivateKey.key -out outKey.pem -nocrypt\n
                    "},{"location":"gateway-configuration/vlan-configuration/","title":"VLAN Configuration","text":"

                    A VLAN, or Virtual Local Area Network, is a network segmentation technology that allows a single physical network to be logically divided into multiple isolated networks. These virtual networks operate as if they are independent, even though they share the same physical infrastructure. This is achieved via a VLAN ID, or VLAN tag, a numerical label added to network frames to identify the specific Virtual Local Area Network (VLAN) to which they belong. It's a critical component in VLAN technology, allowing network switches and routers to differentiate and route traffic within a VLAN. VLAN tags are added to the Ethernet frame's header, indicating which virtual network a data packet should be directed to when it traverses the physical network infrastructure. Therefore, VLANs must also be supported and configured on the network equipment a device is connected to.

                    A VLAN can be named freely, as long as it's 15 or less characters. A typical VLAN naming format is physicalInterfaceName.vlanId (eg. a vlan with id 100 on the interface eth0 would be named eth0.100).

                    This is achieved by NetworkManager by creating a virtual device bound to the underlying physical interface when Kura sets up a new VLAN connection.

                    "},{"location":"gateway-configuration/vlan-configuration/#vlan-configuration-via-kura-snapshot-upload","title":"VLAN Configuration via Kura Snapshot upload","text":"

                    Currently, VLAN configuration is supported via uploading snapshot.xml fragments.

                    Warning

                    When creating a new VLAN be sure to include the net.interfaces parameter, containing both the previously existing network interfaces, either virtual or physical, and the name of the new VLAN to be created.

                    "},{"location":"gateway-configuration/vlan-configuration/#basic-vlan-configuration-example","title":"Basic VLAN configuration example","text":"

                    The following example creates a VLAN with ID 40 over the ethernet interface ens33, naming it ens33.40, using a predefined IP address, enabled for LAN.

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interfaces\" type=\"String\">\n                <esf:value>lo,ens33,ens34,ens33.40</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.nat.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.type\" type=\"String\">\n                <esf:value>VLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.vlan.parent\" type=\"String\">\n                <esf:value>ens33</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.vlan.id\" type=\"Integer\">\n                <esf:value>40</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.ip4.address\" type=\"String\">\n                <esf:value>10.0.55.37</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.ip4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
                    "},{"location":"gateway-configuration/vlan-configuration/#complete-vlan-configuration-example","title":"Complete VLAN configuration example","text":"

                    The following example creates a VLAN with ID 41 over the ethernet interface ens33, naming it ens33.41, using a predefined IP address, enabled for WAN. This example also sets the 'flags' and 'traffic priority' optional parameters as described in Network Manager API documentation.

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interfaces\" type=\"String\">\n                <esf:value>lo,ens33,ens34,ens33.41</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.dhcpServer4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.nat.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.dhcpClient4.enabled\" type=\"Boolean\">\n                <esf:value>false</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.type\" type=\"String\">\n                <esf:value>VLAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.ip4.gateway\" type=\"String\">\n                <esf:value>192.168.41.254</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledWAN</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.vlanFull.config.ip4.dnsServers\" type=\"String\">\n                <esf:value>8.8.8.8</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.vlan.parent\" type=\"String\">\n                <esf:value>ens33</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.vlan.id\" type=\"Integer\">\n                <esf:value>41</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.ip4.address\" type=\"String\">\n                <esf:value>192.168.41.1</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.ip4.prefix\" type=\"Short\">\n                <esf:value>24</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.vlan.flags\" type=\"Integer\">\n                <esf:value>1</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.vlan.ingress\" type=\"String\">\n                <esf:value>1:2,3:4</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.41.config.vlan.egress\" type=\"String\">\n                <esf:value>5:6</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
                    "},{"location":"gateway-configuration/vlan-configuration/#vlan-management","title":"VLAN Management","text":"

                    Once a VLAN is created it can be managed via the Kura UI just like any other Ethernet interface.

                    Warning

                    Setting a VLAN status to \"Disabled\" deletes its configuration in NetworkManager and the related virtual interface from the system. Although it will is no longer be visible on the UI, all the configurations are left in Kura. Therefore the VLAN can be restored by setting the net.interface.<interface>.config.ip4.status to netIPv4StatusEnabledLAN or netIPv4StatusEnabledWAN via snapshot upload, then resume configuration via UI.

                    As an example, the configuration to reactivate a disabled VLAN named ens33.40 would be as follows:

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.net.admin.NetworkConfigurationService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"net.interface.ens33.40.config.ip4.status\" type=\"String\">\n                <esf:value>netIPv4StatusEnabledLAN</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n
                    "},{"location":"gateway-configuration/web-console-configuration/","title":"Web Console Configuration","text":"

                    The Web Console exposes a set of configuration parameters that can be used to increase the overall UI security. The Web Console configuration can be accessed in the Security section.

                    "},{"location":"gateway-configuration/web-console-configuration/#web-server-entry-point","title":"Web Server Entry Point","text":"

                    This parameter allows to configure the relative path that the user will be redirected to when accessing http(s)://gateway-ip/. Note: this parameter does not change the Kura Web UI relative path, that is always /admin/console. The default value set is /admin/console

                    "},{"location":"gateway-configuration/web-console-configuration/#session-max-inactivity-interval","title":"Session max inactivity interval","text":"

                    The session max inactivity interval in minutes. If no interaction with the Web UI is performed for the value of this parameter in minutes, a new login will be requested. The default value set is 15 minutes

                    "},{"location":"gateway-configuration/web-console-configuration/#access-banner-enabled","title":"Access Banner Enabled","text":"

                    For security reasons, it may be needed to display to the user a banner that describes the intended system use before authenticating.

                    Once enabled and configured, the Kura Web UI will display a banner before every access attempt, as depicted in the image below.

                    "},{"location":"gateway-configuration/web-console-configuration/#password-management","title":"Password Management","text":"

                    This section is related to the definition of required parameters that must be respected when defining a new password, for example when a user changes its password at first access.

                    "},{"location":"gateway-configuration/web-console-configuration/#minimum-password-length","title":"Minimum password length","text":"

                    The minimum length to be enforced for new passwords. Set to 0 to disable. The default value set is 8 characters

                    "},{"location":"gateway-configuration/web-console-configuration/#require-digits-in-new-password","title":"Require digits in new password","text":"

                    If set to true, new passwords will be accepted only if containing at least one digit. The default value is false

                    "},{"location":"gateway-configuration/web-console-configuration/#require-special-characters-in-new-password","title":"Require special characters in new password","text":"

                    If set to true, new passwords will be accepted only if containing at least one non alphanumeric character The default value is false

                    "},{"location":"gateway-configuration/web-console-configuration/#require-uppercase-and-lowercase-characters-in-new-passwords","title":"Require uppercase and lowercase characters in new passwords","text":"

                    If set to true, new passwords will be accepted only if containing both uppercase and lowercase alphanumeric characters. The default value is false

                    "},{"location":"gateway-configuration/web-console-configuration/#allowed-ports","title":"Allowed ports","text":"

                    If set to a non empty list, Web Console access will be allowed only on the specified ports. If set to an empty list, access will be allowed on all ports. It is needed for the end user to make sure that the allowed ports are open in HttpService and Firewall configuration.

                    "},{"location":"gateway-configuration/web-console-configuration/#authentication-method-password-enabled","title":"Authentication Method \"Password\" Enabled","text":"

                    Defines whether the \"Password\" authentication method is enabled or not. The default value is true

                    "},{"location":"gateway-configuration/web-console-configuration/#authentication-method-certificate-enabled","title":"Authentication Method \"Certificate\" Enabled","text":"

                    Defines whether the \"Certificate\" authentication method is enabled or not The default value is true

                    "},{"location":"gateway-configuration/web-console-configuration/#sslmanagerservice-target-filter","title":"SslManagerService Target Filter","text":"

                    It is possible to specify the SslManagerService containing the certificates truststore required to establish a new https connection, this is needed, for example, for fetching package descriptions from Eclipse Marketplace. The default target is the org.eclipse.kura.ssl.SslManagerService

                    "},{"location":"gateway-configuration/wifi-configuration-8021x/","title":"Wi-Fi 802.1x Configuration","text":"

                    To enable the Enterprise Wi-Fi, the Wireless Security property in the Wireless tab has to be set to WPA2/WPA3-Enterprise. This feature is available only if the Wireless Mode is Station Mode. The following is a list of currently supported 802.1x authentication methods.

                    • TTLS-MSCHAPv2
                    • PEAP-MSCHAPv2
                    • EAP-TLS
                    "},{"location":"gateway-configuration/wifi-configuration-8021x/#ttls-mschapv2","title":"TTLS-MSCHAPv2","text":"
                    1. Set up gateway Wi-Fi as described in the Wi-Fi configuration guide.
                    2. Ensure Wireless Security is set to WPA2/WPA3-Enterprise
                    3. select the 802.1x tab
                    4. Set Enteprise EAP -> TTLS
                    5. Set Inner Authentication -> MSCHAPV2
                    6. Set Identity (Username)
                    7. Set Password
                    8. Press 'Apply'

                    The configuration should look like the following:

                    "},{"location":"gateway-configuration/wifi-configuration-8021x/#peap-mschapv2","title":"PEAP-MSCHAPv2","text":"
                    1. Set up gateway Wi-Fi as described in the Wi-Fi configuration guide.
                    2. Ensure Wireless Security is set to WPA2/WPA3-Enterprise
                    3. select the 802.1x tab
                    4. Set Enteprise EAP -> PEAP
                    5. Set Inner Authentication -> MSCHAPV2
                    6. Set Identity (Username)
                    7. Set Password
                    8. Press 'Apply'

                    The configuration should look like the following:

                    "},{"location":"gateway-configuration/wifi-configuration-8021x/#eap-tls","title":"EAP-TLS","text":"

                    To connect via EAP-TLS you will need the following items in unencrypted PEM format:

                    • Certificate Authority (CA) Certificate
                    • Client Certificate + Private Key (PKCS8)
                    "},{"location":"gateway-configuration/wifi-configuration-8021x/#enrolling-secrets-in-the-keystore-service","title":"Enrolling secrets in the Keystore service.","text":"
                    1. Navigate to Security under the System tab.
                    2. Under the Keystore Configuration add a new keystore, and keep note of the name.
                    3. After the Keystore is created, be sure to change the path to a persistent directory.
                    4. Navigate to the Certificate List and create a new Certificate. Insert the PEM and Apply, keep note of the name.
                    5. Now press add and create a new Private Key. Insert both the certificates in the PEM in the dialogue and press apply. keep note of the name.
                    "},{"location":"gateway-configuration/wifi-configuration-8021x/#wifi-setup","title":"Wifi Setup","text":"
                    1. Set up gateway Wi-Fi as described in the Wi-Fi configuration guide.
                    2. Ensure Wireless Security is set to WPA2/WPA3-Enterprise.
                    3. Select the 802.1x tab.
                    4. Set Enteprise EAP -> TLS.
                    5. Set Identity (Username).
                    6. Set Keystore Pid to the name of the keystore created above.
                    7. Set Certificate Authority Certificate (CA-Cert) to the name of the certificate created above.
                    8. Set the Client Private Key to the name of the Private Key created above.

                    When completed the Wi-Fi configuration should look like the following:

                    "},{"location":"gateway-configuration/wifi-configuration/","title":"Wi-Fi Configuration","text":"

                    From a configuration standpoint, the Wi-Fi interface (e.g., wlan0) may be viewed as an extension of Ethernet. In addition to the IPv4, IPv6 and DHCPv4 & NAT configuration tabs, it has the Wireless tab that allows for the configuration of wireless settings. These configuration options are described below.

                    Warning

                    Before using wifi make sure that you have correctly set the Regulatory Domain on the gateway. You can check the current configuration using the iw reg get command. To set the Regulatory Domain please refer to the specific section in the Gateway Configurations.

                    "},{"location":"gateway-configuration/wifi-configuration/#wireless-configuration","title":"Wireless Configuration","text":"

                    The Wireless tab contains the following configuration parameters:

                    • Wireless Mode: defines the mode of operation.

                      • Access Point: creates a wireless access point.
                      • Station Mode: connects to a wireless access point.

                    • Network Name: specifies the Service Set Identifier (SSID).

                      • In Access Point mode, this is the SSID that identifies this wireless network.
                      • In Station mode, this is the SSID of a wireless network to connect to.

                    • Band: defines the frequency band to use

                      • 2.4GHz: use 2.4GHz band
                      • 5GHz: use 5GHz band
                      • 2.4GHz/5GHz: use either in 2.4Ghz or 5Ghz depending on the choosen channel

                    • Wireless Security: sets the security protocol for the wireless network.

                      • None: No Wi-Fi security
                      • WEP: Wired Equivalent Privacy
                      • WPA: Wi-Fi Protected Access
                      • WPA2: Wi-Fi Protected Access II
                      • WPA2/WPA3-Enterprise: Wi-Fi Protected Access II & III with 802.1x. Please see here for further details. This fearture is available only in station mode

                    • Wireless Password: sets the password for the wireless network.

                      • WEP: 64-bit or 128-bit encryption key
                      • WPA/WPA2: pre-shared key

                    • Verify Password: sets the password verification field.

                      • In Access Point mode, allows the wireless password to be retyped for verification.
                      • In Station mode, this field is disabled.

                    • Pairwise Ciphers: lists accepted pairwise (unicast) ciphers for WPA/WPA2.

                      • In Access Point mode, this option is disabled.
                      • In Station mode,
                        • CCMP (AES-based encryption mode with strong security)
                        • TKIP (Temporal Key Integrity Protocol)
                        • CCMP and TKIP

                    • Group Ciphers: lists accepted group (broadcast/multicast) ciphers for WPA/WPA2.

                      • In Access Point mode, this option is disabled.
                      • In Station mode,
                        • CCMP (AES-based encryption mode with strong security)
                        • TKIP (Temporal Key Integrity Protocol)
                        • CCMP and TKIP

                    • Bgscan Module: requests background scans for the purpose of roaming within an ESS (i.e., within a single network block with all the APs using the same SSID).

                      • None: background scan is disabled
                      • Simple: periodic background scans based on signal strength
                      • Learn: learn channels used by the network and try to avoid bgscans on other channels

                    • Bgscan Signal Strength Threshold: defines a threshold (in dBm) that determines which one of the following two parameters (i.e., Short Interval or Long Interval) will be effective.

                    • Bgscan Short Interval: defines the interval between background scans (in seconds) if the actual signal level of the currently connected access point is worse than signal_strength.

                    • Bgscan Long Interval: defines the interval between background scans (in seconds) if the actual signal level of the currently connected access point is better than signal_strength.

                    • Ping Access Point & renew DHCP lease if not reachable: enables pinging the access point after connection is established.

                      • In Access Point mode, this option is disabled.
                      • In Station mode, if set to true, the unit will ping the access point and attempt to renew the DHCP lease if the access point is not reachable.

                    • Ignore Broadcast SSID: operates as follows if set to true:

                      • In Access Point mode, sends an empty SSID in beacons and ignores probe request frames that do not specify full SSID.
                      • In Station mode, does not scan for the SSID before attempting to associate.

                    • Channels list: allows the selection of desired channel frequencies. The availability of the desired frequency is subject to the Regdom set on the device. For a list of limitations in different countries you can consult the following page: List of WLAN channels. Channels marked as No Irradiation and Radar Detection can be used only if DFS (Dynamic Frequency Selection) is supported by the Wi-Fi chip.

                      • In Access Point mode, only one channel may be selected.
                      • In Station mode, the list of available channels depends on the selected Radio Mode. The selected radio mode also affects the ability to select a network in the scan window (if the channel associated with the network is not enabled in the regulatory domain an error message will be shown).

                    "},{"location":"gateway-configuration/wifi-configuration/#wi-fi-station-mode-configuration","title":"Wi-Fi Station Mode Configuration","text":"

                    In addition to the options described above, the Wireless configuration display the Access Point Scan button that help to configure Wi-Fi in the Station mode.

                    • Access Point Scan: clicking this button triggers access point scan operations. Upon a successful scan, a table containing access points within range is presented. This table contains the following information:

                      • SSID
                      • MAC Address
                      • Signal Strength (in dBm)
                      • Channel
                      • Frequency
                      • Security

                      If you select one of these access points, respective wireless controls (i.e., Network Name, Wireless Security, and Channel) are filled with information obtained during the scan operation. The Force Wireless Network Scan button triggers a manual scan for available access points.

                    "},{"location":"getting-started/docker-quick-start/","title":"Docker Quick Start","text":""},{"location":"getting-started/docker-quick-start/#installation","title":"Installation","text":"

                    Eclipse Kura is also available as a Docker container available in Docker Hub.

                    To download and run, use the following command:

                    docker run -d -p 443:443 -t eclipse/kura\n

                    This command will start Kura in background and the Kura Web Ui will be available through port 443.

                    Once the image is started you can navigate your browser to https://localhost and log in using the credentials admin : admin.

                    "},{"location":"getting-started/docker-quick-start/#command-toolbox","title":"Command Toolbox","text":"

                    Following, a set of useful Docker command that can be used to list and manage Docker containers. For more details on Docker commands, please reference the official Docker documentation

                    "},{"location":"getting-started/docker-quick-start/#list-docker-images","title":"List Docker Images","text":"

                    To list all the installed Docker images run:

                    docker images\n
                    "},{"location":"getting-started/docker-quick-start/#list-running-docker-containers","title":"List Running Docker Containers","text":"

                    To list all the available instances (both running and powered off) run:

                    docker ps -a\n
                    "},{"location":"getting-started/docker-quick-start/#startstop-a-docker-container","title":"Start/Stop a Docker Container","text":"
                    docker stop <container id>\ndocker start <container id>\n

                    where <container id> is the instance identification number.

                    "},{"location":"getting-started/install-kura/","title":"Install Kura","text":"

                    Eclipse Kura\u2122 is provided using a Debian Linux package. Visit the Kura download page to find the correct installation file for the target system.

                    "},{"location":"getting-started/install-kura/#installer-types","title":"Installer types","text":"

                    Several installers can be found on such page, and they fall into one of the following categories:

                    1. standard installers, like kura-6.0.0_generic-arm32_installer.deb; and
                    2. installers with suffix nn, like kura-6.0.0_generic-arm32-nn_installer.deb

                    Profiles of types (1) ship a Kura version with networking functionalities. In particular, they can be installed on targets with NetworkManager, a commonly available tool for managing Linux networking. Kura leverages this tool for networking functionalities. Refer to the Kura installers section for further information.

                    Installers of type (2) with the suffix nn are No Networking profiles that do not bundle the Kura Network Manager: all the network configurations need to be done outside of Kura. Functionalities missing in NN profiles compared to the full Kura profiles:

                    • Networking interfaces management
                    • Firewall configuration management
                    • Network Threat management
                    "},{"location":"getting-started/install-kura/#kura-installers","title":"Kura installers","text":"

                    A user can deploy Kura on a target system using the installer tailored for the device architecture. The installer file looks like:

                    kura-<kura-version>_generic-<arch>_installer.deb/rpm\n

                    where <arch> is one of the supported architectures: x86_64, arm32, and arm64. Kura can work on systems that have available the dependencies listed in the Kura dependencies section, and that have at least one physical ethernet interface.

                    "},{"location":"getting-started/install-kura/#java-heap-memory-assignment","title":"Java Heap Memory Assignment","text":"

                    The Eclipse Kura\u2122's installer incorporates an adaptive Heap Memory allocation system during installation. The allocation follows a formula based on your gateway's available memory. If your gateway has less than 1024MB of RAM, Kura will set -Xms and -Xmx to 256MB. For gateways with more than 1024MB, one quarter of the total RAM will be assigned to -Xms and -Xmx.

                    "},{"location":"getting-started/install-kura/#initial-network-configuration","title":"Initial network configuration","text":"

                    During the installation of Eclipse Kura with network management support, the initial network configuration will be generated dynamically. The existing wired and wireless network interface names are detected and sorted in ascending lexicographic order at the installation.

                    If only one ethernet interface is detected (e.g. eth0), it will be configured as follows:

                    Interface Configuration Ethernet interface (e.g. eth0) - Status: Enabled for WAN- Configure: Using DHCP

                    If multiple ethernet interfaces are detected, instead, the first two interfaces will be configured as presented in the table below. The other ethernet interfaces will be disabled.

                    Interface Configuration First Ethernet interface (e.g. eth0) - Status: Enabled for LAN- Configure: Manually- IP address: 172.16.0.1- Router Mode: DHCP and NAT Second Ethernet interface (e.g. eth1) - Status: Enabled for WAN- Configure: Using DHCP

                    Finally, if a wireless interface (e.g. wlan0) is detected, it will configured as shown below. The other wireless interfaces will be disabled.

                    Interface Configuration Wireless interface (e.g. wlan0) - Status: Enabled for LAN- Configure: Manually- IP address: 172.16.1.1- Passphrase: testKEYS- Router Mode: DHCP and NAT

                    For example, if the system contains the following interfaces: wlp2s0, wlp3s0, enp3s0, eno1, ens2; then eno1 will be enabled for LAN with a DHCP server, enp3s0 will be enabled for WAN in DHCP client mode, wlp2s0 will be configured as an AP, and all other network interfaces will be disabled.

                    Warning

                    On systems that do not use systemd's predictable interface naming scheme (see Freedesktop reference) the primary network interface name might change whenever a re-enumeration is triggered (for example, after a reboot or after plugging in an external network adapter).

                    The advice is to install Kura on systems that use a reliable naming convention for network interfaces.

                    Systemd consistent network interface naming assigns the name prefix based on the physical location of the device, see Understanding the Predictable Network Interface Device Names for further reference.

                    "},{"location":"getting-started/install-kura/#initial-firewall-configuration","title":"Initial firewall configuration","text":"

                    Similarly to the initial network configuration, the initial firewall setup is adapted based on the network interface detected on the system. In case of multiple ethernet and wireless interfaces, the configuration will be as shown in the screenshot below.

                    If the wireless interface is not present, the firewall entries for the wlan0 are dropped.

                    Please note that installing Eclipse Kura with network configuration support will replace the current network and firewall configuration with the one shown above.

                    "},{"location":"getting-started/install-kura/#other-kura-services","title":"Other Kura services","text":"

                    Eclipse Kura\u2122 do not contain gateway specific customizations, this implies that the values of some configuration parameters may be incorrect and/or missing and must be manually filled after installation. For example the user might want to:

                    • Configure the other network interfaces, if any.
                    • Setup additional firewall rules.
                    • Edit the /opt/eclipse/kura/framework/jdk.dio.properties with the correct GPIO mappings. By default this file is empty.
                    "},{"location":"getting-started/install-kura/#kura-dependencies","title":"Kura dependencies","text":"

                    To have all the Kura features working, the following dependencies are required:

                    • General: setserial, zip, gzip, unzip, procps, usbutils, socat, gawk, sed, inetutils-telnet.
                    • Security: polkit or policykit-1, ssh or openssh, openssl, busybox, openvpn.
                    • Bluetooth: bluez or bluez5, bluez-hcidump or bluez5-noinst-tools.
                    • Time: ntpdate, chrony, chronyc, cron or cronie.
                    • Networking: network-manager or networkmanager, bind9 or bind, dnsmasq or isc-dhcp-server or (dhcp-server and dhcp-client), iw, iptables, modemmanager, hostapd, wpa-supplicant, ppp, iproute2.
                    • Logs: logrotate.
                    • Gps: gpsd.
                    • Python: python3.
                    • Java: openjdk-17-jre-headless or temurin-17-jdk or openjdk-8-jre-headless or temurin-8-jdk.
                    • Others: dos2unix
                    "},{"location":"getting-started/install-kura/#reference-devices","title":"Reference devices","text":"

                    Eclipse Kura\u2122 has been tested on the following devices and provides full configuration of all the available interfaces and GPIO mappings.

                    Device Architecture OS Raspberry Pi 3/4 arm32 Raspberry Pi OS \"Bookworm\" Raspberry Pi 3/4 arm64 Raspberry Pi OS \"Bookworm\" Raspberry Pi 3/4 arm64 Ubuntu 20.04 ZimaBoard/Blade x86_64 TBD NVIDIA Jetson AGX Orin\u2122 arm64 TBD

                    Check out the quick start guides for the detailed installation steps and set-up procedures:

                    • Raspberry Pi - Raspberry Pi OS Quick Start
                    • Raspberry Pi - Ubuntu 20 Quick Start
                    • Docker Quick Start
                    • Nvidia Jetson AGX Orin Quick Start
                    • ZimaBoard/Blade Quick Start
                    "},{"location":"getting-started/nvidia-jetson-orin-quick-start/","title":"NVIDIA Jetson AGX Orin\u2122 - Quick Start","text":""},{"location":"getting-started/nvidia-jetson-orin-quick-start/#overview","title":"Overview","text":""},{"location":"getting-started/raspberry-pi-raspberryos-quick-start/","title":"Raspberry Pi - Raspberry Pi OS Quick Start","text":""},{"location":"getting-started/raspberry-pi-raspberryos-quick-start/#overview","title":"Overview","text":"

                    This section provides Eclipse Kura\u2122 quick installation procedures for the Raspberry Pi and the Kura development environment.

                    Warning

                    This quickstart will install the version of Kura with the administrative web UI and network configuration support but not CAN bus support. For more information on this please visit the Eclipse Kura download page

                    This quickstart has been tested using the latest Raspberry Pi OS 32 and 64 bits images which are available for download through the official Raspberry Pi foundation site and the Raspberry Pi Imager.

                    Warning

                    Recent versions of Raspberry Pi OS 32 bit on Raspberry PI 4 will use by default a 64 bit kernel with a 32 bit userspace. This can cause issues to applications that use the result of uname -m to decide which native libraries to load (see https://github.com/raspberrypi/firmware/issues/1795). This currently affects for example the Kura SQLite database connector. It should be possible to solve by switching to the 32 bit kernel setting arm_64bit=0 in /boot/config.txt and restarting the device.

                    For additional details on OS compatibility refer to the Kura\u2122 release notes.

                    "},{"location":"getting-started/raspberry-pi-raspberryos-quick-start/#enable-ssh-access","title":"Enable SSH Access","text":"

                    The ssh server is disabled by default on Raspbian images released after November 2016, in order to enable it follow the instructions available here.

                    If you're using the Raspberry Pi Imager you can directly enable SSH before writing the operating system into the SD card by clicking on the \"setting\" icon.

                    "},{"location":"getting-started/raspberry-pi-raspberryos-quick-start/#eclipse-kuratm-installation","title":"Eclipse Kura\u2122 Installation","text":"

                    To install Eclipse Kura with its dependencies on the Raspberry Pi, perform the following steps:

                    1. Boot the Raspberry Pi with the latest\u00a0Raspberry Pi OS image.

                    2. Make sure your device is connected to the Internet. The best installation experience can be obtained when the device is cabled to the local network and the Internet. By default, the Raspberry Pi OS configures the ethernet interface eth0 in DHCP mode.

                    3. Upgrade the system:

                      sudo apt update\n
                      sudo apt upgrade\n

                      Tip

                      Optional: Since version 5.3.0 Kura also supports Eclipse Temurin\u2122 as an alternative JVM. To install it you need to perform these additional steps:

                      sudo apt-get install -y wget apt-transport-https gnupg\n
                      sudo wget -O - https://packages.adoptium.net/artifactory/api/gpg/key/public | sudo apt-key add -\n
                      sudo echo \"deb https://packages.adoptium.net/artifactory/deb $(awk -F= '/^VERSION_CODENAME/{print$2}' /etc/os-release) main\" | sudo tee /etc/apt/sources.list.d/adoptium.list\n
                      sudo apt-get update\n
                      sudo apt-get install temurin-17-jdk\n

                    4. Download the Kura package with:

                      wget http://download.eclipse.org/kura/releases/<version>/kura-<kura-version>_generic-<arch>_installer.deb\n

                      Note: replace <version> in the URL above with the version number of the latest release (e.g. 5.5.0) and <arch> with your device architecture

                    5. Install Kura with:\u00a0

                      sudo apt-get install ./kura-<kura-version>_generic-<arch>_installer.deb\n

                    6. For a correct configuration of the Wlan interface, it is necessary to set the Locale and the WLAN Country through the raspi-config command:

                      sudo raspi-config\n

                      From the raspi-config main menu select Localisation Options:

                      Then modify the Locale and WLAN Country with with the proper settings for your location. For example, an user located in Italy could set the values as the ones in the table:

                      Setting Value L1 Locale it_IT.UTF-8 UTF-8 L4 WLAN Country IT Italy

                    7. (Optional) To correctly use the GPIO pins, the user is asked to update the jdk.dio.properties file with the proper configuration, based on its own device.

                      This is required since the sysfs interface has been deprecated, and some OS distribution may have already suppressed it. Moreover, the kernel complains if a static base number is assigned to a GPIO controller: indeed, when it assigns the numbers automatically, it usually starts from 511. More information can be found here.

                      In order to set the correct configuration the user can perform the following steps:

                      • Execute on the device the command cat /sys/kernel/debug/gpio, looking for entries similar to gpio-ABC (GPIxx): from this information it is possible to retrieve which number the GPIO controller was assigned to by the OS (in this case the GPIO controller number xx is assigned with the number ABC). The image below represent an example of this file

                      • Modify the /opt/eclipse/kura/framework/jdk.dio.properties with the number and controllers found in the previous step:
                      573 = deviceType: gpio.GPIOPin, pinNumber:573, name:GPI02\n574 = deviceType: gpio.GPIOPin, pinNumber:574, name:GPIO3\n575 = deviceType: gpio.GPIOPin, pinNumber:575, name:GPIO4\n576 = deviceType: gpio.GPIOPin, pinNumber:576, name:GPIO5\n577 = deviceType: gpio.GPIOPin, pinNumber:577, name:GPIO6\n578 = deviceType: gpio.GPIOPin, pinNumber:578, name:GPIO7\n579 = deviceType: gpio.GPIOPin, pinNumber:579, name:GPIO8\n580 = deviceType: gpio.GPIOPin, pinNumber:580, name:GPIO9\n581 = deviceType: gpio.GPIOPin, pinNumber:581, name:GPIO10\n582 = deviceType: gpio.GPIOPin, pinNumber:582, name:GPIO11\n583 = deviceType: gpio.GPIOPin, pinNumber:583, name:GPIO12\n584 = deviceType: gpio.GPIOPin, pinNumber:584, name:GPIO13\n585 = deviceType: gpio.GPIOPin, pinNumber:585, name:GPIO14\n586 = deviceType: gpio.GPIOPin, pinNumber:586, name:GPIO15\n587 = deviceType: gpio.GPIOPin, pinNumber:587, name:GPIO16\n588 = deviceType: gpio.GPIOPin, pinNumber:588, name:GPIO17\n589 = deviceType: gpio.GPIOPin, pinNumber:589, name:GPIO18\n590 = deviceType: gpio.GPIOPin, pinNumber:590, name:GPIO19\n591 = deviceType: gpio.GPIOPin, pinNumber:591, name:GPIO20\n592 = deviceType: gpio.GPIOPin, pinNumber:592, name:GPIO21\n593 = deviceType: gpio.GPIOPin, pinNumber:593, name:GPIO22\n594 = deviceType: gpio.GPIOPin, pinNumber:594, name:GPIO23\n595 = deviceType: gpio.GPIOPin, pinNumber:595, name:GPIO24\n596 = deviceType: gpio.GPIOPin, pinNumber:596, name:GPIO25\n597 = deviceType: gpio.GPIOPin, pinNumber:597, name:GPIO26\n598 = deviceType: gpio.GPIOPin, pinNumber:598, name:GPIO27\n\ngpio.GPIOPin = initValue:0, deviceNumber:0, direction:3, mode:-1, trigger:3\nuart.UART = baudRate:19200, parity:0, dataBits:8, stopBits:1, flowControl:0\n

                      You can also check your GPIO device configuration executing the command pinout

                    8. Reboot the Raspberry Pi with:

                      sudo reboot\n

                      Kura starts on the target platform after reboot.

                    9. Kura setups a local web ui that is available using a browser via:

                      https://<device-ip>\n

                      The browser will prompt the user to accept the connection to an endpoint with an untrusted certificate:

                      Once trusted the source, the user will be redirected to a login page where the following credentials: username: admin password: admin

                    "},{"location":"getting-started/raspberry-pi-ubuntu-20-quick-start/","title":"Raspberry Pi - Ubuntu 20 Quick Start","text":""},{"location":"getting-started/raspberry-pi-ubuntu-20-quick-start/#overview","title":"Overview","text":"

                    This section provides Eclipse Kura\u2122 quick installation procedures for the Raspberry Pi.

                    Warning

                    This quickstart will install the version of Kura with the administrative web UI and network configuration support but not CAN bus support. For more information on this please visit the Eclipse Kura download page

                    This quickstart has been tested using the latest Ubuntu 20.04.3 LTS Live Server for arm64 architecture flashed on the SD card through Raspberry Pi Imager.

                    The official images can be also found on the Project Page. Further information on the Ubuntu installation for Raspberry Pi can be found here.

                    Warning

                    Please note that, at the time of this writing, only 64 bit OS image is supported.

                    "},{"location":"getting-started/raspberry-pi-ubuntu-20-quick-start/#enable-ssh-access","title":"Enable SSH Access","text":"

                    On Ubuntu 20.04.3 the ssh access is enabled only for the standard ubuntu user. If you desire to remote login as root user, edit the file /etc/ssh/sshd_config (using the root permission) adding the line PermitRootLogin yes

                    "},{"location":"getting-started/raspberry-pi-ubuntu-20-quick-start/#eclipse-kuratm-installation","title":"Eclipse Kura\u2122 Installation","text":"

                    To install Eclipse Kura with its dependencies on the Raspberry Pi, perform the following steps:

                    1. Boot the Raspberry Pi with the latest\u00a0Ubuntu 20.04.3 LTS Server image.

                    2. Make sure your device is connected to internet. By default, eth0 lan network interface is configured in DHCP mode.

                    3. Upgrade the system:

                      sudo apt update\n
                      sudo apt upgrade\n

                      Tip

                      Optional: Since version 5.3.0 Kura also supports Eclipse Temurin\u2122 as an alternative JVM. To install it you need to perform these additional steps:

                      sudo apt-get install -y wget apt-transport-https gnupg\n
                      sudo wget -O - https://packages.adoptium.net/artifactory/api/gpg/key/public | sudo apt-key add -\n
                      sudo echo \"deb https://packages.adoptium.net/artifactory/deb $(awk -F= '/^VERSION_CODENAME/{print$2}' /etc/os-release) main\" | sudo tee /etc/apt/sources.list.d/adoptium.list\n
                      sudo apt-get update\n
                      sudo apt-get install temurin-17-jdk\n

                    4. Download the Kura package with:

                      wget http://download.eclipse.org/kura/releases/<version>/kura-<kura-version>_generic-<arch>_installer.deb\n

                      Note: replace <version> in the URL above with the version number of the latest release (e.g. 5.5.0) and <arch> with your device architecture

                    5. Install Kura with:

                      sudo apt install ./kura-<kura-version>_generic-<arch>_installer.deb\n

                      All the required dependencies will be downloaded and installed.

                    6. Set the right Wi-Fi regulatory domain based on your current world region editing the /etc/default/crda and adding the ISO 3166-1 alpha-2 code of your region.

                    7. (Optional) Configure the GPIO replacing the content of the file /opt/eclise/kura/framework/jdk.dio.properties with the following text:

                      0 = deviceType: gpio.GPIOPin, pinNumber:0, name:GPIO0\n1 = deviceType: gpio.GPIOPin, pinNumber:1, name:GPIO1\n2 = deviceType: gpio.GPIOPin, pinNumber:2, name:GPI02\n3 = deviceType: gpio.GPIOPin, pinNumber:3, name:GPIO3\n4 = deviceType: gpio.GPIOPin, pinNumber:4, name:GPIO4\n5 = deviceType: gpio.GPIOPin, pinNumber:5, name:GPIO5\n6 = deviceType: gpio.GPIOPin, pinNumber:6, name:GPIO6\n7 = deviceType: gpio.GPIOPin, pinNumber:7, name:GPIO7\n8 = deviceType: gpio.GPIOPin, pinNumber:8, name:GPIO8\n9 = deviceType: gpio.GPIOPin, pinNumber:9, name:GPIO9\n10 = deviceType: gpio.GPIOPin, pinNumber:10, name:GPIO10\n11 = deviceType: gpio.GPIOPin, pinNumber:11, name:GPIO11\n12 = deviceType: gpio.GPIOPin, pinNumber:12, name:GPIO12\n13 = deviceType: gpio.GPIOPin, pinNumber:13, name:GPIO13\n14 = deviceType: gpio.GPIOPin, pinNumber:14, name:GPIO14\n15 = deviceType: gpio.GPIOPin, pinNumber:14, name:GPIO15\n16 = deviceType: gpio.GPIOPin, pinNumber:16, name:GPIO16\n17 = deviceType: gpio.GPIOPin, pinNumber:17, name:GPIO17\n18 = deviceType: gpio.GPIOPin, pinNumber:18, name:GPIO18\n19 = deviceType: gpio.GPIOPin, pinNumber:19, name:GPIO19\n20 = deviceType: gpio.GPIOPin, pinNumber:20, name:GPIO20\n21 = deviceType: gpio.GPIOPin, pinNumber:21, name:GPIO21\n22 = deviceType: gpio.GPIOPin, pinNumber:22, name:GPIO22\n23 = deviceType: gpio.GPIOPin, pinNumber:23, name:GPIO23\n24 = deviceType: gpio.GPIOPin, pinNumber:24, name:GPIO24\n25 = deviceType: gpio.GPIOPin, pinNumber:25, name:GPIO25\n26 = deviceType: gpio.GPIOPin, pinNumber:26, name:GPIO26\n27 = deviceType: gpio.GPIOPin, pinNumber:27, name:GPIO27\n\ngpio.GPIOPin = initValue:0, deviceNumber:0, direction:3, mode:-1, trigger:3\nuart.UART = baudRate:19200, parity:0, dataBits:8, stopBits:1, flowControl:0\n

                    8. Reboot the Raspberry Pi with:

                      sudo reboot\n

                      Kura starts on the target platform after reboot.

                    9. Kura setups a local web ui that is available using a browser via:

                      https://<device-ip>\n

                      The browser will prompt the user to accept the connection to an endpoint with a self signed certificate, select Accept the risk and continue:

                      Once trusted the source, the user will be redirected to a login page where the following credentianls: username: admin password: admin

                    "},{"location":"getting-started/zima-board-quick-start/","title":"ZimaBoard/Blade Quick Start","text":""},{"location":"getting-started/zima-board-quick-start/#overview","title":"Overview","text":""},{"location":"java-application-development/configurable-application/","title":"Configurable Application","text":""},{"location":"java-application-development/configurable-application/#overview","title":"Overview","text":"

                    This section provides a simple example of how to create an OSGi bundle that implements the ConfigurableComponent interface in Kura. This bundle will interact with the Kura ConfigurationService via the ConfigurableComponent interface. It also uses the MQTT services in Kura to connect to the Cloud, which allows for a local configuration mechanism using a Web user-interface (UI). In this example, you will learn how to perform the following functions:

                    • Create a plugin project

                    • Implement the ConfigurableComponent interface

                    • Use the Kura web UI to modify the bundle\u2019s configuration

                    • Export a single OSGi bundle (plug-in)

                    "},{"location":"java-application-development/configurable-application/#prerequisites","title":"Prerequisites","text":"

                    • Requires Kura development environment set-up (Setting up Kura Development Environment)

                    • Implements the use of Kura web user-interface (UI)

                    "},{"location":"java-application-development/configurable-application/#configurable-component-example","title":"Configurable Component Example","text":""},{"location":"java-application-development/configurable-application/#create-plug-in","title":"Create Plug-in","text":"

                    In Eclipse, create a new Plug-in project by selecting File | New | Project. Select Plug-in Development | Plug-in Project and click Next.

                    Your screen should display the New Plug-in Project dialog box as shown in the following screen capture. Enter your project a name, such as \u201corg.eclipse.kura.example.configurable\u201d. Under Target Platform, ensure that the an OSGi framework option button is selected and set to standard as shown below. You can also (optionally) add projects to a working set. To continue, click Next.

                    In the next New Plug-in Project menu (shown below), change the Name field to something more descriptive, such as \u201cConfigurable Component Example.\u201d Make sure that the Execution Environment list is set to match the JVM version running on the target device (JavaSE-1.6 or JavaSE-1.7). To determine the JVM version running on the target device, log in to its administrative console and enter the command

                    java \u2013version

                    Also, uncheck the Generate an activator, a Java class that controls the plug-in\u2019s life cycle option button. For the purposes of this example, a single class will be used. An Activator class will not be created; instead, OSGi Declarative Services will be used to start and stop the bundle.

                    Finally, click Finish.

                    You should see the new project in the Package Explorer (or Project Explorer) in Eclipse. Also, you will see the MANIFEST.MF was automatically opened in the Manifest Editor. An OSGi bundle is a regular Java .jar file that contains Java code and resources and a custom Manifest and an Activator. The manifest will be modified in the next section.

                    "},{"location":"java-application-development/configurable-application/#add-dependencies-to-manifest","title":"Add Dependencies to Manifest","text":"

                    First, you will use the Manifest Editor in Eclipse to add some dependencies. Click the Dependencies tab at the bottom of the editor screen and then click the Automated Management of Dependencies heading to expand it.

                    Under Automated Management of Dependencies, click Add. In the Select a Plug-in field, enter org.eclipse.osgi.services. Select the plug-in name and click OK.

                    Note that this operation is very much like adding standalone jars to the buildpath by including the \u2018-cp\u2019 argument to javac. However, in this case you are telling Eclipse where to find these dependencies the \u201cOSGi way\u201d, so it is aware of them at compile time.

                    Click Add again and use the same procedure to add the following dependencies:

                    • slf4j.api
                    • org.eclipse.kura.api

                    You should now see the list of dependencies. Save changes to the Manifest.

                    "},{"location":"java-application-development/configurable-application/#create-java-class","title":"Create Java Class","text":"

                    Now you are ready to start writing a simple Java class. Right-click the org.eclipse.kura.example.configurable project. Select New | Class. Set the Package field to org.eclipse.kura.example.configurable, set the Name field to ConfigurableExample, and then click Finish.

                    Write the following code for the new class. You can copy and paste the code provided below into your newly created Java class file.

                    package org.eclipse.kura.example.configurable;\n\npublic class ConfigurableExample implements ConfigurableComponent {\n    private static final Logger s_logger = LoggerFactory.getLogger(ConfigurableExample.class);\n    private static final String APP_ID = \"org.eclipse.kura.example.configurable.ConfigurableExample\";\n    private Map<String, Object> properties;\n\n    protected void activate(ComponentContext componentContext) {\n        s_logger.info(\"Bundle \" + APP_ID + \" has started!\");\n    }\n\n    protected void activate(ComponentContext componentContext, Map<String, Object> properties) {\n        s_logger.info(\"Bundle \" + APP_ID + \" has started with config!\");\n        updated(properties);\n    }\n\n    protected void deactivate(ComponentContext componentContext) {\n        s_logger.info(\"Bundle \" + APP_ID + \" has stopped!\");\n    }\n\n    public void updated(Map<String, Object> properties) {\n        this.properties = properties;\n        if(properties != null && !properties.isEmpty()) {\n            Iterator<Entry<String, Object>> it = properties.entrySet().iterator();\n            while (it.hasNext()) {\n                Entry<String, Object> entry = it.next();\n                s_logger.info(\"New property - \" + entry.getKey() + \" = \" +\n                entry.getValue() + \" of type \" + entry.getValue().getClass().toString());\n            }\n        }\n    }\n}\n

                    The activate() method is the entry point when the bundle is started. Note this class has two forms of the activate() method. The second method (with the \u201cMap properties\u201d parameter) enables a default configuration to be specified at bundle start time. The deactivate() method is the entry point when the bundle is stopped. You have also specified an updated() method. These methods define how the bundle receives a new configuration from the Kura configuration manager. Kura handles robust configuration management routines automatically once you implement the ConfigurableComponent interface and the updated() method."},{"location":"java-application-development/configurable-application/#resolve-dependencies","title":"Resolve Dependencies","text":"

                    At this point, there will be errors in your code because of unresolved imports.

                    Select the menu Source | Organize Imports to resolve these errors. Because you added dependencies to your dependency list in the Manifest, you will be prompted to choose one of the following two potential sources for importing a few classes.

                    For the \u201cEntry\u201d class, select java.util.Map.Entry as shown below and click Next.

                    For the \u201cLogger\u201d class, select org.slf4j.Logger as shown below and click Finish.

                    Resolving the imports should clear the errors in the class as shown in the screen capture that follows. Save the changes to the ConfigurableExample class.

                    The complete set of code (with import statements) is shown below.

                    package org.eclipse.kura.example.configurable;\n\nimport java.util.Iterator;\nimport java.util.Map;\nimport java.util.Map.Entry;\nimport org.osgi.service.component.ComponentContext;\nimport org.slf4j.Logger;\nimport org.slf4j.LoggerFactory;\nimport org.eclipse.kura.configuration.ConfigurableComponent;\n\npublic class ConfigurableExample implements ConfigurableComponent {\n\n    private static final Logger s_logger = LoggerFactory.getLogger(ConfigurableExample.class);\n    private static final String APP_ID* = \"org.eclipse.kura.configurable.ConfigurableExample\";\n    private Map<String, Object> properties;\n\n    protected void activate(ComponentContext componentContext) {\n      s_logger.info(\"Bundle \" + APP_ID + \" has started!\");\n    }\n\n    protected void activate(ComponentContext componentContext, Map<String, Object> properties) {\n        s_logger.info(\"Bundle \" + APP_ID + \" has started with config!\");\n        updated(properties);\n    }\n\n    protected void deactivate(ComponentContext componentContext) {\n        s_logger.info(\"Bundle \" + APP_ID + \" has stopped!\");\n    }\n\n    public void updated(Map<String, Object> properties) {\n        this.properties = properties;\n        if(properties != null && !properties.isEmpty()) {\n            Iterator<Entry<String, Object>> it = properties.entrySet().iterator();\n            while(it.hasNext()) {\n                Entry<String, Object> entry = it.next();\n                s_logger.info(\"New property - \" + entry.getKey() + \" = \" +\n                entry.getValue() + \" of type \" + entry.getValue().getClass().toString());\n            }\n        }\n    }\n}\n

                    Switch back to the Manifest Editor. Under Automated Management of Dependencies, ensure the Import-Package option button is selected. Click the add dependencies link to automatically add packages to the dependencies list (under Imported Packages) based on the \u201cimport\u201d statements in your example code. Save changes to the Manifest again.

                    "},{"location":"java-application-development/configurable-application/#create-component-class","title":"Create Component Class","text":"

                    Right-click the example project and select New | Folder. Create a new folder named \u201cOSGI-INF\u201d.

                    Now, right-click the example project\u2019s \u201cOSGI-INF\u201d folder and select New | Other. From the wizard, select Plug-in Development | Component Definition and click Next.

                    Next to the Class field, click Browse and type the name of your newly created class in the Select entries field. In this case, type the word \u201cConfigurable\u201d, and you will see matching items. Select the ConfigurableExample class and click OK.

                    In the Enter or select the parent folder field, make sure \u201c/OSGI-INF\u201d is at the end of the existing entry (e.g., org.eclipse.kura.example.configurable/OSGI-INF). Set the Name field equal to the Class field as shown below:

                    Click Finish.

                    After the Component class has been created, it will open in the Workspace. On the Services tab, click the Add button under Provided Services. Enter \u201cconfigurable\u201d and select the interface \u201corg.eclipse.kura.example.configurable\u201d. This is required for components that are configurable through the Kura ConfigurationService, so that they expose a Service.

                    In the Overview tab, the Name and Class fields should already point to your Java class. Make the following settings:

                    • Set the Activate field to activate and set the Deactivate field to deactivate. This tells the component where these OSGi activation methods are located.

                    • Set the Configuration Policy to require.

                    • Set the Modified field to updated. This tells the component which method to call when the configuration is updated.

                    • Uncheck the box This component is enabled when started, then check both boxes This component is enabled when started and This component is immediately activated.

                    Click the Add Property button. Enter a property with the name \u201cservice.pid\u201d and value \u201corg.eclipse.kura.example.configurable.ConfigurableExample\u201d as shown in the screen capture below.

                    Verify that the completed Overview tab looks like the screen shot shown below and save the Component class definition file:

                    Check the Source tab of the component.xml file and carefully verify that each of the property values and tags match what is shown below:

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\"\n    activate=\"activate\"\n    configuration-policy=\"require\"\n    deactivate=\"deactivate\"\n    enabled=\"true\"\n    immediate=\"true\"\n    modified=\"updated\"\n    name=\"org.eclipse.kura.example.configurable.ConfigurableExample\">\n\n    <implementation class=\"org.eclipse.kura.example.configurable.ConfigurableExample\"/>\n    <service>\n        <provide interface=\"org.eclipse.kura.example.configurable.ConfigurableExample\"/>\n    </service>\n    <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.example.configurable.ConfigurableExample\"/>\n</scr:component>\n

                    If Kura 3.0 or newer versions are used and the \"org.eclipse.kura.core.configuration.legacyServiceTracking\" system property is set to false or not set, proceed as follows.

                    "},{"location":"java-application-development/configurable-application/#create-the-default-configuration","title":"Create the Default Configuration","text":"

                    With the component definition file created, you also need to specify the configurable parameters of this bundle. This is done using the \u201cmetatype\u201d definition. Right-click the OSGI-INF directory for the example project in the Package Explorer window and select New | Folder. Name the folder \u201cmetatype\u201d. Next, right-click the metatype folder and select New | File.

                    Name the file \u201corg.eclipse.kura.example.configurable.ConfigurableExample.xml\u201d as shown in the following screen capture:

                    At this point, you have to write the \u2018metatype\u2019 file that defines the parameters, default values, types, etc. Click on the Source button and paste the following XML text into ConfigurableExample.xml for this example. Save changes to ConfigurableExample.xml.

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<MetaData xmlns=\"http://www.osgi.org/xmlns/metatype/v1.2.0\" localization=\"en_us\">\n    <OCD id=\"org.eclipse.kura.example.configurable.ConfigurableExample\"\n        name=\"ConfigurableExample\"\n        description=\"This is a sample metatype file for a simple configurable component\">\n\n        <AD id=\"param1.string\"\n            name=\"param1.string\"\n            type=\"String\"\n            cardinality=\"0\"\n            required=\"true\"\n            default=\"Some Text\"\n            description=\"String configuration parameter\"/>\n\n        <AD id=\"param2.float\"\n            name=\"param2.float\"\n            type=\"Float\"\n            cardinality=\"0\"\n            required=\"false\"\n            default=\"20.5\"\n            min=\"5.0\"\n            max=\"40.0\"\n            description=\"Float configuration parameter\"/>\n\n        <AD id=\"param3.integer\"\n            name=\"param3.integer\"\n            type=\"Integer\"\n            cardinality=\"0\"\n            required=\"true\"\n            default=\"2\"\n            min=\"1\"\n            description=\"Integer configuration parameter\"/>\n    </OCD>\n\n    <Designate pid=\"org.eclipse.kura.example.configurable.ConfigurableExample\">\n        <Object ocdref=\"org.eclipse.kura.example.configurable.ConfigurableExample\"/>\n    </Designate>\n</MetaData>\n

                    In the MANIFEST.MF of this bundle, you must also make sure the XML file gets packaged into the bundle when you export the plug-in. Click the Build tab, and in the Binary Build section of the Manifest editor verify that all the checkboxes for items under META-INF and OSGI-INF are checked. Save the Manifest after making this change.

                    "},{"location":"java-application-development/configurable-application/#run-the-bundle","title":"Run the Bundle","text":"

                    At this point, you can run the bundle using the emulator in Eclipse (Linux or OS X only). To do so, expand the org.eclipse.kura.emulator project in the package explorer and browse to src/main/resources. As appropriate for you platform type, right-click Kura_Emulator_[OS].launch (where \u201c[OS]\u201d specifies your operating system) and select Run as | KURA_EMULATOR_[OS].launch. Doing so will start the Kura emulator and your new bundle in the console window of Eclipse.

                    "},{"location":"java-application-development/configurable-application/#view-the-bundle-configuration-in-the-local-web-ui","title":"View the Bundle Configuration in the Local Web UI","text":"

                    With the bundle running, open a browser window on the same computer as the Eclipse development environment and browse to the Kura web UI at http://127.0.0.1:8080. Once connected to the Kura web UI, a log in window appears prompting you to enter the Name and Password as shown below:

                    Enter the appropriate name and password (default is admin/admin) and click Log in. The Kura Admin web UI appears with the ConfigurableExample in the Services area on the left side of the browser window as shown below:

                    From the Kura Admin web UI, you can change the parameters that are used by the Kura configuration manager and in turn call the updated() method of the newly created bundle. To do so, click ConfigurableExample and the configurable component parameters will be displayed as shown below:

                    Make any necessary changes and click the Apply button near the top left of the configuration pane for the modifications to take affect. Every time a change is made to the configuration, a new snapshot is generated along with an ID.

                    "},{"location":"java-application-development/connected-application/","title":"Connected Application","text":""},{"location":"java-application-development/connected-application/#overview","title":"Overview","text":"

                    This section describes the prepackaged heater demo bundle that comes with the Kura development environment and demonstrates how to perform the following functions:

                    • Run the Kura Emulator

                    • Connect to the Cloud

                    • Gain an understanding of ConfigurableComponents in Kura

                    • Modify configurations of custom bundles

                    "},{"location":"java-application-development/connected-application/#prerequisites","title":"Prerequisites","text":"

                    • Setting up Kura Development Environment

                    • Using the Kura web UI

                    "},{"location":"java-application-development/connected-application/#heater-demo-introduction","title":"Heater Demo Introduction","text":"

                    The org.eclipse.kura.demo.heater bundle is a simple OSGi bundle that represents a thermostat and heater combination. The application utilizes the Kura ConfigurableComponent interface to be able to receive configuration updates through the local Kura web UI. In addition, this bundle utilizes OSGi declarative services and the Kura CloudClientListener. This tutorial demonstrates how to modify configurations of custom bundles and shows how those configuration changes can dynamically impact the behavior of the bundle through the Kura web UI.

                    "},{"location":"java-application-development/connected-application/#code-walkthrough","title":"Code Walkthrough","text":"

                    The following sections will highlight three important API layers when creating an application that will publish to the cloud. These layers are:

                    • DataTransportService
                    • Available for standard MQTT messaging. Allows consumers of the service to connect to brokers, publish messages, and receive messages on subscribed topics
                    • DataService
                    • Delegates data transport to the DataTransportService
                    • Provides extended features for managing broker connections, buffering of published messages, and priority based delivery of messages
                    • CloudService
                    • Further extends the functionality of DataService
                    • Provides means for more complex flows (i.e. request/response)
                    • Manages single broker connection across multiple applications
                    • Provides payload data model with encoding/decoding serializers
                    • Publishes life cycle manages for devices and applications
                    "},{"location":"java-application-development/connected-application/#acquiring-cloudclient","title":"Acquiring CloudClient","text":"

                    The CloudService can manage multiple applications over a shared MQTT connection by treating each application as a client. The example code uses the \"setCloudService\" and \"unsetCloudService\" methods for referencing and releasing the CloudService. In the bundles activate method, the service reference in conjunction with a unique application ID can then be used to obtain a CloudClient. The relevant code is shown below (ommitted sections are denoted by ==OMMITTED==):

                    ==OMMITTED==\n// Cloud Application identifier\nprivate static final String APP_ID = \"heater\";\n\n==OMMITTED==\n\npublic void setCloudService(CloudService cloudService) {\n    m_cloudService = cloudService;\n}\n\npublic void unsetCloudService(CloudService cloudService) {\n    m_cloudService = null;\n}\n\n==OMMITTED==\n\n// Acquire a Cloud Application Client for this Application\ns_logger.info(\"Getting CloudClient for {}...\", APP_ID);\nm_cloudClient = m_cloudService.newCloudClient(APP_ID);\n
                    "},{"location":"java-application-development/connected-application/#publishingsubscribing","title":"Publishing/Subscribing","text":"

                    The private \"doPublish\" method is used to publish messages at a fixed rate. The method demonstrates how to use the CloudClient and KuraPayload to publish MQTT messages.

                    ==OMMITTED==\n\n// Allocate a new payload\nKuraPayload payload = new KuraPayload();\n\n// Timestamp the message\npayload.setTimestamp(new Date());\n\n// Add the temperature as a metric to the payload\npayload.addMetric(\"temperatureInternal\", m_temperature);\npayload.addMetric(\"temperatureExternal\", 5.0F);\npayload.addMetric(\"temperatureExhaust\",  30.0F);\n\nint code = m_random.nextInt();\nif ((m_random.nextInt() % 5) == 0) {\n    payload.addMetric(\"errorCode\", code);\n}\nelse {\n    payload.addMetric(\"errorCode\", 0);\n}\n\n// Publish the message\ntry {\n    m_cloudClient.publish(topic, payload, qos, retain);\n    s_logger.info(\"Published to {} message: {}\", topic, payload);\n}\ncatch (Exception e) {\n    s_logger.error(\"Cannot publish topic: \"+topic, e);\n}\n

                    Similarly, the CloudClient can be used to subscribe to MQTT topics. Although not shown in the example code, the following snippet could be added to subscribe to all published messages:

                    m_cloudClient.subscribe(topic, qos);\n
                    "},{"location":"java-application-development/connected-application/#callback-methods","title":"Callback Methods","text":"

                    The example class implements CloudClientListener, which provides methods for several common callback methods. The below snippet shows the relevant code for creating the listeners for the demo application.

                    ==OMMITTED==\n\npublic class Heater implements ConfigurableComponent, CloudClientListener\n\n==OMMITTED==\n\nm_cloudClient.addCloudClientListener(this);\n

                    The available methods for implementation are:

                    • onControlMessageArrived: Method called when a control message is received from the broker.
                    • onMessageArrived: Method called when a data message is received from the broker.
                    • onConnectionLost: Method called when the client has lost connection with the broker.
                    • onConnectionEstablished: Method called when the client establishes a connection with the broker.
                    • onMessageConfirmed: Method called when a published message has been fully acknowledged by the broker (not applicable for qos 0 messages).
                    • onMessagePublished: Method called when a message has been transfered from the publishing queue to the DataTransportService.

                    For more information on the various Kura APIs, please review the Kura APIs

                    "},{"location":"java-application-development/connected-application/#run-the-bundle","title":"Run the Bundle","text":"

                    By default, the heater demo bundle does not run automatically. To run the bundle and Kura in the Emulator, locate the org.eclipse.kura.emulator project. Expand it to show the src/main/resources folder.

                    Right-click the correct Kura_Emulator_[OS].launch file, depending on which operating system you are running. In the context menu, select the Run As option, and click on Run Configurations.

                    Under OSGi Framework (Run Configurations window shown below), click on the Kura_Emulator_[OS] entry. In the Bundles tab under Workspace, enable the org.eclipse.kura.demo.heater checkbox to enable it as shown below:

                    Click the Apply and Run buttons to start the Kura Emulator. Once this setting has been made, you only need to right-click on the launch file and select Run As and the Kura_Emulator_[OS] option to run with the same settings.

                    This will start Kura running locally and will display a Console window in Eclipse. The Console window will show the OSGi diagnostics as various bundles start and execute.

                    "},{"location":"java-application-development/connected-application/#configure-the-mqtt-client","title":"Configure the MQTT Client","text":"

                    With the heater demo bundle running, open a browser window on the same computer as the Eclipse development environment and browse to the Kura web UI at http://127.0.0.1:8080. Once connected to the Kura web UI, a log in window appears prompting you to enter the Name and Password as shown below:

                    Enter the appropriate name and password (default is admin/admin) and click Log in. The Kura Admin web UI appears as shown below:

                    From the Kura web UI, click on MqttDataTransport in the Services pane on the lower left of the browser window. You will see a menu similar to the one shown in the following screen capture:

                    Fill in the following fields then click the Apply button:

                    Field Value broker-url: The url for the MQTT broker (this example shows the MQTT broker-url mqtt://iot.eclipse.org:1883/ hosted by the Eclipse Foundation) topic.context.account-name: Your [account_name] username: Typically [account_name]_broker password: The password for your user client-id The client identifier to be used when connecting to the MQTT broker (optional)

                    Now that the account credentials are set in the MqttDataTransport service, the DataService needs to be configured to connect by default. To do so, click DataService in the Services area on the left of the browser window. For the \u2018connect.auto-on-startup\u2019 parameter, select true as shown below:

                    "},{"location":"java-application-development/connected-application/#modify-bundle-configuration-in-local-web-ui","title":"Modify Bundle Configuration in Local Web UI","text":"

                    Bundles changes may be made directly in the emulator web UI. Since you are running an emulated device in Eclipse, you can do this by browsing to http://127.0.0.1:8080 (same URL where the MQTT client was configured in the previous section of this tutorial). If the bundle was running on a real device and you had network access to it, you would browse to http://[ip_address_of_device].

                    From the Kura web UI, select the Heater bundle from the configurable services on the left and modify the parameters as needed (shown in the screen capture below). By default, the heater demo is configured according to the following characteristics and assumptions about its operational environment:

                    • Start operation is at 6:00am (06:00).

                    • End operation is at 10:00pm (22:00).

                    • It is colder outside than inside the heated chamber (hard-coded to 5 degrees in the application).

                    • Output of the heater is constant at 30 degrees (hard-coded).

                    • When in operational mode, the temperature will drop inside if the heater is off.

                    • The heater turns off when it is about to exceed the setPoint defined in the configuration.

                    • After the temperature drops to four times the increment point (a made-up value to show dropping temperature, hard-coded in the application), the heater turns back on, and the temperature starts increment at the rate of the \u2018temperature.increment\u2019 rate.

                    Click Apply for changes to take affect. The updated() method is called after settings are applied for the new configuration.

                    After completing this tutorial, it is highly recommended that you review the heater demo source code in Eclipse to see how it is put together. Kura automatically generates the user configuration interface through implementation of the ConfigurableComponent interface and some small additions to the component.xml file (called heater.xml). This powerful feature provides both a local and remote configuration user interface with no additional development requirements.

                    "},{"location":"java-application-development/contributing/","title":"Contributing","text":"

                    Contributing to Eclipse Kura project is very easy.

                    The steps required to submit code to the project can be found on Github Contributing Page.

                    If you face any issues, or just want to get involved with the kura community feel free to join us on:

                    • Github Issues: for bug reporting.
                    • Github Discussions: for receiving feedback, making new proposals and generally talking about the project.
                    "},{"location":"java-application-development/contributing/#kura-dev-meeting","title":"Kura Dev Meeting","text":"

                    If you want to get involved in the development process you can join us at the Kura Dev Meeting. The meeting is held every 2 weeks on Wednesday, at 5 PM CEST on Microsoft Teams.

                    You can join by using this link.

                    The scheduled dates for the meeting can be found here. Unzip the calendar file and double-click on it to add the scheduled dates to your calendar.

                    "},{"location":"java-application-development/deploy-and-debug-applications/","title":"Deploy and Debug Applications","text":""},{"location":"java-application-development/deploy-and-debug-applications/#overview","title":"Overview","text":"

                    This section provides a simple example of how to test and deploy OSGi bundles and deployment packages in a Kura environment. These instructions use the \u201cHello World\u201d OSGi project created in the previous section. In this example, you will learn how to perform the following functions:

                    • Use local OSGi emulation mode in Eclipse

                    • Deploy a bundle to a remote target running the OSGi Framework

                    • Install a Deployment Package to a remote target running the OSGi Framework

                    • Manage OSGi bundles on a target device

                    • Set bundle Logger levels in Kura

                    "},{"location":"java-application-development/deploy-and-debug-applications/#prerequisites","title":"Prerequisites","text":"

                    • Setting up Kura Development Environment

                    • Hello World Using the Kura Logger

                    "},{"location":"java-application-development/deploy-and-debug-applications/#testing-the-osgi-plug-in","title":"Testing the OSGi Plug-in","text":"

                    Once you have created an OSGi plug-in, you can test it in Local Emulation Mode and/or deploy it to a Remote Target Device.

                    "},{"location":"java-application-development/deploy-and-debug-applications/#local-emulation-mode","title":"Local Emulation Mode","text":"

                    The Kura user workspace can be used in Eclipse in local emulation mode (Linux/OS X only; this feature is not currently supported under Windows). To deploy the code to a running system, see the section Remote Target Device.

                    "},{"location":"java-application-development/deploy-and-debug-applications/#run-kura-in-emulator-mode","title":"Run Kura in Emulator Mode","text":"

                    In the Eclipse workspace, locate the org.eclipse.kura.emulator project. Expand it to show the src/main/resources folder.

                    Right-click the Kura_Emulator.launch file. In the context menu, select the Run as option, and select the Kura_Emulator*. This will start Kura running locally and will display a Console window in the bottom pane in Eclipse. The Console window will show the OSGi diagnostics as various bundles start and execute.

                    Because the org.eclipse.kura.example.hello_osgi bundle is in the workspace with a valid activate() method, it is automatically started with the Kura OSGi framework. Note the INFO message highlighted below that shows the bundle\u2019s activate() method was run.

                    "},{"location":"java-application-development/deploy-and-debug-applications/#list-osgi-bundles-in-local-mode","title":"List OSGi Bundles in Local Mode","text":"

                    With the OSGi framework running in the Eclipse console (refer to the previous section), click in the Console window. Press Enter/Return and then type the \u2018ss\u2019 command to show a list of installed bundles. Note the bundle ID number for the org.eclipse.kura.example.hello_osgi bundle.

                    "},{"location":"java-application-development/deploy-and-debug-applications/#startstop-bundle-in-local-mode","title":"Start/Stop Bundle in Local Mode","text":"

                    In the OSGi Console window in Eclipse, run the

                    start ## or stop ##

                    commands to start or stop a bundle, where the \u201c##\u201d is either the bundle ID number or the bundle name (such as \u201cstart org.eclipse.kura.example.hello_osgi\u201d). Note that the INFO messages for both the activate() and deactivate() messages appear in the Console window when the bundle is started or stopped.

                    "},{"location":"java-application-development/deploy-and-debug-applications/#installuninstall-bundle-in-local-mode","title":"Install/Uninstall Bundle in Local Mode","text":"

                    In the OSGi Console window in Eclipse, bundles can be installed or uninstalled. To uninstall the example bundle, issue the command \u2018uninstall ##\u2019, where \u201c##\u201d is either the bundle ID number or the bundle name, such as:

                    uninstall 47 or uninstall org.eclipse.kura.example.hello_osgi

                    A message will appear indicating that the bundle has been stopped.

                    Once the bundle has been uninstalled from the local OSGi console, it cannot be started or installed by number or name. Instead, it must be installed by using the plug-in JAR file created earlier. Issue the \u2018install\u2019 command to install a bundle into the Emulation environment:

                    install file:/[*path_to_bundle*]/[*bundle_name*].jar

                    where \u201c[path_to_bundle]/[bundle_name].jar\u201d should be replaced with the name of the bundle exported earlier (the section Hello World Using the Kura Logger), as shown in the example below:

                    install file:/Users/Nina/Documents/myPlugins/plugins/plugins/plugins/plugins/plugins/org.eclipse.kura.example.hello_osgi_ 1.0.0.201409101740.jar

                    Then the bundle can be started or stopped, as described in the previous section, Start/Stop Bundle in Local Mode. Optionally, you can add the flag \u2018-start\u2019 to the \u2018install\u2019 command to automatically start the bundle after installation.

                    "},{"location":"java-application-development/deploy-and-debug-applications/#remote-target-device","title":"Remote Target Device","text":"

                    One or more OSGi bundles can be deployed to a remote device running Kura, either by installing separate bundle files or deployment packages using Eclipse.

                    Warning

                    These steps require Kura to be running on the target device.

                    This method of deployment is temporary on the remote target device and is not persistent after a restart. To make the deployment permanent, see Making Deployment Permanent.

                    "},{"location":"java-application-development/deploy-and-debug-applications/#connect-to-remote-osgi-framework","title":"Connect to Remote OSGi Framework","text":"

                    To deploy a bundle to the remote target device, you will need to connect Eclipse to the OSGi framework running on the device. This is done using mToolkit. See Kura Setup for instructions on installing mToolkit into the Eclipse development environment.

                    • Select the Eclipse menu Window | Show View | Other.

                    • Select mToolkit -> Frameworks entry to open the mToolkit Frameworks view.

                    • Enter a name for the framework definition and the IP address of the target device.

                    Close the dialog by clicking the OK button.

                    Warning

                    The remote target device must have port 1450 open in its firewall, in order to allow mToolkit o make a connection to its OSGi framework. If this port is not opened, refer to the section Open Port for OSGi Remote Connection.

                    Right-click the framework icon name and select Connect Framework. The list of installed bundles and deployment packages should be retrieved shortly. (Use the Disconnect Framework option to disconnect from the remote target framework when finished.)

                    "},{"location":"java-application-development/deploy-and-debug-applications/#open-port-for-osgi-remote-connection","title":"Open Port for OSGi Remote Connection","text":"

                    In order to allow mToolkit to make a remote connection to the OSGi framework on the target device, the device must allow the incoming port in its firewall. To set this option, open a Web browser and log into Kura using its current IP address, such as:

                    http://10.11.5.4

                    Click the Firewall icon and then click the Open Ports tab. If port 1450 is not shown in the list of allowed ports, click the New button under Open Ports. Enter the port 1450 and select protocol TCP. Then click Submit.

                    Now, click Apply to apply changes to the remote device.

                    "},{"location":"java-application-development/deploy-and-debug-applications/#install-single-bundle-to-target-device","title":"Install Single Bundle to Target Device","text":"

                    With the Eclipse environment connected to the remote OSGi target framework, a single bundle can be installed on the remote device.

                    In the mToolkit Frameworks view, right-click the Framework name and select Install Bundle. (This requires that you have exported the bundle as a deployable plug-in JAR file. See the section Hello World Using the Kura Logger.)

                    Use the Browse button to select the JAR file and click OK to install it to the target device.

                    The newly installed bundle should be shown in the Frameworks view under Bundles.

                    To control operation of the bundle through the OSGi Frameworks view, right-click the bundle name. The following actions can be performed:

                    • Start \u2013 start the bundle

                    • Stop \u2013 stop the bundle

                    • Update \u2013 reinstall the bundle

                    • Install Bundle \u2013 install a different bundle

                    • Uninstall Bundle \u2013 remove this bundle from the target device

                    • Show Bundle IDs / Show Bundle Versions \u2013 show additional information about bundles

                    You can also verify operation of the bundle on the target device itself. See the section Manage Bundles on Target Device.

                    "},{"location":"java-application-development/deploy-and-debug-applications/#install-deployment-package-to-target-device","title":"Install Deployment Package to Target Device","text":"

                    With the Eclipse environment connected to the remote OSGi target framework, a deployment package can be installed on the remote device.

                    NOTE: If you have just installed the individual bundle in the previous section, you should uninstall it before proceeding. Doing so will avoid any confusion in having the same bundle installed twice.

                    In the mToolkit Frameworks view, right-click the Framework name and select Install Deployment Package. (This step requires that you have exported the bundle as a deployable plug-in JAR file. See the section Hello World Using the Kura Logger for instructions on exporting the OSGi bundle.)

                    Open the resources/dp folder in the Workspace filesystem directory, select the .dp file (not the \u201c.dpp\u201d file), and click OK.

                    The deployment package will be installed on the target device and shown in the Frameworks view under Deployment Packages. (The deployment package can also be uninstalled from the Framework view.)

                    The bundle included in the deployment package can also be viewed under Bundles and can be controlled remotely (start/stop) as with other bundles. The operation of the bundle can also be verified on the target device itself. See the section Manage Bundles on Target Device.

                    "},{"location":"java-application-development/deploy-and-debug-applications/#connect-to-osgi-on-target-device","title":"Connect to OSGi on Target Device","text":"

                    You can manage the OSGi framework on a target device by logging into a console on the device using a connected keyboard and VGA monitor or over a network connection using SSH (PuTTY in Windows or \u2018ssh\u2019 from Linux or Mac).

                    At the command prompt, display the Kura log file with:

                    tail -f /var/log/kura.log

                    Connect to the OSGi framework by typing the following commands:

                    telnet localhost 5002

                    There are many commands available in the OSGi console for managing bundles. Following are just a few useful commands:

                    Command Description ss Lists names and ID of bundles help Displays the help menu of OSGi commands lb Lists all installed bundles and IDs h [bundle IDs] Displays bundle headers (i.e., Bundle Manifest Version, Name, Required Execution Environment, Symbolic Name, Version, Import Package, Manifest Version, and Service Component) exit Exits the OSGi console and stops Kura disconnect Exits the OSGi console, but leaves Kura running"},{"location":"java-application-development/deploy-and-debug-applications/#manage-bundles-on-target-device","title":"Manage Bundles on Target Device","text":"

                    From the OSGi command line, you can display a list of bundles with the \u2018ss\u2019 command as shown in the example below:

                    ss

                    In this example, the org.eclipse.kura.example.hello_osgi bundle ID is 64.

                    You can run the \u2018start ##\u2019 or \u2018stop ##\u2019 commands to start or stop a bundle, where the \u201c##\u201d is either the bundle ID number or the bundle name (such as \u201cstart org.eclipse.kura.example.hello_osgi\u201d). To verify that the bundled is stopped, you can issue the \u2018ss\u2019 command. If the bundled is stopped, the activity will show RESOLVED (as shown below). If the bundle is started, the activity will show ACTIVE (as shown above).

                    "},{"location":"java-application-development/deploy-and-debug-applications/#set-kura-logger-levels","title":"Set Kura Logger Levels","text":"

                    Kura logger levels are defined in a configuration file. The messages that appear require a log statement in the application and that the log level of the statement matches the log level of the application (such as logger.info or logger.debug).

                    To set or change logger levels, the Kura logger configuration file may be modified using the vi editor. From the Linux command prompt, enter the following command:

                    vi /opt/eclipse/kura/kura/log4j.properties

                    At the bottom of the \u201clog4j.properties\u201d file, there will be one or more \u201clog4j\u201d logger property entries, which determine the logger level used by the bundles at startup.

                    In the example screen capture shown below, the \u201clog4j.logger.org.eclipse.kura\u201d property has been set to \u201cINFO\u201d, which applies to all bundles that start with \u201corg.eclipse.kura.\u201d Additional, more specific, properties may be defined as required for your particular logging needs. The property entries will take on the defined logger level at startup. The logger levels are hierarchical, so that those in a deeper level of the hierarchy will apply; otherwise, the more general logger level will override them.

                    Once you have made the necessary changes, save and close the file using the \u2018:wq\u2019 command. Restart Kura, and check the log levels in the OSGi console again to make sure that the desired levels have taken effect.

                    "},{"location":"java-application-development/deploy-and-debug-applications/#making-deployment-permanent","title":"Making Deployment Permanent","text":"

                    The mToolkit deployment of a package is a temporary installation and does not make the package permanent. Once a set of bundles has been tested on the remote target device and is ready for permanent deployment, the software can be installed on a device with deployment packages from the command line of a target device using the instructions below:

                    1. Copy the deployment package file (*.dp) to the target device, into the folder:

                    /opt/eclipse/kura/kura/packages

                    1. Edit the dpa.properties file through the vi editor by entering the following command:

                    vi /opt/eclipse/kura/kura/dpa.properties

                    1. Add an entry in the dpa.properties file to include the new package name, such as:

                    package_name=file\\:/opt/eclipse/kura/kura/packages/package_filename.dp

                    where, \u201cpackage_name\u201d and \u201cpackage_filename\u201d should be replaced with the actual name of the deployment package.

                    1. Save and close the file using the \u2018:wq\u2019 command.

                    2. Then restart Kura, and the new package should be installed in addition to the default Kura package.

                    In conclusion, this section described how to test a bundle in an Emulation environment within the Eclipse IDE and how to install bundles and Deployment Packages to a remote target system running Kura.

                    "},{"location":"java-application-development/development-environment-setup/","title":"Development Environment Setup","text":"

                    In this document we'll cover the required steps to setup the Development Environment for contributing to the Eclipse Kura project. If, instead, you want to develop applications or bundles running on Eclipse Kura refer to the Eclipse Kura Workspace setup guide.

                    The Eclipse Kura development environment may be installed on Windows, Linux, or Mac OS. The setup instructions will be the same across each OS though each system may have unique characteristics.

                    Info

                    The local emulation of Eclipse Kura code is only supported in Linux and Mac, not in Windows.

                    This document will cover the use of Eclipse Oomph installer which is the easiest way to install and configure the Eclipse IDE to start contributing to Eclipse Kura.

                    The setup requires three basic steps:

                    1. Requirements installation
                    2. Eclipse Oomph setup
                    3. Eclipse Kura maven build
                    "},{"location":"java-application-development/development-environment-setup/#requirements","title":"Requirements","text":"

                    Before building Eclipse Kura, you need to have the following programs installed in your system:

                    • JDK 1.8 (or JDK 17)
                    • Maven 3.5.x (or greater)

                    Recommended additional software:

                    • Git
                    "},{"location":"java-application-development/development-environment-setup/#installing-prerequisites-in-mac-os","title":"Installing Prerequisites in Mac OS","text":"

                    To install Java 8, download the JDK tar archive from the Adoptium Project Repository.

                    Once downloaded, copy the tar archive in /Library/Java/JavaVirtualMachines/ and cd into it. Unpack the archive with the following command: 

                    sudo tar -xzf <archive-name>.tar.gz\n
                    The tar archive can be deleted afterwards.

                    Depending on which terminal you are using, edit the profiles (.zshrc, .profile, .bash_profile) to contain: 

                    # Adoptium JDK 8\nexport JAVA_8_HOME=/Library/Java/JavaVirtualMachines/<archive-name>/Contents/Home\nalias java8='export JAVA_HOME=$JAVA_8_HOME'\njava8 \n
                    Reload the terminal and run java -version to make sure it is installed correctly.

                    Using Brew you can easily install Maven from the command line: 

                    brew install maven@3.5\n
                    Run mvn -version to ensure that Maven has been added to the PATH. If Maven cannot be found, try running brew link maven@3.5 --force or manually add it to your path with: 
                    export PATH=\"/usr/local/opt/maven@3.5/bin:$PATH\"\n

                    "},{"location":"java-application-development/development-environment-setup/#installing-prerequisites-in-linux","title":"Installing Prerequisites in Linux","text":"

                    For Java 

                    sudo apt install openjdk-8-jdk\n

                    For Maven

                    You can follow the tutorial from the official Maven site. Remember that you need to install 3.5.x version or greater.

                    "},{"location":"java-application-development/development-environment-setup/#eclipse-oomph-setup","title":"Eclipse Oomph setup","text":"

                    Download the latest Eclipse Installer appropriate for your platform from the Eclipse Downloads page and start it.

                    Switch to \"Advanced Mode\" (top right hamburger menu) and select \"Eclipse IDE for Eclipse Committers\" and configure the \"Product Version\" to be the version 2023-03 or newer.

                    Select the Eclipse Kura installer from the list. If this is not available, add a new installer from https://raw.githubusercontent.com/eclipse/kura/develop/kura/setups/kura.setup, then check and press the \"Next\" button.

                    Variables setup

                    • Select the \"Developer Type\":
                      • \"User\": if you want to develop applications or bundles running on Eclipse Kura, select this option. It will install only the APIs and the examples.
                      • \"Developer\": if you are a framework developer, select this option. It will download and configure the Eclipse Kura framework (for the purpose of this document we'll use this option)
                    • Set the JRE 1.8 location value to the installed local jdk-8 VM
                    • Update Eclipse Kura Git repository username (prefer the anonymous HTTPS option, link to your fork) and customize further settings if you like (e.g. Root install folder, Installation folder name). To show these options, make sure that the \"Show all variables\" checkbox is enabled.

                    If you plan to contribute to Eclipse Kura you might want to create a fork, see our contributing guide for further informations. For the purpose of this tutorial we'll work with a fictional fork for the username user. To clone the repo use the link appropriate for your fork, in our case it will be: https://github.com/user/kura.git

                    Keep in mind that the \"Root install folder\" is where the Eclipse executable will be installed and the Eclipse Kura sources will be downloaded (in the git subfolder).

                    Press Next, leave all Bootstrap Tasks selected and press the Finish button

                    Accept all the licenses and wait for the installation to finish.

                    At first startup Eclipse IDE will checkout the code, perform a full build and configure a few Working Sets

                    When the tasks are completed, go to into the Package Explorer and Target Platform > Target-Definition > Kura Target Platform Equinox 3.16.0, and press \"Set as Target Platform\" located at the top right of the window:

                    "},{"location":"java-application-development/development-environment-setup/#eclipse-kura-maven-build","title":"Eclipse Kura maven build","text":"

                    Navigate to the git folder created within the Eclipse workspace (~/iot-kura-workspace in the example above) and build the target platform:

                    mvn -f target-platform/pom.xml clean install\n

                    Then build the core components:

                    mvn -f kura/pom.xml clean install\n

                    Build the examples (optional):

                    mvn -f kura/examples/pom.xml clean install\n

                    Build the target profiles:

                    mvn -f kura/distrib/pom.xml clean install -DbuildAll\n

                    Note

                    You can skip tests by adding -Dmaven.test.skip=true in the commands above and you can compile a specific target by specifying the profile (e.g. -Praspberry-pi-armhf).

                    "},{"location":"java-application-development/development-environment-setup/#build-scripts","title":"Build scripts","text":"

                    Alternatively you can use the build scripts available in the root directory.

                    ./build-all.sh\n

                    or

                    ./build-menu.sh\n

                    and select the profiles you want to build.

                    "},{"location":"java-application-development/hello-world-application/","title":"Hello World Application","text":""},{"location":"java-application-development/hello-world-application/#overview","title":"Overview","text":"

                    This section provides a simple example of how to create a Kura \u201cHello World\u201d OSGi project using Eclipse. With this example, you will learn how to perform the following functions:

                    • Create a plugin project

                    • Consume the Kura Logger service

                    • Write an OSGi Activator

                    • Export a single OSGi bundle (plug-in)

                    • Create a Deployment Package

                    "},{"location":"java-application-development/hello-world-application/#prerequisites","title":"Prerequisites","text":"

                    Setting up the Kura Development Environment

                    "},{"location":"java-application-development/hello-world-application/#hello-world-using-the-kura-logger","title":"Hello World Using the Kura Logger","text":""},{"location":"java-application-development/hello-world-application/#create-hello-world-plug-in","title":"Create Hello World Plug-in","text":"

                    In Eclipse, create a new Plug-in project by selecting File | New | Project. Select Plug-in Development | Plug-in Project and click Next.

                    Your screen should display the New Plug-in Project dialog box as shown in the following screen capture. Enter your project a name, such as \u201corg.eclipse.kura.example.hello_osgi\u201d, in the appropriate field. Under Target Platform, ensure that the an OSGi framework option button is selected and set the variable to standard as shown below. You can also (optionally) add projects to a working set. To continue, click Next.

                    In the next New Plug-in Project menu (shown below), change the Name field to a descriptive name, such as \u201cHello World Example with Logger\u201d.

                    Also, verify that the Execution Environment list is set to match the Java JVM version running on the target device (JavaSE-1.8 or JavaSE-11). To determine the JVM version running on the target device, log in to its administrative console and enter the command

                    java \u2013version

                    Finally, uncheck the Generate an activator, a Java class that controls the plug-in\u2019s life cycle option button. For the purposes of this example, a single class will be used. An Activator class will not be created; instead, OSGi Declarative Services will be used to start and stop the bundle.

                    Click Finish.

                    If the Open Associated Perspective pop-up window (shown below) appears for adding Plug-ins and Error Log views, select Yes or No depending on your development requirements.

                    You should see the new project in the My Projects working set in the Package Explorer (or Project Explorer). Also, you will see the MANIFEST.MF was automatically opened in the Manifest Editor. An OSGi bundle is a regular Java .jar file that contains Java code and resources and a custom Manifest and an Activator.

                    "},{"location":"java-application-development/hello-world-application/#add-dependencies-to-manifest","title":"Add Dependencies to Manifest","text":"

                    First, you will use the Manifest Editor in Eclipse to add some dependencies. Click the Dependencies tab at the bottom of the editor screen and then click the Automated Management of Dependencies heading to expand it.

                    Under Automated Management of Dependencies, click Add. In the Select a Plug-in field, enter org.eclipse.osgi.services. Select the plug-in name and click OK.

                    Note that this operation is very much like adding standalone jars to the buildpath by including the \u2018-cp\u2019 argument to javac. However, in this case you are telling Eclipse where to find these dependencies the \u201cOSGi way\u201d, so it is aware of them at compile time. Click Add again and use the same procedure to add the following dependency:

                    • slf4j.api

                    You should now see the list of dependencies. Save changes to the Manifest.

                    "},{"location":"java-application-development/hello-world-application/#create-java-class","title":"Create Java Class","text":"

                    Now you are ready to start writing a simple Java class. Right-click the org.eclipse.kura.example.hello_osgi project. Select New | Class. The New Java Class window appears as shown below. Set the Source folder to org.eclipse.kura.example.hello_osgi/src. Set the Package field to org.eclipse.kura.example.hello_osgi, set the Name field to HelloOsgi, and then click Finish.

                    Write the following code for the new class. You can copy and paste the code provided below into your newly created Java class file.

                    package org.eclipse.kura.example.hello_osgi;\n\npublic class HelloOsgi {\n\n    private static final Logger s_logger = LoggerFactory.getLogger(HelloOsgi.class);\n\n    private static final String APP_ID = \"org.eclipse.kura.example.hello_osgi\";\n\n    protected void activate(ComponentContext componentContext) {\n\n        s_logger.info(\"Bundle \" + APP_ID + \" has started!\");\n\n        s_logger.debug(APP_ID + \": This is a debug message.\");\n\n    }\n\n    protected void deactivate(ComponentContext componentContext) {\n\n        s_logger.info(\"Bundle \" + APP_ID + \" has stopped!\");\n\n    }\n\n}\n

                    The activate() method is the entry point when the bundle in started. The deactivate() method is the entry point when the bundle is stopped.

                    Notice the use of the private LoggerFactory.getLogger() method. If the LoggerFactory method is present (running) in the OSGi framework and your hello_osgi bundle is started, your activate method is called, and you can simply access the service by calling the getLogger() method.

                    One convenient feature of Eclipse, auto-completion, is worth mentioning here. If you type \u2018s_logger.\u2019 (instance name of the \u201cLoggerFactory.getLogger\u201d method) and stop after the period, it will show you a list of methods implemented in that class. The examples above show two different methods used for logging messages. Logger methods include: \u201cerror\u201d, \u201cwarn\u201d, \u201cinfo\u201d, \u201cdebug\u201d, and \u201ctrace\u201d, which represent increasingly lower (more detailed) levels of log information. Logger levels should generally be used to represent the following conditions:

                    • ERROR - A serious problem has occurred that requires attention from the system administrator.

                    • WARNING - An action occurred or a condition was discovered that should be reviewed and may require action before an error occurs. It may also be used for transient issues.

                    • INFO - A report of a normal action or event. This could be a user operation, such as \"login completed\", or an automatic operation, such as a log file rotation.

                    • DEBUG - A debug message used for troubleshooting or performance monitoring. It typically contains detailed event data including things an application developer would need to know.

                    • TRACE - A fairly detailed output of diagnostic logging, such as actual bytes of a particular message being examined.

                    "},{"location":"java-application-development/hello-world-application/#resolve-dependencies","title":"Resolve Dependencies","text":"

                    At this point, there will be errors in your code because of unresolved imports.

                    Select the menu Source | Organize Imports to resolve these errors. Because you added the \u201corg.slf4j\u201d to your dependency list, you will be prompted to choose one of two potential sources for importing the \u201cLogger\u201d class. Select org.slf4j.Logger and click Finish.

                    Now the errors in the class should have been resolved. Save the HelloOsgi class.

                    The complete set of code (with import statements) is shown below.

                    package org.eclipse.kura.example.hello_osgi;\n\nimport org.osgi.service.component.ComponentContext;\n\nimport org.slf4j.Logger;\n\nimport org.slf4j.LoggerFactory;\n\npublic class HelloOsgi {\n\n    private static final Logger s_logger = LoggerFactory.getLogger(HelloOsgi.class);\n\n    private static final String APP_ID = \"org.eclipse.kura.example.hello_osgi\";\n\n    protected void activate(ComponentContext componentContext) {\n\n        s_logger.info(\"Bundle \" + APP_ID + \" has started!\");\n\n        s_logger.debug(APP_ID + \": This is a debug message.\");\n\n    }\n\n    protected void deactivate(ComponentContext componentContext) {\n\n        s_logger.info(\"Bundle \" + APP_ID + \" has stopped!\");\n\n    }\n\n}\n

                    For more information on using the Simple Logging Facade for Java (slf4j), see the Logger API.

                    Switch back to the Manifest Editor. Under Automated Management of Dependencies, ensure the Import-Package option button is selected. Click the add dependencies link to automatically add packages to the dependencies list based on the \u201cimport\u201d statements in your example code. Save changes to the Manifest again.

                    "},{"location":"java-application-development/hello-world-application/#create-component-class","title":"Create Component Class","text":"

                    Right-click the example project and select New | Other. From the wizard, select Plug-in Development | Component Definition and click Next.

                    Warning

                    This option is available only if the Plug-in Development Environment (PDE) is installed in Eclipse (plugins can be installed into Eclipse IDE by searching the name in the Eclipse Marketplace under the Help menu).

                    In the Class field of the New Component Definition window shown below, click Browse.

                    Enter the name of your newly created class in the Select entries field. In this case, type the word \u201chello\u201d, and you will see a list of matching items. Select the HelloOsgi class and click OK.

                    In the Enter or select the parent folder field of the New Component Definition window, add \"/OSGI-INF\" to the existing entry (e.g., org.eclipse.kura.example.hello_osgi/OSGI-INF). Then click Finish.

                    After the Component class has been created, it will open in the Workspace. In the Overview tab, the Name and Class point to our Java class. Set the Activate field to activate and set the Deactivate field to deactivate. Doing so tells the component where these OSGi activation methods are located. Then save the Component class definition file.

                    "},{"location":"java-application-development/hello-world-application/#deploying-the-plug-in","title":"Deploying the Plug-in","text":"

                    The next few sections describe how to create a stand-alone JAR file as a deployable OSGI plug-in and how to create an installable Deployment Package.

                    An OSGi bundle is a Java archive file containing Java code, resources, and a Manifest.

                    A Deployment Package is a set of resources grouped into a single package file that may be deployed in the OSGi framework through the Deployment Admin service and may contain one or more bundles, configuration objects, etc.

                    "},{"location":"java-application-development/hello-world-application/#export-the-osgi-bundle","title":"Export the OSGi Bundle","text":"

                    Your bundle can be built as a stand-alone OSGi plug-in.

                    To do so, right-click the project and select the Export menu. This is equivalent to running javac on your project. From the wizard, select Plug-in Development | Deployable plug-ins and fragments and click Next.

                    Under Available Plug-ins and Fragments of the Export window, ensure the newly created plug-in is selected. Under Destination, select the Directory option button and use the Browse button to select an appropriate place to save the JAR file on the local file system.

                    NOTE: During the deployment process that is described in the following section, you will need to remember the location where this JAR file is saved.

                    Click Finish.

                    This will create a JAR file in the selected directory (e.g., /home/joe/myPlugins/plugins/org.eclipse.kura.example.hello_osgi_1.0.0.jar).

                    "},{"location":"java-application-development/hello-world-application/#create-a-deployment-package","title":"Create a Deployment Package","text":"

                    Rather than creating a stand-alone plug-in, you can also create a Deployment Package that contains multiple bundles, configuration elements, etc. that can be deployed into an OSGi framework. In this example, you will simply create a Deployment Package containing the \u201chello_osgi\u201d bundle. This step requires mToolkit to be installed. (See Kura Setup for instructions on setting up the Eclipse development environment.)

                    Right-click the project and select New | Folder. Select the org.eclipse.kura.example.hello_osgi project and enter a folder named \u201cresources\u201d.

                    Then repeat this step to create a folder named \u201cdp\u201d under the resources folder. The resources/dp folder will be used to store the Deployment Package.

                    Select File | New | Other. Select OSGi | Deployment Package Definition and click Next.

                    Ensure that the Target folder field of the New dpp file window is set to the /[project_name]/resources/dp folder. In the File name field, enter the name for the new Deployment Package file to create, such as \u201chello_osgi\u201d. A version number can also be entered in the Version field. Then click Finish.

                    Under the resources/dp folder in your project, verify that the [filename].dpp file was created. This is a Deployment Package Project that provides information needed to create the Deployment Package, such as its output directory, ant build file, etc.

                    Select the Bundles tab and then click New. In the Bundle Path column, select the browse icon. Browse to the bundle\u2019s JAR file created earlier. Select the file and click Open. Doing so should populate the remaining columns as needed.

                    Save changes to the deployment package file.

                    In the resources/dp folder, right-click the .dpp file. Select Quick Build. A new [filename].dp file will be created in the same directory. This is the final Deployment Package that can be installed on a remote target system.

                    In conclusion, you were able to create a new bundle from scratch, write the Java code and Activator, modify the Manifest, and build the plug-in and/or Deployment Package that can be used in a Kura environment.

                    The next steps will be to test your code in an Emulation mode and/or to deploy your code to a target system running Kura. See Testing and Deploying Bundles to continue with those steps.

                    "},{"location":"java-application-development/how-to-manage-network-settings/","title":"How to manage Network Settings","text":"

                    This section provides an example of how to create a Kura bundle that can be used to configure the network interfaces of your device. In this example, you will learn how to perform the following functions:

                    • Create a plugin that configures the network interfaces

                    • Connect to a wireless access point

                    • Create a wireless access point

                    As written, the example code configures the device with a static Wi-Fi configuration. Typically, the device settings would be defined through the Kura Gateway Administration Console instead of through Java code.

                    A more practical application of this example is for IP network interfaces that need to be dynamically modified based on some external trigger or condition, such as geo-fencing. The Kura framework allows the device to be programmatically changed via its APIs based on application-specific logic.

                    "},{"location":"java-application-development/how-to-manage-network-settings/#prerequisites","title":"Prerequisites","text":"

                    Setting up the Eclipse Kura Development Environment

                    "},{"location":"java-application-development/how-to-manage-network-settings/#network-configuration-with-kura","title":"Network Configuration with Kura","text":""},{"location":"java-application-development/how-to-manage-network-settings/#hardware-setup","title":"Hardware Setup","text":"

                    This example requires an embedded device running Kura with at least one Ethernet port and Wi-Fi support.

                    Additionally, the Connect to an Access Point section requires a wireless access point and the following information about the access point:

                    • SSID (Network Name)

                    • Security Type (WEP, WPA, or WPA2), if any

                    • Password/Passphrase, if any

                    Lastly, the Create an Access Point section requires:

                    • A wireless device, such as a laptop, to test the access point.

                    • Optionally, you may connect the Kura device\u2019s Ethernet port to another network and use Kura as a gateway to that network.

                    "},{"location":"java-application-development/how-to-manage-network-settings/#determine-your-network-interfaces","title":"Determine Your Network Interfaces","text":"

                    In order to determine your network interfaces, run one of the following commands at a terminal on the embedded gateway:

                    ifconfig -a or ip link show

                    Typical network interfaces will appear as follows:

                    • lo - loopback interface

                    • eth0 - first Ethernet network interface

                    • wlan0 - first wireless network interface

                    • ppp0 - first point-to-point protocol network interface, which could be a dial-up modem, PPTP VPN connection, cellular modem, etc.

                    Make note of your wireless interface. For this tutorial, we will assume the wireless interface name is \u2018wlan0\u2019.

                    "},{"location":"java-application-development/how-to-manage-network-settings/#kura-networking-api","title":"Kura Networking API","text":"

                    The networking API consists of two basic services: org.eclipse.kura.net.NetworkService and org.eclipse.kura.net.NetworkAdminService.

                    The NetworkService is used to get the current state of the network. For example, the getNetworkInterfaces() method will return a List of NetInterface objects (such as EthernetInterface or WifiInterface) for each interface. This provides a detailed representation of the current state of that interface, such as its type, whether it is currently up, and its current address, which is returned by the getNetInterfaceAddresses() method as a List of NetInterfaceAddress objects. The NetworkService can also be used to get a list of all the network interface names available on the system, or a list of all the Wi-Fi access points that are currently detected by the system.

                    The NetworkAdminService is used to get and set the configuration for each interface. Similar to the NetworkService, it has a getNetworkInterfaceConfigs() that returns a List of NetInterfaceConfig objects (such as EthernetInterfaceConfig and WifiInterfaceConfig) for each interface. These have the same methods as a NetInterface object but represent the current configuration for that interface. For a NetInterfaceConfig object, the getNetInterfaceAddress() method will return a List of NetInterfaceAddressConfig objects. These NetInterfaceAddressConfig instances, in turn, contain a List of NetConfig objects that define the configuration for that interface.

                    There are many types of NetConfig objects, including:

                    • NetConfigIP4 - contains the IPv4 address configuration

                    • WifiConfig - contains the Wi-Fi configuration. Note that a WifiInterfaceAddressConfig may contain multiple WifiConfigs, since a configuration might exist for one or more Wi-Fi modes. The currently active WifiConfig is the one with a WifiMode that matches the WifiInterfaceAddressConfig WifiMode.

                    • DhcpServerConfigIP4 - contains the IPv4-based DHCP server configuration

                    • DnsServerConfigIP4 - contains the IPv4-based DNS server configuration

                    • FirewallNatConfig - contains the firewall NAT configuration

                    These NetConfigs can also be used to configure an interface by providing them as a list to the updateEthernetInterfaceConfig(), updateWifiInterfaceConfig(), or updateModemInterfaceConfig() methods in the NetworkAdminService.

                    "},{"location":"java-application-development/how-to-manage-network-settings/#connect-to-an-access-point","title":"Connect to an Access Point","text":"

                    In this section, you will develop a Kura network configuration bundle that sets up the Wi-Fi interface as a client to a wireless access point.

                    "},{"location":"java-application-development/how-to-manage-network-settings/#implement-the-bundle","title":"Implement the Bundle","text":"

                    To implement the network configuration bundle, perform the following steps:

                    Note

                    For more detailed information about bundle development (i.e., the plug-in project, classes, and MANIFEST file configuration), please refer to the Hello World Application

                    • Create a Plug-in Project named org.eclipse.kura.example.network; set the an OSGi framework option to standard; uncheck the Generate an activator option; and set the Execution Environment variable to match the JVM on your target device.

                    • Include the following bundles in the MANIFEST.MF:

                    • org.eclipse.kura
                    • org.eclipse.kura.net
                    • org.eclipse.kura.net.dhcp
                    • org.eclipse.kura.net.firewall
                    • org.eclipse.kura.net.wifi
                    • org.osgi.service.component

                    • org.slf4j

                    • Create a class named NetworkConfigExample in the org.eclipse.kura.example.network project.

                    • Create an OSGI-INF folder in the org.eclipse.kura.example.network project. Add a Component Class with the parent folder org.eclipse.kura.example.network/OSGI-INF, Component Name org.eclipse.kura.example.network, and Class org.eclipse.kura.example.network.NetworkConfigExample.

                    • Select the Services tab in the component.xml file. Under Referenced Services, add org.eclipse.kura.net.NetworkAdminService. Edit the properties of this service, and configure the Bind property to setNetworkAdminService and Unbind to unsetNetworkAdminService as shown in the following screen capture. These settings are required because of the dependency on NetworkAdminService.

                    The following source code will also need to be implemented:

                    • META-INF/MANIFEST.MF - OSGI manifest that describes the bundle and its dependencies.

                    • OSGI-INF/component.xml - declarative services definition describing what services are exposed by and consumed by this bundle.

                    • org.eclipse.kura.example.network.NetworkConfigExample.java - main implementation class.

                    "},{"location":"java-application-development/how-to-manage-network-settings/#meta-infmanifestmf-file","title":"META-INF/MANIFEST.MF File","text":"

                    The META-INF/MANIFEST.MF file should look as follows when complete:

                    Warning

                    Whitespace is significant in this file; make sure yours matches this file exactly.

                    Manifest-Version: 1.0\nBundle-ManifestVersion: 2\nBundle-Name: Network\nBundle-SymbolicName: org.eclipse.kura.example.network\nBundle-Version: 1.0.0.qualifier\nBundle-Vendor: ECLIPSE\nBundle-RequiredExecutionEnvironment: JavaSE-1.7\nImport-Package: org.eclipse.kura,\n org.eclipse.kura.net,\n org.eclipse.kura.net.dhcp,\n org.eclipse.kura.net.firewall,\n org.eclipse.kura.net.wifi,\n org.osgi.service.component;version=\"1.2.0\",\n org.slf4j;version=\"1.6.4\"\nService-Component: OSGI-INF/component.xml\n
                    "},{"location":"java-application-development/how-to-manage-network-settings/#osgi-infcomponentxml-file","title":"OSGI-INF/component.xml File","text":"
                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\"\n    name=\"org.eclipse.kura.example.network.NetworkConfigExample\"\n    activate=\"activate\"\n    deactivate=\"deactivate\"\n    enabled=\"true\"\n    immediate=\"true\"\n    configuration-policy=\"require\"\n    modified=\"updated\">\n   <implementation class=\"org.eclipse.kura.example.network.NetworkConfigExample\"/>\n   <service>\n        <provide interface=\"org.eclipse.kura.configuration.ConfigurableComponent\"/>\n   </service>\n   <reference name=\"NetworkAdminService\"\n        interface=\"org.eclipse.kura.net.NetworkAdminService\"\n        policy=\"static\"\n        cardinality=\"1..1\"\n        bind=\"setNetworkAdminService\"\n        unbind=\"unsetNetworkAdminService\"/>\n   <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.example.network.NetworkConfigExample\"/>\n</scr:component>\n
                    "},{"location":"java-application-development/how-to-manage-network-settings/#orgeclipsekuraexamplenetworknetworkconfigexamplejava","title":"org.eclipse.kura.example.network.NetworkConfigExample.java","text":"
                    package org.eclipse.kura.example.network;\n\nimport java.util.ArrayList;\nimport java.util.List;\n\nimport org.osgi.service.component.ComponentContext;\nimport org.slf4j.Logger;\nimport org.slf4j.LoggerFactory;\n\nimport org.eclipse.kura.KuraException;\nimport org.eclipse.kura.net.IP4Address;\nimport org.eclipse.kura.net.IPAddress;\nimport org.eclipse.kura.net.NetConfig;\nimport org.eclipse.kura.net.NetConfigIP4;\nimport org.eclipse.kura.net.NetInterfaceStatus;\nimport org.eclipse.kura.net.NetworkAdminService;\nimport org.eclipse.kura.net.dhcp.DhcpServerConfigIP4;\nimport org.eclipse.kura.net.firewall.FirewallNatConfig;\nimport org.eclipse.kura.net.wifi.WifiCiphers;\nimport org.eclipse.kura.net.wifi.WifiConfig;\nimport org.eclipse.kura.net.wifi.WifiMode;\nimport org.eclipse.kura.net.wifi.WifiRadioMode;\nimport org.eclipse.kura.net.wifi.WifiSecurity;\n\npublic class NetworkConfigExample {\n\n  private static final Logger s_logger = LoggerFactory.getLogger(NetworkConfigExample.class);\n\n  private NetworkAdminService m_netAdminService;\n\n  // ----------------------------------------------------------------\n  //\n  //   Dependencies\n  //\n  // ----------------------------------------------------------------\n\n  public void setNetworkAdminService(NetworkAdminService netAdminService) {\n    this.m_netAdminService = netAdminService;\n  }\n\n  public void unsetNetworkAdminService(NetworkAdminService netAdminService) {\n    this.m_netAdminService = null;\n  }\n\n\n  // ----------------------------------------------------------------\n  //\n  //   Activation APIs\n  //\n  // ----------------------------------------------------------------\n\n  protected void activate(ComponentContext componentContext) {\n    s_logger.info(\"Activating NetworkConfigExample...\");\n\n    connectToWirelessAccessPoint();\n//      createWirelessAccessPoint();\n\n    s_logger.info(\"Activating NetworkConfigExample... Done.\");\n  }\n\n  protected void deactivate(ComponentContext componentContext) {\n    s_logger.info(\"Deactivating NetworkConfigExample...\");\n\n    s_logger.info(\"Deactivating NetworkConfigExample... Done.\");\n  }\n\n\n  // ----------------------------------------------------------------\n  //\n  //   Private Methods\n  //\n  // ----------------------------------------------------------------\n\n  /**\n   * Connect to a wireless access point using the hard-coded parameters below\n   */\n  private void connectToWirelessAccessPoint() {\n    String interfaceName = \"wlan0\";\n\n    // Create a NetConfigIP4 - configure as a WAN (gateway) interface, and a DHCP client\n    NetInterfaceStatus netInterfaceStatus = NetInterfaceStatus.netIPv4StatusEnabledWAN;\n    boolean dhcpClient = true;\n    boolean autoConnect = true;\n    NetConfigIP4 netConfigIP4 = new NetConfigIP4(netInterfaceStatus, autoConnect, dhcpClient);\n\n    // Create a WifiConfig managed mode client\n    String driver = \"nl80211\";\n    String ssid = \"access_point_ssid\";\n    String password = \"password\";\n    WifiSecurity security = WifiSecurity.SECURITY_WPA2;\n    WifiCiphers ciphers = WifiCiphers.CCMP_TKIP;\n    int[] channels = {1,2,3,4,5,6,7,8,9,10,11};\n\n    WifiConfig wifiConfig = new WifiConfig();\n    wifiConfig.setMode(WifiMode.INFRA);\n    wifiConfig.setDriver(driver);\n    wifiConfig.setSSID(ssid);\n    wifiConfig.setPasskey(password);\n    wifiConfig.setSecurity(security);\n    wifiConfig.setChannels(channels);\n    wifiConfig.setGroupCiphers(ciphers);\n    wifiConfig.setPairwiseCiphers(ciphers);\n\n    // Create a NetConfig List\n    List<NetConfig> netConfigs = new ArrayList<NetConfig>();\n    netConfigs.add(netConfigIP4);\n    netConfigs.add(wifiConfig);\n\n    // Configure the interface\n    try{\n      s_logger.info(\"Reconfiguring \" + interfaceName + \" to connect to \" + ssid);\n      m_netAdminService.disableInterface(interfaceName);\n      m_netAdminService.updateWifiInterfaceConfig(interfaceName, autoConnect, null, netConfigs);\n\n      s_logger.info(\"Enable \" + interfaceName);\n      m_netAdminService.enableInterface(interfaceName, dhcpClient);\n    } catch(KuraException e) {\n      s_logger.error(\"Error connecting to wireless access point\", e);\n    }\n  }\n\n  /**\n   * Create a wireless access point\n   */\n  private void createWirelessAccessPoint() {\n    try{\n      String interfaceName = \"wlan0\";\n\n      // Create a NetConfigIP4 - configure as a LAN interface with a manual IP address\n      NetInterfaceStatus netInterfaceStatus = NetInterfaceStatus.netIPv4StatusEnabledLAN;\n      boolean dhcpClient = false;\n      boolean autoConnect = true;\n      IP4Address ipAddress = (IP4Address) IPAddress.parseHostAddress(\"172.16.10.1\");\n      IP4Address subnetMask = (IP4Address) IPAddress.parseHostAddress(\"255.255.255.0\");\n\n      NetConfigIP4 netConfigIP4 = new NetConfigIP4(netInterfaceStatus, autoConnect);\n      netConfigIP4.setAddress(ipAddress);\n      netConfigIP4.setSubnetMask(subnetMask);\n\n      // Create a WifiConfig access point\n      String driver = \"nl80211\";\n      String ssid = \"NetworkConfigExample\";\n      String password = \"password\";\n      WifiSecurity security = WifiSecurity.SECURITY_WPA2;\n      WifiCiphers ciphers = WifiCiphers.CCMP_TKIP;\n      int[] channels = {1};\n      WifiRadioMode radioMode = WifiRadioMode.RADIO_MODE_80211g;\n      String hwMode = \"g\";\n\n      WifiConfig wifiConfig = new WifiConfig();\n      wifiConfig.setMode(WifiMode.MASTER);\n      wifiConfig.setDriver(driver);\n      wifiConfig.setSSID(ssid);\n      wifiConfig.setPasskey(password);\n      wifiConfig.setSecurity(security);\n      wifiConfig.setChannels(channels);\n      wifiConfig.setGroupCiphers(ciphers);\n      wifiConfig.setPairwiseCiphers(ciphers);\n      wifiConfig.setRadioMode(radioMode);\n      wifiConfig.setHardwareMode(hwMode);\n\n\n      // Create a DhcpServerConfig to enable DHCP server functionality\n      int defaultLeaseTime = 7200;\n      int maximumLeaseTime = 7200;\n      IP4Address routerAddress = ipAddress;\n      IP4Address rangeStart = (IP4Address) IPAddress.parseHostAddress(\"172.16.10.100\");\n      IP4Address rangeEnd = (IP4Address) IPAddress.parseHostAddress(\"172.16.10.200\");\n      IP4Address dhcpSubnetMask = (IP4Address) IPAddress.parseHostAddress(\"255.255.255.0\");\n      IP4Address subnet = (IP4Address) IPAddress.parseHostAddress(\"172.16.10.0\");\n      short prefix = 24;\n      boolean passDns = true;\n\n      List<IP4Address> dnsServers = new ArrayList<IP4Address>();\n      dnsServers.add(ipAddress);                // Use our IP as the DNS server\n\n      DhcpServerConfigIP4 dhcpServerConfigIP4 = new DhcpServerConfigIP4(\n          interfaceName, true, subnet, routerAddress, dhcpSubnetMask, defaultLeaseTime,\n          maximumLeaseTime, prefix, rangeStart, rangeEnd, passDns, dnsServers);\n\n      // Create a FirewallNatConfig to enable NAT (network address translation)\n      // note that the destination interface is determined dynamically\n      FirewallNatConfig natConfig = new FirewallNatConfig(interfaceName, \"tbd\", true);\n\n\n      // Create a NetConfig List\n      List<NetConfig> netConfigs = new ArrayList<NetConfig>();\n      netConfigs.add(netConfigIP4);\n      netConfigs.add(wifiConfig);\n      netConfigs.add(dhcpServerConfigIP4);\n      netConfigs.add(natConfig);\n\n      // Configure the interface\n      s_logger.info(\"Reconfiguring \" + interfaceName + \" as an access point with SSID: \" + ssid);\n      m_netAdminService.disableInterface(interfaceName);\n      m_netAdminService.updateWifiInterfaceConfig(interfaceName, autoConnect, null, netConfigs);\n\n      s_logger.info(\"Enable \" + interfaceName);\n      m_netAdminService.enableInterface(interfaceName, dhcpClient);\n    } catch(Exception e) {\n      s_logger.error(\"Error configuring as an access point\", e);\n    }\n  }\n}\n

                    Modify the parameters in the connectToWirelessAccessPoint() method with the specific values for the access point you want to connect to, including the variables for SSID, password, and security settings:

                    • String ssid = \"access_point_ssid\";

                    • String password = \"password\";

                    • WifiSecurity security = WifiSecurity.SECURITY_WPA2;

                    At this point, the bundle implementation is complete. Make sure to save all files before proceeding.

                    Export the OSGi bundle as a stand-alone plug-in, following the instructions in Hello World Using the Kura Logger.

                    "},{"location":"java-application-development/how-to-manage-network-settings/#deploy-the-bundle","title":"Deploy the Bundle","text":"

                    In order to proceed, you need to know the IP address of your embedded gateway that is running Kura. Follow the mToolkit instructions for installing a single bundle to the remote target device located here. Once the bundle has finished deploying, it will set the device\u2019s network configuration and attempt to connect to a Wi-Fi access point using the configured parameters in the connectToWirelessAccessPoint() method.

                    "},{"location":"java-application-development/how-to-manage-network-settings/#test-the-connection-to-the-access-point","title":"Test the Connection to the Access Point","text":"

                    To verify that the interface (wlan0) has acquired an IP address, run the ifconfig command at a terminal on the embedded gateway.

                    To show the current connection status to the access point, run the following commands:

                    wpa_cli -i wlan0 status\niw dev wlan0 link\niw dev wlan0 station dump\n
                    "},{"location":"java-application-development/how-to-manage-network-settings/#create-an-access-point","title":"Create an Access Point","text":"

                    This example code can be modified slightly to make the gateway function as an access point instead of connecting to an access point.

                    To do this, modify the activate() method in the NetworkConfigExample.java file to comment out connectToWirelessAccessPoint() and uncomment createWirelessAccessPoint().

                    protected void activate(ComponentContext componentContext) {\n  s_logger.info(\"Activating NetworkConfigExample...\");\n\n//  connectToWirelessAccessPoint();\n  createWirelessAccessPoint();\n\n  s_logger.info(\"Activating NetworkConfigExample... Done.\");\n}\n

                    Modify the access point configuration variables under createWirelessAccessPoint() for your needs, if necessary, such as the variables:

                    IP4Address ipAddress = (IP4Address) IPAddress.parseHostAddress(\"172.16.10.1\");\nIP4Address subnetMask = (IP4Address) IPAddress.parseHostAddress(\"255.255.255.0\");\n\n// Create a WifiConfig access point\nString driver = \"nl80211\";\nString ssid = \"NetworkConfigExample\";\nString password = \"password\";\n

                    Export the bundle again as a stand-alone OSGi plug-in and redeploy it to the target device. It should now reconfigure itself to create an access point with an active DHCP server, DNS proxy forwarding, and NAT enabled.

                    "},{"location":"java-application-development/how-to-manage-network-settings/#test-the-access-point","title":"Test the Access Point","text":"

                    To verify that the interface (wlan0) has a fixed IP address, run the ifconfig command at a terminal on the embedded gateway.

                    To view information on the Wi-Fi access point, including interface name, wireless channel, and MAC address, enter:

                    iw dev wlan0 info

                    To monitor connect and disconnect events from the access point, enter:

                    iw event \u2013f

                    Use another wireless client, such as a laptop, to verify that you can connect to the access point, that it receives an IP address, and that it can ping the network. When the client connects to the access point, the console should show a new station connection event.

                    To view station statistic information, including signal strength and bitrate, enter:

                    iw dev wlan0 station dump

                    Optionally, if the gateway has another interface configured for WAN with connection to the Internet, then the wireless client should be able to reach the Internet using this access point as its gateway. The setup for the other interface (not covered in this example) would need to be configured in the device using the Kura Gateway Administration Console.

                    "},{"location":"java-application-development/how-to-serial-ports/","title":"How to Use Serial Ports","text":""},{"location":"java-application-development/how-to-serial-ports/#overview","title":"Overview","text":"

                    This section provides an example of how to create a Kura bundle that will communicate with a serial device. In this example, you will communicate with a simple terminal emulator to demonstrate both transmitting and receiving data. You will learn how to perform the following functions:

                    • Create a plugin that communicates to serial devices

                    • Export the bundle

                    • Install the bundle on the remote device

                    • Test the communication with minicom where, minicom is acting as an attached serial device such as an NFC reader, GPS device, or some other ASCII-based communication device

                    "},{"location":"java-application-development/how-to-serial-ports/#prerequisites","title":"Prerequisites","text":"

                    • Setting up Kura Development Environment

                    • Hello World Using the Kura Logger

                    • Hardware

                      • Use an embedded device running Kura with two available serial ports. (If the device does not have a serial port, USB to serial adapters can be used.)

                      • Ensure minicom is installed on the embedded device.

                    "},{"location":"java-application-development/how-to-serial-ports/#serial-communication-with-kura","title":"Serial Communication with Kura","text":"

                    This section of the tutorial covers setting up the hardware, determining serial port device nodes, implementing the basic serial communication bundle, deploying the bundle, and validating its functionality. After completing this section, you should be able to communicate with any ASCII-based serial device attached to a Kura-enabled embedded gateway. In this example, we are using ASCII for clarity, but these same techniques can be used to communicate with serial devices that communicate using binary protocols.

                    "},{"location":"java-application-development/how-to-serial-ports/#hardware-setup","title":"Hardware Setup","text":"

                    Your setup requirements will depend on your hardware platform. At a minimum, you will need two serial ports with a null modem serial, crossover cable connecting them.

                    • If your platform has integrated serial ports, you only need to connect them using a null modem serial cable.

                    • If you do not have integrated serial ports on your platform, you will need to purchase USB-to-Serial adapters. It is recommended to use a USB-to-Serial adapter with either the PL2303 or FTDI chipset, but others may work depending on your hardware platform and underlying Linux support. Once you have attached these adapters to your device, you can attach the null modem serial cable between the two ports.

                    "},{"location":"java-application-development/how-to-serial-ports/#determine-serial-device-nodes","title":"Determine Serial Device Nodes","text":"

                    This step is hardware specific. If your hardware device has integrated serial ports, contact your hardware device manufacturer or review the documentation to find out how the ports are named in the operating system. The device identifiers should be similar to the following:

                    /dev/ttyS*xx*\n/dev/ttyUSB*xx*\n/dev/ttyACM*xx*\n

                    If you are using USB-to-Serial adapters, Linux usually allocates the associated device nodes dynamically at the time of insertion. In order to determine what they are, run the following command at a terminal on the embedded gateway:

                    tail -f /var/log/syslog\n

                    Warning

                    Depending on your specific Linux implementation, other possible log files may be: /var/log/kern.log, /var/log/kernel, or /var/log/dmesg.

                    With the above command running, insert your USB-to-Serial adapter. You should see output similar to the following:

                    root@localhost:/root> tail -f /var/log/syslog\nAug 15 18:43:47 localhost kernel: usb 3-2: new full speed USB device using uhci_hcd and address 3\nAug 15 18:43:47 localhost kernel: pl2303 3-2:1.0: pl2303 converter detected\nAug 15 18:43:47 localhost kernel: usb 3-2: pl2303 converter now attached to ttyUSB10\n

                    In this example, our device is a PL2303-compatible device and is allocated a device node of \u201c/dev/ttyUSB10\u201d. While your results may differ, the key is to identify the \u201ctty\u201d device that was allocated. For the rest of this tutorial, this device will be referred to as [device_node_1], which in this example is /dev/ttyUSB10. During development, it is also important to keep in mind that these values are dynamic; therefore, from one boot to the next and one insertion to the next, these values may change. To stop \u2018tail\u2019 from running in your console, escape with \u2018 c\u2019.

                    If you are using two USB-to-Serial adapters, repeat the above procedure for the second serial port. The resulting device node will be referred to as [device_node_2].

                    "},{"location":"java-application-development/how-to-serial-ports/#implement-the-bundle","title":"Implement the Bundle","text":"

                    Now that you have two serial ports connected to each other, you are ready to implement the code. You will use the same general method that is described in section Hello World Application with the following exceptions:

                    1. process to export the OSGi bundle will have an additional step,
                    2. the actual code in this example will have the following differences:
                      • The new Plug-in Project is named \u201corg.eclipse.kura.example.serial\u201d
                      • A class named \u201cSerialExample\u201d is created in the org.eclipse.kura.example.serial project
                      • The following bundles are included in the Automated Management of Dependencies section in the MANIFEST.MF:
                        • javax.comm
                        • javax.microedition.io
                        • org.eclipse.kura.cloud
                        • org.eclipse.kura.comm
                        • org.eclipse.kura.configuration
                        • org.osgi.service.component
                        • org.osgi.service.io
                        • org.slf4j

                    The following files need to be implemented:

                    • META-INF/MANIFEST.MF \u2013 OSGI manifest that describes the bundle and its dependencies

                    • OSGI-INF/component.xml \u2013 declarative services definition that describe what services are exposed and consumed by this bundle

                    • OSGI-INF/metatype/org.eclipse.kura.example.serial.SerialExample.xml \u2013 configuration description of the bundle and its parameters, types, and defaults

                    • org.eclipse.kura.example.serial.SerialExample.java \u2013 main implementation class

                    "},{"location":"java-application-development/how-to-serial-ports/#meta-infmanifestmf-file","title":"META-INF/MANIFEST.MF File","text":"

                    The META-INF/MANIFEST.MF file should appear as shown below when complete:

                    NOTE: Whitespace is significant in this file. Make sure yours matches this file exactly with the exception that RequiredExecutionEnvironment may be JavaSE-1.6 or JavaSE-1.7, depending on the Java installation of your device.

                    Manifest-Version: 1.0\nBundle-ManifestVersion: 2\nBundle-Name: Serial\nBundle-SymbolicName: org.eclipse.kura.example.serial\nBundle-Version: 1.0.0.qualifier\nBundle-RequiredExecutionEnvironment: JavaSE-1.7\nService-Component: OSGI-INF/component.xml\nBundle-ActivationPolicy: lazy\nImport-Package: javax.comm;version=\"1.2.0\",\n  javax.microedition.io;resolution:=optional,\n  org.eclipse.kura.cloud;version=\"0.2.0\",\n  org.eclipse.kura.comm;version=\"0.2.0\",\n  org.eclipse.kura.configuration;version=\"0.2.0\",\n  org.osgi.service.component;version=\"1.2.0\",\n  org.osgi.service.io;version=\"1.0.0\",\n  org.slf4j;version=\"1.6.4\"\nBundle-ClassPath: .\n

                    In addition, the build.properties file should have org.eclipse.equinox.io listed as an additional bundle similar to below:

                    additional.bundles = org.eclipse.equinox.io\n
                    "},{"location":"java-application-development/how-to-serial-ports/#osgi-infcomponentxml-file","title":"OSGI-INF/component.xml File","text":"

                    Warning

                    Starting from Kura 3.0, the configuration service will only track \"relevant services\" that, in their component description files, will provide the ConfigurableComponent or SelfConfigurableComponent interface. The old behavior can be restored by setting the \"org.eclipse.kura.core.configuration.legacyServiceTracking\" property to true.

                    If Kura 2.1.0 or older versions are used or the org.eclipse.kura.core.configuration.legacyServiceTracking system property is set to true, the OSGI-INF/component.xml should appear as shown below when complete:

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\"\n  name=\"org.eclipse.kura.example.serial.SerialExample\" activate=\"activate\"\n  deactivate=\"deactivate\" modified=\"updated\" enabled=\"true\" immediate=\"true\"\n  configuration-policy=\"require\">\n\n  <implementation class=\"org.eclipse.kura.example.serial.SerialExample\"/>\n  <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.example.serial.SerialExample\"/>\n\n  <service>\n    <provide interface=\"org.eclipse.kura.example.serial.SerialExample\"/>\n  </service>\n  <reference bind=\"setConnectionFactory\" cardinality=\"1..1\"\n    interface=\"org.osgi.service.io.ConnectionFactory\" name=\"ConnectionFactory\"\n    policy=\"static\" unbind=\"unsetConnectionFactory\" />\n</scr:component>\n

                    If Kura 3.0 or newer versions are used and the org.eclipse.kura.core.configuration.legacyServiceTracking system property is set to false or not set, the OSGI-INF/component.xml should appear as shown below when complete:

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<scr:component xmlns:scr=\"http://www.osgi.org/xmlns/scr/v1.1.0\"\n  name=\"org.eclipse.kura.example.serial.SerialExample\" activate=\"activate\"\n  deactivate=\"deactivate\" modified=\"updated\" enabled=\"true\" immediate=\"true\"\n  configuration-policy=\"require\">\n\n  <implementation class=\"org.eclipse.kura.example.serial.SerialExample\"/>\n  <property name=\"service.pid\" type=\"String\" value=\"org.eclipse.kura.example.serial.SerialExample\"/>\n\n  <service>\n    <provide interface=\"org.eclipse.kura.configuration.ConfigurableComponent\"/>\n  </service>\n  <reference bind=\"setConnectionFactory\" cardinality=\"1..1\"\n    interface=\"org.osgi.service.io.ConnectionFactory\" name=\"ConnectionFactory\"\n    policy=\"static\" unbind=\"unsetConnectionFactory\" />\n</scr:component>\n
                    "},{"location":"java-application-development/how-to-serial-ports/#osgi-infmetatypeorgeclipsekuraexampleserialserialexamplexml-file","title":"OSGI-INF/metatype/org.eclipse.kura.example.serial.SerialExample.xml File","text":"

                    The OSGI-INF/metatype/org.eclipse.kura.example.serial.SerialExample.xml file should appear as shown below when complete:

                    <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<MetaData xmlns=\"http://www.osgi.org/xmlns/metatype/v1.2.0\" localization=\"en_us\">\n  <OCD id=\"org.eclipse.kura.example.serial.SerialExample\"\n    name=\"SerialExample\"\n    description=\"Example of a Configuring KURA Application echoing data read from the serial port.\">\n\n    <Icon resource=\"http://sphotos-a.xx.fbcdn.net/hphotos-ash4/p480x480/408247_10151040905591065_1989684710_n.jpg\" size=\"32\"/>\n\n    <AD id=\"serial.device\"\n        name=\"serial.device\"\n        type=\"String\"\n        cardinality=\"0\"\n        required=\"false\"\n        description=\"Name of the serial device (e.g. /dev/ttyS0, /dev/ttyACM0, /dev/ttyUSB0).\"/>\n\n    <AD id=\"serial.baudrate\"\n        name=\"serial.baudrate\"\n        type=\"String\"\n        cardinality=\"0\"\n        required=\"true\"\n        default=\"9600\"\n        description=\"Baudrate.\">\n        <Option label=\"9600\" value=\"9600\"/>\n        <Option label=\"19200\" value=\"19200\"/>\n        <Option label=\"38400\" value=\"38400\"/>\n        <Option label=\"57600\" value=\"57600\"/>\n        <Option label=\"115200\" value=\"115200\"/>\n    </AD>\n\n    <AD id=\"serial.data-bits\"\n        name=\"serial.data-bits\"\n        type=\"String\"\n        cardinality=\"0\"\n        required=\"true\"\n        default=\"8\"\n        description=\"Data bits.\">\n        <Option label=\"7\" value=\"7\"/>\n        <Option label=\"8\" value=\"8\"/>\n    </AD>\n\n    <AD id=\"serial.parity\"\n        name=\"serial.parity\"\n        type=\"String\"\n        cardinality=\"0\"\n        required=\"true\"\n        default=\"none\"\n        description=\"Parity.\">\n        <Option label=\"none\" value=\"none\"/>\n        <Option label=\"even\" value=\"even\"/>\n        <Option label=\"odd\" value=\"odd\"/>\n    </AD>\n\n    <AD id=\"serial.stop-bits\"\n        name=\"serial.stop-bits\"\n        type=\"String\"\n        cardinality=\"0\"\n        required=\"true\"\n        default=\"1\"\n        description=\"Stop bits.\">\n        <Option label=\"1\" value=\"1\"/>\n        <Option label=\"2\" value=\"2\"/>\n    </AD>\n\n  </OCD>\n  <Designate pid=\"org.eclipse.kura.example.serial.SerialExample\">\n    <Object ocdref=\"org.eclipse.kura.example.serial.SerialExample\"/>\n  </Designate>\n</MetaData>\n
                    "},{"location":"java-application-development/how-to-serial-ports/#orgeclipsekuraexampleserialserialexamplejava-file","title":"org.eclipse.kura.example.serial.SerialExample.java File","text":"

                    The org.eclipse.kura.example.serial.SerialExample.java file should appear as shown below when complete:

                    package org.eclipse.kura.example.serial;\n\nimport java.io.IOException;\nimport java.io.InputStream;\nimport java.io.OutputStream;\nimport java.util.HashMap;\nimport java.util.Map;\nimport java.util.concurrent.Future;\nimport java.util.concurrent.ScheduledThreadPoolExecutor;\nimport org.osgi.service.component.ComponentContext;\nimport org.osgi.service.io.ConnectionFactory;\nimport org.slf4j.Logger;\nimport org.slf4j.LoggerFactory;\n\npublic class SerialExample implements ConfigurableComponent {\n\n  private static final Logger s_logger = LoggerFactory.getLogger(SerialExample.class);\n\n  private static final String SERIAL_DEVICE_PROP_NAME= \"serial.device\";\n  private static final String SERIAL_BAUDRATE_PROP_NAME= \"serial.baudrate\";\n  private static final String SERIAL_DATA_BITS_PROP_NAME= \"serial.data-bits\";\n  private static final String SERIAL_PARITY_PROP_NAME= \"serial.parity\";\n  private static final String SERIAL_STOP_BITS_PROP_NAME= \"serial.stop-bits\";\n\n  private ConnectionFactory m_connectionFactory;\n  private CommConnection m_commConnection;\n  private InputStream m_commIs;\n  private OutputStream m_commOs;\n  private ScheduledThreadPoolExecutor m_worker;\n  private Future<?> m_handle;\n  private Map<String, Object> m_properties;\n\n  // ----------------------------------------------------------------\n  //\n  // Dependencies\n  //\n  // ----------------------------------------------------------------\n  public void setConnectionFactory(ConnectionFactory connectionFactory) {\n    this.m_connectionFactory = connectionFactory;\n  }\n\n  public void unsetConnectionFactory(ConnectionFactory connectionFactory) {\n    this.m_connectionFactory = null;\n  }\n\n  // ----------------------------------------------------------------\n  //\n  // Activation APIs\n  //\n  // ----------------------------------------------------------------\n\n  protected void activate(ComponentContext componentContext, Map<String,Object> properties) {\n    s_logger.info(\"Activating SerialExample...\");\n\n    m_worker = new ScheduledThreadPoolExecutor(1);\n    m_properties = new HashMap<String, Object>();\n    doUpdate(properties);\n    s_logger.info(\"Activating SerialExample... Done.\");\n  }\n\n  protected void deactivate(ComponentContext componentContext) {\n    s_logger.info(\"Deactivating SerialExample...\");\n\n    // shutting down the worker and cleaning up the properties\n    m_handle.cancel(true);\n    m_worker.shutdownNow();\n    //close the serial port\n    closePort();\n    s_logger.info(\"Deactivating SerialExample... Done.\");\n  }\n\n  public void updated(Map<String,Object> properties) {\n    s_logger.info(\"Updated SerialExample...\");\n\n    doUpdate(properties);\n    s_logger.info(\"Updated SerialExample... Done.\");\n  }\n\n  // ----------------------------------------------------------------\n  //\n  // Private Methods\n  //\n  // ----------------------------------------------------------------\n\n  /**\n   * Called after a new set of properties has been configured on the service\n   */\n  private void doUpdate(Map<String, Object> properties) {\n    try {\n      for (String s : properties.keySet()) {\n        s_logger.info(\"Update - \"+s+\": \"+properties.get(s));\n      }\n\n      // cancel a current worker handle if one if active\n      if (m_handle != null) {\n        m_handle.cancel(true);\n      }\n\n      //close the serial port so it can be reconfigured\n      closePort();\n\n      //store the properties\n      m_properties.clear();\n      m_properties.putAll(properties);\n\n      //reopen the port with the new configuration\n      openPort();\n\n      //start the worker thread\n      m_handle = m_worker.submit(new Runnable() {\n        @Override\n        public void run() {\n          doSerial();\n        }\n      });\n\n    } catch (Throwable t) {\n        s_logger.error(\"Unexpected Throwable\", t);\n      }\n  }\n\n  private void openPort() {\n    String port = (String) m_properties.get(SERIAL_DEVICE_PROP_NAME);\n\n    if (port == null) {\n      s_logger.info(\"Port name not configured\");\n      return;\n    }\n\n    int baudRate = Integer.valueOf((String) m_properties.get(SERIAL_BAUDRATE_PROP_NAME));\n    int dataBits = Integer.valueOf((String) m_properties.get(SERIAL_DATA_BITS_PROP_NAME));\n    int stopBits = Integer.valueOf((String) m_properties.get(SERIAL_STOP_BITS_PROP_NAME));\n    String sParity = (String) m_properties.get(SERIAL_PARITY_PROP_NAME);\n    int parity = CommURI.PARITY_NONE;\n\n    if (sParity.equals(\"none\")) {\n      parity = CommURI.PARITY_NONE;\n    } else if (sParity.equals(\"odd\")) {\n        parity = CommURI.PARITY_ODD;\n    } else if (sParity.equals(\"even\")) {\n        parity = CommURI.PARITY_EVEN;\n    }\n\n    String uri = new CommURI.Builder(port)\n    .withBaudRate(baudRate)\n    .withDataBits(dataBits)\n    .withStopBits(stopBits)\n    .withParity(parity)\n    .withTimeout(1000)\n    .build().toString();\n\n    try {\n      m_commConnection = (CommConnection) m_connectionFactory.createConnection(uri, 1, false);\n      m_commIs = m_commConnection.openInputStream();\n      m_commOs = m_commConnection.openOutputStream();\n      s_logger.info(port+\" open\");\n    } catch (IOException e) {\n      s_logger.error(\"Failed to open port \" + port, e);\n      cleanupPort();\n    }\n  }\n\n  private void cleanupPort() {\n\n    if (m_commIs != null) {\n      try {\n        s_logger.info(\"Closing port input stream...\");\n        m_commIs.close();\n        s_logger.info(\"Closed port input stream\");\n      } catch (IOException e) {\n          s_logger.error(\"Cannot close port input stream\", e);\n      }\n      m_commIs = null;\n    }\n\n    if (m_commOs != null) {\n      try {\n        s_logger.info(\"Closing port output stream...\");\n        m_commOs.close();\n        s_logger.info(\"Closed port output stream\");\n      } catch (IOException e) {\n          s_logger.error(\"Cannot close port output stream\", e);\n      }\n      m_commOs = null;\n    }\n\n    if (m_commConnection != null) {\n      try {\n        s_logger.info(\"Closing port...\");\n        m_commConnection.close();\n        s_logger.info(\"Closed port\");\n      } catch (IOException e) {\n          s_logger.error(\"Cannot close port\", e);\n      }\n      m_commConnection = null;\n    }\n  }\n\n  private void closePort() {\n    cleanupPort();\n  }\n\n  private void doSerial() {\n    if (m_commIs != null) {\n      try {\n        int c = -1;\n        StringBuilder sb = new StringBuilder();\n        while (m_commIs != null) {\n          if (m_commIs.available() != 0) {\n            c = m_commIs.read();\n          } else {\n            try {\n              Thread.sleep(100);\n              continue;\n            } catch (InterruptedException e) {\n                return;\n            }\n          }\n\n        // on reception of CR, publish the received sentence\n        if (c==13) {\n          s_logger.debug(\"Received serial input, echoing to output: \" + sb.toString());\n          sb.append(\"\\r\\n\");\n          String dataRead = sb.toString();\n          //echo the data to the output stream\n          m_commOs.write(dataRead.getBytes());\n          //reset the buffer\n          sb = new StringBuilder();\n        } else if (c!=10) {\n          sb.append((char) c);\n        }\n      }\n\n      } catch (IOException e) {\n          s_logger.error(\"Cannot read port\", e);\n      } finally {\n          try {\n            m_commIs.close();\n          } catch (IOException e) {\n            s_logger.error(\"Cannot close buffered reader\", e);\n          }\n      }\n    }\n  }\n}\n
                    At this point, the bundle implementation is complete. Make sure to save all files before proceeding.

                    "},{"location":"java-application-development/how-to-serial-ports/#export-the-bundle","title":"Export the Bundle","text":"

                    To build the Serial Example bundle as a stand-alone OSGi plugin, right-click the project and select Export.

                    From the wizard, select Plug-in Development | Deployable plug-ins and fragments and click Next.

                    The Export window appears. Under Available Plug-ins and Fragments, verify that the newly created plug-in is selected.

                    Under Destination, select the Directory option button and use the Browse button to select an appropriate place to save the JAR file on the local file system.

                    Info

                    You will need to know the location where this JAR file is saved for the deployment process.

                    Under Options, select the checkbox Use class files compiled in the workspace in addition to the checkboxes already enabled, and click Finish.

                    Doing so will create a JAR file in the selected directory (e.g., /home/joe/myPlugins/plugins/org.eclipse.kura.example.serial_1.0.0.201410311510.jar).

                    "},{"location":"java-application-development/how-to-serial-ports/#deploy-the-bundle","title":"Deploy the Bundle","text":"

                    In order to proceed, you need to know the IP address of your embedded gateway that is running Kura. Once you have this IP address, follow the mToolkit instructions for installing a single bundle to a remote target device (refer to section 2.03 Testing and Deploying Bundles).

                    Once the installation successfully completes, you should see a message from the /var/log/kura.log file indicating that the bundle was successfully installed and configured. You can also run this example with the emulator in a Linux or OS X environment as shown sample output below. Make sure that your user account has owner permission for the serial device in /dev.

                    "},{"location":"java-application-development/how-to-serial-ports/#validate-the-bundle","title":"Validate the Bundle","text":"

                    Next, you need to test that your bundle does indeed echo characters back by opening minicom and configuring it to use [device_node_2] that was previously determined.

                    Open minicom using the following command at a Linux terminal on the remote gateway device:

                    minicom -s\n

                    This command opens a view similar to the following screen capture:

                    Scroll down to Serial port setup and press . A new dialog window opens as shown below:

                    Use the minicom menu options on the left (i.e., A, B, C, etc.) to change desired fields. Set the fields to the same values as shown in the previous screen capture except the Serial Device should match the [device_node_2] on your target device. Once this is set, press \\<ENTER> to exit from this menu.

                    In the main configuration menu, select Exit (do not select the option Exit from Minicom). At this point, you have successfully started minicom on the second serial port attached to your null modem cable allowing minicom to act as a serial device that can send and receive commands to your Kura bundle. You can verify this operation by typing characters and pressing . The function (specifically a \u2018\\n\u2019 character) signals to the Kura application to echo the buffered characters back to the serial device (minicom in this case).

                    Upon startup, minicom sends an initialization string to the serial device. These characters are sent to the minicom terminal because they were echoed back by Kura listening on the port at the other end of the null modem cable.

                    When you are done, exit minicom by pressing \u2018 a\u2019, then \u2018q\u2019, and finally \u2018\u2019. Doing so brings you back to the Linux command prompt.

                    This tutorial instructed you how to write and deploy a Kura bundle on your target device that listens for serial data (coming from the minicom terminal and being received on [device_node_1]). This tutorial also demonstrated that the application echoes data back to the same serial port that is received in minicom, which acts a serial device that sends and receives data. If supported by the device, Kura may send and receive binary data instead of ASCII.

                    "},{"location":"java-application-development/how-to-use-beacon-apis/","title":"How to Use Beacon APIs","text":""},{"location":"java-application-development/how-to-use-beacon-apis/#overview","title":"Overview","text":"

                    Eclipse Kura implements a set of APIs for managing Bluetooth Low Energy and Beacon devices.

                    The purpose of the BLE Beacon APIs is to simplify the development of applications that interact with Bluetooth LE Beacon devices, offering clear and easy-to-use methods for advertising and scanning. Eclipse Kura offers out-of-the-box the implementation of the Beacon APIs for iBeacon\u2122 and Eddystone\u2122 technologies.

                    "},{"location":"java-application-development/how-to-use-beacon-apis/#how-to-use-kura-ibeacontm-apis","title":"How to use Kura iBeacon\u2122 APIs","text":"

                    This section briefly presents how to use the iBeacon\u2122 implementation of the Kura Beacon APIs, providing several code snippets to explain how to perform common operations on iBeacons. For a complete example on iBeacon advertising and scanning, please refer to the iBeacon\u2122 advertiser and iBeacon\u2122 scanner examples. For more information about iBeacon\u2122 please refer to official page.

                    An application that wants to use the iBeacon\u2122 implementation of Kura Beacon APIs should bind the BluetoothLeService and BluetoothLeIBeaconService OSGI services, as shown in the following Java snippet:

                    public void setBluetoothLeService(BluetoothLeService bluetoothLeService) {\n    this.bluetoothLeService = bluetoothLeService;\n}\n\npublic void unsetBluetoothLeService(BluetoothLeService bluetoothLeService) {\n    this.bluetoothLeService = null;\n}\n\npublic void setBluetoothLeIBeaconService(BluetoothLeIBeaconService bluetoothLeIBeaconService) {\n    this.bluetoothLeIBeaconService = bluetoothLeIBeaconService;\n}\n\npublic void unsetBluetoothLeIBeaconService(BluetoothLeIBeaconService bluetoothLeIBeaconService) {\n    this.bluetoothLeIBeaconService = null;\n}\n

                    and in the component definition:

                    <reference bind=\"setBluetoothLeService\" \n            cardinality=\"1..1\" \n            interface=\"org.eclipse.kura.bluetooth.le.BluetoothLeService\" \n            name=\"BluetoothLeService\" \n            policy=\"static\" \n            unbind=\"unsetBluetoothLeService\"/>\n\n<reference bind=\"setBluetoothLeIBeaconService\" \n            cardinality=\"1..1\" \n            interface=\"org.eclipse.kura.ble.ibeacon.BluetoothLeIBeaconService\" \n            name=\"BluetoothLeIBeaconService\" \n            policy=\"static\" \n            unbind=\"unsetBluetoothLeIBeaconService\"/>\n

                    The BluetoothLeService is used to get the BluetoothLeAdapter to be used with the BluetoothLeIBeaconScanner and BluetoothLeIBeaconAdvertiser. As explained here, the adapter can be retrieved and powered on as follows:

                    this.bluetoothLeAdapter = this.bluetoothLeService.getAdapter(adapterName);\nif (this.bluetoothLeAdapter != null) {\n    if (!this.bluetoothLeAdapter.isPowered()) {\n        this.bluetoothLeAdapter.setPowered(true);\n    }\n} \n

                    where adapterName is the name of the adapter, e.g. hci0.

                    "},{"location":"java-application-development/how-to-use-beacon-apis/#create-an-ibeacontm-advertiser","title":"Create an iBeacon\u2122 advertiser","text":"

                    In order to properly configure an iBeacon\u2122 advertiser, a BluetoothLeIBeaconService is needed to create a new BluetoothLeIBeaconAdvertiser instance bound to a specific Bluetooth adapter:

                    try {\n    BluetoothLeBeaconAdvertiser<BluetoothLeIBeacon> advertiser = this.bluetoothLeIBeaconService.newBeaconAdvertiser(this.bluetoothLeAdapter);\n} catch (KuraBluetoothBeaconAdvertiserNotAvailable e) {\n    logger.error(\"Beacon Advertiser not available on {}\", this.bluetoothLeAdapter.getInterfaceName(),e);\n}\n

                    Then a BluetoothLeIBeacon object should be created, containing all the information to be broadcasted. In the following snippet, the BluetoothLeIBeacon object is instantiated and added to the advertiser. Then the broadcast time interval is set and the beacon advertising is started.

                    try {\n    BluetoothLeIBeacon iBeacon = new BluetoothLeIBeacon(uuid, major, minor, txPower);\n    advertiser.updateBeaconAdvertisingData(iBeacon);\n    advertiser.updateBeaconAdvertisingInterval(minInterval, maxInterval;\n\n    advertiser.startBeaconAdvertising();\n} catch (KuraBluetoothCommandException e) {\n    logger.error(\"IBeacon configuration failed\", e);\n}\n

                    The BluetoothLeIBeacon represents the beacon packet that will be broadcasted by the advertiser and it should be configured will the following parameters:

                    • uuid a unique number that identifies the beacon.
                    • major a number that identifies a subset of beacons within a large group.
                    • minor a number that identifies a specific beacon.
                    • txPower the transmitter power level indicating the signal strength one meter from the device.

                    Warning

                    Only one advertising packet can be broadcasted at a time on a specific Bluetooth adapter.

                    Finally, in the following snippet the advertiser is stopped and removed from the BluetoothLeIBeaconService:

                    try {\n    advertiser.stopBeaconAdvertising();\n    this.bluetoothLeIBeaconService.deleteBeaconAdvertiser(advertiser);\n} catch (KuraBluetoothCommandException e) {\n    logger.error(\"Stop iBeacon advertising failed\", e);\n}\n
                    "},{"location":"java-application-development/how-to-use-beacon-apis/#create-an-ibeacontm-scanner","title":"Create an iBeacon\u2122 scanner","text":"

                    As done for the advertiser, a BluetoothLeIBeaconService is needed to create a new BluetoothLeIBeaconScanner instance bound to a specific Bluetooth adapter:

                    bluetoothLeBeaconScanner<BluetoothLeIBeacon> scanner = this.bluetoothLeIBeaconService.newBeaconScanner(this.bluetoothLeAdapter);\n

                    A BluetoothLeIBeaconScanner needs a listener to collect the iBeacon packets that the Bluetooth adapter detects. In the following snippet, a simple listener that prints the iBeacon packet configuration is added to the scanner object:

                    private class iBeaconListener implements BluetoothLeBeaconListener<BluetoothLeIBeacon> {\n\n    @Override\n    public void onBeaconsReceived(BluetoothLeIBeacon beacon) {\n        logger.info(\"iBeacon received from {}\", beacon.getAddress());\n        logger.info(\"UUID : {}\", beacon.getUuid());\n        logger.info(\"Major : {}\", beacon.getMajor());\n        logger.info(\"Minor : {}\", beacon.getMinor());\n        logger.info(\"TxPower : {}\", beacon.getTxPower());\n        logger.info(\"RSSI : {}\", beacon.getRssi());   \n    }\n\n}\n
                    scanner.addBeaconListener(listener);\n

                    The scanner is started for a specific time interval (in this case 10 seconds):

                    scanner.startBeaconScan(10);\n

                    Finally the scanner should be stopped, if needed, and the resources are released:

                    if (scanner.isScanning()) {\n    scanner.stopBeaconScan();\n}\nscanner.removeBeaconListener(listener);\nthis.bluetoothLeIBeaconService.deleteBeaconScanner(scanner);\n

                    Note

                    The kura.legacy.bluetooth.beacon.scan property in the kura.properties file defines how the scan for beacons is performed. If set to true, the deprecated hcitool command is used. This guarantees that all the advertisement packets are reported. If set to false, the library will communicate to the OS using dbus. In the latter case, the rate of reports is limited and not all the advertisement packets are reported.

                    "},{"location":"java-application-development/how-to-use-beacon-apis/#how-to-use-kura-eddystonetm-apis","title":"How to use Kura Eddystone\u2122 APIs","text":"

                    Eddystone\u2122 is a protocol specification that defines a BLE message format for proximity beacon messages. It describes several different frame types that may be used individually or in combinations to create beacons that can be used for a variety of applications. For more information please see here and here.

                    In this section the Eddystone\u2122 implementation of the Kura Beacon APIs is presented, providing several code snippets to explain how to perform common operations on them. For a complete example on Eddystone\u2122 advertising and scanning, please refer to the Eddystone\u2122 advertiser and Eddystone\u2122 scanner examples.

                    Warning

                    Only Eddystone UID and URL frame types are currently supported.

                    As done with the iBeacon\u2122 implementation, an application has to bind the BluetoothLeService and BluetoothLeEddystoneService OSGI services, as shown in the following Java snippet:

                    public void setBluetoothLeService(BluetoothLeService bluetoothLeService) {\n    this.bluetoothLeService = bluetoothLeService;\n}\n\npublic void unsetBluetoothLeService(BluetoothLeService bluetoothLeService) {\n    this.bluetoothLeService = null;\n}\n\npublic void setBluetoothLeEddystoneService(BluetoothLeEddystoneService bluetoothLeEddystoneService) {\n    this.bluetoothLeEddystoneService = bluetoothLeEddystoneService;\n}\n\npublic void unsetBluetoothLeEddystoneService(BluetoothLeEddystoneService bluetoothLeEddystoneService) {\n    this.bluetoothLeEddystoneService = null;\n}\n

                    and in the component definition:

                    <reference bind=\"setBluetoothLeService\" \n            cardinality=\"1..1\" \n            interface=\"org.eclipse.kura.bluetooth.le.BluetoothLeService\" \n            name=\"BluetoothLeService\" \n            policy=\"static\" \n            unbind=\"unsetBluetoothLeService\"/>\n\n<reference bind=\"setBluetoothLeEddystoneService\" \n            cardinality=\"1..1\" \n            interface=\"org.eclipse.kura.ble.eddystone.BluetoothLeEddystoneService\" \n            name=\"BluetoothLeEddystoneService\" \n            policy=\"static\" \n            unbind=\"unsetBluetoothLeEddystoneService\"/>\n

                    The BluetoothLeService is used to get the BluetoothLeAdapter to be used with the BluetoothLeEddystoneScanner and BluetoothLeEddystoneAdvertiser. As explained here, the adapter can be retrieved and powered on as follows:

                    this.bluetoothLeAdapter = this.bluetoothLeService.getAdapter(adapterName);\nif (this.bluetoothLeAdapter != null) {\n    if (!this.bluetoothLeAdapter.isPowered()) {\n        this.bluetoothLeAdapter.setPowered(true);\n    }\n} \n

                    where adapterName is the name of the adapter, e.g. hci0.

                    "},{"location":"java-application-development/how-to-use-beacon-apis/#create-an-eddystonetm-advertiser","title":"Create an Eddystone\u2122 advertiser","text":"

                    In order to properly configure an Eddystone\u2122 advertiser, a BluetoothLeEddystoneService is needed to create a new BluetoothLeEddystoneAdvertiser instance bound to a specific Bluetooth adapter:

                    try {\n    BluetoothLeBeaconAdvertiser<BluetoothLeEddystone> advertiser = this.advertising = this.bluetoothLeEddystoneService.newBeaconAdvertiser(this.bluetoothLeAdapter);\n} catch (KuraBluetoothBeaconAdvertiserNotAvailable e) {\n    logger.error(\"Beacon Advertiser not available on {}\", this.bluetoothLeAdapter.getInterfaceName(),e);\n}\n

                    The advertiser has to be configured with a BluetoothLeEddystone object that contains all the information to be broadcasted. Currently, UID and URL frame types are supported. A UID frame can be created as follows:

                    BluetoothLeEddystone eddystone = new BluetoothLeEddystone();\neddystone.configureEddystoneUIDFrame(namespace, instance, txPower);\n

                    where namespace and instance are respectively 10-byte and 6-byte long sequences that compose a unique 16-byte Beacon ID. The txPower is the calibrated transmission power at 0 m.

                    A URL frame is created as follows:

                    BluetoothLeEddystone eddystone = new BluetoothLeEddystone();\neddystone.configureEddystoneURLFrame(url, txPower);\n

                    where url is the URL to be broadcasted and the txPower is the calibrated transmission power at 0 m.

                    After the BluetoothLeEddystone creation, the packet is added to the advertiser and the broadcast time interval is set. Then the advertiser is started:

                    try {\n    advertiser.updateBeaconAdvertisingData(eddystone);\n    advertiser.updateBeaconAdvertisingInterval(this.options.getMinInterval(), this.options.getMaxInterval());\n    advertiserstartBeaconAdvertising();\n} catch (KuraBluetoothCommandException e) {\n    logger.error(\"Eddystone configuration failed\", e);\n}\n

                    Finally, in the following snippet the advertiser is stopped and removed from the BluetoothLeEddystoneService:

                    try {\n    advertiser.stopBeaconAdvertising();\n    this.bluetoothLeEddystoneService.deleteBeaconAdvertiser(advertiser);\n} catch (KuraBluetoothCommandException e) {\n    logger.error(\"Stop Advertiser advertising failed\", e);\n}\n
                    "},{"location":"java-application-development/how-to-use-beacon-apis/#create-an-eddystonetm-scanner","title":"Create an Eddystone\u2122 scanner","text":"

                    As done for the advertiser, a BluetoothLeEddystoneService is needed to create a new BluetoothLeEddystoneScanner instance bound to a specific Bluetooth adapter:

                    bluetoothLeBeaconScanner<BluetoothLeEddystone> scanner = this.bluetoothLeEddystoneService.newBeaconScanner(this.bluetoothLeAdapter);\n

                    A BluetoothLeEddystoneScanner needs a listener to collect the Eddystone packets that the Bluetooth adapter detects. In the following snippet, a simple listener that detects the frame type and prints the packet content is added to the scanner object:

                    private class EddystoneListener implements BluetoothLeBeaconListener<BluetoothLeEddystone> {\n\n    @Override\n    public void onBeaconsReceived(BluetoothLeEddystone beacon) {\n        logger.info(\"Eddystone {} received from {}\", eddystone.getFrameType(), eddystone.getAddress());\n        if (\"UID\".equals(eddystone.getFrameType())) {\n            logger.info(\"Namespace : {}\", bytesArrayToHexString(eddystone.getNamespace()));\n            logger.info(\"Instance : {}\", bytesArrayToHexString(eddystone.getInstance()));\n        } else if (\"URL\".equals(eddystone.getFrameType())) {\n            logger.info(\"URL : {}\", eddystone.getUrlScheme() + eddystone.getUrl());\n        }\n        logger.info(\"TxPower : {}\", eddystone.getTxPower());\n        logger.info(\"RSSI : {}\", eddystone.getRssi());  \n    }\n\n}\n
                    scanner.addBeaconListener(listener);\n

                    The scanner is started for a specific time interval (in this case 10 seconds):

                    scanner.startBeaconScan(10);\n

                    Finally the scanner should be stopped, if needed, and the resources are released:

                    if (scanner.isScanning()) {\n    scanner.stopBeaconScan();\n}\nscanner.removeBeaconListener(listener);\nthis.bluetoothLeEddystoneService.deleteBeaconScanner(scanner);\n

                    Note

                    The kura.legacy.bluetooth.beacon.scan property in the kura.properties file defines how the scan for beacons is performed. If set to true, the deprecated hcitool command is used. This guarantees that all the advertisement packets are reported. If set to false, the library will communicate to the OS using dbus. In the latter case, the rate of reports is limited and not all the advertisement packets are reported.

                    "},{"location":"java-application-development/how-to-use-beacon-apis/#add-new-beacon-apis-implementation","title":"Add new Beacon APIs implementation","text":"

                    Eclipse Kura offers the implementation for iBeacon\u2122 and Eddystone\u2122 protocols, but it is possible to add implementations of different kinds of beacon protocols.

                    The org.eclipse.kura.bluetooth.le.beacon package contains the interfaces used by the beacon implementations:

                    • BluetoothLeBeaconService is the entry point for applications that want to use the Beacon APIs.
                    • BluetoothLeBeaconManager is used by the BluetoothLeBeaconService and provides methods to create and delete Beacon advertisers and scanners.
                    • BluetoothLeBeaconAdvertiser allows configuring advertisement packets and managing advertising.
                    • BluetoothLeBeaconScanner is used to search for specific Beacon packets.
                    • BluetoothLeBeaconEncoder implements methods for encoding a Beacon object to a stream of bytes.
                    • BluetoothLeBeaconDecoder implements methods for decoding a stream of bytes in to a Beacon object.
                    • BluetoothLeBeacon represents a generic Beacon packet.

                    The BluetoothLeBeaconManager, BluetoothLeBeaconScanner and BluetoothLeBeaconAdvertiser interfaces handles generic BluetoothLeBeacon objects and their implementations are provided by the org.eclipse.kura.ble.provider. The others interfaces, instead, are Beacon specific and their implementations depend on the specific protocol that is used. As a consequence, who wants to support a new Beacon protocol, should provide the implementation of the BluetoothLeBeaconService, BluetoothLeBeaconEncoder and BluetoothLeBeaconDecoder interfaces and extend the BluetoothLeBeacon class.

                    As an example, the org.eclipse.kura.ble.ibeacon.provider provides the implementation of the above APIs for the iBeacon\u2122 protocol. In this case, the org.eclipse.kura.ble.ibeacon package contains the following:

                    • BluetoothLeIBeacon implements the BluetoothLeBeacon interface for the iBeacon\u2122 packet.
                    • BluetoothLeIBeaconEncoder is a marker interface that extends BluetoothLeBeaconEncoder.
                    • BluetoothLeIBeaconDecoder is a marker interface that extends BluetoothLeBeaconDecoder.
                    • BluetoothLeIBeaconService is a marker interface that extends BluetoothLeBeaconService and is the entry point for applications that wants to use an iBeacon\u2122.

                    The org.eclipse.kura.internal.ble.ibeacon provides the implementations for the above interfaces:

                    • BluetoothLeIBeaconEncoderImpl implements BluetoothLeIBeaconEncoder offering a method to encode the BluetoothLeIBeacon into a byte stream.
                    • BluetoothLeIBeaconDecoderImpl implements BluetoothLeIBeaconDecoder offering a method to decode a stream of bytes into a BluetoothLeIBeacon object.
                    • BluetoothLeIBeaconServiceImpl is the implementation of BluetoothLeIBeaconService and uses the generic BluetoothLeBeaconManager service to create scanners and advertisers.

                    The following image shows the UML diagram.

                    "},{"location":"java-application-development/how-to-use-bt-le-apis/","title":"How to Use Bluetooth LE APIs","text":""},{"location":"java-application-development/how-to-use-bt-le-apis/#overview","title":"Overview","text":"

                    Eclipse Kura implements a set of APIs for managing Bluetooth Low Energy and Beacon devices.

                    The purpose of the BLE APIs is to simplify the development of applications that interact with Bluetooth LE devices, offering clear and easy-to-use methods, and add new features to correctly manage the connection with remote devices. Moreover, the APIs organize the methods in a logical way to access all levels of a GATT client, from GATT services to GATT characteristics and descriptors, using UUIDs to identify the correct resource.

                    "},{"location":"java-application-development/how-to-use-bt-le-apis/#bluez-dbus-ble-gatt-api","title":"Bluez-Dbus - BLE GATT API","text":"

                    The implementation of the Kura BLE APIs is based on the Bluez-Dbus library that provides an easy to use Bluetooth LE API based on BlueZ over DBus. The library eases the access to GATT services and the management of BLE connections and discovery, without using any wrapper library as it is based on a newer version of dbus-java which uses jnr-unixsocket.

                    "},{"location":"java-application-development/how-to-use-bt-le-apis/#apis-description","title":"APIs description","text":"

                    The BLE APIs are exported in the org.eclipse.kura.bluetooth.le package. The interfaces are briefly described in the following.

                    • BluetoothLeService is the entry point of the OSGI service. It allows to get all the Bluetooth interfaces installed on the gateway or a specific one using the name of the adapter.
                    • BluetoothLeAdapter represents the physical Bluetooth adapter on the gateway. It allows to start/stop a discovery, search a specific BLE device based on the BD address, power up/down the adapter and get information about the adapter.
                    • BluetoothLeDevice represents a Bluetooth LE device. The interface provides methods for connections and disconnections, list the GATT services or search a specific one based on the UUID and get generic information about the device.
                    • BluetoothLeGattService represents a GATT service and allows listing the GATT characteristics provided by the device.
                    • BluetoothLeGattCharacteristic represents a GATT characteristic. It provides methods to read from and write to the characteristic, enable or disable notifications and get the properties.
                    • BluetoothLeGattDescriptor represents a GATT descriptor associated with the characteristic.

                    More information about the APIs can be found in API Reference.

                    "},{"location":"java-application-development/how-to-use-bt-le-apis/#how-to-use-the-kura-ble-api","title":"How to use the Kura BLE API","text":"

                    This section briefly presents how to use the Kura BLE APIs, providing several code snippets to explain how to perform common bluetooth operations. For a complete example, please refer to the SensorTag application.

                    An application that wants to use the Kura BLE APIs should bind the BluetoothLeService OSGI service, as shown in the following Java snippet:

                    public void setBluetoothLeService(BluetoothLeService bluetoothLeService) {\n    this.bluetoothLeService = bluetoothLeService;\n}\n\npublic void unsetBluetoothLeService(BluetoothLeService bluetoothLeService) {\n    this.bluetoothLeService = null;\n}\n

                    and in the component definition:

                    <reference bind=\"setBluetoothLeService\" \n            cardinality=\"1..1\" \n            interface=\"org.eclipse.kura.bluetooth.le.BluetoothLeService\" \n            name=\"BluetoothLeService\" \n            policy=\"static\" \n            unbind=\"unsetBluetoothLeService\"/>\n
                    "},{"location":"java-application-development/how-to-use-bt-le-apis/#get-the-bluetooth-adapter","title":"Get the Bluetooth adapter","text":"

                    Once bound to the BluetoothLeService, an application can get the Bluetooth adapter and power on it, if needed:

                    this.bluetoothLeAdapter = this.bluetoothLeService.getAdapter(adapterName);\nif (this.bluetoothLeAdapter != null) {\n    if (!this.bluetoothLeAdapter.isPowered()) {\n        this.bluetoothLeAdapter.setPowered(true);\n    }\n} \n

                    where adapterName is the name of the adapter, i.e. hci0.

                    "},{"location":"java-application-development/how-to-use-bt-le-apis/#search-for-ble-devices","title":"Search for BLE devices","text":"

                    The BluetoothLeAdapter provides several methods to search for a device, a.k.a. perform a BLE discovery:

                    • Future<BluetoothLeDevice> findDeviceByAddress(long timeout, String address) search for a BLE device with the specified address. The method will perform a BLE discovery for at most timeout seconds or until the device is found. It will return a Future instance and the discovered device can be retrieved using the get() method.
                    • Future<BluetoothLeDevice> findDeviceByName(long timeout, String name) search for a BLE device with the specified system name and return a Future.
                    • void findDeviceByAddress(long timeout, String address, Consumer<BluetoothLeDevice> consumer) search for a BLE device with the specified address. The method will perform a BLE discovery for at most timeout seconds or until the device is found. When the device is found or the timeout is reached the consumer is used to get the device.
                    • void findDeviceByAddress(long timeout, String address, Consumer<BluetoothLeDevice> consumer) search for a BLE device with the specified name and use the provided consumer to return the device.
                    • Future<List<BluetoothLeDevice>> findDevices(long timeout) and void findDevices(long timeout, Consumer<List<BluetoothLeDevice>> consumer) are similar to the methods above, but they get a list of Bluetooth devices.

                    The following snippet shows how to perform a discovery of 10 seconds using findDevices method:

                    if (this.bluetoothLeAdapter.isDiscovering()) {\n    try {\n        this.bluetoothLeAdapter.stopDiscovery();\n    } catch (KuraException e) {\n        logger.error(\"Failed to stop discovery\", e);\n    }\n}\nFuture<List<BluetoothLeDevice>> future = this.bluetoothLeAdapter.findDevices(10);\ntry {\n    List<BluetoothLeDevice>; devices = future.get();\n} catch (InterruptedException | ExecutionException e) {\n    logger.error(\"Scan for devices failed\", e);\n}\n
                    "},{"location":"java-application-development/how-to-use-bt-le-apis/#get-the-gatt-services-and-characteristics","title":"Get the GATT services and characteristics","text":"

                    To get the GATT services using the BluetoothLeDevice, use the following snippet:

                    try {\n    List<BluetoothLeGattService>; services = device.findServices();\n} catch (KuraBluetoothResourceNotFoundException e) {\n    logger.error(\"Unable to find GATT services\", e);\n}\n

                    A specific GATT service can be retrieved using its UUID:

                    try {\n    BluetoothLeGattService service = device.findService(uuid);\n} catch (KuraBluetoothResourceNotFoundException e) {\n    logger.error(\"Unable to find GATT service\", e);\n}\n

                    Using the GATT service, it is possible to get a specific GATT characteristic (or the complete list) and the GATT descriptor from it:

                    try {\n    BluetoothLeGattCharacteristic characteristic = service.findCharacteristic(characteristicUuid);\n    BluetoothLeGattDescriptor descriptor = characteristic.findDescriptor(descriptorUuid);\n} catch (KuraBluetoothResourceNotFoundException e) {\n    logger.error(\"Unable to find GATT resources\", e);\n}\n
                    "},{"location":"java-application-development/how-to-use-bt-le-apis/#io-operations-on-gatt-characteristics-and-descriptors","title":"IO operations on GATT characteristics and descriptors","text":"

                    The Kura BLE APIs provides methods to manage the IO operations on GATT characteristics and descriptors. The following snippet provides an example on how to read and write data to a characteristic.

                    try {\n    byte[] valueRead = characteristic.readValue();\n    byte[] valueWrite = { 0x01};\n    characteristic.writeValue(valueWrite);\n} catch (KuraBluetoothIOException e) {\n    logger.error(\"IO operation failed\", e);\n}\n

                    In the following example, instead, a notification listener is configured to periodically receive the data from a GATT characteristic and print the first value of the given array. The period is internally set by the BLE device.

                    try {\n    Consumer<byte[]>; callback = valueBytes -> System.out.println((int) valueBytes[0]);\n    characteristic.enableValueNotifications(callback);\n} catch (KuraBluetoothNotificationException e) {\n    logger.error();\n}\n
                    "},{"location":"java-application-development/how-to-use-bt-le-apis/#configure-bluez-on-the-raspberry-pi","title":"Configure Bluez on the Raspberry Pi","text":"

                    The minimum version of Bluez supported by Kura Bluetooth LE APIs is 5.42. The Raspbian Stretch OS comes with Bluez 5.43, but older OS couldn't have an updated Bluez version. In this case, it is possible to compile and install Bluez from sources using a Raspberry Pi. The Bluez sources can be found here Proceed as follows:

                    • Install the packages needed for compile Bluez: 

                    sudo apt-get install libusb-dev libdbus-1-dev libglib2.0-dev libudev-dev libical-dev libreadline-dev\n
                    * Download bluez-5.43.tar.xz (or newer version) from here. * Decompress the compressed archive:

                    tar -xf bluez-5.43.tar.x\n
                    • Compile the sources:
                    cd bluez-5.43\n./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-library -disable-systemd --enable-experimental --enable-maintainer-mod\nmake\nmake install\n
                    "},{"location":"java-application-development/how-to-use-can-bus/","title":"How to Use CAN bus","text":"

                    The Kura CAN bus protocol implementation is based on the SocketCAN interface, which provides a socket interface to userspace applications. The sockets are designed as can0 and can1. The SocketCAN package is an implementation of Controller Area Network (CAN) protocols. For more information, refer to the following link: https://www.kernel.org/doc/Documentation/networking/can.txt.

                    "},{"location":"java-application-development/how-to-use-can-bus/#configure-the-can-bus-driver","title":"Configure the CAN bus Driver","text":"

                    The CAN network must be initialized prior to communications. Verify that the CAN driver module has been enabled in the kernel by issuing the following command:

                    ifconfig -a\n
                    The connections \u201ccan0\u201d and \u201ccan1\u201d should be displayed.

                    Next, the sockets must be enabled and configured using the following commands (the bitrate value must be set according to the bitrate of the device that will be connected): 

                    ip link set can0 type can bitrate 50000 triple-sampling on\nip link set can0 up\nip link set can1 type can bitrate 50000 triple-sampling on\nip link set can1 up\n

                    "},{"location":"java-application-development/how-to-use-can-bus/#use-the-can-bus-driver-in-kura","title":"Use the CAN bus Driver in Kura","text":"

                    To use the Can bus Driver in Kura, the bundle org.eclipse.kura.protocol.can must be installed. Refer to the section Application Management for more information.

                    Once this bundle is installed and verified, the CanConnectionService provides access to basic functionalities of the CAN network, including:

                    • sendCanMessage \u2013 sends an array of bytes in RAW mode.

                    • receiveCanMessage \u2013 reads frames in RAW mode waiting on socket CAN.

                    Refer to the following Kura javadocs for more information: http://download.eclipse.org/kura/docs/api/5.2.0/apidocs/.

                    Also, for information about the wrapper that this service utilizes, refer to the following link: https://github.com/entropia/libsocket-can-java.

                    "},{"location":"java-application-development/how-to-use-dummy-signature-service/","title":"How to use the Dummy Container Signature Validation Service","text":"

                    The Dummy Container Signature Validation Service is an example implementation of the Container Signature Validation Service interface which mainly serves as a reference for future implementations and testing.

                    The purpose of this component is to have a service whose configuration dictates the signature verification outcome. In the main text area is possible to set the container image reference that the service will report as correctly signed.

                    The format accepted by the service is: <imageName>:<imageTag>@<imageDigest> where

                    • <imageName>: is the container image name. The value will need to be expressed in the form registryURL/imagename in case of a custom registry. Example: nginx or nvcr.io/nvidia/deepstream.
                    • <imageTag>: is the container image tag. Example: latest or 6.4-gc-triton-devel.
                    • <imageDigest>: is the image digest in the OCI specification format.

                    Each image should be separated by a newline. The service will report a successful signature validation for each image inside its configuration, returning the provided image digest as a result.

                    "},{"location":"java-application-development/how-to-use-gpio/","title":"How to use GPIO","text":"

                    GPIO resources can be accessed either using the GPIO Service provided by Kura, or directly using the OpenJDK Device I/O embedded library.

                    "},{"location":"java-application-development/how-to-use-gpio/#gpio-service","title":"GPIO Service","text":"

                    Access to GPIO resources is granted by the GPIOService. Once retrieved, the service can be used to acquire a GPIO Pin and use it as a digital output or a digital input.

                    The GPIO Service exposes methods to retrieve a GPIO Pin via its name or index as shown below.

                    KuraGpioPin thePin = gpioServiceInstance.getPinByTerminal(18);\nKuraGpioPin thePin = gpioServiceInstance.getPinByName(\"IgnitionPin\");\n

                    The KuraGpioPin object is used to manipulate GPIO Pins and exposes methods to read the status of an input, or set the status of digital output as shown below. 

                    //sets digital output value to high\nthePin.setValue(true);\n\n//get value of a digital input pin\nboolean active = thePin.getValue();\n\n//listen for status change on a digital input pin\ntry {  \n      thePin.addPinStatusListener(new PinStatusListener() {\n          @Override    \n          public void pinStatusChange(boolean value) {      \n          // Perform tasks when pin status changes    \n          }  \n      });\n} catch (KuraClosedDeviceException e) {\n  // Here if GPIO cannot be acquired\n  } catch (IOException e) {\n    // Here on I/O error\n  }\n

                    "},{"location":"java-application-development/how-to-use-gpio/#pin-configuration","title":"Pin Configuration","text":"

                    Pin names, indexes, and configuration are defined in the jdk.dio.properties file.

                    Although GPIO pins can be accessed with their default configuration, the settings of each pin can be changed when acquiring it with the GPIO Service as shown below. 

                    KuraGpioPin customInputPin = gpioServiceInstance.getPinByTerminal(\n  14, \n  KuraGPIODirection.INPUT, \n  KuraGPIOMode.INPUT_PULL_UP, \n  KuraGPIOTrigger.BOTH_LEVELS);\n

                    "},{"location":"java-application-development/how-to-use-gpio/#default-configuration","title":"Default Configuration","text":"

                    Default hardware configuration for the hardware platform is defined in the jdk.dio.properties file. Standard configuration for complex devices can be added on a per-device basis as shown below.

                    #Default PIN configuration. To be overwritten in the following lines\ngpio.GPIOPin = initValue:0, deviceNumber:0, direction:3, mode:-1, trigger:3\n\n#Standard PIN configuration\n64 = deviceType: gpio.GPIOPin, pinNumber:64, name:RELAY1\n

                    Starting from Kura 5.5.0, the default pin configuration can be described in the form of symbolic links. The syntax is as follows:

                    /dev/digital_in1 = deviceType: gpio.GPIOPin, direction:0, mode=1, name:digital_in1\n

                    where /dev/digital_in1 points to /sys/class/gpio/gpioXYZ. The pin number is set to XYZ and it can be retrieved by name.

                    "},{"location":"java-application-development/how-to-use-gpio/#openjdk-device-io","title":"OpenJDK Device I/O","text":"

                    Linux-level access in Kura is granted through OpenJDK Device I/O, a third-party library that leverages standard Java ME Device I/O APIs to Java SE. Kura is distributed with the relevant native libraries, together with the default hardware configuration, for each platform on which it runs.

                    I2C, SPI, and GPIO resources can be directly accessed through the jdk.dio library present in the target platform.

                    "},{"location":"java-application-development/how-to-use-gpio/#apis","title":"APIs","text":"

                    Kura supports the full set of APIs for the listed device types. Refer to References for further API information.

                    "},{"location":"java-application-development/how-to-use-gpio/#accessing-a-gpio-pin-with-openjdk-device-io","title":"Accessing a GPIO Pin with OpenJDK Device I/O","text":"

                    A GPIO Pin can be accessed by referencing its index in the properties file, or by creating a Pin configuration object and feeding it to the DeviceManager as shown in the code examples below.

                    "},{"location":"java-application-development/how-to-use-gpio/#accessing-a-gpio-pin-by-its-index","title":"Accessing a GPIO Pin by its Index","text":"
                    #Accessing the GPIO Pin number 17. The default behaviour is defined in the\n#jdk.dio.properties file\n#\n#i.e.:\n# gpio.GPIOPin = initValue:0, deviceNumber:0, direction:3, mode:-1, trigger:3\n# 17 = deviceType: gpio.GPIOPin, pinNumber:17, name:GPIO_USER_1\n\nGPIOPin led = (GPIOPin)DeviceManager.open(17);\n\nled.setValue(true) //Turns the LED on\nled.setValue(false) //Turns the LED off\nboolean status = led.getValue() //true if the LED is on\n
                    "},{"location":"java-application-development/how-to-use-gpio/#accessing-a-gpio-pin-using-a-device-configuration-object","title":"Accessing a GPIO Pin Using a Device Configuration Object","text":"
                    #Accessing the Pin number 17 with custom configuration\n\nGPIOPinConfig pinConfig = new GPIOPinConfig(\n    DeviceConfig.DEFAULT,                       //GPIO Controller number or name\n    17,                                                 //GPIO Pin number\n    GPIOPinConfig.DIR_INPUT_ONLY,               //Pin direction\n    GPIOPinConfig.MODE_INPUT_PULL_DOWN,     //Pin resistor\n    GPIOPinConfig.TRIGGER_BOTH_EDGES,       //Triggers\n    false                                           //initial value (for outputs)\n);\n\nGPIOPin button = (GPIOPin) DeviceManager.open(GPIOPin.class, pinConfig);\n\nbutton.setInputListener(new PinListener(){\n        @Override\n        public void valueChanged(PinEvent event) {\n            System.out.println(\"PIN Status Changed!\");\n            System.out.println(event.getLastTimeStamp() + \" - \" + event.getValue());\n        }\n});\n
                    "},{"location":"java-application-development/how-to-use-modbus/","title":"How to Use Modbus","text":"

                    ModbusProtocolDevice is a service that provides a connection to a device or a network of devices over Serial Line (RS-232/RS-485) or Ethernet using the Modbus protocol. This service implements a subset of the Modbus Application Protocol as defined by Modbus Organization (for more information, refer to http://www.modbus.org/specs.php).

                    The ModbusProtocolDevice service needs to receive a valid Modbus configuration including the following parameters:

                    • Modbus protocol mode - defines the protocol mode as RTU or ASCII (only RTU mode for Ethernet connections).

                    • Timeout - sets the timeout in order to detect a disconnected device.

                    The ModbusProtocolDevice service also requires a valid Serial Line or Ethernet connection configuration including the following parameters:

                    • Serial Line
                    • port name
                    • baudrate
                    • bits
                    • stops

                    • parity

                    • Ethernet

                    • ip address
                    • port number

                    When a valid configuration is received, the ModbusProtocolDevice service tries to open the communication port. Serial Line communication uses the CommConnection class; Ethernet communication is based on java.net.Socket. When the communication is established, the client makes direct calls to the Modbus functions. The first parameter of each method is the Modbus address of the queried unit. This address must be in the range of 1 - 247.

                    "},{"location":"java-application-development/how-to-use-modbus/#function-codes","title":"Function Codes","text":"

                    The following function codes are implemented within the ModbusProtocolDevice service:

                    • 01 (0x01) readCoils(int unitAddr,\u00a0 int dataAddress, int count) - read 1 to 2000 maximum contiguous status of coils from the attached field device with address \"unitAddr\". An array of booleans representing the requested data points is returned.

                    • 02 (0x02) readDiscreteInputs(int unitAddr,\u00a0 int dataAddress, int count) - read 1 to 2000 maximum contiguous status of discrete inputs from the attached field device with address \"unitAddr\". An array of booleans representing the requested data points is returned.

                    • 03 (0x03) readHoldingRegisters(int unitAddr,\u00a0 int dataAddress, int count) - read contents of 1 to 125 maximum contiguous block of holding registers from the attached field device with address \"unitAddr\". An array of int representing the requested data points (data registers on 2 bytes) is returned.

                    • 04 (0x04) readInputRegisters(int unitAddr,\u00a0 int dataAddress, int count) - read contents of 1 to 125 maximum contiguous block of input registers from the attached field device with address \"unitAddr\". An array of int representing the requested data points (data registers on 2 bytes) is returned.

                    • 05 (0x05) writeSingleCoil(int unitAddr,\u00a0 int dataAddress, boolean data) - write a single output to either ON or OFF in the attached field device with address \"unitAddr\".

                    • 06 (0x06) writeSingleRegister(int unitAddr,\u00a0 int dataAddress, int data) - write a single holding register in the attached field device with address \"unitAddr\".

                    • 15 (0x0F) writeMultipleCoils(int unitAddr,\u00a0 int dataAddress, boolean[ ] data) - write multiple coils in a sequence of coils to either ON or OFF in the attached field device with address \"unitAddr\".

                    • 16 (0x10) writeMultipleRegister(int unitAddr,\u00a0 int dataAddress, int[ ] data) - write a block of contiguous registers (1 to 123) in the attached field device with address \"unitAddr\".

                    All functions throw a ModbusProtocolException. Valid exceptions include:

                    • INVALID_CONFIGURATION

                    • NOT_AVAILABLE

                    • NOT_CONNECTED

                    • TRANSACTION_FAILURE

                    "},{"location":"java-application-development/how-to-use-modbus/#code-examples","title":"Code Examples","text":"

                    The ModbusProtocolDeviceService is an OSGi declarative service referenced in the client XML definition file: 

                    <reference bind=\"setModbusProtocolDeviceService\"\n       cardinality=\"1..1\"\n       interface=\"org.eclipse.kura.protocol.modbus.ModbusProtocolDeviceService\"\n       name=\"ModbusProtocolDeviceService\"\n       policy=\"static\"\n       unbind=\"unsetModbusProtocolDeviceService\"/>\n
                    public void setModbusProtocolDeviceService(ModbusProtocolDeviceService modbusService) {\n  this.m_protocolDevice = modbusService;\n}\n\npublic void unsetModbusProtocolDeviceService(ModbusProtocolDeviceService modbusService) {\n  this.m_protocolDevice = null;\n}\n
                    if(m_protocolDevice!=null){\n  m_protocolDevice.disconnect();\n  m_protocolDevice.configureConnection(modbusSerialProperties);\n}\n
                    If no exception occurs, the ModbusProtocolDevice can then be used to exchange data: 
                    boolean[] digitalInputs = m_protocolDevice.readDiscreteInputs(1, 2048, 8);\nint[] analogInputs = m_protocolDevice.readInputRegisters(1, 512, 8);\nboolean[] digitalOutputs = m_protocolDevice.readCoils(1, 2048, 6); // LEDS\n\n// to set LEDS\nm_protocolDevice.writeSingleCoil(1, 2047 + LED, On?TurnON:TurnOFF);\n

                    "},{"location":"java-application-development/how-to-use-watchdog/","title":"How to use watchdog","text":""},{"location":"java-application-development/how-to-use-watchdog/#overview","title":"Overview","text":"

                    When enabled, the watchdog is a peripheral monitor that will reboot the system if it is not refreshed during a certain time interval. In Kura, the WatchdogService can be used by critical applications. If the specified application is alive, the service notifies the watchdog; if the application is down, the service stops notifying the watchdog and a hardware reset occurs.

                    The WatchdogService notifies the kernel watchdog driver using the /dev/watchdog device file. You can verify that the watchdog driver is installed using the following command:

                    ls \u2013l /dev/watchdog\n
                    "},{"location":"java-application-development/how-to-use-watchdog/#configuration","title":"Configuration","text":"

                    To configure the WatchdogService, select the WatchdogService option located in the Services area as shown in the screen capture below.

                    The WatchdogService provides the following configuration parameters:

                    • enabled - sets whether or not this service is enabled or disabled. If enabled, you must set a pingInterval periodicity compatible with the watchdog driver.

                    • pingInterval - specifies the time between two watchdog notifications. This time is hardware dependent. Generally, the maximum time between two notifications should be between 30 seconds and 1 minute. 10000 milliseconds for the pingInterval is typically a good choice.

                    "},{"location":"java-application-development/how-to-use-watchdog/#code-example","title":"Code Example","text":"

                    The WatchdogService references a list of Critical Components that correspond to the applications implementing the CriticalComponent interface.

                    CriticalComponent is an interface that can be used to denote a component that is crucial to system operations. If a component implements CriticalComponent, then it must state its name as well as its criticalComponentTimeout. The name is a unique identifier in the system. The timeout is the length of time in milliseconds that the CriticalComponent must \"check in\" with the WatchdogService. If the CriticalComponent extends beyond the period of time specified in this timeout, a system reboot will be performed based on the WatchdogService configuration.

                    If at least one of the registered CriticalComponents has not \"checked in\" during the pingInterval time, the WatchdogService stops notifying the watchdog driver. The system reboots when the time interval reaches the hardware time that is programmed for the watchdog. When the WatchdogService is enabled and no application is using it, the service runs silently in the background.

                    An example of the WatchdogService can be found here.

                    The following code snippets demonstrate how to implement the CriticalComponent interface:

                    public class ModbusManager implements ConfigurableComponent, CriticalComponent, CloudClientListener\n

                    Registration of the class in WatchdogService::

                    if(m_watchdogService!=null){\n  m_watchdogService.registerCriticalComponent(this);\n}\n

                    Periodic call to checkin method of WatchdogService in the main loop (keeps watchdog notification alive):

                    if(m_watchdogService!=null){\n  m_watchdogService.checkin(this);\n}\n
                    "},{"location":"java-application-development/kura-workspace-setup/","title":"Kura Workspace Setup","text":"

                    This document describes how to set up the Eclipse Kura workspace development environment, which consists of the following components:

                    • JVM (Java JDK SE 8)
                    • Eclipse IDE
                    • Eclipse Kura Workspace

                    This setup will allow you to develop applications or bundles running on Eclipse Kura. It will install only the APIs and the examples. If you want to contribute to the Eclipse Kura project follow this guide instead.

                    The Eclipse Kura development environment may be installed on Windows, Linux, or Mac OS. The setup instructions will be the same across each OS though each system may have unique characteristics.

                    Info

                    The local emulation of Eclipse Kura code is only supported in Linux and Mac, not in Windows.

                    "},{"location":"java-application-development/kura-workspace-setup/#jvm-installation","title":"JVM Installation","text":"

                    Download and install JDK SE 8 from the following links as appropriate for your OS.

                    For Windows and Linux users, the JDK can be downloaded from the following link: Java SE 8 Downloads. Use the latest version of the Java SE Development Kit and download the version appropriate for your system.

                    For additional information regarding the installation of Java 8 on all supported operating systems, see JDK 8 and JRE 8 Installation Guide.

                    "},{"location":"java-application-development/kura-workspace-setup/#installing-eclipse-ide","title":"Installing Eclipse IDE","text":"

                    Before installing Eclipse, you should choose directory locations for the Eclipse install and its workspaces.

                    Info

                    The following points should be kept in mind regarding Eclipse installs and workspaces:

                    • The directory location of the Eclipse workspaces should be chosen carefully. Once Eclipse is installed and workspaces are created, they should never be moved to another location in the file system.
                    • There may be multiple installs of Eclipse (of different or similar versions), and single instances of each install can be run simultaneously; but there should never be more that one instance of a specific install running at the same time (to avoid corruption to the Eclipse environment).
                    • Each workspace should be used with only one Eclipse install. You should avoid opening the workspace from more than one installation of Eclipse.

                    Download the current distribution of Eclipse for your OS from Eclipse official website. Choose the Eclipse IDE for Eclipse Committers.

                    The zipped Eclipse file will be downloaded to the local file system and can be saved to a temporary location that can be deleted after Eclipse has been installed. After the file has been downloaded, it should be extracted to the Eclipse installs directory. The following screen capture shows the installation in Linux using an eclipse\\installs directory. The Eclipse executable will then be found in the eclipse\\installs\\eclipse directory. This installation will be different depending on the operating system.

                    Because there may potentially be future Eclipse installs extracted into this location, before doing anything else, rename the directory, such as eclipse\\installs\\juno1\\.

                    Warning

                    Once you begin using this Eclipse install, it should NOT be moved or renamed.

                    "},{"location":"java-application-development/kura-workspace-setup/#workspaces","title":"Workspaces","text":""},{"location":"java-application-development/kura-workspace-setup/#creating-an-eclipse-workspace","title":"Creating an Eclipse Workspace","text":"

                    Run Eclipse by clicking its executable in the install directory.

                    When Eclipse is run for the first time, a workspace needs to be created. A single workspace will contain all the Java code/projects/bundles, Eclipse configuration parameters, and other relevant files for a specific business-level product. If the Use this as the default option is selected, the designated workspace becomes the default each time you run Eclipse.

                    If a workspace has not already been defined, or if you are creating a different workspace for another development project, enter a new workspace name. The workspace should be named appropriate to the project/product being developed.

                    Warning

                    Once you begin using a particular workspace, it should NOT be moved or renamed at any time.

                    Otherwise, select an existing workspace and click OK. After Eclipse is running, you can select the Eclipse menu File | Switch Workspace | Other to create or open a different workspace.

                    After the new workspace opens, click the Workbench icon to display the development environment.

                    Info

                    Additional workspace configuration:

                    • In the Eclipse workspace modify the lifecycle mapping by adding these XML lines to the lifecycle-mapping-metadata.xml in Eclipse Kura workspace. You can find the file in the Windows -> Preferences -> Maven -> Lifecycle Mappings -> Open workspace lifecycle mappings metadata. After editing the file, reload it by pressing the \"Reload workspace lifecycle mappings metadata\" button. 
                      <?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<lifecycleMappingMetadata>\n    <lifecycleMappingFilters>\n        <lifecycleMappingFilter>\n            <symbolicName>org.eclipse.m2e.pde.connector</symbolicName>\n            <versionRange>[2.1.2,)</versionRange>\n            <packagingTypes>\n                <packagingType>eclipse-test-plugin</packagingType>\n                <packagingType>eclipse-plugin</packagingType>\n                <packagingType>eclipse-feature</packagingType>\n            </packagingTypes>\n        </lifecycleMappingFilter>\n    </lifecycleMappingFilters>\n</lifecycleMappingMetadata>\n
                    • Install the eclipse-tycho plugin following this steps:
                      1. Menu Help -> Install new software... -> Paste the m2eclipse-tycho repository URL in the Work with: text field -> expand the category and select the Tycho Project Configurators Feature and proceed with the installation.
                      2. Then restart Eclipse.
                    "},{"location":"java-application-development/kura-workspace-setup/#importing-the-eclipse-kura-user-workspace","title":"Importing the Eclipse Kura User Workspace","text":"

                    To set up your Eclipse Kura project workspace, you will need to download the Eclipse Kura User Workspace archive from Eclipse Kura Download Page.

                    From the Eclipse File menu, select the Import option. In the Import dialog box, expand the General heading, select Existing Projects into Workspace, and then click Next.

                    Now click the Select archive file option button and browse to the archive file, such as user_workspace_archive_.zip.

                    Finally, click Finish to import the projects. At this point, you should have four projects in your workspace. The four projects are as follows:

                    • org.eclipse.kura.api \u2013 the core Eclipse Kura API.

                    • org.eclipse.kura.demo.heater \u2013 an example project that you can use as a starting point for creating your own bundle.

                    • org.eclipse.kura.emulator \u2013 the emulator project for running Eclipse Kura within Eclipse (Linux/Mac only).

                    • target-definition \u2013 a set of required bundles that are dependencies of the APIs and Eclipse Kura.

                    Eclipse will also report some errors at this point. See the next section to resolve those errors.

                    "},{"location":"java-application-development/kura-workspace-setup/#workspace-setup","title":"Workspace Setup","text":"

                    This section will guide the users to configure the development workspace environment.

                    "},{"location":"java-application-development/kura-workspace-setup/#jre-configuration","title":"JRE Configuration","text":"

                    The latest Eclipse IDEs require and configure, by default, a Java 11 environment. In order to be able to leverage and develop using the new workspace for Eclipse Kura, the user will be required to perform a one-time operation to specify to the IDE a Java 8 JDK. Opening the Eclipse preferences and selecting the Installed JREs in the Java section, the user has to select an installed Java 8 instance.

                    After applying the configuration change, the user will be prompted to align also the compiler options. To do so, selecting the Compiler entry in the Java section, the user has to select 1.8 from the list of available Java versions.

                    After applying the changes, the user will be prompted to recompile the environment.

                    "},{"location":"java-application-development/kura-workspace-setup/#target-definition-setup","title":"Target Definition Setup","text":"

                    Click the arrow next to the target-definition project in the workspace and double-click kura-equinox_.target to open it.

                    In the Target Definition window, click the link Set as Target Platform. Doing so will reset the target platform, rebuild the Eclipse Kura projects, and clear the errors that were reported. At this point, you are ready to begin developing Eclipse Kura-based applications for your target platform.

                    "},{"location":"java-application-development/kura-workspace-setup/#run-the-eclipse-kura-emulator","title":"Run the Eclipse Kura Emulator","text":"

                    To start the Eclipse Kura emulator, select the \"Eclipse Kura Emulator.launch\" profile from \"Other Projects\" -> \"setups\" -> \"launchers\" and open it with \"Run as\" -> \"Run Configurations...\". Then click on the \"Arguments\" tab and update the \"VM arguments\" as follows to adapt the paths to the folder structure created by the Oomph installer:

                    -Dkura.have.net.admin=false -Dorg.osgi.framework.storage=/tmp/osgi/framework_storage -Dosgi.clean=true -Dosgi.noShutdown=true -Declipse.ignoreApp=true -Dorg.eclipse.kura.mode=emulator -Dkura.configuration=file:${workspace_loc}/../git/kura/kura/emulator/org.eclipse.kura.emulator/src/main/resources/kura.properties -Ddpa.configuration=/tmp/kura/dpa.properties -Dlog4j.configurationFile=file:${workspace_loc}/../git/kura/kura/emulator/org.eclipse.kura.emulator/src/main/resources/log4j.xml -Dkura.data=${workspace_loc}/kura/data -Dkura.snapshots=${workspace_loc}/kura/user/snapshots -Dorg.eclipse.equinox.http.jetty.customizer.class=org.eclipse.kura.jetty.customizer.KuraJettyCustomizer\n

                    The Eclipse Kura Web UI will be available at the following URL: http://127.0.0.1:8080 with username and password admin.

                    "},{"location":"java-application-development/ram-usage-considerations/","title":"RAM Usage Considerations","text":"

                    During application development and before moving to production, it is advisable to understand if the amount of free RAM available on the device is enough for correct device operation.

                    Since RAM usage is application dependent, it is important to perform some stress tests to bring the device in the worst case conditions and verify system behavior.

                    Some of the aspects that should be taken into account are the following:

                    "},{"location":"java-application-development/ram-usage-considerations/#java-heap-memory-usage","title":"Java Heap memory usage","text":"

                    Java heap is used to store the Java objects and classes at runtime.

                    The heap should be:

                    1. Large enough to satisfy the requirements of applications running inside Kura.
                    2. Small enough so that the requirements of the system and applications running outside Kura are satisfied.

                    The size of the heap is controlled by the -Xms and -Xmx Java command line arguments. These parameters are defined in the /opt/eclipse/kura/bin/start_kura_debug.sh (for development mode) and /opt/eclipse/kura/bin/start_kura_background.sh (for production mode).

                    The -Xms parameter defines the initial size of Java heap and -Xmx defines the maximum size. The JVM will start using Xms as the size of the heap, and then it will grow the heap at runtime up to Xmx if needed, depending on application memory demand.

                    Resizing the heap has a cost in terms of performance, for this reason Xms and Xmx are set to the same size by default on most platforms.

                    In order to understand if the heap is large enough, it is advisable to perform a stress test simulating the conditions of maximum memory demand by the applications running inside Kura. For example, if a in-memory database instance is used by a DataService instance, during the test the database can be filled up to the maximum capacity to verify if this causes any issue.

                    Regarding point 2., it should be noted that heap memory is not necessarily backed by physical memory immediately after JVM startup. Even if the JVM performs an allocation of size Xmx immediately, physical memory will be assigned to the Java process by the kernel only when the memory pages are actually accessed by the JVM.

                    For this reason the amount of physical memory used by the JVM might appear small right after system boot and grow with time, up to the maximum size. This can happen even if the applications running inside Kura do not have high memory requirements, and can lead to potential issues that show up only after some time.

                    In order to recreate such issues, the -XX:+AlwaysPreTouch JVM command line option can be used during development to force the JVM to access all heap memory after start, causing the JVM process to use the maximum amount of physical memory immediately.

                    "},{"location":"java-application-development/ram-usage-considerations/#logging","title":"Logging","text":"

                    Another aspect that can lead to RAM related issues is logging. As a general rule, it is recommended to reduce the amount of log messages produced by Kura during normal operation.

                    Kura default logging configuration (/opt/eclipse/kura/log4j/log4j.xml) depends on the platform.

                    The size of the files in the /var/log directory will be checked periodically and the files will be rotated to the persisted /var/old_logs directory if needed.

                    "},{"location":"java-application-development/ram-usage-considerations/#external-application-ram-usage","title":"External application RAM usage","text":"

                    If external applications are installed on the system (e.g. Docker containers), their RAM usage should be analyzed as well.

                    Stress tests related to Java heap size, log size and external applications can be run simultaneously to simulate a worst case scenario.

                    "},{"location":"java-application-development/remote-debugging-on-target-platform/","title":"Remote debugging on target platform","text":"

                    Eclipse Kura can be started with Java Debug Wire Protocol (JDWP) support, allowing the remote debugging of the developed application using Eclipse IDE. The procedure for remote debugging is presented in the following.

                    • Connect to the target platform (i.e. RaspberryPi) and stop the Kura application typing sudo systemctl stop kura or sudo /etc/init.d/kura stop.

                    • Start Kura with Java Debug Wire Protocol (JDWP) typing sudo /opt/eclipse/kura/bin/start_kura_debug.sh. This will start Kura and open an OSGi console. It will also start listening for socket connections on port 8000.

                    Warning

                    Starting from Java 9, the JDWP socket connector accepts only local connections by default (see here for further details). To enable remote debugging on Java 9, the following line in /opt/eclipse/kura/bin/start_kura_debug.sh: -Xdebug -Xrunjdwp:server=y,transport=dt_socket,address=8000,suspend=n \\has to be replaced with the following one: -Xdebug -Xrunjdwp:server=y,transport=dt_socket,address=*:8000,suspend=n \\

                    • Open the tcp port 8000 in the firewall. This can be done through the firewall tab in Kura web interface or using iptables.

                    • Install your application bundle on the target platform.

                    • From Eclipse IDE, set a breakpoint in the application code at a point that will be reached (i.e. activation method, common logging statement, etc.). Then:

                    • Go to \"Run -> Debug Configurations\u2026\"
                    • Select \u201cRemote Java Application\u201d and click the \u201cNew launch configuration\u201d button
                    • For \u201cProject:\u201d, select the bundle project to be debugged
                    • For \u201cConnection Type:\u201d, select the default \u201cStandard (Socket Attach)\u201d
                    • For \u201cConnection Properties:\u201d, enter the IP address of the target platform and the tcp port 8000

                    • Click Debug

                    • Eclipse will connect to the target platform VM and switch to the Debug Perspective when the breakpoint will have been hit.

                    • To stop the remote debugging, select the \u201cDisconnect\u201d button from the Debug Perspective.

                    "},{"location":"kura-wires/assets-as-wire-components/","title":"Assets as Wire Components","text":"

                    An Asset can be used inside a Wire Graph, in this case it is represented as node with two ports an input port and an output port. An Asset used in this way is called WireAsset.

                    "},{"location":"kura-wires/assets-as-wire-components/#read-mode","title":"Read mode","text":"

                    Every time a WireAsset receives an envelope on its input port, it will read the values of all of its channels with READ or READ_WRITE type. The result is emitted as a WireEnvelope with a single WireRecord. The WireRecord contains the following properties:

                    • a property with key assetName, value type STRING and the emitting asset asset name as value
                    • a property with key assetError, value type STRING if emit.errors and emit.connection.errors is enabled and a general connection failure is returned by the Driver. See the description of the emit.connection.errors parameter for more details.
                    • a property with key assetTimestamp, value type LONG, reporting a timestamp in milliseconds since Unix epoch (midnight, January 1, 1970 UTC). This property may be present or not depending on the value of the timestamp.mode configuration parameter or in case of general connection exception reported by the Driver, see the configuration parameter description for more details.

                    For each channel in asset configuration with READ or READ_WRITE type named name:

                    • a property with key = name, value type = value.type in channel configuration and value = value obtained from read operation. This property will be present only if the read operation is successful.
                    • a property with key = <name>_timestamp value type = LONG reporting a timestamp in milliseconds since UNIX epoch. This property will be present only if the timestamp.mode Asset configuration property is set to PER_CHANNEL
                    • a property with key = <name>_error, value type = STRING reporting an error message. This property will be present only if read operation fails and the emit.errors Asset configuration property is set to true.

                    For example, if an Asset that has the channel configuration shown in the picture below receives a WireEnvelope on its input port, it can emit an envelope with the following content, assuming that the read operation for each channel succeed:

                    • WireEnvelope
                      • WireRecord[0]
                        • assetName: modbusAsset (type = STRING)
                        • LED1: true (type = BOOLEAN)
                        • LED1_timestamp: 1597925188 (type = LONG)
                        • LED2: false (type = BOOLEAN)
                        • LED2_timestamp: 1597925188 (type = LONG)
                        • LED3: true (type = BOOLEAN)
                        • LED3_timestamp: 1597925188 (type = LONG)
                        • LED4-RED: false (type = BOOLEAN)
                        • LED4-RED_timestamp: 1597925188 (type = LONG)
                        • LED4-GREEN: false (type = BOOLEAN)
                        • LED4-GREEN_timestamp: 1597925188 (type = LONG)
                        • LED4-BLUE: true (type = BOOLEAN)
                        • LED4-BLUE_timestamp: 1597925188 (type = LONG)
                        • Toggle-4: true (type = BOOLEAN)
                        • Toggle-4_timestamp: 1597925188 (type = LONG)
                        • Toggle-5: false (type = BOOLEAN)
                        • Toggle-5_timestamp: 1597925188 (type = LONG)
                        • Toggle-6: true (type = BOOLEAN)
                        • Toggle-6_timestamp: 1597925188 (type = LONG)
                        • Counter-3: 123 (type = INTEGER)
                        • Counter-3_timestamp: 1597925188 (type = LONG)
                        • Quad-Counter: 11 (type = INTEGER)
                        • Quad-Counter_timestamp: 1597925188 (type = LONG)
                        • Reset-Counter3: false (type = BOOLEAN)
                        • Reset-Counter3_timestamp: 1597925188 (type = LONG)
                        • Reset-Quad-Counter: false (type = BOOLEAN)
                        • Reset-Quad-Counter_timestamp: 1597925188 (type = LONG)

                    The emitted WireEnvelope contains a single record containing the properties described above.

                    The Logger WireComponent can be used to inspect the messages emitted on a specific output port of a WireComponent by creating a connection between the output port of the component to the input port of the Logger. In this case the content of the received envelopes will be printed on device log (/var/log/kura.log).

                    As mentioned above, the read operation is performed only if an envelope is received on the input port of the WireAsset. In order to achieve this, another component must be connected to the input port of the WireAsset.

                    An example of such component can be the Timer, this component can be configured to periodically emit an envelope containing a single wire record with a single property named TIMER reporting the current UNIX timestamp. Connecting this component to a WireAsset allows to implement a simple read polling cycle. The configuration of the timer defines the polling interval.

                    "},{"location":"kura-wires/assets-as-wire-components/#listen-mode","title":"Listen mode","text":"

                    Enabling the listen flag allows to enable unsolicited notifications from the driver.

                    When this happens, the Asset will emit an WireEnvelope containing the updated value for the channel involved in the event. The content of this envelope is the same as the one generated in case of a read operation on the channel.

                    For example if listen is ticked for LED1 and the driver above detects a value change in that channel, the Asset will emit the following envelope:

                    • WireEnvelope
                      • WireRecord[0]
                        • assetName: modbusAsset (type = STRING)
                        • LED1: false (type = BOOLEAN)
                        • LED1_timestamp: 1597925200 (type = LONG)

                    This mode does not require to connect any component to the input port of the driver. The conditions that trigger the events for the channels and their meaning is reported in the Driver specific documentation.

                    Note: The example above is not completely realistic since the Modbus driver does not support listen mode. In this case ticking the listen flag will have no effect. The support for listen mode is mentioned in driver documentation.

                    Listen mode and Read mode are not mutually exclusive. If a channel is defined as READ or READ_WRITE and the listen flag is ticked, the driver will emit the channel value when a WireEnvelope is received on its input port or when a driver event is generated.

                    "},{"location":"kura-wires/assets-as-wire-components/#write-mode","title":"Write mode","text":"

                    Additionally, the Wire Graph can also be used to update asset values through write operations, according to the following rule.

                    Every time a WireAsset receives an envelope on its input port, for each property contained in the received WireRecords with key <key>, value type <value type> and value <value>, the driver will perform this operation: If a channel with name <key> is defined in asset configuration whose value.type is equal to <value type> and type is WRITE or READ_WRITE, then the Asset will write <value> to the channel.

                    For example if the Asset above receives the following envelope:

                    • WireEnvelope
                      • WireRecord[0]
                        • LED1: false (type = BOOLEAN)
                        • LED2: 78 (type = LONG)
                        • Toggle-4: true (type = BOOLEAN)
                        • foo: bar (type = STRING)

                    The following operations will happen:

                    • Since the Asset configuration contains a channel named LED1, with value.type = BOOLEAN, and type = READ_WRITE, the driver will write false to that channel for the rule mentioned above.
                    • The LED2: 78 property will have no effect, since the Asset configuration contains a channel named LED2 with type = READ_WRITE, but value.type = BOOLEAN != LONG.
                    • The Toggle-4: true property will have no effect, since the asset contains a channel named Toggle-4, with value.type = BOOLEAN but type = READ != WRITE | READ_WRITE
                    • The foo: bar property will have no effect, since none of the defined channels has foo as name.
                    • The Asset will read and emit all of the channel values with type = READ or READ_WRITE, since a WireEnvelope has been received.
                    "},{"location":"kura-wires/assets-as-wire-components/#wire-asset-global-configuration-parameters","title":"Wire Asset global configuration parameters","text":"

                    The WireAsset component provides the following global (non per-channel) configuration parameters that can be used to customize component behavior:

                    • emit.all.channels: Specifies whether the values of all READ or READ_WRITE channels should be emitted when a channel event is received in listen mode. If set to true, the values for all channels will be read and emitted, if set to false, only the value for the channel related to the event will be emitted.

                    • timestamp.mode: Allows to configure how timestamps are emitted, the following modes are supported:

                      • NO_TIMESTAMPS: no timestamp-related properties will be emitted.

                      • PER_CHANNEL: the component will emit a driver-generated timestamp property per channel, as the value of the <channel name>_timestamp property.

                      • SINGLE_ASSET_GENERATED: the component will emit a single timestamp per request, generated by the Asset itself before emitting the envelope as the value of the assetTimestamp property.

                      • SINGLE_DRIVER_GENERATED_MAX and SINGLE_DRIVER_GENERATED_MIN: the component will emit a single driver generated timestamp being respectively the max (most recent) or min (oldest) among the timestamps of the channels as the value of the assetTimestamp property.

                    • emit.errors: Specifies whether channel specific errors should be included or not in emitted envelopes. If enabled, the component will add an additional property per channel, named <channel_name>_error. If the channel operation fails, the property value will be an error message reported by the Driver, if the operation succeeds the property value will be the empty string.

                    • emit.connection.errors: Specifies whether the component should emit an envelope in case of a general connection exception reported by the Driver (for example due to the fact that the connection with a remote device cannot be established). The error message associated with the exception will be emitted in a property named assetError. In case of connection exception, channel values are not available and no channel related properties will be emitted. If the timestamp.mode property is set to a value other than NO_TIMESTAMPS, the component will also emit a assetTimestamp property reporting current system time. This property will be ignored if emit.errors is disabled. Example of emitted envelope contents:

                    • WireEnvelope

                      • WireRecord[0]
                        • assetName: myAsset (type = STRING)
                        • assetError: Connection refused (type = STRING)
                        • assetTimestamp: 1597925200 (type = LONG)

                    • emit.on.change: If set to true, this component will include a channel value in the output emitted in Kura Wires only if it differs from the last emitted value for that channel. Channel errors will always be emitted if emit.errors is set to true. If as a result of a read operation no changes are detected in any referenced channel, the Asset will emit an envelope containing no channel values, unless emit.empty.envelopes is set to false.

                    • emit.empty.envelopes: If set to false, this component will not emit empty envelopes.

                    "},{"location":"kura-wires/introduction/","title":"Introduction","text":"

                    The Wires feature aims to simplify the development of IoT Edge Computing Applications leveraging reusable configurable components that can be wired together and which, eventually, allows configurable cooperation between these components.

                    In the dataflow programming model, the application logic is expressed as a directed graph (flow) where each node can have inputs, outputs, and independent processing units. There are nodes that only produce outputs and ones that only consume inputs, which usually represent the start and the end of the flow. The inner-graph nodes process the inputs and produce outputs for downstream nodes. The processing unit of a node executes independently and does not affect the execution of other nodes. Thus, the nodes are highly reusable and portable.

                    In this way, the developer can easily prototype its solution without sacrificing flexibility and working at a high level of abstraction: the graph can be extended adding new nodes or drawing new connections. Furthermore, the developer can take advantage of the Eclipse Marketplace integration, being able to use open source or commercial building blocks into the final solution, by simply dragging and dropping a link to the Eclipse Marketplace in the Administrative Web UI.

                    "},{"location":"kura-wires/introduction/#data-model","title":"Data Model","text":"

                    The communication over a single graph edge (Wire) is message oriented, messages are called WireEnvelopes. Each WireEnvelope contains a list of WireRecords. Each WireRecord contains a set of key-value pairs, called properties, the property key is always a string and it is unique within the same record, the property value can have one of the following types:

                    • BOOLEAN
                    • BYTE_ARRAY
                    • DOUBLE
                    • INTEGER
                    • LONG
                    • FLOAT
                    • STRING
                    "},{"location":"kura-wires/introduction/#wire-composer","title":"Wire Composer","text":"

                    The Wire Composer is the main source of interaction with the Wires framework. It is accessible by clicking on the Wires button under System.

                    The Wires page is composed by a central composer, where the graph can be actually designed, a lower part that is populated when a wire component is clicked and that allows to update the component configuration and a section in the right with the available Wire Components.

                    "},{"location":"kura-wires/introduction/#wire-components","title":"Wire Components","text":"

                    The following components are distributed with Kura:

                    • Timer ticks every x seconds and starts the graph;
                    • Publisher publishes every message received from a Wire (Wire Message). It is configurable in order to use a specific Cloud Service;
                    • Subscriber subscribes to a configurable topic via a specific Cloud Service. It receives a message from a Cloud Platform, wraps it as a Wire Message and sends it through the connected wires to the other components that are part of the Wire Graph;
                    • Wire Record Store allows the storage of Wire Messages into a specific stored collection. It has rules for message cleanup and retention;
                    • Wire Record Query, allows the filtering of messages residing in a store via a specific query. The corresponding messages are sent as Wire Messages to the connected Wire Components;
                    • Logger logs the received messages;
                    • Asset \u200ballows the definition of Wire Channels that will be used to communicate with a field device through the associated Driver instance.
                    "},{"location":"kura-wires/introduction/#graph-download","title":"Graph Download","text":"

                    In the top left part of the Wires page the Download button allows to download the configuration of the graph and of all the components that are part of the graph.

                    This snapshot can be used to replicate the same configuration across all the fleet of devices.

                    To upload the stored graph, the user has to access the Settings page and in the Snapshots section click the Upload and Apply button.

                    Warning

                    The graph configuration will be actually merged with the one existing. Be careful to Delete the existing graph and apply, if you don't want to merge with the existing Wires configuration.

                    "},{"location":"kura-wires/wire-graph-service-configuration-format/","title":"WireGraphService Configuration Format","text":"

                    This document describes the configuration format for the WireGraphService component.

                    The WireGraphService configuration contains all the information related to the Wire Graph topology and rendering properties. The pid of the WireGraphService configuration is org.eclipse.kura.wire.graph.WireGraphService.

                    The WireGraphService configuration represents the current graph layout as a single string typed property named WireGraph that represents a serialized JSON representation of a WireGraph object.

                    "},{"location":"kura-wires/wire-graph-service-configuration-format/#json-definitions","title":"JSON definitions","text":""},{"location":"kura-wires/wire-graph-service-configuration-format/#position","title":"Position","text":"

                    An object representing a Wire Component position.

                    Properties:

                    • x: number
                    • optional If not specified, 0.0 will be used as default value The x coordinate of the Wire Component inside the graph canvas
                    • y: number
                    • optional If not specified, 0.0 will be used as default value The y coordinate of the Wire Component inside the graph canvas

                    {\n  \"x\": 40,\n  \"y\": 0\n}\n
                    {\n  \"x\": 1.5\n}\n
                    {}\n

                    "},{"location":"kura-wires/wire-graph-service-configuration-format/#portnamelist","title":"PortNameList","text":"

                    An object that specifies custom names for Wire Component input and output ports. The properties name for this object must be represented as an integer starting from 0, matching the index of the port whose name needs to be assigned. If the property name is not specified, the default port name will be used.

                    Properties:

                    • _portIndex: string The name for the port of index _portIndex

                    {\n  \"0\": \"foo\",\n  \"1\": \"bar\"\n}\n
                    {}\n

                    "},{"location":"kura-wires/wire-graph-service-configuration-format/#renderingproperties","title":"RenderingProperties","text":"

                    An object describing some Wire Component rendering parameters like position and custom port names.

                    Properties:

                    • position: object
                    • optional If not specified the component coordinates will be set to 0.0.
                      • Position
                    • inputPortNames: object
                    • optional If not specified, the default input port names will be used.
                      • PortNameList
                    • outputPortNames: object
                    • optional If not specified, the default output port names will be used.
                      • PortNameList

                    {\n  \"inputPortNames\": {},\n  \"outputPortNames\": {\n    \"0\": \"foo\",\n    \"1\": \"bar\"\n  },\n  \"position\": {\n    \"x\": 40,\n    \"y\": 0\n  }\n}\n
                    {\n  \"inputPortNames\": {},\n  \"outputPortNames\": {\n    \"0\": \"foo\",\n    \"1\": \"bar\"\n  }\n}\n
                    {\n  \"position\": {\n    \"x\": 40,\n    \"y\": 0\n  }\n}\n
                    {}\n

                    "},{"location":"kura-wires/wire-graph-service-configuration-format/#wirecomponent","title":"WireComponent","text":"

                    An object that describes a Wire Component that is part of a Wire Graph

                    Properties:

                    • pid: string The Wire Component pid
                    • inputPortCount: number An integer reporting the number of input ports of the Wire Component.
                    • outputPortCount: number An integer reporting the number of output ports of the Wire Component.
                    • renderingProperties: object
                    • optional If not specified, the default rendering properties will be used
                      • RenderingProperties

                    {\n  \"inputPortCount\": 1,\n  \"outputPortCount\": 2,\n  \"pid\": \"cond\",\n  \"renderingProperties\": {\n    \"inputPortNames\": {},\n    \"outputPortNames\": {\n      \"0\": \"foo\",\n      \"1\": \"bar\"\n    },\n    \"position\": {\n      \"x\": 40,\n      \"y\": 0\n    }\n  }\n}\n
                    {\n  \"inputPortCount\": 0,\n  \"outputPortCount\": 1,\n  \"pid\": \"timer\",\n  \"renderingProperties\": {\n    \"inputPortNames\": {},\n    \"outputPortNames\": {},\n    \"position\": {\n      \"x\": -220,\n      \"y\": -20\n    }\n  }\n}\n

                    "},{"location":"kura-wires/wire-graph-service-configuration-format/#wire","title":"Wire","text":"

                    An object that describes a Wire connecting two Wire Components.

                    Properties:

                    • emitter: string The pid of the emitter component.
                    • emitterPort: number The index of the output port of the emitter component that is connected to this Wire.
                    • receiver: string The pid of the receiver component.
                    • receiverPort: number The index of the input port of the receiver component that is connected to this Wire.
                    {\n  \"emitter\": \"timer\",\n  \"emitterPort\": 0,\n  \"receiver\": \"cond\",\n  \"receiverPort\": 0\n}\n
                    "},{"location":"kura-wires/wire-graph-service-configuration-format/#wiregraph","title":"WireGraph","text":"

                    An object that describes the topology and rendering properties of a Wire Graph

                    Properties:

                    • components: array The list of the wire components contained in the Wire Graph
                      • array elements: object
                      • WireComponent
                    • wires: array The list of Wires contained in the Wire Graph
                      • array elements: object
                      • Wire
                    {\n  \"components\": [\n    {\n      \"inputPortCount\": 0,\n      \"outputPortCount\": 1,\n      \"pid\": \"timer\",\n      \"renderingProperties\": {\n        \"inputPortNames\": {},\n        \"outputPortNames\": {},\n        \"position\": {\n          \"x\": -220,\n          \"y\": -20\n        }\n      }\n    },\n    {\n      \"inputPortCount\": 1,\n      \"outputPortCount\": 2,\n      \"pid\": \"cond\",\n      \"renderingProperties\": {\n        \"inputPortNames\": {},\n        \"outputPortNames\": {\n          \"0\": \"foo\",\n          \"1\": \"bar\"\n        },\n        \"position\": {\n          \"x\": 40,\n          \"y\": 0\n        }\n      }\n    }\n  ],\n  \"wires\": [\n    {\n      \"emitter\": \"timer\",\n      \"emitterPort\": 0,\n      \"receiver\": \"cond\",\n      \"receiverPort\": 0\n    }\n  ]\n}\n
                    "},{"location":"kura-wires/wire-service-references/","title":"References","text":"

                    Additional information about Wires is available at the following resources:

                    "},{"location":"kura-wires/wire-service-references/#dzone","title":"DZONE","text":"
                    • Kura Wires Can Help Overcome Challenges of Industrial IoT.
                    • Kura Wires: A Sneak Peek.
                    • Kura Wires: A Different Perspective to Develop IIoT Applications.
                    • Different Dataflow Programming Approaches and Comparison With Kura Wires.
                    "},{"location":"kura-wires/wire-service-references/#master-thesis","title":"Master Thesis","text":"
                    • Kura Wires: Design and Development of a Component for managing Devices and Drivers in Eclipse Kura 2.0 by Amit Kumar Mondal.
                    "},{"location":"kura-wires/wire-service-references/#conferences-and-slides","title":"Conferences and slides","text":"
                    • Building IoT Mashups for Industry 4.0 with Eclipse Kura and Kura Wires.
                    • Industry 4.0 with Eclipse Kura.
                    "},{"location":"kura-wires/wire-service-references/#youtube","title":"Youtube","text":"
                    • Kura Wires - A Mashup in Eclipse Kura for Industry 4.0.
                    • Kura Wires: Industry 4.0 with Eclipse Kura - EclipseCon Europe 2016 IoT Day.
                    "},{"location":"kura-wires/wire-service-rest-v1/","title":"Wire Service V1 REST APIs and MQTT Request Handler","text":"

                    The WIRE-V1 cloud request handler and the corresponding REST APIs allow to update, delete and get the current Wire Graph status. The request handler also supports creating, updating and deleting Asset and Driver instances and retrieving the metadata required for supporting Wire Graph editing applications.

                    The GET/graph/shapshot and PUT/graph/snapshot requests use the same format as the Wire Graph snapshot functionality of the Kura Web UI.

                    A Wire Graph snapshot can be obtained by navigating to the Wires section of Kura Web UI, clicking the Download button and selecting the JSON format.

                    Accessing the REST APIs requires to use an identity with the rest.wires.admin permission assigned.

                    • Wire Service V1 REST APIs and MQTT Request Handler
                    • Request definitions
                      • GET/graph/shapshot
                      • PUT/graph/snapshot
                      • DEL/graph
                      • GET/drivers/pids
                      • GET/assets/pids
                      • GET/graph/topology
                      • POST/configs/byPid
                      • DEL/configs/byPid
                      • PUT/configs
                      • GET/metadata
                      • GET/metadata/wireComponents/factoryPids
                      • GET/metadata/wireComponents/definitions
                      • POST/metadata/wireComponents/definitions/byFactoryPid
                      • GET/metadata/drivers/factoryPids
                      • GET/metadata/driver/ocds
                      • POST/metadata/drivers/ocds/byFactoryPid
                      • GET/metadata/drivers/channelDescriptors
                      • POST/metadata/drivers/channelDescriptors/byPid
                      • GET/metadata/assets/channelDescriptor
                    • JSON definitions
                      • WireComponentDefinition
                      • DriverChannelDescriptor
                      • WireGraphMetadata
                    • Wire Graph snapshot example
                    "},{"location":"kura-wires/wire-service-rest-v1/#request-definitions","title":"Request definitions","text":""},{"location":"kura-wires/wire-service-rest-v1/#getgraphshapshot","title":"GET/graph/shapshot","text":"
                    • REST API path : /services/wire/v1/graph/snapshot
                    • description : Returns the current Wire Graph Configuration. The received configuration includes the WireGraphService configuration containing the graph layout, the configuration of the components currently referenced by the Wire Graph, and the configuration of the existing Driver instances.
                    • responses :
                      • 200
                      • description : The current wire graph configuration.
                      • response body :
                        • ComponentConfigurationList
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#putgraphsnapshot","title":"PUT/graph/snapshot","text":"
                    • REST API path : /services/wire/v1/graph/snapshot
                    • description : Updates the current Wire Graph.
                    • request body :
                      • ComponentConfigurationList
                    • responses :
                      • 200
                      • description : The current Wire Graph has been updated.
                      • 400
                      • description : The request body is not valid JSON or it contains invalid parameters.
                      • response body :
                        • GenericFailureReport
                      • 500
                      • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: updateGraph for the graph update operation, update:$pid or delete:$pid for update or delete operations performed on configurations not referenced by the Wire Graph, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

                      • response body :

                        Variants:

                        • object
                          • GenericFailureReport
                        • object
                          • BatchFailureReport

                    This request will replace the current graph topology with the received one. The received configuration must satisfy the following requirements. If any of the requirements is not met, the operation will fail and no changes will be applied to the system: * The configuration of the org.eclipse.kura.wire.graph.WireGraphService component must be specified. * The configuration of the org.eclipse.kura.wire.graph.WireGraphService component must contain a property named WireGraph of STRING type containing the graph layout as described in the WireGraphService document. * The inputPortCount and outputPortCount properties must be specified for all components in WireGraphService configuration. * The configuration of all components referenced by WireGraphService configuration that do not exist on target device must be specified. * The configuration of all components referenced by WireGraphService configuration that do not exist on target device must specify the service.factoryPid configuration property reporting the component factory pid.

                    If a component already exists on the system and its configuration is supplied as part of the request, the component configuration will be updated. In this case the usual configuration merge semantics will be applied, the set of received properties will be merged with the existing one. The properties in the request body will overwrite the existing ones with the same name.

                    WireAsset configurations are treated sligtly differently, an update to a WireAsset configuration is performed by deleting the existing component and creating a new instance with the received configuration. This behavior is necessary in order to allow channel removal.

                    It is also allowed to specify Driver or Asset configurations that are not referenced by the Wire Graph included in the request body.

                    "},{"location":"kura-wires/wire-service-rest-v1/#delgraph","title":"DEL/graph","text":"
                    • REST API path : /services/wire/v1/graph
                    • description : Deletes the current Wire Graph.
                    • responses :
                      • 200
                      • description : The current wire graph has been deleted.
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#getdriverspids","title":"GET/drivers/pids","text":"
                    • REST API path : /services/wire/v1/drivers/pids
                    • description : Returns the list of existing Driver pids.
                    • responses :
                      • 200
                      • description : The list of driver pids
                      • response body :
                        • PidAndFactoryPidSet
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#getassetspids","title":"GET/assets/pids","text":"
                    • REST API path : /services/wire/v1/assets/pids
                    • description : Returns the list of existing Asset pids. The returned pids may or may not be referenced by the current Wire Graph.
                    • responses :
                      • 200
                      • description : The list of driver pids
                      • response body :
                        • PidAndFactoryPidSet
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#getgraphtopology","title":"GET/graph/topology","text":"
                    • REST API path : /services/wire/v1/graph/topology
                    • description : Returns the current Wire Graph topology as a WireGraph object. The returned object is the current value of the WireGraph property in Wire Graph Service configuration. This request allows to inspect the Wire Graph topology without downloading the entire Wire Graph snapshot with GET/graph/shapshot.
                    • responses :
                      • 200
                      • description : The current wire graph topology.
                      • response body :
                        • WireGraph
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#postconfigsbypid","title":"POST/configs/byPid","text":"
                    • REST API path : /services/wire/v1/configs/byPid
                    • description : Returns the list of configurations referenced by the provided pids. This request can only be used to retrieve Wire Component, Driver or Asset configurations.
                    • request body :
                      • PidSet
                    • responses :
                      • 200
                      • description : The returned configurations. If a configuration cannot be found, it will not be included in the response. The returned configuration list can be empty.
                      • response body :
                        • ComponentConfigurationList
                      • 400
                      • description : The request body is not valid JSON or it contains invalid parameters.
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#delconfigsbypid","title":"DEL/configs/byPid","text":"
                    • REST API path : /services/wire/v1/configs/byPid
                    • description : Deletes the configurations referenced by the provided pids. This request can only be used to delete Wire Component, Driver or Asset configurations. This request does not allow to delete configurations that are referenced by the current Wire Graph.
                    • request body :
                      • PidSet
                    • responses :
                      • 200
                      • description : The request succeeded.
                      • 400
                      • description : The request body is not valid JSON or it contains invalid parameters. This status will be returned also if the request references pids that are currenly part of the Wire Graph, or components that are not Wire Components, Driver or Asset instances. If this status is retured, no changes will be applied to the system.
                      • response body :
                        • GenericFailureReport
                      • 500
                      • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: delete:$pid for delete operations, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

                      • response body :

                        Variants:

                        • object
                          • GenericFailureReport
                        • object
                          • BatchFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#putconfigs","title":"PUT/configs","text":"
                    • REST API path : /services/wire/v1/configs
                    • description : Updates or creates the provided configurations. This request can only be used to process Wire Component, Driver or Asset configurations. This request does not allow to create Wire Component configurations that are not referenced by the current Wire Graph, except from WireAsset instances. The component creation/update semantics are the same as PUT/graph/snapshot, this request can be used to perform configuration updates whithout knowing or specifying the Wire Graph topology.
                    • request body :
                      • ComponentConfigurationList
                    • responses :
                      • 200
                      • description : The request succeeded
                      • 400
                      • description : The request body is not valid JSON or it contains invalid parameters. This status will be returned also if the request involves the creation of components that are not Wire Components, Driver or Asset instances, or the creation of Wire Components that are not referenced by the current Wire Graph. If this status is retured, no changes will be applied to the system.
                      • response body :
                        • GenericFailureReport
                      • 500
                      • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: update:$pid or delete:$pid for update or delete operations, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

                      • response body :

                        Variants:

                        • object
                          • GenericFailureReport
                        • object
                          • BatchFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#getmetadata","title":"GET/metadata","text":"
                    • REST API path : /services/wire/v1/metadata
                    • description : Returns all available Wire Component, Asset and Driver metadata in a single request.
                    • responses :
                      • 200
                      • description : The request succeeded. Single fields in the response can be missing if the corresponding list is empty (e.g. driverDescriptors can be missing if no Driver instances exist on the system)
                      • response body :
                        • WireGraphMetadata
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#getmetadatawirecomponentsfactorypids","title":"GET/metadata/wireComponents/factoryPids","text":"
                    • REST API path : /services/wire/v1/metadata/wireComponents/factoryPids
                    • description : Return the list of available Wire Component factory pids
                    • responses :
                      • 200
                      • description : The request succeeded.
                      • response body :
                        • PidSet
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#getmetadatawirecomponentsdefinitions","title":"GET/metadata/wireComponents/definitions","text":"
                    • REST API path : /services/wire/v1/metadata/wireComponents/definitions
                    • description : Returns all available Wire Component definitions
                    • responses :
                      • 200
                      • description : The available Wire Component definitions. All fields except at most wireComponentDefinitions will be missing.
                      • response body :
                        • WireGraphMetadata
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#postmetadatawirecomponentsdefinitionsbyfactorypid","title":"POST/metadata/wireComponents/definitions/byFactoryPid","text":"
                    • REST API path : /services/wire/v1/metadata/wireComponents/definitions/byFactoryPid
                    • description : Returns the Wire Component definitions for the given set of factory pids
                    • request body :
                      • PidSet
                    • responses :
                      • 200
                      • description : The available Wire Component definitions. All fields except at most wireComponentDefinitions will be missing. If the metadata for a given factoryPid is not found, the request will succeed and it will not be included in the list.
                      • response body :
                        • WireGraphMetadata
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#getmetadatadriversfactorypids","title":"GET/metadata/drivers/factoryPids","text":"
                    • REST API path : /services/wire/v1/metadata/drivers/factoryPids
                    • description : Return the list of available Driver factory pids
                    • responses :
                      • 200
                      • description : The request succeeded.
                      • response body :
                        • PidSet
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#getmetadatadriverocds","title":"GET/metadata/driver/ocds","text":"
                    • REST API path : /services/wire/v1/metadata/drivers/ocds
                    • description : Returns all available Driver OCDs
                    • responses :
                      • 200
                      • description : The available Driver OCDs. All fields except at most driverOCDs will be missing.
                      • response body :
                        • WireGraphMetadata
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#postmetadatadriversocdsbyfactorypid","title":"POST/metadata/drivers/ocds/byFactoryPid","text":"
                    • REST API path : /services/wire/v1/metadata/drivers/ocds/byFactoryPid
                    • description : Returns the Driver OCDSs for the given set of factory pids
                    • request body :
                      • PidSet
                    • responses :
                      • 200
                      • description : The requested Driver OCDs. All fields except at most driverOCDs will be missing. If the metadata for a given factoryPid is not found, the request will succeed and it will not be included in the list.
                      • response body :
                        • WireGraphMetadata
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#getmetadatadriverschanneldescriptors","title":"GET/metadata/drivers/channelDescriptors","text":"
                    • REST API path : /wire/v1/metadata/drivers/channelDescriptors
                    • description : Returns the list of all available Driver channel descriptors
                    • responses :
                      • 200
                      • description : The list of Driver channel descriptors. All fields except at most driverChannelDescriptors will be missing.
                      • response body :
                        • WireGraphMetadata
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#postmetadatadriverschanneldescriptorsbypid","title":"POST/metadata/drivers/channelDescriptors/byPid","text":"
                    • REST API path : /services/wire/v1/metadata/drivers/channelDescriptors/byPid
                    • description : Returns the Driver channel descriptors for the given set of pids
                    • request body :
                      • PidSet
                    • responses :
                      • 200
                      • description : The requested Driver channel descriptors. All fields except at most driverChannelDescriptors will be missing. If the metadata for a given pid is not found, the request will succeed and it will not be included in the list.
                      • response body :
                        • WireGraphMetadata
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#getmetadataassetschanneldescriptor","title":"GET/metadata/assets/channelDescriptor","text":"
                    • REST API path : /wire/v1/metadata/assets/channelDescriptor
                    • description : Returns the Asset channel descriptor
                    • responses :
                      • 200
                      • description : The Asset channel descriptors. All fields except assetChannelDescriptor will be missing.
                      • response body :
                        • WireGraphMetadata
                      • 500
                      • description : An unexpected internal error occurred.
                      • response body :
                        • GenericFailureReport
                    "},{"location":"kura-wires/wire-service-rest-v1/#json-definitions","title":"JSON definitions","text":""},{"location":"kura-wires/wire-service-rest-v1/#wirecomponentdefinition","title":"WireComponentDefinition","text":"

                    A Wire Component definition object

                    Properties:

                    • factoryPid: string The component factory pid
                    • minInputPorts: number The minimum input port count
                    • maxInputPorts: number The maximum number of input ports
                    • defaultInputPorts: number The default number of input ports
                    • minOutputPorts: number The minimum number of output ports
                    • maxOutputPorts: number The maximum number of output ports
                    • defaultOutputPorts: number The default number of output ports
                    • inputPortNames: object
                    • optional If no custom input port names are defined
                      • PortNameList
                    • outputPortNames: object
                    • optional If no custom output port names are defined
                      • PortNameList
                    • componentOcd: array
                    • optional If the component OCD is empty The component OCD
                      • array elements: object
                      • AttributeDefinition
                    {\n  \"componentOCD\": [\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"50\",\n      \"description\": \"The maximum number of envelopes that can be stored in the queue of this FIFO component\",\n      \"id\": \"queue.capacity\",\n      \"isRequired\": true,\n      \"name\": \"queue.capacity\",\n      \"type\": \"INTEGER\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"false\",\n      \"description\": \"Defines the behavior in case of full queue: if set to true new envelopes will be dropped,              otherwise, if an emitter delivers an envelope to this component it will block until the envelope can be successfully enqueued.\",\n      \"id\": \"discard.envelopes\",\n      \"isRequired\": true,\n      \"name\": \"discard.envelopes\",\n      \"type\": \"BOOLEAN\"\n    }\n  ],\n  \"defaultInputPorts\": 1,\n  \"defaultOutputPorts\": 1,\n  \"factoryPid\": \"org.eclipse.kura.wire.Fifo\",\n  \"maxInputPorts\": 1,\n  \"maxOutputPorts\": 1,\n  \"minInputPorts\": 1,\n  \"minOutputPorts\": 1\n}\n
                    "},{"location":"kura-wires/wire-service-rest-v1/#driverchanneldescriptor","title":"DriverChannelDescriptor","text":"

                    An object that describes Driver specific channel configuration properties

                    Properties:

                    • pid: string The Driver pid
                    • factoryPid: string The Driver factory pid
                    • channelDescriptor: array
                    • optional If the driver does not define any channel property The list of Driver specific channel configuration properties
                      • array elements: object
                      • AttributeDefinition
                    {\n  \"channelDescriptor\": [\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"AA:BB:CC:DD:EE:FF\",\n      \"description\": \"sensortag.address\",\n      \"id\": \"sensortag.address\",\n      \"isRequired\": true,\n      \"name\": \"sensortag.address\",\n      \"type\": \"STRING\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"TEMP_AMBIENT\",\n      \"description\": \"sensor.name\",\n      \"id\": \"sensor.name\",\n      \"isRequired\": true,\n      \"name\": \"sensor.name\",\n      \"option\": [\n        {\n          \"label\": \"TEMP_AMBIENT\",\n          \"value\": \"TEMP_AMBIENT\"\n        },\n        {\n          \"label\": \"TEMP_TARGET\",\n          \"value\": \"TEMP_TARGET\"\n        },\n        {\n          \"label\": \"HUMIDITY\",\n          \"value\": \"HUMIDITY\"\n        },\n        {\n          \"label\": \"ACCELERATION_X\",\n          \"value\": \"ACCELERATION_X\"\n        },\n        {\n          \"label\": \"ACCELERATION_Y\",\n          \"value\": \"ACCELERATION_Y\"\n        },\n        {\n          \"label\": \"ACCELERATION_Z\",\n          \"value\": \"ACCELERATION_Z\"\n        },\n        {\n          \"label\": \"MAGNETIC_X\",\n          \"value\": \"MAGNETIC_X\"\n        },\n        {\n          \"label\": \"MAGNETIC_Y\",\n          \"value\": \"MAGNETIC_Y\"\n        },\n        {\n          \"label\": \"MAGNETIC_Z\",\n          \"value\": \"MAGNETIC_Z\"\n        },\n        {\n          \"label\": \"GYROSCOPE_X\",\n          \"value\": \"GYROSCOPE_X\"\n        },\n        {\n          \"label\": \"GYROSCOPE_Y\",\n          \"value\": \"GYROSCOPE_Y\"\n        },\n        {\n          \"label\": \"GYROSCOPE_Z\",\n          \"value\": \"GYROSCOPE_Z\"\n        },\n        {\n          \"label\": \"LIGHT\",\n          \"value\": \"LIGHT\"\n        },\n        {\n          \"label\": \"PRESSURE\",\n          \"value\": \"PRESSURE\"\n        },\n        {\n          \"label\": \"GREEN_LED\",\n          \"value\": \"GREEN_LED\"\n        },\n        {\n          \"label\": \"RED_LED\",\n          \"value\": \"RED_LED\"\n        },\n        {\n          \"label\": \"BUZZER\",\n          \"value\": \"BUZZER\"\n        },\n        {\n          \"label\": \"KEYS\",\n          \"value\": \"KEYS\"\n        }\n      ],\n      \"type\": \"STRING\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"1000\",\n      \"description\": \"notification.period\",\n      \"id\": \"notification.period\",\n      \"isRequired\": true,\n      \"name\": \"notification.period\",\n      \"type\": \"INTEGER\"\n    }\n  ],\n  \"factoryPid\": \"org.eclipse.kura.driver.ble.sensortag\",\n  \"pid\": \"sensortag\"\n}\n
                    "},{"location":"kura-wires/wire-service-rest-v1/#wiregraphmetadata","title":"WireGraphMetadata","text":"

                    An object contiaining metatada describing Wire Components, Drivers and Assets

                    Properties:

                    • wireComponentDefinitions: array
                    • optional See request specific documentation The list of Wire Component definitions
                      • array elements: object
                      • WireComponentDefinition
                    • driverOCDs: array
                    • optional See request specific documentation The list of Driver factory component OCDs
                      • array elements: object
                      • ComponentConfiguration
                    • driverChannelDescriptors: array
                    • optional See request specific documentation The list of Driver channel descriptors
                      • array elements: object
                      • DriverChannelDescriptor
                    • assetChannelDescriptor: array
                    • optional See request specific documentation The list of Asset specific channel configuration properties
                      • array elements: object
                      • AttributeDefinition
                    {\n  \"assetChannelDescriptor\": [\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"true\",\n      \"description\": \"Determines if the channel is enabled or not\",\n      \"id\": \"+enabled\",\n      \"isRequired\": true,\n      \"name\": \"enabled\",\n      \"type\": \"BOOLEAN\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"Channel-1\",\n      \"description\": \"Name of the Channel\",\n      \"id\": \"+name\",\n      \"isRequired\": true,\n      \"name\": \"name\",\n      \"type\": \"STRING\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"READ\",\n      \"description\": \"Type of the channel\",\n      \"id\": \"+type\",\n      \"isRequired\": true,\n      \"name\": \"type\",\n      \"option\": [\n        {\n          \"label\": \"READ\",\n          \"value\": \"READ\"\n        },\n        {\n          \"label\": \"READ_WRITE\",\n          \"value\": \"READ_WRITE\"\n        },\n        {\n          \"label\": \"WRITE\",\n          \"value\": \"WRITE\"\n        }\n      ],\n      \"type\": \"STRING\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"INTEGER\",\n      \"description\": \"Value type of the channel\",\n      \"id\": \"+value.type\",\n      \"isRequired\": true,\n      \"name\": \"value.type\",\n      \"option\": [\n        {\n          \"label\": \"BOOLEAN\",\n          \"value\": \"BOOLEAN\"\n        },\n        {\n          \"label\": \"BYTE_ARRAY\",\n          \"value\": \"BYTE_ARRAY\"\n        },\n        {\n          \"label\": \"DOUBLE\",\n          \"value\": \"DOUBLE\"\n        },\n        {\n          \"label\": \"INTEGER\",\n          \"value\": \"INTEGER\"\n        },\n        {\n          \"label\": \"LONG\",\n          \"value\": \"LONG\"\n        },\n        {\n          \"label\": \"FLOAT\",\n          \"value\": \"FLOAT\"\n        },\n        {\n          \"label\": \"STRING\",\n          \"value\": \"STRING\"\n        }\n      ],\n      \"type\": \"STRING\"\n    },\n    {\n      \"cardinality\": 0,\n      \"description\": \"Scale to be applied to the numeric value of the channel\",\n      \"id\": \"+scale\",\n      \"isRequired\": false,\n      \"name\": \"scale\",\n      \"type\": \"DOUBLE\"\n    },\n    {\n      \"cardinality\": 0,\n      \"description\": \"Offset to be applied to the numeric value of the channel\",\n      \"id\": \"+offset\",\n      \"isRequired\": false,\n      \"name\": \"offset\",\n      \"type\": \"DOUBLE\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"\",\n      \"description\": \"Unit associated to the value of the channel\",\n      \"id\": \"+unit\",\n      \"isRequired\": false,\n      \"name\": \"unit\",\n      \"type\": \"STRING\"\n    },\n    {\n      \"cardinality\": 0,\n      \"defaultValue\": \"false\",\n      \"description\": \"Specifies if WireAsset should emit envelopes on Channel events\",\n      \"id\": \"+listen\",\n      \"isRequired\": true,\n      \"name\": \"listen\",\n      \"type\": \"BOOLEAN\"\n    }\n  ],\n  \"driverChannelDescriptors\": [\n    {\n      \"channelDescriptor\": [\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"MyNode\",\n          \"description\": \"node.id\",\n          \"id\": \"node.id\",\n          \"isRequired\": true,\n          \"name\": \"node.id\",\n          \"type\": \"STRING\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"2\",\n          \"description\": \"node.namespace.index\",\n          \"id\": \"node.namespace.index\",\n          \"isRequired\": true,\n          \"name\": \"node.namespace.index\",\n          \"type\": \"INTEGER\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"DEFINED_BY_JAVA_TYPE\",\n          \"description\": \"opcua.type\",\n          \"id\": \"opcua.type\",\n          \"isRequired\": true,\n          \"name\": \"opcua.type\",\n          \"option\": [\n            {\n              \"label\": \"DEFINED_BY_JAVA_TYPE\",\n              \"value\": \"DEFINED_BY_JAVA_TYPE\"\n            },\n            {\n              \"label\": \"BOOLEAN\",\n              \"value\": \"BOOLEAN\"\n            },\n            {\n              \"label\": \"SBYTE\",\n              \"value\": \"SBYTE\"\n            },\n            {\n              \"label\": \"INT16\",\n              \"value\": \"INT16\"\n            },\n            {\n              \"label\": \"INT32\",\n              \"value\": \"INT32\"\n            },\n            {\n              \"label\": \"INT64\",\n              \"value\": \"INT64\"\n            },\n            {\n              \"label\": \"BYTE\",\n              \"value\": \"BYTE\"\n            },\n            {\n              \"label\": \"UINT16\",\n              \"value\": \"UINT16\"\n            },\n            {\n              \"label\": \"UINT32\",\n              \"value\": \"UINT32\"\n            },\n            {\n              \"label\": \"UINT64\",\n              \"value\": \"UINT64\"\n            },\n            {\n              \"label\": \"FLOAT\",\n              \"value\": \"FLOAT\"\n            },\n            {\n              \"label\": \"DOUBLE\",\n              \"value\": \"DOUBLE\"\n            },\n            {\n              \"label\": \"STRING\",\n              \"value\": \"STRING\"\n            },\n            {\n              \"label\": \"BYTE_STRING\",\n              \"value\": \"BYTE_STRING\"\n            },\n            {\n              \"label\": \"BYTE_ARRAY\",\n              \"value\": \"BYTE_ARRAY\"\n            },\n            {\n              \"label\": \"SBYTE_ARRAY\",\n              \"value\": \"SBYTE_ARRAY\"\n            }\n          ],\n          \"type\": \"STRING\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"STRING\",\n          \"description\": \"node.id.type\",\n          \"id\": \"node.id.type\",\n          \"isRequired\": true,\n          \"name\": \"node.id.type\",\n          \"option\": [\n            {\n              \"label\": \"NUMERIC\",\n              \"value\": \"NUMERIC\"\n            },\n            {\n              \"label\": \"STRING\",\n              \"value\": \"STRING\"\n            },\n            {\n              \"label\": \"GUID\",\n              \"value\": \"GUID\"\n            },\n            {\n              \"label\": \"OPAQUE\",\n              \"value\": \"OPAQUE\"\n            }\n          ],\n          \"type\": \"STRING\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"Value\",\n          \"description\": \"attribute\",\n          \"id\": \"attribute\",\n          \"isRequired\": true,\n          \"name\": \"attribute\",\n          \"option\": [\n            {\n              \"label\": \"NodeId\",\n              \"value\": \"NodeId\"\n            },\n            {\n              \"label\": \"NodeClass\",\n              \"value\": \"NodeClass\"\n            },\n            {\n              \"label\": \"BrowseName\",\n              \"value\": \"BrowseName\"\n            },\n            {\n              \"label\": \"DisplayName\",\n              \"value\": \"DisplayName\"\n            },\n            {\n              \"label\": \"Description\",\n              \"value\": \"Description\"\n            },\n            {\n              \"label\": \"WriteMask\",\n              \"value\": \"WriteMask\"\n            },\n            {\n              \"label\": \"UserWriteMask\",\n              \"value\": \"UserWriteMask\"\n            },\n            {\n              \"label\": \"IsAbstract\",\n              \"value\": \"IsAbstract\"\n            },\n            {\n              \"label\": \"Symmetric\",\n              \"value\": \"Symmetric\"\n            },\n            {\n              \"label\": \"InverseName\",\n              \"value\": \"InverseName\"\n            },\n            {\n              \"label\": \"ContainsNoLoops\",\n              \"value\": \"ContainsNoLoops\"\n            },\n            {\n              \"label\": \"EventNotifier\",\n              \"value\": \"EventNotifier\"\n            },\n            {\n              \"label\": \"Value\",\n              \"value\": \"Value\"\n            },\n            {\n              \"label\": \"DataType\",\n              \"value\": \"DataType\"\n            },\n            {\n              \"label\": \"ValueRank\",\n              \"value\": \"ValueRank\"\n            },\n            {\n              \"label\": \"ArrayDimensions\",\n              \"value\": \"ArrayDimensions\"\n            },\n            {\n              \"label\": \"AccessLevel\",\n              \"value\": \"AccessLevel\"\n            },\n            {\n              \"label\": \"UserAccessLevel\",\n              \"value\": \"UserAccessLevel\"\n            },\n            {\n              \"label\": \"MinimumSamplingInterval\",\n              \"value\": \"MinimumSamplingInterval\"\n            },\n            {\n              \"label\": \"Historizing\",\n              \"value\": \"Historizing\"\n            },\n            {\n              \"label\": \"Executable\",\n              \"value\": \"Executable\"\n            },\n            {\n              \"label\": \"UserExecutable\",\n              \"value\": \"UserExecutable\"\n            }\n          ],\n          \"type\": \"STRING\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"1000\",\n          \"description\": \"listen.sampling.interval\",\n          \"id\": \"listen.sampling.interval\",\n          \"isRequired\": true,\n          \"name\": \"listen.sampling.interval\",\n          \"type\": \"DOUBLE\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"10\",\n          \"description\": \"listen.queue.size\",\n          \"id\": \"listen.queue.size\",\n          \"isRequired\": true,\n          \"name\": \"listen.queue.size\",\n          \"type\": \"LONG\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"true\",\n          \"description\": \"listen.discard.oldest\",\n          \"id\": \"listen.discard.oldest\",\n          \"isRequired\": true,\n          \"name\": \"listen.discard.oldest\",\n          \"type\": \"BOOLEAN\"\n        },\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"false\",\n          \"description\": \"listen.subscribe.to.children\",\n          \"id\": \"listen.subscribe.to.children\",\n          \"isRequired\": true,\n          \"name\": \"listen.subscribe.to.children\",\n          \"type\": \"BOOLEAN\"\n        }\n      ],\n      \"factoryPid\": \"org.eclipse.kura.driver.opcua\",\n      \"pid\": \"opcuaDriver\"\n    }\n  ],\n  \"driverOCDs\": [\n    {\n      \"definition\": {\n        \"ad\": [\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"default-server\",\n            \"description\": \"OPC-UA Endpoint IP Address\",\n            \"id\": \"endpoint.ip\",\n            \"isRequired\": true,\n            \"name\": \"Endpoint IP\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"53530\",\n            \"description\": \"OPC-UA Endpoint Port\",\n            \"id\": \"endpoint.port\",\n            \"isRequired\": true,\n            \"min\": \"1\",\n            \"name\": \"Endpoint port\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"OPC-UA-Server\",\n            \"description\": \"OPC-UA Server Name\",\n            \"id\": \"server.name\",\n            \"isRequired\": false,\n            \"name\": \"Server Name\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"false\",\n            \"description\": \"If set to true the driver will use the hostname, port, and server name parameters specified in the configuration instead of the values contained in endpoint descriptions fetched from the server.\",\n            \"id\": \"force.endpoint.url\",\n            \"isRequired\": false,\n            \"name\": \"Force endpoint URL\",\n            \"type\": \"BOOLEAN\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"120\",\n            \"description\": \"Session timeout (in seconds)\",\n            \"id\": \"session.timeout\",\n            \"isRequired\": true,\n            \"name\": \"Session timeout\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"60\",\n            \"description\": \"Request timeout (in seconds)\",\n            \"id\": \"request.timeout\",\n            \"isRequired\": true,\n            \"name\": \"Request timeout\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"40\",\n            \"description\": \"The time to wait for the server response to the 'Hello' message (in seconds)\",\n            \"id\": \"acknowledge.timeout\",\n            \"isRequired\": true,\n            \"name\": \"Acknowledge timeout\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"opc-ua client\",\n            \"description\": \"OPC-UA application name\",\n            \"id\": \"application.name\",\n            \"isRequired\": true,\n            \"name\": \"Application name\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"urn:kura:opcua:client\",\n            \"description\": \"OPC-UA application uri\",\n            \"id\": \"application.uri\",\n            \"isRequired\": true,\n            \"name\": \"Application URI\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"1000\",\n            \"description\": \"The publish interval in milliseconds for the subscription created by the driver.\",\n            \"id\": \"subscription.publish.interval\",\n            \"isRequired\": true,\n            \"name\": \"Subscription publish interval\",\n            \"type\": \"LONG\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"PFX or JKS Keystore\",\n            \"description\": \"Absolute path of the PKCS or JKS keystore that contains the OPC-UA client certificate, private key and trusted server certificates\",\n            \"id\": \"certificate.location\",\n            \"isRequired\": true,\n            \"name\": \"Keystore path\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"0\",\n            \"description\": \"Security Policy\",\n            \"id\": \"security.policy\",\n            \"isRequired\": true,\n            \"name\": \"Security policy\",\n            \"option\": [\n              {\n                \"label\": \"None\",\n                \"value\": \"0\"\n              },\n              {\n                \"label\": \"Basic128Rsa15\",\n                \"value\": \"1\"\n              },\n              {\n                \"label\": \"Basic256\",\n                \"value\": \"2\"\n              },\n              {\n                \"label\": \"Basic256Sha256\",\n                \"value\": \"3\"\n              }\n            ],\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"cardinality\": 0,\n            \"description\": \"OPC-UA server username\",\n            \"id\": \"username\",\n            \"isRequired\": false,\n            \"name\": \"Username\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"description\": \"OPC-UA server password\",\n            \"id\": \"password\",\n            \"isRequired\": false,\n            \"name\": \"Password\",\n            \"type\": \"PASSWORD\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"client-ai\",\n            \"description\": \"Alias for the client certificate in the keystore\",\n            \"id\": \"keystore.client.alias\",\n            \"isRequired\": true,\n            \"name\": \"Client certificate alias\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"false\",\n            \"description\": \"Specifies whether to enable or not server certificate verification\",\n            \"id\": \"authenticate.server\",\n            \"isRequired\": true,\n            \"name\": \"Enable server authentication\",\n            \"type\": \"BOOLEAN\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"PKCS12\",\n            \"description\": \"Keystore type\",\n            \"id\": \"keystore.type\",\n            \"isRequired\": true,\n            \"name\": \"Keystore type\",\n            \"option\": [\n              {\n                \"label\": \"PKCS11\",\n                \"value\": \"PKCS11\"\n              },\n              {\n                \"label\": \"PKCS12\",\n                \"value\": \"PKCS12\"\n              },\n              {\n                \"label\": \"JKS\",\n                \"value\": \"JKS\"\n              }\n            ],\n            \"type\": \"STRING\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"password\",\n            \"description\": \"Configurable Property to set keystore password (default set to password)\",\n            \"id\": \"keystore.password\",\n            \"isRequired\": true,\n            \"name\": \"Keystore password\",\n            \"type\": \"PASSWORD\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"200\",\n            \"description\": \"Maximum number of items that will be included in a single request to the server.\",\n            \"id\": \"max.request.items\",\n            \"isRequired\": true,\n            \"name\": \"Max request items\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"cardinality\": 0,\n            \"defaultValue\": \"BROWSE_PATH\",\n            \"description\": \"The format to be used for channel name for subtree subscriptions.     If set to BROWSE_PATH, the channel name will contain the browse path of the source node relative to the subscription root.     If set to NODE_ID, the name will contain the node id of the source node.\",\n            \"id\": \"subtree.subscription.name.format\",\n            \"isRequired\": true,\n            \"name\": \"Subtree subscription events channel name format\",\n            \"option\": [\n              {\n                \"label\": \"BROWSE_PATH\",\n                \"value\": \"BROWSE_PATH\"\n              },\n              {\n                \"label\": \"NODE_ID\",\n                \"value\": \"NODE_ID\"\n              }\n            ],\n            \"type\": \"STRING\"\n          }\n        ],\n        \"description\": \"OPC-UA Driver\",\n        \"id\": \"org.eclipse.kura.driver.opcua\",\n        \"name\": \"OpcUaDriver\"\n      },\n      \"pid\": \"org.eclipse.kura.driver.opcua\"\n    }\n  ],\n  \"wireComponentDefinitions\": [\n    {\n      \"componentOCD\": [\n        {\n          \"cardinality\": 0,\n          \"defaultValue\": \"records[0].TIMER !== null && records[0].TIMER.getValue() > 10 && records[0]['TIMER'].getValue() < 30;\\n\",\n          \"description\": \"The boolean expression to be evaluated by this component when a wire envelope is              received.\",\n          \"id\": \"condition\",\n          \"isRequired\": true,\n          \"name\": \"condition\",\n          \"type\": \"STRING\"\n        }\n      ],\n      \"defaultInputPorts\": 1,\n      \"defaultOutputPorts\": 2,\n      \"factoryPid\": \"org.eclipse.kura.wire.Conditional\",\n      \"inputPortNames\": {\n        \"0\": \"if\"\n      },\n      \"maxInputPorts\": 1,\n      \"maxOutputPorts\": 2,\n      \"minInputPorts\": 1,\n      \"minOutputPorts\": 2,\n      \"outputPortNames\": {\n        \"0\": \"then\",\n        \"1\": \"else\"\n      }\n    }\n  ]\n}\n
                    "},{"location":"kura-wires/wire-service-rest-v1/#wire-graph-snapshot-example","title":"Wire Graph snapshot example","text":"
                    {\n  \"configs\": [\n    {\n      \"pid\": \"org.eclipse.kura.wire.graph.WireGraphService\",\n      \"properties\": {\n        \"WireGraph\": {\n          \"type\": \"STRING\",\n          \"value\": \"{\\\"components\\\":[{\\\"pid\\\":\\\"timer\\\",\\\"inputPortCount\\\":0,\\\"outputPortCount\\\":1,\\\"renderingProperties\\\":{\\\"position\\\":{\\\"x\\\":-300,\\\"y\\\":-20},\\\"inputPortNames\\\":{},\\\"outputPortNames\\\":{}}},{\\\"pid\\\":\\\"logger\\\",\\\"inputPortCount\\\":1,\\\"outputPortCount\\\":0,\\\"renderingProperties\\\":{\\\"position\\\":{\\\"x\\\":-100,\\\"y\\\":-20},\\\"inputPortNames\\\":{},\\\"outputPortNames\\\":{}}}],\\\"wires\\\":[{\\\"emitter\\\":\\\"timer\\\",\\\"emitterPort\\\":0,\\\"receiver\\\":\\\"logger\\\",\\\"receiverPort\\\":0}]}\"\n        }\n      }\n    },\n    {\n      \"pid\": \"timer\",\n      \"properties\": {\n        \"componentDescription\": {\n          \"type\": \"STRING\",\n          \"value\": \"A wire component that fires a ticking event on every configured interval\"\n        },\n        \"componentId\": {\n          \"type\": \"STRING\",\n          \"value\": \"timer\"\n        },\n        \"componentName\": {\n          \"type\": \"STRING\",\n          \"value\": \"Timer\"\n        },\n        \"cron.interval\": {\n          \"type\": \"STRING\",\n          \"value\": \"0/10 * * * * ?\"\n        },\n        \"emitter.port.count\": {\n          \"type\": \"INTEGER\",\n          \"value\": 1\n        },\n        \"factoryComponent\": {\n          \"type\": \"BOOLEAN\",\n          \"value\": false\n        },\n        \"factoryPid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.wire.Timer\"\n        },\n        \"kura.service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"timer\"\n        },\n        \"receiver.port.count\": {\n          \"type\": \"INTEGER\",\n          \"value\": 0\n        },\n        \"service.factoryPid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.wire.Timer\"\n        },\n        \"service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.wire.Timer-1642493602000-13\"\n        },\n        \"simple.custom.first.tick.interval\": {\n          \"type\": \"INTEGER\",\n          \"value\": 0\n        },\n        \"simple.first.tick.policy\": {\n          \"type\": \"STRING\",\n          \"value\": \"DEFAULT\"\n        },\n        \"simple.interval\": {\n          \"type\": \"INTEGER\",\n          \"value\": 10\n        },\n        \"simple.time.unit\": {\n          \"type\": \"STRING\",\n          \"value\": \"SECONDS\"\n        },\n        \"type\": {\n          \"type\": \"STRING\",\n          \"value\": \"SIMPLE\"\n        }\n      }\n    },\n    {\n      \"pid\": \"logger\",\n      \"properties\": {\n        \"componentDescription\": {\n          \"type\": \"STRING\",\n          \"value\": \"A wire component which logs data as received from upstream connected Wire Components\"\n        },\n        \"componentId\": {\n          \"type\": \"STRING\",\n          \"value\": \"logger\"\n        },\n        \"componentName\": {\n          \"type\": \"STRING\",\n          \"value\": \"Logger\"\n        },\n        \"emitter.port.count\": {\n          \"type\": \"INTEGER\",\n          \"value\": 0\n        },\n        \"factoryComponent\": {\n          \"type\": \"BOOLEAN\",\n          \"value\": false\n        },\n        \"factoryPid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.wire.Logger\"\n        },\n        \"kura.service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"logger\"\n        },\n        \"log.verbosity\": {\n          \"type\": \"STRING\",\n          \"value\": \"QUIET\"\n        },\n        \"receiver.port.count\": {\n          \"type\": \"INTEGER\",\n          \"value\": 1\n        },\n        \"service.factoryPid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.wire.Logger\"\n        },\n        \"service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.wire.Logger-1642493602046-14\"\n        }\n      }\n    }\n  ]\n}\n
                    "},{"location":"kura-wires/wires-mqtt-namespace/","title":"Wires MQTT Namespace","text":"

                    The CloudPublisher is a WireComponent that converts a WireEnvelope in a KuraPayload and publishes it over MQTT. Each WireRecord in a WireEnvelope is trivially converted to a KuraPayload and published on a configurable semantic data or control topic. During this process, the emitter PID of the WireEnvelope is discarded.

                    The CloudPublisher is agnostic with respect to the contents of the WireEnvelope. It does not know for example if a WireEnvelope contains data readings emitted from a WireAsset. On the other hand, WireAssetS are first-class citizens of a Wire graph and the source of the information which is processed by the downstream Wire components. Eventually, the WireEnvelope representing the output of the processing is connected to a CloudPublisher and published to a Cloud platform.

                    In the simplest case, a WireAsset is directly connected to a CloudPublisher and it would be useful to publish the telemetry data under a well-known topic namespace, for example the following full topic:

                    <accountName>/<deviceID>/W1/A1/<assetName>\n

                    In this case ${assetName} matches the emitterPID of the WireEnvelope emitted by the WireAsset and received by a CloudPublisher.

                    Interested applications can then subscribe to (or query a message datastore for):

                    • <accountName>/<deviceID>/W1/# for all Wires (W) topics
                    • <accountName>/<deviceID>/W1/A1/# for all WireAsset (W/A) topics
                    • <accountName>/<deviceID>/W1/A1/<assetName> for all topics for a specific WireAsset

                    In a more complex scenario there might be filters between the WireAsset \u201csource\u201d and the CloudPublisher \u201csink\u201d and the emitterPID of the WireEnvelope received by the publisher no longer matches the emitterPID of the WireEnvelope emitted by the WireAsset. However the published data still represents \u201cAsset\u201d (filtered) data and should be published under the topic above.

                    The Kura Wires model haven\u2019t the notion of source of an WireEnvelope since a given WireEnvelope instance does not move across the graph but only from one WireEmitter to downstream WireReceiverS that are free to emit something semantically different.

                    To overcome this issue:

                    • The CloudPublisher can be configured with a \u201csemantic topic template\u201d like W1/A1/$assetName where tokens prefixed with $ will be expanded to the value of a property with the same name in a WireEnvelope\u2019s WireRecord.
                    • Into the WireAsset, it is possible to add an assetName property to the WireEnvelope\u2019s WireRecord.
                    "},{"location":"kura-wires/multiport-wire-components/join-component/","title":"Join Component","text":"

                    The Join Component is a Multiport-enabled component that merges into a single Wire Envelope the properties contained in the envelopes received in the input ports. It is provided by default in every Kura installation.

                    In the image above a simple usage example of the Join component: two timers simulate separate paths in the graph and the envelopes received by the Conditional component are then merged into a single Wire Envelope that is then received by the logger component.

                    The behaviour of the Join component is specified by the barrier property.

                    "},{"location":"kura-wires/multiport-wire-components/mathematical-components-example/","title":"Mathematical Components Example","text":"

                    Mathematical Wire components can be installed from the Eclipse Marketplace. For these examples, the Wire Math Multiport Components DP will be used, but other more specific operators can be found on the marketplace (like trigonometric functions).

                    The following Multiport-enabled Mathematical examples are provided:

                    • Sum
                    • Difference
                    • Multiplication
                    • Division
                    "},{"location":"kura-wires/multiport-wire-components/mathematical-components-example/#sum","title":"Sum","text":""},{"location":"kura-wires/multiport-wire-components/mathematical-components-example/#difference","title":"Difference","text":""},{"location":"kura-wires/multiport-wire-components/mathematical-components-example/#multiplication","title":"Multiplication","text":""},{"location":"kura-wires/multiport-wire-components/mathematical-components-example/#division","title":"Division","text":""},{"location":"kura-wires/multiport-wire-components/multiport-wire-components/","title":"Multiport Wire Components","text":"

                    In order to allow a better routing of data through the Wire Graph, Kura introduces a new class of Wire components named Multiport Wire Components.

                    With the addition of this new functionality, a compatible component instance can be defined with an arbitrary number of input and output ports.

                    In the example provided, we have two components in the Wire Composer:

                    • the Conditional component that implements the if-then-else logic
                    • the Join component that joins into a single Wire the data processed by two separate branches of a graph

                    Those components are available in every default installation of Kura.

                    In order to show the potentialities of the new APIs, in the Eclipse Kura Marketplace and in the Kura downloads page, are available few more multiport-enabled components for Mathematical processing.

                    "},{"location":"kura-wires/multiport-wire-components/multiport-wire-components/#convert-a-component-to-a-multiport-component","title":"Convert a Component to a Multiport Component","text":""},{"location":"kura-wires/multiport-wire-components/multiport-wire-components/#component-configuration-changes","title":"Component Configuration Changes","text":"

                    The following properties need to be specified in the component configuration:

                    • input.cardinality.minimum: an integer that specifies the minimum number of input ports that the component can be configured to manage.
                    • input.cardinality.maximum: an integer that specifies the maximum number of input ports that the component can be configured to manage.
                    • input.cardinality.default: an integer that specifies the default number of input ports that the component will be created with, if not specified in a different way.
                    • output.cardinality.minimum: an integer that specifies the minimum number of output ports that the component can be configured to manage.
                    • output.cardinality.maximum: an integer that specifies the maximum number of output ports that the component can be configured to manage.
                    • output.cardinality.default: an integer that specifies the default number of output ports that the component will be created with, if not specified in a different way.
                    • input.port.names: optional mapping between input ports and friendly names
                    • output.port.names: optional mapping between output ports and friendly names

                    The component should also provide service interface org.eclipse.kura.wire.WireComponent

                    "},{"location":"kura-wires/multiport-wire-components/multiport-wire-components/#code-changes","title":"Code Changes","text":"

                    To leverage all the new Multiport functionalities, a Multiport-enabled component must use the newly introduced MultiportWireSupport APIs that provide support to get the list of Emitter and Receiver Ports, as well as to create a new Wire Envelope from a list of Wire Records.

                    For the conditional component, that has two output ports, the following code allows to get the proper Wire Support from the Wire Helper Service and to get the then and else ports to be used to push the processed envelopes.

                    this.wireSupport = (MultiportWireSupport) this.wireHelperService.newWireSupport(this);\n        final List<EmitterPort> emitterPorts = this.wireSupport.getEmitterPorts();\n        this.thenPort = emitterPorts.get(0);\n        this.elsePort = emitterPorts.get(1);\n

                    To emit the result, the code has to be adapted to use the Wire Support to create the Wire Envelope that has to be sent. Effectively, the envelope is sent to the corresponding wire invoking the emit method of the corresponding Port, as shown below.

                    final WireEnvelope outputEnvelope = this.wireSupport.createWireEnvelope(inputRecords);\n\nif ((Boolean) decision) {\n    this.thenPort.emit(outputEnvelope);\n} else {\n    this.elsePort.emit(outputEnvelope);\n}\n
                    "},{"location":"kura-wires/script-components/graalvm-conditional-component/","title":"GraalVM\u2122 Conditional Component","text":"

                    The Conditional Component is a multiport-enabled component that implements the if-then-else logic in the Wire Composer.

                    In the image above a simple usage example of the conditional component: a timer ticks and the envelope is received by the conditional component. If the timer has an even number of seconds, then it will evaluate to true and forward the received envelope to the then port: the 'verbose' logger will receive the input.

                    The choice between the two ports is performed based on a condition expressed in the component configuration as in the image below.

                    "},{"location":"kura-wires/script-components/graalvm-filter-component/","title":"GraalVM\u2122 Filter Component","text":"

                    The Filter Component provides scripting functionalities in Kura Wires using the GraalVM\u2122 JavaScript engine:

                    • The script execution is triggered when a wire envelope is received by the filter component.
                    • It is possible to access the received envelope and inspect the wire records contained in it from the script.
                    • The script can optionally emit a wire envelope containing one or more wire records for each wire envelope received.
                    • The script context is persisted across multiple executions, allowing to perform stateful computations like running a counter, performing time averages etc.
                    • A slf4j Logger is available to the script for debugging purposes.
                    • The script context is restricted to allow only Wires-related processing. Any attempt to load additional Java classes will fail.
                    • The default configuration contains an example script describing the component usage, it can be executed connecting a Timer and a Logger component.
                    "},{"location":"kura-wires/script-components/graalvm-filter-component/#usage","title":"Usage","text":"

                    The following global variables are available to the script:

                    • input: an object that represents the received wire envelope.
                    • output: an object that allows to emit wire records.
                    • logger: a slf4j logger.

                    The following utility functions are available (see Creating and emitting wire records for usage):

                    • newWireRecord(Map<String, TypedValue<?>) -> WireRecord
                    • newByteArray(int) -> byte[]
                    • newBooleanValue(boolean) -> TypedValue
                    • newByteArrayValue(byte[]) -> TypedValue
                    • newDoubleValue(number) -> TypedValue
                    • newIntegerValue(number) -> TypedValue
                    • newLongValue(number) -> TypedValue
                    • newStringValue(object) -> TypedValue

                    The following global constants expose the org.eclipse.kura.type.DataType enum variants:

                    • BOOLEAN
                    • BYTE_ARRAY
                    • DOUBLE
                    • FLOAT
                    • INTEGER
                    • LONG
                    • STRING
                    "},{"location":"kura-wires/script-components/graalvm-filter-component/#received-envelope","title":"Received envelope","text":"

                    The received envelope is represented by the input global variable and is mapped in Javascript as a WireEnvelope object.

                    GraalVM Javascript Engine allows a 1:1 mapping of Java Objects to JavaScript ones. Hence, it is possible to access the WireRecords of the envelope and the emitter pid using the methods specified in the WireEnvelope Kura API:

                    logger.info('Emitter pid is {}', input.getEmitterPid())\nvar records = input.getRecords()\n

                    The records array can be iterated to extract the WireRecord properties (reference the WireRecord Kura API):

                    for(let i=0; i<records.length; i++) {\n // WireRecord.getProperties() returns a map of String - TypedValue\n for (const [keyString, typedValue] of records[i].getProperties()) {\n logger.info('The {}-th record contains:'\\, String(i))\n logger.info('{}={}\\n', keyString, typedValue.getValue())\n }\n}\n

                    As in the example above, wireRecord.getProperties returns a map of String, TypedValue. Refer to the TypedValue Kura API for the accessible public methods list.

                    "},{"location":"kura-wires/script-components/graalvm-filter-component/#creating-and-emitting-wire-records","title":"Creating and emitting wire records","text":"

                    New mutable WireRecord instances can be created using the newWireRecord(Map<String, TypedValue<?>) function. The properties of a mutable WireRecord can be modified by setting Javascript object properties. The properties of a WireRecord object must be instances of the TypedValue class created using the new<type>Value() family of functions. Setting different kind of objects as properties of a WireRecord will result in an exception.

                    The output global variable is an object that can be used for emitting WireRecords. This object contains a list of WireRecords that will be emitted when the script execution finishes if no exceptions are thrown. The following code is an example of how to emit a list containing a single WireRecord:

                    var output = new Array()\nvar outputMap = new Object()\n\nvar byteArray = newByteArray(4)\nbyteArray[0] = 1\nbyteArray[1] = 2\nbyteArray[2] = 0xaa\nbyteArray[3] = 0xbb\n\noutputMap['example.integer'] = newIntegerValue(10)\noutputMap['example.long'] = newLongValue(100)\noutputMap['example.float'] = newFloatValue(1.014)\noutputMap['example.double'] = newDoubleValue(10.12)\noutputMap['example.boolean'] = newBooleanValue(true)\noutputMap['example.string'] = newStringValue('Hello World!')\noutputMap['example.byte.array'] = newByteArrayValue(byteArray)\n\noutput[0] = newWireRecord(outputMap)\n
                    "},{"location":"kura-wires/script-components/graalvm-filter-component/#script-context","title":"Script context","text":"

                    The script.context.drop option allows to reset the script context. If set to true the script context will be dropped every time the component configuration is updated, resetting the value of any persisted variable.

                    In the example below, with script.context.drop=false the following script will preserve the value of counter across executions. Setting script.context.drop=true will cause counter to be undefined every time the component is triggered.

                    counter = typeof(counter) === 'undefined'\n ? 0 // counter is undefined, initialise it to zero\n : counter; // counter is already defined, keep the previous value\n
                    "},{"location":"kura-wires/script-components/introduction/","title":"Introduction to the Script Components","text":"

                    The Script Components allow for performing more complex operations on the received Wire Envelopes using a JavaScript Engine.

                    Depending if the target device is running on Java 8 or Java 17, there are several components to choose from.

                    For devices running a JRE with Nashorn JS Engine (Java < 15), a Script Filter and a Conditional Component are provided:

                    • Nashorn-based Script Filter
                    • Nashorn-based Conditional Component

                    The above components will run only on Java < 15 since the Nashorn dependency is not included in the DP. The two components are available in the Eclipse Marketplace as two separate entries. These components are deprecated as of Kura version 5.3.

                    The following components instead have the GraalVM\u2122 JavaScript Engine included in the DP and therefore do not require a JRE with Nashorn JS Engine:

                    • GraalVM\u2122 Filter Component
                    • GraalVM\u2122 Conditional Component

                    The input scripts for these components are not compatible with the Nashorn implementations Script Filter and Conditional Component. Both components are shipped as a single DP named org.eclipse.kura.wire.script.tools. Since the JS engine dependency is shipped along with the DP, these components will work on both Java 8 and Java 17 devices but the DP is bigger in size (~18,6 MB).

                    "},{"location":"kura-wires/script-components/nashorn-conditional-component/","title":"Nashorn Conditional Component","text":"

                    Warning

                    This component is deprecated as of Kura version 5.3 since no more available on Java 17.

                    The Conditional component is a multiport-enabled component that implements the if-then-else logic in the Wire Composer. It is provided by default in every Kura installation.

                    In the image above a simple usage example of the Conditional component: a timer ticks and the envelope is received by the Conditional component. The message is then processed and can be sent downstream to the logger component (then port) or to a publisher (else port).

                    The choice between the two ports is performed based on a condition expressed in the Conditional component configuration.

                    "},{"location":"kura-wires/script-components/nashorn-script-filter/","title":"Nashorn Script Filter","text":"

                    Warning

                    This component is deprecated as of Kura version 5.3 since no more available on Java 17.

                    The Script Filter Component provides scripting functionalities in Kura Wires using the Nashorn Javascript engine:

                    • The script execution is triggered when a wire envelope is received by the filter component.
                    • It is possible to access to the received envelope and inspect the wire records contained in it form the script.
                    • The script can optionally emit a wire envelope containing one or more wire records for each wire envelope received.
                    • The script context is persisted across multiple executions, allowing to perform stateful computations like running a counter, performing time averages etc.
                    • A slf4j Logger is available to the script for debug purposes.
                    • The script context is restricted in order to allow only Wires related processing. Any attempt to load additional Java classes will fail.
                    • The default configuration contains an example script describing the component usage, it can be executed connecting a Timer and a Logger component.
                    "},{"location":"kura-wires/script-components/nashorn-script-filter/#usage","title":"Usage","text":"

                    The following global variables are available to the script:

                    • input: an object that represents the received wire envelope.
                    • output: an object that allows to emit wire records.
                    • logger: a slf4j logger

                    The following utility functions are available (see Creating and emitting wire records for usage):

                    • newWireRecord(void) -> WireRecordWrapper
                    • newByteArray(void) -> byte[]
                    • newBooleanValue(boolean) -> TypedValue
                    • newByteArrayValue(byte[]) -> TypedValue
                    • newDoubleValue(number) -> TypedValue
                    • newFloatValue(number) -> TypedValue
                    • newIntegerValue(number) -> TypedValue
                    • newLongValue(number) -> TypedValue
                    • newStringValue(object) -> TypedValue

                    The following global constants expose the org.eclipse.kura.type.DataType enum variants:

                    • BOOLEAN
                    • BYTE_ARRAY
                    • DOUBLE
                    • FLOAT
                    • INTEGER
                    • LONG
                    • STRING
                    "},{"location":"kura-wires/script-components/nashorn-script-filter/#received-envelope","title":"Received envelope","text":"

                    The received envelope is represented by the input global variable and it has the following properties:

                    • emitterPid: the emitter pid of the received envelope as a String.
                    • records: an immutable array that represents the Wire Records contained in the Wire Envelope.

                    Each element of the records array is an immutable object that represents a received wire record. Wire record properties are directly mapped to Javascript object properties, and are instances of the org.eclipse.kura.type.TypedValue class. Each Wire Record property has the following methods available:

                    • getType(void) -> DataType: Returns the type of the value, as a DataType enum variant. Can be matched against the data type constants described above.
                    • getValue(void) -> Object: Returns the actual value.

                    The javascript objects referred as WireRecords in this guide are not instances of the org.eclipse.kura.wire.WireRecord class, but are wrappers that map WireRecord properties into javascript properties. The following code is a simple example script that show how to use the filter:

                    // get the first record from the envelope\nvar record = input.records[0]\n// let's assume it contains the LED boolean property and the TEMPERATURE double property\nrecord.LED1.getType() === BOOLEAN // evaluates to true\nif (record.LED1.getValue()) {\n    // LED1 is on\n}\nrecord.LED1.getType() === DOUBLE // evaluates to true\nif (record.TEMPERATURE.getValue() > 50) {\n    // temperature is high, do something\n}\n
                    "},{"location":"kura-wires/script-components/nashorn-script-filter/#creating-and-emitting-wire-records","title":"Creating and emitting wire records","text":"

                    New mutable WireRecord instances can be created using the newWireRecord(void) -> WireRecordWrapper function. The properties of a mutable WireRecord can be modified by setting Javascript object properties. The properties of a WireRecord object must be instances of the TypedValue class created using the new<type>Value() family of functions. Setting different kind of objects as properties of a WireRecord will result in an exception.

                    The output global variable is an object that can be used for emitting WireRecords. This object contains a list of WireRecords that will be emitted when the script execution finishes, if no exceptions are thrown. New records can be added to the list using the add(WireRecordWrapper) function. It is also possible to emit records contained in the received WireEnvelope.

                    The script filter will emit a wire envelope only if the WireRecord list is not empty when the script execution completes. The following code is an example about how to emit a value:

                    var record = newWireRecord()\n\nvar byteArray = newByteArray()\nbyteArray[0] = 1\nbyteArray[1] = 2\nbyteArray[2] = 0xaa\nbyteArray[3] = 0xbb\n\nrecord.LED1 = newBooleanValue(true)\nrecord.foo = newStringValue('bar')\nrecord['myprop'] = newDoubleValue(123.456)\nrecord['example.long'] = newLongValue(100)\nrecord['example.float'] = newFloatValue(1.014)\nrecord['example.byte.array'] = newByteArrayValue(byteArray)\n\noutput.add(record)\n
                    "},{"location":"kura-wires/script-components/nashorn-script-filter/#script-context","title":"Script context","text":"

                    The script.context.drop option allows to reset the script context. If set to true the script context will be dropped every time the component configuration is updated, resetting the value of any persisted variable.

                    In the example below, with script.context.drop=false the following script will preserve the value of counter across executions. Setting script.context.drop=true will cause counter to be undefined every time the component is triggered.

                    counter = typeof(counter) === 'undefined'\n ? 0 // counter is undefined, initialise it to zero\n : counter; // counter is already defined, keep the previous value\n
                    "},{"location":"kura-wires/single-port-wire-components/ai-wire-component/","title":"AI Wire Component","text":"

                    The component allows interacting with an InferenceEngineService to perform machine learning-related operations. For boards that are not explicitly made for AI, the component can be installed from the Eclipse Marketplace at this link.

                    An InferenceEngineService is a Kura service that implements a simple API to interface with an Inference Engine. The Inference Engine allows to perform inference on trained Artificial Intelligence models commonly described by a file and some configuration for explaining its input and outputs. An example of Inference Engine implementation is the Nvidia\u2122 Triton Server inference engine.

                    In a normal machine learning flow, the input is preprocessed before it is given to the machine learning algorithm, and the result is processed again to be adapted to the rest of the pipeline.

                    Once these models are loaded in the engine, the AI wire component allows to specify the name of the models that are used in the pre-processing, infer, and post-processing steps. Only the infer model name is mandatory so that it is possible to just use the strictly necessary steps in case the pre/post-processing is performed directly by the infer step.

                    "},{"location":"kura-wires/single-port-wire-components/ai-wire-component/#models-input-and-output-formats","title":"Models Input and Output formats","text":"

                    The AI wire component takes a WireEnvelope as an input, it processes its records and feeds them to the specified preprocessing or inference model. The outputs of the inference or the post-processing step are then reconverted into a wire record. This section explains the inputs and output formats that the wire component is expecting. Not specifying the models according to this contract will result in a non-functioning inference.

                    The 3 inference steps are applied on each WireRecord contained in the input WireEnvelope.

                    The inputs and outputs will have assigned the corresponding Kura DataType, which can be one of:

                    • BOOLEAN
                    • DOUBLE
                    • FLOAT
                    • INTEGER
                    • LONG
                    • STRING
                    • BYTE_ARRAY

                    Reference to Introduction for the data types that are allowed to flow through the wires.

                    The models that manage the input and the output must expect a list of inputs such that:

                    • each input corresponds to an entry of the WireRecord properties
                    • the entry key will become the input name (e.g. in the case of an asset, the channel name becomes the tensor name)
                    • input shape will be [1]

                    In the following, two example configurations for Triton Inference Engine models are provided. A complete usage example that implements an Anomaly Detector using a RaspberryPi SenseHat is provided in the Kura examples repository.

                    "},{"location":"kura-wires/single-port-wire-components/ai-wire-component/#input-specification-example","title":"Input Specification Example","text":"

                    Following, an example of a model configuration for the Nvidia\u2122 Triton Inference Engine. It expects the input from the WireEnvelope that contains a record with properties:

                    • ACCELERATION of type Float
                    • CHANNEL_0 of type Integer
                    • STREAM of type byte[]
                    • GYRO of type Boolean

                    This record can be generated from an asset with channel names as above. The output will be a single tensor of type Float, of shape 1x13, and name OUT_PRE.

                    Note that each input will have shape 1.

                    name: \"preprocessor\"\nbackend: \"python\"\n\ninput [\n  {\n    name: \"ACCELERATION\"\n    data_type: FP32\n    dims: [ 1 ]\n  }\n]\ninput [\n  {\n    name: \"CHANNEL_0\"\n    data_type: INT32\n    dims: [ 1 ]\n  }\n]\ninput [\n  {\n    name: \"STREAM\"\n    data_type: BYTES\n    dims: [ 1 ]\n  }\n]\ninput [\n  {\n    name: \"GYRO\"\n    data_type: BOOL\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"OUT_PRE\"\n    data_type: FP32\n    dims: [ 13 ]\n  }\n]\ninstance_group [{ kind: KIND_CPU }]\n
                    "},{"location":"kura-wires/single-port-wire-components/ai-wire-component/#output-specification-example","title":"Output Specification Example","text":"

                    Following, an example of a Nvidia\u2122 Triton Inference Engine configuration that takes input IN_POST and produces outputs that will be mapped to a WireRecord with the properties as follows: - RESULT0 of type Boolean - RESULT1 of type Integer - RESULT2 of type byte[] - RESULT3 of type Float

                    Note that each output will have shape 1.

                    name: \"postprocessor\"\nbackend: \"python\"\n\ninput [\n  {\n    name: \"IN_POST\"\n    data_type: FP32\n    dims: [ 1, 5 ]\n  }\n]\noutput [\n  {\n    name: \"RESULT0\"\n    data_type: BOOL\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"RESULT1\"\n    data_type: INT32\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"RESULT2\"\n    data_type: BYTES\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"RESULT3\"\n    data_type: FP32\n    dims: [ 1 ]\n  }\n]\ninstance_group [{ kind: KIND_CPU }]\n
                    "},{"location":"kura-wires/single-port-wire-components/db-store-and-filter/","title":"Wire Record Store and Wire Record Query","text":"

                    This tutorial will present how to use Wire Record Store and Wire Record Query components and provide an example based on the OPC-UA simulated server already used in OPC-UA Application.

                    The Wire Record Store component allows the wire graphs to interact with a persistend Wire Record store implementation, for example a SQL database. It stores in a user-defined collection all the envelopes received by the component.

                    The Wire Record Query component, instead, can run a custom query on the attached store and emit the result on the wire.

                    Note

                    The Wire Record Store and Wire Record Query components have been introduced in Kura 5.3.0 as a replacement of the Db Store and Db Filter, that have been deprecated.

                    The reason of the deprecation is the fact that Db Store and Db Filter only support databases that provide a JDBC interface. Moreover, the old Db Store interacts with the database using a set of hardcoded SQL queries. This fact makes it difficult to use it with different databases since the syntax of the queries is usually database-specific.

                    The new components use the org.eclipse.kura.wire.store.provider.WireRecordStoreProvider and org.eclipse.kura.wire.store.provider.QueryableWireRecordStoreProvider APIs introduced in 5.3.0 allowing to use them with generic data store implementations.

                    Please note that Wire Record Query component is not portable by nature, since it allows to execute an arbitrary user defined query. The new APIs allows to use it with non-JDBC data stores.

                    The Wire Record Store component can be configured as follows:

                    • Record Collection Name: The name of the record collection that should be used. The implementation of the collection depends on the Wire Record Store implementation, if it is a SQL database, the collection will likely be a table.
                    • Maximum Record Collection Size: The maximum number of records that is possible to store in the collection.
                    • Cleanup Records Keep: The number of records in the collection to keep while performing a cleanup operation (if set to 0 all the records will be deleted). The cleanup operation is performed when a new record is inserted and the current size of the record collection is greater than the configured Maximum Record Collection Size.
                    • WireRecordStoreProvider Target Filter : Specifies, as an OSGi target filter, the pid of the of the Wire Record Store instance to be used.

                    The Wire Record Query component can be configured as follows:

                    • Query: Query to be executed. The query syntax depends on the Queryable Wire Record Store implementation.
                    • Cache Expiration Interval (Seconds): This component is capable of maintaining a cache of the records produced by the last query execution and emitting its contents on the Wire until it expires. This value specifies the cache validity interval in seconds. When cache expires, it will cause a new query execution. The query will be executed for every trigger received if the value is set to 0.
                    • QueryableWireRecordStoreProvider Target Filter : Specifies, as an OSGi target filter, the pid of the of the Queryable Wire Record Store instance to be used.
                    • Emit On Empty Result : Defines the behavior of the component if the result of the performed query is empty. If set to true, an empty envelope will be emitted in this case, if set to false no envelopes will be emitted.

                    The following procedure will create a wire graph that collects data from a simulated OPC-UA Server, stores it in a table in the database, using the Wire Record Store component, and publishes it in the cloud platform. Moreover, the Wire Record Query component is used to read from the database and write data to the OPC-UA Server based on the values read.

                    "},{"location":"kura-wires/single-port-wire-components/db-store-and-filter/#configure-opc-ua-server-simulator","title":"Configure OPC-UA server simulator","text":"
                    1. Download the OPC-UA server simulator bundle and install it on your Kura instance. It will create a simulated OPC-UA server that exposes some sensors (light, temperature and water sensor) and some actuators (buzzer, led and fan).
                    2. In the Kura Administrative Web Interface, select \u201cOPCUA Server demo\u201d in \u201cServices\u201d and set server.port to 1234. Click the Apply button. This will start an OPC-UA\u200b server on port 1234.
                    "},{"location":"kura-wires/single-port-wire-components/db-store-and-filter/#configure-wires-opc-ua-application","title":"Configure Wires OPC-UA application","text":"
                    1. Install the OPC-UA Driver from Eclipse Kura Marketplace.
                    2. Use the local Kura Administrative Web Interface to create a new OPC-UA driver instance:
                      • Select Drivers and Assets, click the New Driver button
                      • Select org.eclipse.kura.driver.opcua, type in a name, and click Apply: a new service will show up under Services.

                    3. Configure the new service as follows:

                      • endpoint.ip: localhost
                      • endpoint.port: 1234
                      • server.name: leave blank

                    4. Click on Wires under System

                    5. Add a new Timer component and configure the interval at which the OPC-UA server will be sampled
                    6. Add a new Asset with the previously added OPC-UA Driver

                    7. Configure the new OPC-UA asset, adding new Channels as shown in the following image. Make sure that all the channels are set to READ.

                    8. Add a new Wire Record Store named DBStore component and configure it as follows:

                      • Record Collection Name: WR_data
                      • Maximum Record Collection Size: 10000
                      • Cleanup Records Keep: 0
                      • WireRecordStoreProvider Target Filter : the Wire Record Store Provider pid to be used
                    9. Add a new Publisher component and configure the chosen cloud platform stack in cloud.service.pid option
                    10. Add Logger component
                    11. Add another instance of Timer
                    12. Add a new Wire Record Query component named DBFilter component and configure it as follows. The query will get the values from the light sensor and if they are less than 200, the fan is activated.
                      • Query: SELECT (CASE WHEN \u201clight\u201d < 200 THEN 1 ELSE 0 END) AS \u201cled\u201d FROM \u201cWR_data\u201d ORDER BY TIMESTAMP DESC LIMIT 1;
                      • Cache Expiration Interval (Seconds): 0
                      • QueryableWireRecordStoreProvider Target Filter : the Queryable Wire Record Store Provider pid to be used

                    13. Add another Asset with the OPC-UA Driver, configured as shown in the following image. Be sure that all the channels are set to WRITE.

                      Note

                      Be aware that the Query syntax can vary accordingly to the dialect used by the database. For example, the MySQL dialect doesn't allow to surround the table or columns names with double-quotes. In the H2DB, this is mandatory instead.

                    14. Connect the components as shown in the following image, then click on \u201cApply\u201d and check the logs and the cloud platform that the data is correctly published.

                    "},{"location":"kura-wires/single-port-wire-components/fifo-component/","title":"FIFO Component","text":"

                    This page describes the usage of the FIFO component in Wires.

                    The current Wires threading model allows any component to perform potentially blocking operations when a wire envelope is received.

                    The fact that the wire envelopes are delivered synchronously implies that if a wire component performs blocking operations, other components in the same subgraph might be blocked as well, introducing delays in the processing of the graph.

                    The FIFO component can be used for decoupling blocking or slow wire components from other parts of the graph that cannot tolerate delays.

                    In the graph above, the NODELAY component cannot tolerate potential delays introduced by the DB component, adding a FIFO component allows to decouple the two components.

                    This component implements a FIFO queue that operates as follows:

                    • The received envelopes are added to the queue. Adding an envelope to the queue is usually (see below) a non-blocking operation.
                    • A dedicated thread pops the envelopes from the queue and delivers them to downstream components.

                    In this way, the threads running the upstream components are not affected by blocking operations performed by the downstream components.

                    In the example above there will be two threads that manage the processing of the graph:

                    1. A thread from the TIMER Quartz scheduler pool handles the processing for the NODELAY component and submits the envelopes produced by it to the queue of the FIFO component.

                    2. A second thread introduced by the FIFO component pops the received envelopes from the queue and dispatches them to the DB component, performing the processing required by it.

                    In this way, the NODELAY and DB components are decoupled because they are managed by different threads.

                    "},{"location":"kura-wires/single-port-wire-components/fifo-component/#configuration","title":"Configuration","text":"

                    The FIFO component configuration is composed of the following properties:

                    • queue.capacity: The size of the queue in terms of the number of storable wire envelopes.

                    • discard.envelopes : Configures the behavior of the component in case of a full queue.

                    • If set to true, envelopes received when the queue is full will be dropped. In this mode, submitting an envelope to the queue is always a non-blocking operation. It should be used if occasionally losing wire envelopes is acceptable for the application, but introducing delays for upstream components is not.

                    • If set to false, adding an envelope when the queue is full will block the submitting thread until there is space in the queue. Submitting an envelope to the FIFO component can be a blocking operation if the queue is full. This mode should be used if dropping wire envelopes is unacceptable for upstream components.

                    The probability of dropping envelopes in discard.envelopes=true mode or the probability of blocking upstream components in discard.envelopes=false mode can be controlled by setting a proper queue size.

                    "},{"location":"kura-wires/usage-examples/eddystone-driver-application/","title":"Eddystone\u2122 Driver Application with RuuviTag+","text":"

                    As presented in Eddystone Driver, Kura provides a specific driver that can be used to listen for Eddystone\u2122 beacons.

                    This tutorial will explain how to configure an Eddystone\u2122 driver and put it into a Wire graph that retrieves data from a RuuviTag+. For further information about RuuviTag see here.

                    "},{"location":"kura-wires/usage-examples/eddystone-driver-application/#configure-kura-wires-eddystone-application","title":"Configure Kura Wires Eddystone application","text":"

                    1. Install the Eddystone\u2122 driver from the Eclipse Kura Marketplace.

                    2. On the Kura Web Interface, instantiate an Eddystone\u2122 Driver:

                      • Under System, select Drivers and Assets and click on the New Driver button.
                      • Select org.eclipse.kura.driver.eddystone as Driver Factory, type a name in to Driver Name and click Apply: a new driver will be instantiated and shown up under the Drivers and Assets tab.
                      • Configure the new driver setting the bluetooth interface name (e.g. hci0).

                    3. From the Drivers and Assets tab, add a new asset bound to the Eddystone\u2122 driver:

                      • Click on the New Asset button and fill the form with the Asset Name and selecting the driver created in step 2. as Driver Name. Click Apply and a new asset will be listed under the Eddystone\u2122 driver.

                      • Click on the new asset and configure it, adding the channels. Each channel represents a type of frame the Driver is interested to. Please note that in the above picture two channels are created: one for the UID type and the second for the URL. In this example only the URL will be used.
                      • Check the listen checkbox for both channels.
                      • Click \"Apply\".

                    4. Click on Wires under System.

                    5. Add a new Asset with the previously added Eddystone asset.

                    6. Add a new Javascript Filter component. The filter will be configured to parse the URL frames coming from the RuuviTag+ and extract the environmental data from the on-board sensors. In the script window write the following code:

                      function toHexString(str) {\n    var hex = '';\n    for ( i = 0; i < str.length; i++ ) {\n        var hexTemp = str.charCodeAt(i).toString(16)\n        hex += (hexTemp.length==2?hexTemp:'0'+hexTemp);\n}\nreturn hex;\n};\n\nfunction decodeValues(rawSensors) {\n    var rawSensorsDecoded = Base64.decode(rawSensors)\n    logger.info(toHexString(rawSensorsDecoded))\n    var sensorsValues = new Array();\n    // Data Format Definition (4)\n    var format = parseInt(rawSensorsDecoded[0].charCodeAt(0));\n    if (format == 4) {\n        sensorsValues.push(format)\n        // Humidity\n        sensorsValues.push(rawSensorsDecoded[1].charCodeAt(0) * 0.5)\n        // Temperature\n        sensorsValues.push(rawSensorsDecoded[2].charCodeAt(0) & 0x7f)\n        // Pressure\n        sensorsValues.push(parseInt(rawSensorsDecoded[4].charCodeAt(0) << 8 )+ parseInt(rawSensorsDecoded[5].charCodeAt(0) & 0xff) + 50000)\n        // Random id of tag\n        sensorsValues.push(rawSensorsDecoded[6].charCodeAt(0))\n    }\n    return sensorsValues;\n};\n\nload(\"https://gist.githubusercontent.com/jarus/948005/raw/524bea3b4e0b74c06c9cfd2a8e54429dda1918fe/base64.js\")\nvar record = input.records[0]\nif (record.URLEddystone != null) {\n    var values = record.URLEddystone.getValue().split(\";\")\n\n    if (values.length == 5 && values[1].split(\"#\").length == 2) {\n        var outRecord = newWireRecord()\n        var sensorsValues = decodeValues(values[1].split(\"#\")[1])\n        if (sensorsValues.length == 5) {\n            outRecord.format = newIntegerValue(sensorsValues[0])\n            outRecord.humidity = newDoubleValue(sensorsValues[1])\n            outRecord.temperature = newDoubleValue(sensorsValues[2])\n            outRecord.pressure = newIntegerValue(sensorsValues[3])\n            outRecord.id = newIntegerValue(sensorsValues[4])\n        }\n        outRecord.txPower = newIntegerValue(parseInt(values[2]))\n        outRecord.rssi = newIntegerValue(parseInt(values[3]))\n        outRecord.distance = newDoubleValue(parseFloat(values[4]))\n\n        output.add(outRecord)\n    }\n}\n

                    7. Add Logger component and set the log.verbosity to VERBOSE.

                    8. Connect the Asset to the Filter and this to the Logger.

                    9. Click on Apply and check on the logs that the environmental data are correctly logged.

                      INFO  o.e.k.w.s.f.p.ScriptFilter - 04541a00c35078\nINFO  o.e.k.i.w.l.Logger - Received WireEnvelope from org.eclipse.kura.wire.ScriptFilter-1537884418687-2\nINFO  o.e.k.i.w.l.Logger - Record List content:\nINFO  o.e.k.i.w.l.Logger -   Record content:\nINFO  o.e.k.i.w.l.Logger -     txPower : -7\nINFO  o.e.k.i.w.l.Logger -     rssi : -55\nINFO  o.e.k.i.w.l.Logger -     distance : 251.18864315095797\nINFO  o.e.k.i.w.l.Logger -     format : 4\nINFO  o.e.k.i.w.l.Logger -     temperature : 26.0\nINFO  o.e.k.i.w.l.Logger -     humidity : 42.0\nINFO  o.e.k.i.w.l.Logger -     pressure : 100000\nINFO  o.e.k.i.w.l.Logger -     id : 120\nINFO  o.e.k.i.w.l.Logger -\nINFO  o.e.k.w.s.f.p.ScriptFilter - 04401a00c35078\nINFO  o.e.k.i.w.l.Logger - Received WireEnvelope from org.eclipse.kura.wire.ScriptFilter-1537884418687-2\nINFO  o.e.k.i.w.l.Logger - Record List content:\nINFO  o.e.k.i.w.l.Logger -   Record content:\nINFO  o.e.k.i.w.l.Logger -     txPower : -7\nINFO  o.e.k.i.w.l.Logger -     rssi : -39\nINFO  o.e.k.i.w.l.Logger -     distance : 39.810717055349734\nINFO  o.e.k.i.w.l.Logger -     format : 4\nINFO  o.e.k.i.w.l.Logger -     temperature : 26.0\nINFO  o.e.k.i.w.l.Logger -     humidity : 32.0\nINFO  o.e.k.i.w.l.Logger -     pressure : 100000\nINFO  o.e.k.i.w.l.Logger -     id : 120\nINFO  o.e.k.i.w.l.Logger -\n
                    "},{"location":"kura-wires/usage-examples/gpio-driver-application/","title":"GPIO Driver Application","text":"

                    In this section a simple but effective example of the GPIO Driver on Wires will be presented. This example will implement a Wire graph that toggles a digital GPIO. A listener will be attached to an input GPIO externally connected to the first one.

                    Setup a Raspberry Pi as shown in GPIO Driver section. Add a cable from the LED contact near the red cable to pin 37 (gpio 26) on the RaspberryPi.

                    "},{"location":"kura-wires/usage-examples/gpio-driver-application/#configure-kura-wires-gpio-driver-application","title":"Configure Kura Wires GPIO Driver Application","text":"

                    1. Install the GPIO Driver from the Eclipse Kura Marketplace.

                    2. On the Kura web interface, instantiate a GPIO Driver:

                      • Under \"System\", select \"Drivers and Assets\" and click on the \"New Driver\" button.
                      • Select \"org.eclipse.kura.driver.gpio\" as \"Driver Factory\", type a name in to \"Driver Name\" and click \"Apply\": a new driver will be instantiated and shown up under the \"Drivers and Assets\" tab.

                    3. From the \"Drivers and Assets\" tab, add a new asset bound to the GPIO driver:

                      • Click on the \"New Asset\" button and fill the form with the \"Asset Name\" and selecting the driver created in step 2. as \"Driver Name\". Click \"Apply\" and a new asset will be listed under the GPIO driver.
                      • Click on the new asset and configure it, adding only one channel called LED as shown in the following picture:

                      • Click \"Apply\".

                    4. As in point 3., create a new asset as shown below:

                      • Click \"Apply\".

                    5. Click on \"Wires\" under \"System\".

                    6. Add a new \"Timer\" component and configure the interval at which the LED will be toggled.

                    7. Add a new \"Script Filter\" (it can be downloaded from the Eclipse Marketplace and configure it with the following script:

                      // create a persistent counter\ncounter = typeof(counter) === 'undefined' ? 0 : counter\ncounter++\n\n// emit the counter value in a different WireRecord\nvar counterRecord = newWireRecord()\ncounterRecord.LED = newBooleanValue(counter%2==0)\noutput.add(counterRecord)\n

                    8. Add the \"Asset\" created at point 3 and connect the \"Timer\" to the \"Filter\" and the latter to the \"Asset\".

                    9. Add the \"Asset\" created at point 4.

                    10. Add \"Logger\" component and set log.verbosity to \"VERBOSE\".

                    11. Connect the latter \"Asset\" to the \"Logger\". The resulting Wire Graph should be as below:

                    12. Click on \"Apply\". After a while, the led on the breadboard should start to blink at a rate defined by the \"Timer\" as shown below:

                      Moreover, the kura.log file should show a long sequencce of messages reporting that the value from the input gpio is changed:

                      2018-04-09 13:08:42,990 [Thread-3289] INFO  o.e.k.i.w.l.Logger - Received WireEnvelope from org.eclipse.kura.wire.WireAsset-1523276074484-23\n2018-04-09 13:08:42,991 [Thread-3289] INFO  o.e.k.i.w.l.Logger - Record List content: \n2018-04-09 13:08:42,992 [Thread-3289] INFO  o.e.k.i.w.l.Logger -   Record content: \n2018-04-09 13:08:42,993 [Thread-3289] INFO  o.e.k.i.w.l.Logger -     LED_Feedback : false\n2018-04-09 13:08:42,993 [Thread-3289] INFO  o.e.k.i.w.l.Logger -     assetName : GPIOAssetFeedback\n2018-04-09 13:08:42,994 [Thread-3289] INFO  o.e.k.i.w.l.Logger -     LED_Feedback_timestamp : 1523279322990\n2018-04-09 13:08:42,994 [Thread-3289] INFO  o.e.k.i.w.l.Logger - \n2018-04-09 13:08:44,988 [Thread-3291] INFO  o.e.k.i.w.l.Logger - Received WireEnvelope from org.eclipse.kura.wire.WireAsset-1523276074484-23\n2018-04-09 13:08:44,989 [Thread-3291] INFO  o.e.k.i.w.l.Logger - Record List content: \n2018-04-09 13:08:44,989 [Thread-3291] INFO  o.e.k.i.w.l.Logger -   Record content: \n2018-04-09 13:08:44,989 [Thread-3291] INFO  o.e.k.i.w.l.Logger -     LED_Feedback : true\n2018-04-09 13:08:44,989 [Thread-3291] INFO  o.e.k.i.w.l.Logger -     assetName : GPIOAssetFeedback\n2018-04-09 13:08:44,989 [Thread-3291] INFO  o.e.k.i.w.l.Logger -     LED_Feedback_timestamp : 1523279324988\n
                    "},{"location":"kura-wires/usage-examples/ibeacon-driver-application/","title":"iBeacon\u2122 Driver Application","text":"

                    As presented in the iBeacon\u2122 Driver, Kura provides a specific driver that can be used to listen for iBeacons packets.

                    This tutorial will explain how to configure a Wire graph that get iBeacon\u2122 data and show them to a logger.

                    "},{"location":"kura-wires/usage-examples/ibeacon-driver-application/#configure-the-wires-ibeacontm-application","title":"Configure the Wires iBeacon\u2122 Application","text":"

                    1. Install the iBeacon driver from the Eclipse Kura Marketplace.

                    2. On the Web Interface, instantiate the iBeacon Driver:

                      • Under \"System\", select \"Drivers and Assets\" and click on the \"New Driver\" button.
                      • Select \"org.eclipse.kura.driver.ibeacon\" as \"Driver Factory\", type a name in to \"Driver Name\" and click \"Apply\": a new driver will be instantiated and shown up under the \"Drivers and Assets\" tab.
                      • Configure the new driver setting the bluetooth interface name (e.g. hci0).

                    3. From the \"Drivers and Assets\" tab, add a new asset binded to the iBeacon driver:

                      • Click on the \"New Asset\" button and fill the form with the \"Asset Name\" and selecting the driver created in step 2. as \"Driver Name\". Click \"Apply\" and a new asset will be listed under the iBeacon driver.

                      • Click on the new asset and configure it, adding a single channel that represents a listener for iBeacon\u2122 advertising packets. Check the listen checkbox for the channel.

                      • Click \"Apply\".

                    4. Click on \"Wires\" under \"System\".

                    5. Add a new \"Asset\" with the previously added iBeacon asset.

                    6. Add a new \"Javascript Filter\" component. The filter will be configured to parse the iBeacon packets and extract relevant data from it. In the script window write the following code:

                      var record = input.records[0]\nif (record.ibeacon != null) {\n    var values = record.ibeacon.getValue().split(\";\")\n\n    if (values.length == 6) {\n        var outRecord = newWireRecord()\n        outRecord.uuid = newStringValue(values[0])  \n        outRecord.txPower = newIntegerValue(parseInt(values[1]))\n        outRecord.rssi = newIntegerValue(parseInt(values[2]))\n        outRecord.major = newIntegerValue(parseInt(values[3]))\n        outRecord.minor = newIntegerValue(parseInt(values[4]))\n        outRecord.distance = newDoubleValue(parseFloat(values[5]))\n\n        output.add(outRecord)\n    }\n}\n

                    7. Add \"Logger\" component and set the log.verbosity to VERBOSE

                    8. Connect the \"Asset\" to the \"Filter\" and this to the \"Logger\".

                    9. Click on \"Apply\".

                      Using this graph, every iBeacon packet will be detected and reported to the log, as shown below. To simulate an iBeacon device, it is possible to use another gateway with the iBeacon advertiser example.

                      INFO  o.e.k.i.w.l.Logger - Received WireEnvelope from org.eclipse.kura.wire.WireAsset-1537886139797-15\nINFO  o.e.k.i.w.l.Logger - Record List content:\nINFO  o.e.k.i.w.l.Logger -   Record content:\nINFO  o.e.k.i.w.l.Logger -     assetName : iBeaconAsset\nINFO  o.e.k.i.w.l.Logger -     iBeacon : aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee;0;-38;0;0;79.43282347242814\nINFO  o.e.k.i.w.l.Logger -     iBeacon_timestamp : 1537886424085\nINFO  o.e.k.i.w.l.Logger -\nINFO  o.e.k.i.w.l.Logger - Received WireEnvelope from org.eclipse.kura.wire.WireAsset-1537886139797-15\nINFO  o.e.k.i.w.l.Logger - Record List content:\nINFO  o.e.k.i.w.l.Logger -   Record content:\nINFO  o.e.k.i.w.l.Logger -     assetName : iBeaconAsset\nINFO  o.e.k.i.w.l.Logger -     iBeacon : aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee;0;-42;0;0;125.89254117941674\nINFO  o.e.k.i.w.l.Logger -     iBeacon_timestamp : 1537886425086\nINFO  o.e.k.i.w.l.Logger -\n
                    "},{"location":"kura-wires/usage-examples/opcua-application/","title":"OPC-UA Application","text":"

                    This tutorial will describe how to collect data from an OPC-UA device and publish them on a cloud platform using Wires. The OPC-UA server device will be emulated using a bundle running on Kura.

                    "},{"location":"kura-wires/usage-examples/opcua-application/#configure-opc-ua-server-simulator","title":"Configure OPC-UA server simulator","text":"
                    1. Download the OPC-UA server simulator bundle and install it on Kura. It will create a simulated OPC-UA server that exposes some sensors (light, temperature and water sensor) and some actuators (buzzer, led and fan).
                    2. On the Kura web interface, select OPCUA Server demo in Services and set server.port to 1234. Click the Apply button. This will start an OPC-UA server on port 1234.
                    "},{"location":"kura-wires/usage-examples/opcua-application/#configure-wires-opc-ua-application","title":"Configure Wires OPC-UA application","text":"
                    1. Install the OPC-UA driver from Eclipse Kura Marketplace.
                    2. Use the local Kura Administrative Web Interface to create a new OPC-UA driver instance:
                      • Select Drivers and Assets, click the New Driver button
                      • Select org.eclipse.kura.driver.opcua, type in a name, and click Apply: a new service will show up under Services.
                    3. Configure the new service as follows:
                      • endpoint.ip: localhost
                      • endpoint.port: 1234
                      • server.name: leave blank
                    4. Click on Wires under System
                    5. Add a new Timer component and configure the interval at which the OPC-UA server will be sampled
                    6. Add a new Asset with the previously added OPC-UA driver
                    7. Configure the new OPC-UA asset, adding new Channels as shown in the following image.
                    8. Add a new Publisher component and configure the chosen cloud platform stack in cloud.service.pid option
                    9. Add a Logger component
                    10. Connect the Timer to the Asset, and the Asset to the Publisher and Logger as shown in the image below.
                    11. Click on Apply and check the logs and the cloud platform in order to verify that the data is correctly published.
                    "},{"location":"kura-wires/usage-examples/ti-sensortag-application/","title":"TI SensorTag Application","text":"

                    As presented in the Ti SensorTag Driver, Kura provides a specific driver that can be used to interact with Texas Instruments SensorTag devices.

                    This tutorial will explain how to configure a Wire graph that connects with a SensorTag, reads sensor values and publishes data to a cloud platform.

                    Warning

                    The SensorTag driver can be used only with TI SensorTags with firmware version >1.20. If your device has an older firmware, please update it.

                    "},{"location":"kura-wires/usage-examples/ti-sensortag-application/#configure-the-ti-sensortag-application","title":"Configure the TI SensorTag Application","text":"

                    1. Install the TI SensorTag driver from the Eclipse Kura Marketplace

                    2. On the Kura Administrative Web Interface, instantiate a SensorTag Driver:

                      • Under System, select Drivers and Assets and click on the New Driver button.
                      • Select org.eclipse.kura.driver.ble.sensortag as Driver Factory, type a name in Driver Name and click the Apply button: a new driver will be instantiated and listed in the page.
                      • Select the newly created Driver instance and configure the Bluetooth interface name (i.e. hci0).

                    3. In the Drivers and Assets tab add a new asset and associate it to the SensorTag driver:

                    4. Click on the New Asset button and fill the form with the Asset Name, selecting the driver created at point 2. Click Apply and a new asset will be listed.
                    5. Click on the new asset and configure it, adding the channels. Each channel represents a single sensor on the SensorTag and it can be chosen from the sensor.name menu. Fill the sensortag.address with the DB address of the SensorTag you want to connect to. The value.type should be set to double, but also the other choices are possible.

                    6. Click Apply.

                    7. Apply the following configuration for the Asset instance:

                    8. Create a Wire Graph as in the following picture.

                      Please note that the driver supports also unsolicited inputs, setting up a notification for the given channel. In this case, it is sufficient to check the listen option for the chosen channel. The Timer is not needed because the SensorTag will automatically emit the values every notification.period milliseconds.

                    "},{"location":"quality-assurance/intro/","title":"Introduction","text":""},{"location":"quality-assurance/intro/#eclipsetm-kura-qa","title":"Eclipse\u2122 Kura QA","text":"

                    Kura QA activities focused on two main areas:

                    • unit and integration tests that are executed each time the project builds and
                    • manual tests, most of which are executed in the weeks before releases.

                    More on the unit and integration tests can be read in unit testing. More about manual system testing can be read in system testing.

                    "},{"location":"quality-assurance/system-testing/","title":"System Testing","text":""},{"location":"quality-assurance/system-testing/#qa-procedure","title":"QA Procedure","text":"

                    A set of automated and manual test are performed before releasing a new Eclipse\u2122 Kura version to ensure software follows our quality standards.

                    Once a Release Candidate (RC) is tagged on its maintenance branch the QA process starts. The QA process involves a set of automated and manual tests performed on the target environment listed below. These tests are updated continuosly to follow the large amount of features added in each release. The QA process continues with new Release Candidate builds until the amount of defects in the software is reduced. When this happens the RC is promoted to final release and tagged on the maintenance branch.

                    "},{"location":"quality-assurance/system-testing/#environment","title":"Environment","text":""},{"location":"quality-assurance/system-testing/#hardware","title":"Hardware","text":"
                    • Raspberry Pi 3/4
                    • Intel Up2
                    • Nvidia Jetson Nano
                    • Docker
                    "},{"location":"quality-assurance/system-testing/#os","title":"OS","text":"
                    • Raspberry Pi OS
                    • Ubuntu 20.04
                    • Ubuntu 18.04
                    • CentOS 7
                    "},{"location":"quality-assurance/system-testing/#java","title":"Java","text":"
                    • Eclipse Adoptium Temurin\u2122 JDK 1.8
                    "},{"location":"quality-assurance/unit-testing/","title":"Unit Testing","text":""},{"location":"quality-assurance/unit-testing/#build-time-testing","title":"Build-time testing","text":"

                    Build-time testing is further divided into unit testing and integration testing.

                    Unit testing is focused on testing separate methods or groups of methods, preferably in a single class. This way it can verify the correct operation of difficult-to-reach corner cases.

                    Integration testing is a more-high-level testing that tests certain functionality on a group of connected services in an approximation of the real environment. It verifies that the services can successfully register in the environment and connect to other services as well as perform their tasks.

                    Code coverage of the develop branch can be observed in Jenkins.

                    For some tips on running the tests also check Kura GitHub Wiki.

                    "},{"location":"quality-assurance/unit-testing/#unit-testing_1","title":"Unit Testing","text":"

                    Unit tests should try to cover as many corner cases in the code as possible. Add them for (all) the new code you decide to contribute.

                    "},{"location":"quality-assurance/unit-testing/#test-location","title":"Test Location","text":"

                    Kura discourages to introduce test-only dependencies on the implementation level, so all tests are located in their own projects under test/. The proper folder to put the tests in is src/test/java.

                    "},{"location":"quality-assurance/unit-testing/#code-conventions","title":"Code Conventions","text":"
                    • Preferably use <package name>.test as the name of the test project. Add it as a module in test/pom.xml that also serves as maven artifact's parent.
                    • Only add src/main/java to build.properties' source...
                    • Make the bundle a fragment of the class-under-test's bundle so that you gain access to its internal packages.
                    • Use the same package for the test as the class under test. Subpackages are OK.
                    • Use the same coding style as Kura. Try to incorporate the suggestions SonarLint may have for your tests.
                    "},{"location":"quality-assurance/unit-testing/#running-the-tests","title":"Running the Tests","text":"

                    The basic flow is to build your implementation using maven and then also build and run the unit tests using mvn clean test (or some other phase e.g. install, which also runs integration tests).

                    Advanced test running and running them in IDE is described in Kura GitHub Wiki.

                    "},{"location":"quality-assurance/unit-testing/#integration-testing","title":"Integration Testing","text":"

                    These test proper behavior in the OSGi environment. Some additional configuration is therefore necessary.

                    "},{"location":"quality-assurance/unit-testing/#test-location_1","title":"Test Location","text":"

                    We don't want to mess with the implementation code here, either, so all tests are again located in the test projects under test/. It can be the same project as for unit tests. The proper folder to put the tests in is src/main/java.

                    "},{"location":"quality-assurance/unit-testing/#code-conventions_1","title":"Code Conventions","text":"
                    • Preferably use <package name>.test as the name of the test project. Add it as a module in test/pom.xml that also serves as maven artifact's parent.
                    • Only add src/main/java to build.properties' source...
                    • Make the bundle a fragment of the class-under-test's bundle so that you gain access to its internal packages.
                    • Use the <package name>.test as the package to put the test in. Also add .test suffix to any subpackages that are also under test.
                    • Use the same coding style as Kura. Try to incorporate the suggestions SonarLint may have for your tests.
                    "},{"location":"quality-assurance/unit-testing/#running-the-tests_1","title":"Running the Tests","text":"

                    The basic flow is to build your implementation using maven and then also build and run the integration tests using mvn clean install.

                    Advanced test running and running them in IDE is described in Kura GitHub Wiki.

                    "},{"location":"references/javadoc/","title":"Javadoc","text":"
                    • Kura API Documentation.
                    • Java Communications API (javax.comm).
                    • Java USB (javax.usb).
                    • Java HIDAPI Javadoc.
                    • OpenJDK Device I/O API Documentation.
                    • CANBus API Documentation.
                    "},{"location":"references/mqtt-namespace/","title":"MQTT Namespace","text":"

                    This section provides guidelines on how to structure the MQTT topic namespace for messaging interactions with applications running on IoT gateway devices.

                    Interactions may be solicited by a remote server to the gateway using a request/response messaging model, or unsolicited when the gateway simply reports messages or events to a remote server based on periodic or event-driven patterns.

                    The table below defines some basic terms used in this document:

                    Term Description account_name Identifies a group of devices and users. It can be seen as partition of the MQTT topic namespace. For example, access control lists can be defined so that users are only given access to the child topics of a given account_name. client_id Identifies a single gateway device within an account (typically the MAC address of a gateway\u2019s primary network interface). The client_id maps to the Client Identifier (Client ID) as defined in the MQTT specifications. app_id Unique string identifier for application (e.g., \u201cCONF-V1\u201d, \u201cCONF-V2\u201d, etc.). resource_id Identifies a resource(s) that is owned and managed by a particular application. Management of resources (e.g., sensors, actuators, local files, or configuration options) includes listing them, reading the latest value, or updating them to a new value. A resource_id may be a hierarchical topic, where, for example, \u201csensors/temp\u201d may identify a temperature sensor and \u201csensor/hum\u201d a humidity sensor.

                    A gateway, as identified by a specific client_id and belonging to a particular account_name, may have one or more applications running on it (e.g., \u201capp_id1\u201d, \u201capp_id2\u201d, etc.). Each application can manage one or more resources identified by a distinct resource_id(s).

                    Based on this criterion, an IoT application running on an IoT gateway may be viewed in terms of the resources it owns and manages as well as the unsolicited events it reports.

                    "},{"location":"references/mqtt-namespace/#mqtt-requestresponse-conversations","title":"MQTT Request/Response Conversations","text":"

                    Solicited interactions require a request/response message pattern to be established over MQTT. To initiate a solicited conversation, a remote server first sends a request message to a given application running on a specific device and then waits for a response.

                    To ensure the delivery of request messages, applications that support request/response conversations via MQTT should subscribe to the following topic on startup:

                    $EDC/account_name/client_id/app_id/#\n

                    The $EDC prefix is used to mark topics that are used as control topics for remote management. This prefix distinguishes control topics from data topics that are used in unsolicited reports and marks the associated messages as transient (not to be stored in the historical data archive, if present).

                    Note

                    While Kura currently requires \u201c$EDC\u201d as the prefix for control topics, this prefix may change in the future for the following reasons:

                    • MQTT 3.1.1 discourages the use of topic starting with \u201c$\u201d for application purposes.

                    • As a binding of LWM2M over MQTT is taking shape, it would make sense to use a topic prefix for management messages like \u201cLWM2M\u201d or similar abbreviations (e.g. \"LW2\u201d, \u201cLWM\u201d).

                    A requester (i.e., the remote server) initiates a request/response conversation through the following events:

                    1. Generating a conversation identifier known as a request.id (e.g., by concatenating a random number to a timestamp)

                    2. Subscribing to the topic where the response message will be published, where requester.client.id is the client ID of the requester, such as:

                      $EDC/account_name/requester.client.id/app_id/REPLY/request.id\n

                    3. Sending the request message to the appropriate application-specific topic with the following fields in the payload:

                      • request.id (identifier used to match a response with a request)
                      • requester.client.id (client ID of the requester)

                    The application receives the request, processes it, and responds on a REPLY topic structured as:

                    $EDC/account_name/requester.client.id/app_id/REPLY/request.id\n

                    Note

                    While this recommendation does not mandate the format of the message payload, which is application-specific, it is important that the request.id and requester.client.id fields are included in the payload. Kura leverages an MQTT payload encoded through Google Protocol Buffers. Kura includes the request.id and the requester.client.id as two named metrics of the Request messages. The Kura payload definition can be found here.

                    Once the response for a given request is received, the requester unsubscribes from the REPLY topic.

                    "},{"location":"references/mqtt-namespace/#mqtt-requestresponse-example","title":"MQTT Request/Response Example","text":"

                    The following sample request/response conversation shows the device configuration being provided for an application:

                    account_name: guest\ndevice client_id: F0:D2:F1:C4:53:DB\napp_id: CONF-V1\nRemote Service Requester client_id: 00:E0:C7:01:02:03\n

                    The remote server publishes a request message similar to the following:

                    • Request Topic:

                      • $EDC/guest/F0:D2:F1:C4:53:DB/CONF-V1/GET/configurations

                    • Request Payload:

                      • request.id: 1363603920892-8078887174204257595
                      • requester.client.id: 00:E0:C7:01:02:03

                    The gateway device replies with a response message similar to the following:

                    • Response Topic:

                      • $EDC/guest/00:E0:C7:01:02:03/CONF-V1/REPLY/1363603920892-8078887174204257595

                    • Response Payload, where the following properties are mandatory:

                      • response.code Possible response code values include:
                        • 200 (RESPONSE_CODE_OK)
                        • 400 (RESPONSE_CODE_BAD_REQUEST)
                        • 404 (RESPONSE_CODE_NOTFOUND)
                        • 500 (RESPONSE_CODE_ERROR)
                        • response.exception.message (value is null or an exception message) response.exception.message (value is null or an exception stack trace)

                    Note

                    In addition to the mandatory properties, the response payload may also have custom properties whose description is beyond the scope of this document.

                    It is recommended that the requester server employs a timeout to control the length of time that it waits for a response from the gateway device. If a response is not received within the timeout interval, the server can expect that either the device or the application is offline.

                    "},{"location":"references/mqtt-namespace/#mqtt-remote-resource-management","title":"MQTT Remote Resource Management","text":"

                    A remote server interacts with the application\u2019s resources through read, create and update, delete, and execute operations. These operations are based on the previously described request/response conversations.

                    "},{"location":"references/mqtt-namespace/#read-resources","title":"Read Resources","text":"

                    An MQTT message published on the following topic is a read request for the resource identified by the resource_id:

                    $EDC/account_name/client_id/app_id/GET/resource_id\n

                    The receiving application responds with a REPLY message containing the latest value of the requested resource.

                    The resource_id is application specific and may be a hierarchical topic. It is recommended to design resource identifiers following the best practices established for REST API.

                    For example, if an application is managing a set of sensors, a read request issued to the topic \"$EDC/account_name/client_id/app_id/GET/sensors\" will reply with the latest values for all sensors.

                    Similarly, a read request issued to the topic \"$EDC/account_name/client_id/app_id/GET/sensors/temp\" will reply with the latest value for only a temperature sensor that is being managed by the application.

                    "},{"location":"references/mqtt-namespace/#create-or-update-resources","title":"Create or Update Resources","text":"

                    An MQTT message published on the following topic is a create or update request for the resource identified by the resource_id:

                    $EDC/account_name/client_id/app_id/PUT/resource_id\n

                    The receiving application creates the specified resource (or updates it if it already exists) with the value supplied in the message payload and responds with a REPLY message.

                    As in the read operations, the resource_id is application specific and may be a hierarchical topic. It is recommended to design resource identifiers following the best practices established for REST API. For example, to set the value for an actuator, a message can be published to the topic \"$EDC/account_name/client_id/app_id/PUT/actuator/1\" with the new value suplliied in the message payload.

                    "},{"location":"references/mqtt-namespace/#delete-resources","title":"Delete Resources","text":"

                    An MQTT message published on the following topic is a delete request for the resource identified by the resource_id:

                    $EDC/account_name/client_id/app_id/DEL/resource_id\n

                    The receiving application deletes the specified resource, if it exists, and responds with a REPLY message.

                    "},{"location":"references/mqtt-namespace/#execute-resources","title":"Execute Resources","text":"

                    An MQTT message published on the following topic is an execute request for the resource identified by the resource_id:

                    $EDC/account_name/client_id/app_id/EXEC/resource_id\n

                    The receiving application executes the specified resource, if it exists, and responds with a REPLY message. The semantics of the execute operation is application specific.

                    "},{"location":"references/mqtt-namespace/#other-operations","title":"Other Operations","text":"

                    The IoT application may respond to certain commands, such as taking a snapshot of its configuration or executing an OS-level command. The following topic namespace is recommended for command operations:

                    $EDC/account_name/client_id/app_id/EXEC/command_name\n

                    An MQTT message published with this topic triggers the execution of the associated command. The EXEC message may contain properties in the MQTT payload that can be used to parameterize the command execution.

                    "},{"location":"references/mqtt-namespace/#mqtt-unsolicited-events","title":"MQTT Unsolicited Events","text":"

                    IoT applications have the ability to send unsolicited messages to a remote server using events to periodically report data readings from their resources, or to report special events and observed conditions.

                    Tip

                    It is recommended to not use MQTT control topics for unsolicited events, and subsequently, to avoid the $EDC topic prefix.

                    Event MQTT topics generally follow the pattern shown below to report unsolicited data observations for a given resource:

                    account_name/client_id/app_id/resource_id\n
                    "},{"location":"references/mqtt-namespace/#discoverability","title":"Discoverability","text":"

                    The MQTT namespace guidelines in this document do not address remote discoverability of a given device\u2019s applications and its resources. The described interaction pattern can be easily adopted to define an application whose only responsibility is reporting the device profile in terms of installed applications and available resources.

                    "},{"location":"references/mqtt-namespace/#remote-osgi-management-via-mqtt","title":"Remote OSGi Management via MQTT","text":"

                    The concepts previously described have been applied to develop a solution that allows for the remote management of certain aspects of an OSGi container through the MQTT protocol, including:

                    • Remote deployment of application bundles

                    • Remote start and stop of services

                    • Remote read and update of service configurations

                    The following sections describe the MQTT topic namespaces and the application payloads used to achieve the remote management of an OSGi container via MQTT.

                    Note

                    For the scope of this document, some aspects concerning the encoding and compressing of the payload are not included.

                    The applicability of the remote management solution, as inspired by the OSGi component model, can be extended beyond OSGi as the contract with the managing server based on MQTT topics and XML payloads.

                    "},{"location":"references/mqtt-namespace/#remote-osgi-configurationadmin-interactions-via-mqtt","title":"Remote OSGi ConfigurationAdmin Interactions via MQTT","text":"

                    An application bundle is installed in the gateway to allow for remote management of the configuration properties of the services running in the OSGi container.

                    For information about the OSGi Configuration Admin Service and the OSGi Meta Type Service, please refer to the OSGi Service Platform Service R7 Specifications.

                    The app_id for the remote configuration service of an MQTT application is \u201cCONF-V1\u201d. The resources it manages are the configuration properties of the OSGi services. Service configurations are represented in XML format.

                    The following service configuration XML message is an example of a watchdog service:

                    <?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>\n<ns2:configuration xmlns:ns2=<http://eurotech.com/esf/2.0\n  xmlns=<http://www.osgi.org/xmlns/metatype/v1.2.0>\n  pid=\"org.eclipse.kura.watchdog.WatchdogService\">\n\n  <OCD id=\"org.eclipse.kura.watchdog.WatchdogService\"\n    name=\"WatchdogService\"\n    description=\"WatchdogService Configuration\">\n\n    <Icon resource=\"WatchdogService\"/>\n\n    <AD id=\"watchdog.timeout\"\n      name=\"watchdog.timeout\"\n      required=\"true\"\n      default=\"10000\"\n      cardinality=\"0\"\n      type=\"Integer\"\n      description=\"\"/>\n  </OCD>\n\n  <ns2:properties>\n    <ns2:property type=\"Integer\" array=\"false\" name=\"watchdog.timeout\">\n      <ns2:value>10000</ns2:value>\n    </ns2:property>\n  </ns2:properties>\n</ns2:configuration>\n

                    The service configuration XML message is comprised of the following parts:

                    • The Object Class Definition (OCD), which describes the service attributes that may be configured. (The syntax of the OCD element is described in the OSGi Service Platform Service R7 Specifications)

                    • The properties element, which contains one or more properties with their associated type and values. The type name must match the name provided in the corresponding attribute definition identifier (AD id) contained in the OCD.

                    The \u201cCONF-V1\u201d application supports the read and update resource operations as described in the following sections.

                    "},{"location":"references/mqtt-namespace/#read-all-configurations","title":"Read All Configurations","text":"

                    This operation provides all service configurations for which remote administration is supported.

                    • Request Topic:

                      • $EDC/account_name/client_id/CONF-V1/GET/configurations

                    • Request Payload:

                      • Nothing application-specific beyond the request ID and requester client ID

                    • Response Payload:

                      • Configurations of all the registered services serialized in XML format
                    "},{"location":"references/mqtt-namespace/#read-configuration-for-a-given-service","title":"Read Configuration for a Given Service","text":"

                    This operation provides configurations for a specific service that is identified by an OSGi service persistent identifier pid.

                    • Request Topic:

                      • $EDC/account_name/client_id/CONF-V1/GET/configurations/pid

                    • Request Payload:

                      • Nothing application-specific beyond the request ID and requester client ID

                    • Response Payload:

                      • Configurations of the registered service identified by a pid serialized in XML format
                    "},{"location":"references/mqtt-namespace/#update-all-configurations","title":"Update All Configurations","text":"

                    This operation remotely updates the configuration of a set of services.

                    • Request Topic:

                      • $EDC/account_name/client_id/CONF-V1/PUT/configurations

                    • Request Payload:

                      • Service configurations serialized in XML format

                    • Response Payload:

                      • Nothing application-specific beyond the response code
                    "},{"location":"references/mqtt-namespace/#update-the-configuration-of-a-given-service","title":"Update the Configuration of a Given Service","text":"

                    This operation remotely updates the configuration of the service identified by a pid.

                    • Request Topic:

                      • $EDC/account_name/client_id/CONF-V1/PUT/configurations/pid

                    • Request Payload:

                      • Service configurations serialized in XML format

                    • Response Payload:

                      • Nothing application-specific
                    "},{"location":"references/mqtt-namespace/#example-management-web-application","title":"Example Management Web Application","text":"

                    The previously described read and update resource operations can be leveraged to develop a web application that allows for remote OSGi service configuration updates via MQTT though a web user-interface.

                    The screen capture that follows shows an example administration application where, for a given IoT gateway, a list of all configurable services is presented to the administrator.

                    When one such service is selected, a form is dynamically generated based on the metadata provided in the service OCD. This form includes logic to handle different attribute types, validate acceptable value ranges, and render optional values as drop-downs. When the form is submitted, the new values are communicated to the device through an MQTT resource update message.

                    "},{"location":"references/mqtt-namespace/#remote-osgi-deploymentadmin-interactions-via-mqtt","title":"Remote OSGi DeploymentAdmin Interactions via MQTT","text":"

                    An application is installed in the gateway to allow for the remote management of the deployment packages installed in the OSGi container.

                    For information about the OSGi Deployment Admin Service, please refer to the OSGi Service Platform Service Compendium 4.3 Specifications.

                    The app_id for the remote deployment service of an MQTT application is \u201cDEPLOY-V2\u201d. It allows to perform the following operations:

                    • Download, install and uninstall OSGi Deployment Packages
                    • Download and execute system updates based on shell scripts
                    • Get the list of bundles currently in the runtime
                    • Start and stop bundles
                    "},{"location":"references/mqtt-namespace/#deploy-v2","title":"DEPLOY-V2","text":""},{"location":"references/mqtt-namespace/#download-and-install-messages","title":"Download and Install Messages","text":"

                    The download request allows to download and optionally install a software package. The installation procedure will be performed after the download completes if the dp.install metric is set to true. If the metric is set to false, the installation step will not be performed.

                    The package type must be specified using the dp.install.system.update request metric, the supported types are the following:

                    • OSGi Deployment Package: An OSGi deployment package. Selected with dp.install.system.update = false.
                    • Executable Shell Script: A shell script that applies a system level update. Selected with dp.install.system.update = true.

                    The device will report the download progress and result of the installation to the cloud platform by sending asynchronous download notification messages and install notification messages.

                    The completion notification logic differs depending on the package type.

                    • OSGi Deployment Package: The completion notification will be sent immediately after that the Deployment Package is installed on the system.

                    • Executable Shell Script: The completion notification will not be sent immediately after that the shell script is executed, but is determined by the execution of an additional verifier script. The verifier script will be executed at next framework startup. A install notification message will be sent afterwards, with dp.install.status = COMPLETED if the exit status is 0 or dp.install.status = FAILED otherwise. This is based on the assumption that a system level update will typically require a device restart.

                    The verifier script can be provided in the following ways:

                    • By specifying a download URL as the value of the dp.install.verifier.uri request metric. In this case the framework will download the verifier script from the provided URL.

                    • By installing it during the execution of the main shell script. In this case the file must be placed in the /opt/eclipse/kura/data/persistance/verification directory. The installed verifier file name must have the ${name}-${version}.sh_verifier.sh structure where ${name} and ${version} must be replaced with the values of the dp.name and dp.version request metrics.

                    Warning

                    As said above, in case of Executable Shell Script, the completion notification will not be sent if the verifier script is not provided and/or the framework is not restarted.

                    Request:

                    • Request Topic:

                      • $EDC/[account_name]/[client_id]/DEPLOY-V2/EXEC/download

                    • Payload:

                      • metrics:
                        • dp.job.id (Long). Mandatory. Represents a unique Job ID for the download.
                        • dp.uri (String). Mandatory. Represents the URI of the deployment package.
                        • dp.name (String). Mandatory. The value of the header DeploymentPackage-SymbolicName in the DP MANIFEST.
                        • dp.version (String). Mandatory. The value of the header DeploymentPackage-Version in the DP MANIFEST. The file will be saved in the temporary directory as -.jar possibly overwriting an existing file.
                        • dp.download.protocol (String) Mandatory. Specifies the protocol to be used to download the bundles/shell scripts. Must be set to HTTP or HTTPS.
                        • dp.download.block.size (Integer). Optional (if not specified by the cloud platform, it is estimated by the device, depending on the total file size. In this case it is fixed at 1% of the total file size). The size in kBi of the blocks used to download the DP.
                        • dp.download.block.delay (Integer). Optional (default: 0). Delay in ms between block transfers.
                        • dp.download.notify.block.size (Integer). Optional (if not specified by the cloud platform, it is estimated by the device, depending on the total file size. In this case it is fixed at 5% of the total file size). The size in kBi between the notification messages sent to the cloud platform.
                        • dp.download.timeout (Integer). Optional (default: 60000). The timeout in seconds for each block that has to be downloaded.
                        • dp.download.resume (Bool). Optional (default: true). Resume download transfer if supported by the server.
                        • dp.download.force (Bool). Optional (default: true). Specifies if the download forces to download again the file, if already exists on target device.
                        • dp.download.username (String). Optional. Username for password protected download. No authentication will be tried if username is not present.
                        • dp.download.password (String). Optional. Password for password protected download. No authentication will be tried if password is not present
                        • dp.download.hash (String). Optional. The algorithm and value of the hash of the file used to verify the integrity of the download. The format is of this property is: {algorithm}:{hash value}
                        • dp.install (Bool). Optional (default: true). Whether the package should be immediately installed after being downloaded.
                        • dp.install.system.update (Bool). Optional (default: false). Sets whether or not this is a system update, rather than a bundle/package update.
                        • dp.install.verifier.uri (String). Optional. The verifier script URI to run after the installation of the system update.
                        • dp.reboot (Bool). Optional (default: false). Whether the system should be rebooted as part of the package installation process. This property is ignored if dp.install.system.update is true. In such case the reboot must be implemented as part of the script.
                        • dp.reboot.delay (Integer). Optional (default: 0 - immediately). Delay after which the device will be rebooted. Only meaningful if\u00a0dp.reboot is true and dp.install.system.update is false.

                          • Response:

                          The client will reply immediately with an appropriate response.code. If the platform retries the request but the download is in progress, the client will reply that the request is already in progress with a 500 error code. If the DP has already been downloaded, the client will reply that the request has been accepted. If the dp.download.force flag is set to true, the client will start the download from the beginning, if false the device will proceed with the installation.

                          Payload: no application-specific metrics or body.

                          Request:

                          • Request Topic:
                            • $EDC/[account_name]/[client_id]/DEPLOY-V2/GET/download
                          • Payload: no application-specific metrics or body.

                          Response:

                          • Payload:
                            • metrics:
                              • dp.http.transfer.size (Integer). The size in kBi of the DP being downloaded
                              • dp.http.transfer.progress (Integer). The estimated progress of the download in percentage (0-100%). Do not rely on this indicator to detect the download completion.
                              • dp.http.transfer.status (String). An enum specifying the download status (IN_PROGRESS, COMPLETED, FAILED...).
                              • job.id (Long) Optional. The ID of the job to notify status

                          Request:

                          • Request Topic:
                            • $EDC/[account_name]/[client_id]/DEPLOY-V2/DEL/download
                          • Payload: no application-specific metrics or body.

                          Response:

                          • Response Payload:
                            • Nothing application-specific beyond the response code. Unsolicited messages will report the status of the cancel operation.
                          "},{"location":"references/mqtt-namespace/#unsolicited-messages-for-download-progress","title":"Unsolicited messages for download progress","text":"

                          The client will start downloading the DP and will compute the size of the transfer from the HTTP header. This size will be used to estimate the download progress using the request parameter dp.download.block.size. Next, the client will report the download progress to the platform by publishing, with QoS==2, one or more unsolicited messages. If HTTP header is not available, the device will report 50% as dp.download.progress for all the download processes. The value of requester.client.id is one of the last downloads or install request received.

                          Download Notification:

                          • $EDC/account_name/requester.client.id/DEPLOY-V2/NOTIFY/client-id/download
                          • Payload:
                            • metrics:
                              • job.id (Long). The ID of the job to notify status
                              • dp.download.size (Integer). The size in kBi of the DP being downloaded
                              • dp.download.progress (Integer). The estimated progress of the download in percentage (0-100%). Do not rely on this indicator to detect the download completion.
                              • dp.download.status (String). An enum specifying the download status (IN_PROGRESS, COMPLETED, FAILED, CANCELLED...).
                              • dp.download.error.message (String). In case of FAILED status, this metric will contain information about the error.
                              • dp.download.index (Integer). The index of the file that is currently downloaded. This is supposed to support multiple file downloads.
                          "},{"location":"references/mqtt-namespace/#install-messages","title":"Install Messages","text":"

                          Request:

                          • Request Topic:
                            • $EDC/[account_name]/[client_id]/DEPLOY-V2/EXEC/install
                          • Payload:
                            • metrics:
                              • dp.name (String). Mandatory. The value of the header DeploymentPackage-SymbolicName in the DP MANIFEST.
                              • dp.version (String). Mandatory. The value of the header DeploymentPackage-Version in the DP MANIFEST. The basename of the DP file will to install is derived as -.jar. The file is assumed to reside in the temporary directory.
                              • dp.install.system.update (Bool). Mandatory. Specifies if the specified resource is a system update or not. It can be applied to the system immediately or after a system reboot.
                              • dp.install.verifier.uri (String). Optional. The verifier script URI to run after the installation of the system update.
                              • dp.reboot (Bool). Optional (default: false). Whether the system should be rebooted as part of the package installation process. There might be DPs requiring a post-installation (from the standpoint of the OSGi Deployment Admin) step requiring a system reboot. Note that the post-install phase is not handled by the Deployment Admin. The installation in this case is complete (and can fail) after the reboot. This property is ignored if dp.install.system.update is true. In such case the reboot must be implemented as part of the script.
                              • dp.reboot.delay (Integer). Optional (default: 0 - immediately). Delay after which the device will be rebooted. Only meaningful if\u00a0dp.reboot is true and dp.install.system.update is false.

                                • Note

                                This operation can be retried. Anyway, if it fails once it's likely to fail again.

                                Response:

                                • Payload: Nothing application-specific beyond the response code. Unsolicited messages will report the status of the install operation.

                                Request:

                                • Request Topic:
                                  • $EDC/[account_name]/[client_id]/DEPLOY-V2/GET/install
                                • Payload: no application-specific metrics or body.

                                Response:

                                • Payload:
                                  • metrics:
                                    • dp.install.status (String). An enum specifying the install status
                                      • IDLE
                                      • INSTALLING BUNDLE
                                    • dp.name (String). Optional. If installing: the value of the header DeploymentPackage-SymbolicName in the DP MANIFEST.
                                    • dp.version (String). Optional. If installing: the value of the header DeploymentPackage-Version in the DP MANIFEST.
                                "},{"location":"references/mqtt-namespace/#unsolicited-messages-for-install-progress","title":"Unsolicited messages for install progress","text":"

                                If the value of dp.install in the original download request is true the client will start installing the DP. Due to the limitations of the OSGi DeploymentAdmin, it's not possible to have feedback on the install progress. However, these operations should normally complete in a few seconds, even for an upgrade. Otherwise (dp.install==false), the platform can request the installation of an already downloaded package through the following message:

                                Install notification:

                                • $EDC/account_name/requester.client.id/DEPLOY-V2/NOTIFY/client-id/install
                                • Payload:
                                  • metrics:
                                    • job.id (Long). The ID of the job to notify status
                                    • dp.name (String). The name of the package that is installing.
                                    • dp.install.progress (Integer). The estimated progress of the install in percentage (0-100%). Due to limitations of the OSGi DeploymentAdmin, it's not possible to have a linear progress. It will go from 0% to 100% in one step. Do not rely on this indicator to detect the download completion.
                                    • dp.install.status (String). An enum specifying the install status (IN_PROGRESS, COMPLETED, FAILED...).
                                    • dp.install.error.message (String) Optional. In case of FAILED status, this metric will contain information about the error.
                                "},{"location":"references/mqtt-namespace/#uninstall-messages","title":"Uninstall Messages","text":"

                                Request:

                                • Request Topic:
                                  • $EDC/[account_name]/[client_id]/DEPLOY-V2/EXEC/uninstall
                                • Payload:
                                  • metrics:
                                    • dp.name (String). Mandatory. The value of the header DeploymentPackage-SymbolicName in the DP MANIFEST.
                                    • job.id (Long) Mandatory. The ID of the job to notify status
                                    • dp.version (String). Mandatory. The value of the header DeploymentPackage-Version in the DP MANIFEST. The basename of the DP file will to install is derived as -.jar. The file is assumed to reside in the temporary directory.
                                    • dp.reboot (Bool). Optional (default: false). Whether the system should be rebooted as part of the package uninstall process.
                                    • dp.reboot.delay (Integer). Optional (default: 0 - immediately). Delay after which the device will be rebooted. Only meaningful if dp.reboot==true.

                                      • Response: The client will reply immediately with an appropriate response.code. If the platform retries the request but the uninstall operation is in progress, the client will reply that the request is already in progress with a 500 error code. At the end of the uninstall operation, an unsolicited message is sent to the cloud platform to report the operation status. If a reboot was requested in the received uninstall request, it will be executed with the specified delay.

                                      "},{"location":"references/mqtt-namespace/#unsolicited-messages-for-uninstall-progress","title":"Unsolicited messages for uninstall progress","text":"

                                      Uninstall notification:

                                      • $EDC/account_name/requester.client.id/DEPLOY-V2/NOTIFY/client-id/uninstall
                                      • Payload:
                                        • metrics:
                                          • job.id (Long). The ID of the job to notify status
                                          • dp.name (String). The name of the package that is uninstalling.
                                          • dp.uninstall.progress (Integer). The estimated progress of the install in percentage (0-100%). Due to limitations of the OSGi DeploymentAdmin, it's not possible to have a linear progress. It will go from 0% to 100% in one step. Do not rely on this indicator to detect the download completion.
                                          • dp.uninstall.status (String). An enum specifying the uninstall status (IN_PROGRESS, COMPLETED, FAILED...).
                                          • dp.uninstall.error.message (String) Optional. In case of FAILED status, this metric will contain information about the error.
                                      "},{"location":"references/mqtt-namespace/#read-all-bundles","title":"Read All Bundles","text":"

                                      This operation provides all the bundles installed in the OSGi framework.

                                      • Request Topic:
                                        • $EDC/account_name/client_id/DEPLOY-V2/GET/bundles
                                      • Request Payload:
                                        • Nothing application-specific beyond the request ID and requester client ID
                                      • Response Payload:
                                        • Installed bundles serialized in XML format

                                      The following XML message is an example of a bundle:

                                      <?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>\n<bundles>\n    <bundle>\n        <name>org.eclipse.osgi</name>\n        <version>3.8.1.v20120830-144521</version>\n        <id>0</id>\n        <state>ACTIVE</state>\n    </bundle>\n    <bundle>\n        <name>org.eclipse.equinox.cm</name>\n        <version>1.0.400.v20120522-1841</version>\n        <id>1</id>\n        <state>ACTIVE</state>\n    </bundle>\n</bundles>\n

                                      The bundle XML message is comprised of the following bundle elements:

                                      • Symbolic name
                                      • Version
                                      • ID
                                      • State
                                      "},{"location":"references/mqtt-namespace/#start-a-bundle","title":"Start a Bundle","text":"

                                      This operation starts a bundle identified by its ID.

                                      • Request Topic:
                                        • $EDC/account_name/client_id/DEPLOY-V2/EXEC/start/bundle_id
                                      • Request Payload:
                                        • Nothing application-specific beyond the request ID and requester client ID
                                      • Response Payload:
                                        • Nothing application-specific beyond the response code
                                      "},{"location":"references/mqtt-namespace/#stop-a-bundle","title":"Stop a Bundle","text":"

                                      This operation stops a bundle identified by its ID.

                                      • Request Topic:
                                        • $EDC/account_name/client_id/DEPLOY-V2/EXEC/stop/bundle_id
                                      • Request Payload:
                                        • Nothing application-specific beyond the request ID and requester client ID
                                      • Response Payload:
                                        • Nothing application-specific beyond the response code
                                      "},{"location":"references/mqtt-namespace/#example-management-web-application_1","title":"Example Management Web Application","text":"

                                      The previously described read, start/stop, and install/uninstall resources can be used to implement a remote management application. An example of such application is Eclipse Kapua. In particular it is possible to use the download and install resources from the following sections in Eclipse Kapua console:

                                      • Devices section:

                                      Selecting the Devices section, a target device, and then clicking on the Install button in the Packages tab will allow to send download and install requests.

                                      • Batch Jobs section

                                      It is possible to create a batch job with the Package Download / Install definition to perform a download / install request on a set of target devices.

                                      "},{"location":"references/mqtt-namespace/#remote-gateway-inventory-via-mqtt","title":"Remote Gateway Inventory via MQTT","text":"

                                      An application is installed in the gateway to allow for the remote query of the resources installed in the OSGi container and the underlying OS.

                                      The app_id for the remote inventory service of an MQTT application is \u201cINVENTORY-V1\u201d. The service allows retrieving all the different resources available/installed on the gateway. The service supports the following resources:

                                      • BUNDLES : represents a OSGi Bundle
                                      • DP : represents a OSGi Deployment Package
                                      • DEB : represents a Linux Debian package
                                      • RPM : represents a Linux RPM package
                                      • APK : represents a Linux Alpine APK package
                                      • DOCKER : represents a container
                                      • CONTAINER IMAGE : represents a container image

                                      The resources are represented in JSON format. The following message is an example of a service deployment:

                                      {\n    \"inventory\":[\n        {\n            \"name\":\"adduser\",\n            \"version\":\"3.118\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"io.netty.transport-native-unix-common\",\n            \"version\":\"4.1.34.Final\",\n            \"type\":\"BUNDLE\"\n        },\n    ]\n}\n

                                      The inventory JSON message is comprised of the following package elements:

                                      • Name

                                      • Version

                                      • Type

                                      The \u201cINVENTORY-V1\u201d application supports only the read resource operations as described in the following sections.

                                      "},{"location":"references/mqtt-namespace/#inventory-bundles","title":"Inventory Bundles","text":""},{"location":"references/mqtt-namespace/#read-all-bundles_1","title":"Read All Bundles","text":"

                                      This operation provides all the bundles installed in the OSGi framework.

                                      • Request Topic:

                                        • $EDC/account_name/client_id/INVENTORY-V1/GET/bundles

                                      • Request Payload:

                                        • Nothing application-specific beyond the request ID and requester client ID

                                      • Response Payload:

                                        • Installed bundles serialized in JSON format

                                      The following JSON message is an example of a bundle:

                                      {\n    \"bundles\":[\n        {\n            \"name\":\"org.eclipse.osgi\",\n            \"version\":\"3.16.0.v20200828-0759\",\n            \"id\":0,\n            \"state\":\"ACTIVE\",\n            \"signed\":true\n        },\n        {\n            \"name\":\"org.eclipse.equinox.cm\",\n            \"version\":\"1.4.400.v20200422-1833\",\n            \"id\":1,\n            \"state\":\"ACTIVE\",\n            \"signed\":false\n        }\n    ]\n}\n

                                      The bundle JSON message is comprised of the following bundle elements:

                                      • Symbolic name

                                      • Version

                                      • ID

                                      • State

                                      • Signed

                                      "},{"location":"references/mqtt-namespace/#start-bundle","title":"Start Bundle","text":"

                                      This operation allows to start a bundles installed in the OSGi framework.

                                      • Request Topic:

                                        • $EDC/account_name/client_id/INVENTORY-V1/EXEC/bundles/_start

                                      • Request Payload:

                                        • A JSON object that identifies the target bundle must be specified in payload body.

                                      • Response Payload:

                                        • Nothing application specific
                                      "},{"location":"references/mqtt-namespace/#stop-bundle","title":"Stop Bundle","text":"

                                      • Request Topic:

                                        • $EDC/account_name/client_id/INVENTORY-V1/EXEC/bundles/_stop

                                      • Request Payload:

                                        • A JSON object that identifies the target bundle must be specified in payload body.

                                      • Response Payload:

                                        • Nothing application specific
                                      "},{"location":"references/mqtt-namespace/#json-identifier-for-start-and-stop-requests","title":"JSON identifier for start and stop requests","text":"

                                      The requests for starting and stopping a bundle require the application to include a JSON object in request payload for selecting the target bundle, the defined properties are the following:

                                      • name: The symbolic name of the bundle to be started/stopped. This parameter must be of string type and it is mandatory.
                                      • version: The version of the bundle to be stopped. This parameter must be of string type and it is optional.

                                      If multiple bundles match the selection criteria, only one of them will be stopped/started, which one is not defined.

                                      Examples:

                                      {\n    \"name\":\"org.eclipse.kura.example.beacon\"\n}\n
                                      {\n    \"name\":\"org.eclipse.kura.example.beacon\",\n    \"version\":\"1.0.500\"\n}\n
                                      "},{"location":"references/mqtt-namespace/#inventory-deployment-packages","title":"Inventory Deployment Packages","text":""},{"location":"references/mqtt-namespace/#read-all-deployment-packages","title":"Read All Deployment Packages","text":"

                                      This operation provides the deployment packages installed in the OSGi framework.

                                      • Request Topic:

                                        • $EDC/account_name/client_id/INVENTORY-V1/GET/packages

                                      • Request Payload:

                                        • Nothing application-specific beyond the request ID and requester client ID

                                      • Response Payload:

                                        • Installed deployment packages serialized in JSON format

                                      The following JSON message is an example of a bundle:

                                      {\n    \"deploymentPackages\":[\n        {\n            \"name\":\"org.eclipse.kura.example.beacon\",\n            \"version\":\"1.0.500\",\n            \"signed\":false,\n            \"bundles\":[\n                {\n                    \"name\":\"org.eclipse.kura.example.beacon\",\n                    \"version\":\"1.0.500\",\n                    \"id\": 171,\n                    \"state\": \"ACTIVE\",\n                    \"signed\": false\n                }\n            ]\n        }\n    ]\n}\n

                                      The deployment package JSON message is comprised of the following package elements:

                                      • Symbolic name

                                      • Version

                                      • Signature: true if all the bundles in the deployment package are signed

                                      • Bundles that are managed by the deployment package along with their symbolic name and version

                                      "},{"location":"references/mqtt-namespace/#inventory-system-packages-debrpmapk","title":"Inventory System Packages (DEB/RPM/APK)","text":""},{"location":"references/mqtt-namespace/#read-all-system-packages","title":"Read All System Packages","text":"

                                      This operation provides the Linux packages installed in OS.

                                      • Request Topic:

                                        • $EDC/account_name/client_id/INVENTORY-V1/GET/systemPackages

                                      • Request Payload:

                                        • Nothing application-specific beyond the request ID and requester client ID

                                      • Response Payload:

                                        • Installed Linux Packages serialized in JSON format

                                      The following JSON message is an example of a bundle:

                                      {\n    \"systemPackages\":[\n        {\n            \"name\":\"adduser\",\n            \"version\":\"3.118\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"alsa-utils\",\n            \"version\":\"1.1.8-2\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"ansible\",\n            \"version\":\"2.7.7+dfsg-1\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apparmor\",\n            \"version\":\"2.13.2-10\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt\",\n            \"version\":\"1.8.2.1\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt-listchanges\",\n            \"version\":\"3.19\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt-transport-https\",\n            \"version\":\"1.8.2.2\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt-utils\",\n            \"version\":\"1.8.2.1\",\n            \"type\":\"DEB\"\n        }\n    ]\n}\n

                                      The bundle JSON message is comprised of the following bundle elements:

                                      • Name

                                      • Version

                                      • Type

                                      "},{"location":"references/mqtt-namespace/#inventory-containers","title":"Inventory Containers","text":""},{"location":"references/mqtt-namespace/#list-all-containers","title":"List All Containers","text":"

                                      Using the API exposed by Inventory-V1, the user can manage containers via external applications such as Eclipse Kapua. This operation lists all the containers installed in the gateway.

                                      • Request Topic:
                                        • $EDC/account_name/client_id/INVENTORY-V1/GET/containers
                                      • Request Payload:
                                        • Nothing application-specific beyond the request ID and requester client ID
                                      • Response Payload:
                                        • Installed containers serialized in JSON format

                                      The following JSON message is an example of what this request outputs:

                                      {\n  \"containers\":\n  [\n    {\n      \"name\":\"container_1\",\n      \"version\":\"nginx:latest\",\n      \"type\":\"DOCKER\",\n      \"state\":\"active\"\n    }\n  ]\n}\n

                                      The container JSON message is comprised of the following elements:

                                      • Name: The name of the docker container.

                                      • Version: describes both the container's respective image and tag separated by a colon.

                                      • Type: denotes the type of inventory payload

                                      • State: describes the container's current state

                                        • active: Container is running
                                        • installed: Container is starting
                                        • uninstalled: Container has failed, or is stopped
                                        • unknown: Container state can not be determined
                                      "},{"location":"references/mqtt-namespace/#start-a-container","title":"Start a Container","text":"

                                      This operation allows starting a container installed on the gateway. * Request Topic * $EDC/account_name/client_id/INVENTORY-V1/EXEC/containers/_start * Request Payload * A JSON object that identifies the target container must be specified in the payload body. This payload will be described in the following section * Response Payload * Nothing application-specific

                                      "},{"location":"references/mqtt-namespace/#stop-a-container","title":"Stop a Container","text":"
                                      • Request Topic
                                        • $EDC/account_name/client_id/INVENTORY-V1/EXEC/containers/_stop
                                      • Request Payload
                                        • A JSON object that identifies the target container must be specified in the payload body. This payload will be described in the following section.
                                      • Response Payload
                                        • Nothing application-specific
                                      "},{"location":"references/mqtt-namespace/#json-identifierpayload-for-container-start-and-stop-requests","title":"JSON identifier/payload for container start and stop requests","text":"

                                      The requests for starting and stopping a container require the application to include a JSON object in the request payload for selecting the target container. Docker enforces unique container names on a gateway, and thus they can reliably be used as an identifier.

                                      Examples:

                                      {\n    \"name\":\"container_1\",\n    \"version\":\"nginx:latest\",\n    \"type\":\"DOCKER\",\n    \"state\":\"active\"\n}\n
                                      {\n    \"name\":\"container_1\",\n}\n
                                      "},{"location":"references/mqtt-namespace/#inventory-container-images","title":"Inventory Container Images","text":""},{"location":"references/mqtt-namespace/#list-all-images","title":"List All Images","text":"

                                      Using the API exposed by Inventory-V1, the user can manage container images via external applications such as Eclipse Kapua. This operation lists all the images in the gateway.

                                      • Request Topic:
                                        • $EDC/account_name/client_id/INVENTORY-V1/GET/images
                                      • Request Payload:
                                        • Nothing application-specific beyond the request ID and requester client ID
                                      • Response Payload:
                                        • Installed containers serialized in JSON format

                                      The following JSON message is an example of what this request outputs:

                                      {\n  \"images\":\n  [\n    {\n        \"name\":\"nginx\",\n        \"version\":\"latest\",\n        \"type\":\"CONTAINER_IMAGE\"\n    }\n  ]\n}\n

                                      The container JSON message is comprised of the following elements:

                                      • Name: The name of the container image.

                                      • Version: describes the container image's version.

                                      • Type: denotes the type of inventory payload

                                      "},{"location":"references/mqtt-namespace/#delete-a-container-image","title":"Delete a Container Image","text":"

                                      This operation allows deleting a container image not in use on the gateway. * Request Topic * $EDC/account_name/client_id/INVENTORY-V1/EXEC/images/_delete * Request Payload * A JSON object that identifies the target image must be specified in the payload body. This payload will be described in the following section * Response Payload * Nothing application-specific

                                      "},{"location":"references/mqtt-namespace/#json-identifierpayload-for-container-image-delete-requests","title":"JSON identifier/payload for container image delete requests","text":"

                                      The requests for deleting a container image require the application to include a JSON object in the request payload for selecting the target. The JSON requires both name and version fields to be populated.

                                      Examples:

                                      {\n    \"name\":\"nginx\",\n    \"version\":\"latest\",\n    \"type\":\"CONTAINER_IMAGE\"\n}\n
                                      {\n    \"name\":\"nginx\",\n    \"version\":\"latest\",\n}\n
                                      "},{"location":"references/mqtt-namespace/#inventory-summary","title":"Inventory Summary","text":""},{"location":"references/mqtt-namespace/#read-all-resources","title":"Read All Resources","text":"

                                      This operation provides a list of all the resources installed on the gateway

                                      • Request Topic:

                                        • $EDC/account_name/client_id/INVENTORY-V1/GET/inventory

                                      • Request Payload:

                                        • Nothing application-specific beyond the request ID and requester client ID

                                      • Response Payload:

                                        • Installed Linux Packages serialized in JSON format

                                      The following JSON message is an example of a bundle:

                                      {\n    \"inventory\":[\n        {\n            \"name\":\"adduser\",\n            \"version\":\"3.118\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"com.eclipsesource.jaxrs.provider.gson\",\n            \"version\":\"2.3.0.201602281253\",\n            \"type\":\"BUNDLE\"\n        },\n              {\n            \"name\":\"org.eclipse.kura.example.beacon\",\n            \"version\":\"1.0.500\",\n            \"type\":\"DP\"\n        }\n    ]\n}\n

                                      The bundle JSON message is comprised of the following bundle elements:

                                      • Name

                                      • Version

                                      • Type

                                      "},{"location":"references/mqtt-namespace/#remote-certificates-and-keys-management-via-mqtt-keys-v1-and-keys-v2","title":"Remote Certificates and Keys management via MQTT (KEYS-V1 and KEYS-V2)","text":""},{"location":"references/mqtt-namespace/#keys-v1","title":"KEYS-V1","text":"

                                      The KEYS-V1 app-id is exposed by the org.eclipse.kura.core.keystore bundle. This request handler allows the remote management platform to get a list of all the KeystoreService instances and corresponding keys managed by the framework in a given device.

                                      The request handler allows, also, to install new trusted certificate and to generate new key pairs directly in the device. Finally, the remote platform can request, from a defined key pair, the generation of a CSR that can be countersigned remotely by a trusted CA.

                                      "},{"location":"references/mqtt-namespace/#read-all-the-kestoreservices","title":"Read All the KestoreServices","text":"

                                      This operation returns the list of all the KeystoreServices instantiated in the framework.

                                      • Request Topic:

                                        • $EDC/account_name/client_id/KEYS-V1/GET/keystores

                                      • Request Payload:

                                        • Nothing application-specific beyond the request ID and requester client ID

                                      • Response Payload:

                                        • List of all the managed KeystoreService instances with number of entries stored

                                      The following JSON message is an example of an output provided:

                                      [\n    {\n        \"id\": \"org.eclipse.kura.core.keystore.SSLKeystore\",\n        \"type\": \"jks\",\n        \"size\": 4\n    },\n    {\n        \"id\": \"org.eclipse.kura.crypto.CryptoService\",\n        \"type\": \"jks\",\n        \"size\": 3\n    },\n    {\n        \"id\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n        \"type\": \"jks\",\n        \"size\": 1\n    },\n    {\n        \"id\": \"org.eclipse.kura.core.keystore.DMKeystore\",\n        \"type\": \"jks\",\n        \"size\": 1\n    }\n]\n
                                      Each entry of the array is specified by the following values:

                                      • id: the KeystoreService PID
                                      • type: the type of keystore managed by the given instance
                                      • size: the number of entries in a given KeystoreService instance
                                      "},{"location":"references/mqtt-namespace/#read-key-entries","title":"Read Key Entries","text":"

                                      This operation returns the list of all the key entries managed by the framework. If a request payload is specified, the list of entries is filtered based on the parameters in the request

                                      • Request Topic:

                                        • $EDC/account_name/client_id/KEYS-V1/GET/keystores/entries

                                      • Request Payload:

                                        • Nothing application-specific beyond the request ID and requester client ID. In this case the response will contain all the entries in all the managed keystoreService instances.
                                        • A JSON object with one of the following:
                                        {\n    \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.SSLKeystore\"\n}\n
                                        {\n\"alias\": \"ca-godaddyclass2ca\"\n}\n

                                      • Response Payload:

                                        • List of all the key entries managed by the framework eventually filtered based on the parameters in the request.

                                      The following JSON message is an example of an output provided in the response body:

                                      [\n    {\n        \"subjectDN\": \"OU=Go Daddy Class 2 Certification Authority, O=\\\"The Go Daddy Group, Inc.\\\", C=US\",\n        \"issuer\": \"OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\\\\, Inc.,C=US\",\n        \"startDate\": \"Tue, 29 Jun 2004 17:06:20 GMT\",\n        \"expirationDate\": \"Thu, 29 Jun 2034 17:06:20 GMT\",\n        \"algorithm\": \"SHA1withRSA\",\n        \"size\": 2048,\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.SSLKeystore\",\n        \"alias\": \"ca-godaddyclass2ca\",\n        \"type\": \"TRUSTED_CERTIFICATE\"\n    },\n    {\n        \"algorithm\": \"RSA\",\n        \"size\": 4096,\n        \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n        \"alias\": \"localhost\",\n        \"type\": \"PRIVATE_KEY\"\n    }\n]\n
                                      "},{"location":"references/mqtt-namespace/#read-key-details","title":"Read Key Details","text":"

                                      This operation returns the details associated to a specified key in a keystore

                                      • Request Topic:

                                        • $EDC/account_name/client_id/KEYS-V1/GET/keystores/entries/entry

                                      • Request Payload:

                                        • A JSON with the keystoreServicePid and the alias of the desired key 

                                      {\n  \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\"\n  \"alias\": \"localhost\"\n}\n
                                      * Response Payload: * List of all the details associated to a key managed by the framework

                                      The following JSON message is an example of an output provided:

                                      {\n    \"algorithm\": \"RSA\",\n    \"size\": 4096,\n    \"certificateChain\": [\n        \"-----BEGIN CERTIFICATE-----\\nMIIFkTCCA3mgAwIBAgIECtXoiDANBgkqhkiG9w0BAQsFADBZMQswCQYDVQQGEwJJ\\nVDELMAkGA1UECBMCVUQxDjAMBgNVBAcTBUFtYXJvMREwDwYDVQQKEwhFdXJvdGVj\\naDEMMAoGA1UECxMDRVNGMQwwCgYDVQQDEwNFU0YwHhcNMjEwNDIyMTUxNTU1WhcN\\nMjQwMTE3MTUxNTU1WjBZMQswCQYDVQQGEwJJVDELMAkGA1UECBMCVUQxDjAMBgNV\\nBAcTBUFtYXJvMREwDwYDVQQKEwhFdXJvdGVjaDEMMAoGA1UECxMDRVNGMQwwCgYD\\nVQQDEwNFU0YwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC7iZ3fHUQa\\nTPgnvSxGZK4f6MZYfLclD74yqaCCWAztNxPQoiBoSPGdsBGBLNeFbwY0Yzg3qwXw\\nYvgzLJmoXV9rSix7LgXPzsSYfUGfu7PeYTy5bG9X2UVyw9LloUM5DKnw++5F7Xy7\\nF0KQQi0z6/HbbPkZ2aGyNRtMCTh1iAGy3gDh/mMnjpUYuoq1luoX1x6I77X0C+NP\\nTxldVYrTeQiswItAHZmkK1R8AYedbFBgjDuTrfRODxBwESn4kQSMLJ8yHYDRm8S6\\ngVz5LdkcM48UiV5hhF+bCD3UvYA00ZgZm2oOG1ONchYrE7pJr7eQVCYaXkS1lALB\\nKaVJzn03wiLJJv1FYLmGt5J/MwfqyCtBTLlieEVfwnxFCkymtews6SYK32e9q/uJ\\nfcdpWH7tOoarnAf7j5mE84rRU3HqzghK0bMxntfrSH3t18ZUt1/4Qx78WfiM1Te3\\nJtnWBqUNJtX6lgT8IxTWwyEqD183tyKIo8hPGyeJrzWA5RL5hYF5rCNTWzqz5Upi\\n0b/YI5K09+Rn8XmEzzaWjFq5zu6/WpqwPRA8kc2RAEA2scnOT+3yl9Lof/M7BrfL\\nMdjVOZ4MfXgl/fhFyd16AObXuZRUIeiWowKtEiNaiUn8paLDxG+LNV7p5wEQCZZI\\n+MsXMMp6G8Te4yILLCcGov7OkO2wx4GPWQIDAQABo2EwXzAxBgNVHSUEKjAoBggr\\nBgEFBQcDAQYIKwYBBQUHAwIGCCsGAQUFBwMDBggrBgEFBQcDCDALBgNVHQ8EBAMC\\nAvwwHQYDVR0OBBYEFKM5PlHoe8qFC6w0quGacazGWE/LMA0GCSqGSIb3DQEBCwUA\\nA4ICAQBvpXmbS9LN8n0A+uq+tM3CNtF3YotWRbQHIGJAFTvdq3003W3CVdmykFc8\\n9Kz8PoY1swBJms7GKjQLkqgTHoq6jU/cIXw+CoLQWmvAugva5C1u/5AHJZqTC06J\\nGZyn1Z9N5Lp0XcgogEyhxdbkHniv7jvcmbCurQijZc9nsd5St7e1pT0Co7KKI6Ff\\nODdVP6kZYBzKo4t20tATdAZJ8t7YHNKNq7ZVs1ej9oYUmmQieNXuE4UoHe5hzVQw\\n567cNHWcTHJoyPve03TSQV91wp5rRUKZm2p0WtFNuv22f5p5sQmttsJltzHCgTwE\\nK0j6qYKnXiq+EQs0A3uF9uiIB/KEDLjxscstqsQGFCFOmjA3GSbmJiKCnss3HkNn\\naknT7XCV6tqgDOfPnNzbWJODjYZ+V0DyNY5uqkG2cyREm/qGbH1kLEXhqdWbKqEs\\nsdW6x8p0ImTaPuRl3XEmXbolavIq+FTtOSz8vW1PsdD3quO6krrwiQMXKv1ZMjup\\nDGIZZ4hUUhN84efjlZyoFRvPRvZ8YvjjrHXLij0vcRxndlicevwl5ezlm0LBOpsT\\nkI2uWrbSbxlue/XdgwFCbN0+mXX88fGj6cjhpvd/xnwHaDHfSG9UoU149LJb6ZIZ\\nru+07QriQQxK8V7AdPr6bhmKPxbbFenvSQmsmgjAY93qtanbNg==\\n-----END CERTIFICATE-----\"\n    ],\n    \"keystoreServicePid\": \"org.eclipse.kura.core.keystore.HttpsKeystore\",\n    \"alias\": \"localhost\",\n    \"type\": \"PRIVATE_KEY\"\n}\n
                                      "},{"location":"references/mqtt-namespace/#create-csr","title":"Create CSR","text":"

                                      This operation returns the CSR for a specific key pair managed by the framework

                                      • Request Topic:

                                        • $EDC/account_name/client_id/KEYS-V1/POST/keystores/entries/csr

                                      • Request Payload:

                                        • A JSON with the all the details necessary to generate the CSR 
                                        { \n    \"keystoreServicePid\":\"org.eclipse.kura.core.keystore.HttpsKeystore\",\n    \"alias\":\"localhost\",\n    \"signatureAlgorithm\" : \"SHA256withRSA\",\n    \"attributes\" : \"CN=Kura, OU=IoT, O=Eclipse, C=US\"\n}\n

                                      • Response Payload:

                                        • The generated CSR in the body of the message
                                        -----BEGIN CERTIFICATE REQUEST-----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\nZ0Vd1nM=\n-----END CERTIFICATE REQUEST-----\n
                                      "},{"location":"references/mqtt-namespace/#store-trusted-certificate","title":"Store Trusted Certificate","text":"

                                      This operation stores the provided certificate as a Trusted Certificate Entry managed by the framework

                                      • Request Topic:

                                        • $EDC/account_name/client_id/KEYS-V1/POST/keystores/entries/certificate

                                      • Request Payload:

                                        • A JSON with the all the details necessary to generate create the new entry
                                        {\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"myCertTest99\",\n    \"certificate\":\"-----BEGIN CERTIFICATE-----\n        MIIDdzCCAl+gAwIBAgIEQsO0gDANBgkqhkiG9w0BAQsFADBsMRAwDgYDVQQGEwdV\n        bmtub3duMRAwDgYDVQQIEwdVbmtub3duMRAwDgYDVQQHEwdVbmtub3duMRAwDgYD\n        VQQKEwdVbmtub3duMRAwDgYDVQQLEwdVbmtub3duMRAwDgYDVQQDEwdVbmtub3du\n        MB4XDTIxMDQxNDA4MDIyOFoXDTIxMDcxMzA4MDIyOFowbDEQMA4GA1UEBhMHVW5r\n        bm93bjEQMA4GA1UECBMHVW5rbm93bjEQMA4GA1UEBxMHVW5rbm93bjEQMA4GA1UE\n        ChMHVW5rbm93bjEQMA4GA1UECxMHVW5rbm93bjEQMA4GA1UEAxMHVW5rbm93bjCC\n        ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJSWJDxu8UNC4JGOgK31WCvz\n        NKy2ONH+jTVKnBY7Ckb1hljJY0sKO55aG1HNDfkev2lJTsPIz0nJjNsqBvB1flvf\n        r6XVCxdN0yxvU5g9SpRxE/iiPX0Qt7463OfzyKW97haJrrhF005RHYNcORMY/Phj\n        hFDnZhtAwpbQLzq2UuIZ7okJsx0IgRbjH71ZZuvYCqG7Ct/bp1D7w3tT7gTbIKYH\n        ppQyG9rJDEh9+cr9Hyk8Gz7aAbPT/wMH+/vXDjH2j/M1Tmed0ajuGCJumaTQ4eHs\n        9xW3B3ugycb6e7Osl/4ESRO5RQL1k2GBONv10OrKDoZ5b66xwSJmC/w3BRWQ1cMC\n        AwEAAaMhMB8wHQYDVR0OBBYEFPospETb5HNeD/DmS9mwt+v/AYq/MA0GCSqGSIb3\n        DQEBCwUAA4IBAQBxMe1xQVQKt36A5qVlEZyxI9eb6eQRlYzorOgP2tFaOsvDPpRI\n        CALhPmxgQl/5QvKFfCXKoxWj1Spg4sF6fJp6jhSjLpmChS9lf5fRaWS20/pxIddM\n        10diq3r6HxLKSxCYK7Pf5scOeZquvwfo8Kxye01bvCMFf1s1K3ZEZszk5Oo2MnWU\n        U22YnXfZm1C0h2WMUcou35A7CeVAHPWI0Rvefojv1qYlQScJOkCN5lO6C/1qvRhq\n        nDQdQN/m1HQbpfh2DD6F33nBjkyLQyMRF8uMnspLrLLj8lecSTJZO4fGJOaIXh3O\n        44da9A02FAf5nRRQpwP2x/4IZ5RTRBzrqbqD\n        -----END CERTIFICATE-----\"\n}\n

                                      • Response Payload:

                                        • Nothing
                                      "},{"location":"references/mqtt-namespace/#generate-keypair","title":"Generate KeyPair","text":"

                                      This operation will generate a new key pair directly in the device, based on the parameters received from the request

                                      • Request Topic:

                                        • $EDC/account_name/client_id/KEYS-V1/POST/keystores/entries/keypair

                                      • Request Payload:

                                        • A JSON with the all the details necessary to create the new key pair
                                        {\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"keypair1\",\n    \"algorithm\" : \"RSA\",\n    \"size\": 1024,\n    \"signatureAlgorithm\" : \"SHA256WithRSA\",\n    \"attributes\" : \"CN=Kura, OU=IoT, O=Eclipse, C=US\"\n}\n

                                      • Response Payload:

                                        • Nothing
                                      "},{"location":"references/mqtt-namespace/#delete-entry","title":"Delete Entry","text":"

                                      This operation will delete the specified entry from the framework managed keystores

                                      • Request Topic:

                                        • $EDC/account_name/client_id/KEYS-V1/DEL/keystores/entries

                                      • Request Payload:

                                        • A JSON with the all the details necessary to identify the entry to be deleted
                                        {\n    \"keystoreServicePid\" : \"MyKeystore\",\n    \"alias\" : \"mycerttestec\"\n}\n

                                      • Response Payload:

                                        • Nothing
                                      "},{"location":"references/mqtt-namespace/#keys-v2","title":"KEYS-V2","text":"

                                      Starting from Kura 5.4.0, the KEYS-V2 request handler is also available, it supports all of the request endpoints of KEYS-V1 plus an additional endpoint that allows to upload and modify private key entries:

                                      "},{"location":"references/mqtt-namespace/#uploading-a-private-key-entry","title":"Uploading a Private Key Entry","text":"

                                      • Request Topic:

                                        • $EDC/account_name/client_id/KEYS-V2/POST/keystores/entries/privatekey

                                      • Request Payload:

                                        The request should include the private key in unencrypted PEM format and the certificate chain in PEM format, the first certificate in the certificateChain list must use the public key associated with the private key supplied as the privateKey parameter.

                                        The device will overwrite the entry with the provided alias if it already exists.

                                        {\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"keypair1\",\n    \"privateKey\":\"-----BEGIN RSA PRIVATE KEY-----\\n...\\n-----END RSA PRIVATE KEY-----\",\n    \"certificateChain\":[\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n    ]\n}\n

                                      • Response Payload:

                                        • Nothing
                                      "},{"location":"references/mqtt-namespace/#updating-a-private-key-entry","title":"Updating a Private Key Entry","text":"

                                      • Request Topic:

                                        • $EDC/account_name/client_id/KEYS-V2/POST/keystores/entries/privatekey

                                      • Request Payload:

                                        In order to update the certificate chain associated to a specific private key entry it is possible to use the same format as previous request and omit the privateKey parameter.

                                        In this case the certificate chain of the existing entry will be replaced with the one specified in the request and the existing private key will be retained.

                                        This request can be useful for example to create a CSR on the device, sign it externally and then updating the corresponding entry with the resulting certificate.

                                        {\n    \"keystoreServicePid\":\"MyKeystore\",\n    \"alias\":\"keypair1\",\n    \"certificateChain\":[\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n        \"-----BEGIN CERTIFICATE-----\\n...\\n-----END CERTIFICATE-----\",\n    ]\n}\n

                                      • Response Payload:

                                        • Nothing
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/","title":"Rest CloudConnection v1 API","text":"

                                      Note

                                      This API can also be accessed via the RequestHandler with app-id: CLD-V1.

                                      The CloudConnectionRestService APIs provides methods to manage cloud connection related components like CloudEndpoint, CloudPublisher and CloudSubscriber instances.

                                      Identities with rest.cloudconnection permissions can access these APIs.

                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#get-methods","title":"GET methods","text":""},{"location":"references/rest-apis/rest-cloudconnection-api/#find-cloud-component-instances","title":"Find Cloud Component Instances","text":"
                                      • Description: This method returns all the Cloud Component instances, including CloudEndpoint, CloudPublisher and CloudSubscriber instances.
                                      • Method: GET
                                      • API PATH: services/cloudconnection/v1/instances
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses","title":"Responses","text":"
                                      • 200 Ok Status 
                                        {\n    \"cloudEndpointInstances\": [\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"state\": \"DISCONNECTED\",\n            \"cloudEndpointType\": \"CLOUD_CONNECTION_MANAGER\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService-todelete\",\n            \"state\": \"DISCONNECTED\",\n            \"cloudEndpointType\": \"CLOUD_CONNECTION_MANAGER\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService-2\",\n            \"state\": \"DISCONNECTED\",\n            \"cloudEndpointType\": \"CLOUD_CONNECTION_MANAGER\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService-3\",\n            \"state\": \"DISCONNECTED\",\n            \"cloudEndpointType\": \"CLOUD_CONNECTION_MANAGER\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService-test\",\n            \"state\": \"DISCONNECTED\",\n            \"cloudEndpointType\": \"CLOUD_CONNECTION_MANAGER\"\n        }\n    ],\n    \"pubsubInstances\": [\n        {\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"pid\": \"testPub\",\n            \"factoryPid\": \"org.eclipse.kura.cloud.publisher.CloudPublisher\",\n            \"type\": \"PUBLISHER\"\n        },\n        {\n            \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"pid\": \"testPub\",\n            \"factoryPid\": \"org.eclipse.kura.cloud.publisher.CloudPublisher\",\n            \"type\": \"SUBSCRIBER\"\n        }\n    ]\n}\n

                                      • cloudEndpointType: The possible values are:

                                        • CLOUD_CONNECTION_MANAGER if the component implements CloudConnectionManager

                                        • CLOUD_ENDPOINT otherwise.

                                      If cloudEndpointType is CLOUD_CONNECTION_MANAGER, it is possible to use the cloudEndpoint/connect, cloudEndpoint/disconnect and cloudEndpoint/isConnected methods to manage the connection state.

                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#get-cloudcomponent-factories","title":"Get CloudComponent Factories","text":"
                                      • Description: This method returns all the Factories able to create Component for CloudEndpoint, including CloudConnectionFactory, CloudPublisher, CloudSubscriber
                                      • Method: GET
                                      • API PATH: services/cloudconnection/v1/factories
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_1","title":"Responses","text":"
                                      • 200 Ok Status 
                                        {\n    \"cloudConnectionFactories\": [\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"defaultCloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService-2\",\n            \"cloudEndpointPidRegex\": \"^org.eclipse.kura.cloud.CloudService\\\\-[a-zA-Z0-9]+$\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\",\n            \"defaultCloudEndpointPid\": \"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\",\n            \"cloudEndpointPidRegex\": \"^org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager(\\\\-[a-zA-Z0-9]+)?$\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloudconnection.raw.mqtt.cloud.RawMqttCloudEndpoint\",\n            \"defaultCloudEndpointPid\": \"org.eclipse.kura.cloudconnection.raw.mqtt.CloudEndpoint\",\n            \"cloudEndpointPidRegex\": \"^org.eclipse.kura.cloudconnection.raw.mqtt.CloudEndpoint(\\\\-[a-zA-Z0-9]+)?$\"\n        },\n        {\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.camel.cloud.factory.CamelFactory\",\n            \"defaultCloudEndpointPid\": \"org.eclipse.kura.camel.cloud.factory.CamelFactory\",\n            \"cloudEndpointPidRegex\": \"^org.eclipse.kura.camel.cloud.factory.CamelFactory(\\\\-[a-zA-Z0-9]+)?$\"\n        }\n    ],\n    \"pubSubFactories\": [\n        {\n            \"factoryPid\": \"org.eclipse.kura.cloudconnection.raw.mqtt.subscriber.RawMqttSubscriber\",\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloudconnection.raw.mqtt.cloud.RawMqttCloudEndpoint\"\n        },\n        {\n            \"factoryPid\": \"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher\",\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.ConnectionManager\",\n            \"defaultPid\": \"org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher\",\n            \"defaultPidRegex\": \"^org.eclipse.kura.cloudconnection.eclipseiot.mqtt.CloudPublisher(\\\\-[a-zA-Z0-9]+)?$\"\n        },\n        {\n            \"factoryPid\": \"org.eclipse.kura.cloud.subscriber.CloudSubscriber\",\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\"\n        },\n        {\n            \"factoryPid\": \"org.eclipse.kura.cloud.publisher.CloudPublisher\",\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\"\n        },\n        {\n            \"factoryPid\": \"org.eclipse.kura.cloudconnection.raw.mqtt.publisher.RawMqttPublisher\",\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloudconnection.raw.mqtt.cloud.RawMqttCloudEndpoint\"\n        },\n        {\n            \"factoryPid\": \"org.eclipse.kura.event.publisher.EventPublisher\",\n            \"cloudConnectionFactoryPid\": \"org.eclipse.kura.cloud.CloudService\"\n        }\n    ]\n}\n

                                      For cloudConnectionFactories elements:

                                      • cloudConnectionFactoryPid: the PID of the cloud connection factory
                                      • defaultCloudEndpointPid: If set, it represents the default PID for an instance of a new component suggested by the factory. This can be used by an user interface as a suggestion/placeholder for the name of a new cloud endpoint.
                                      • cloudEndpointPidRegex: If set, its value represents a regular expression that the PID of a new component must match.

                                      For pubSubFactories elements:

                                      • factoryPid: The factory PID of the publisher/subscripter component. It identifies the component type. It can be used for example to create a new component using the pubSub POST method.
                                      • cloudConnectionFactoryPid: Specifies the cloudConnectionFactoryPid of the CloudConnectionFactory associated with this component. Each publisher/subscriber component is only compatible with CloudEndpoint instances created by the factory having this cloudConnectionFactoryPid.
                                      • defaultPid: If set, it represents the default PID for an instance of a new component suggested by the factory. This can be used by an user interface as a suggestion/placeholder for the name of a new publisher/subscriber.

                                      • defaultPidRegex: If set, its value represents a regular expression that the PID of a new component must match.

                                      • 500 Internal Server error

                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#post-methods","title":"POST methods","text":""},{"location":"references/rest-apis/rest-cloudconnection-api/#get-stackcomponents-pids","title":"Get StackComponents Pids","text":"
                                      • Description: This method retrieves all all PIDs of Component instances that make up the stack for a specific CloudEndpoint. Examples of such components can be CloudService, DataService, DataTransportService.
                                      • Method: POST
                                      • API PATH: services/cloudconnection/v1/cloudEndpoint/stackComponentPids
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#request","title":"Request","text":"
                                      {\n    \"cloudConnectionFactoryPid\" : \"org.eclipse.kura.cloud.CloudService\",\n    \"cloudEndpointPid\": \"org.eclipse.kura.cloud.CloudService\"\n}\n
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_2","title":"Responses","text":"
                                      • 200 Ok Status 
                                        {\n    \"pids\": [\n        \"org.eclipse.kura.cloud.CloudService\",\n        \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\",\n        \"org.eclipse.kura.data.DataService\"\n    ]\n}\n
                                      • 404 if cloudConnectionFactoryPid or cloudEndpointPid are not found
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#create-cloud-endpoint","title":"Create Cloud Endpoint","text":"
                                      • Description: This method create a new CloudEndpoint. The CloudConnectionFactory will always create a CloudEndpoint instance with the given cloudEndpointPid and optionally other associated stack components, for example CloudService, DataService, DataTransportService.
                                      • Method: POST
                                      • API PATH: services/cloudconnection/v1/cloudEndpoint
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_1","title":"Request","text":"
                                      {\n    \"cloudConnectionFactoryPid\" : \"org.eclipse.kura.cloud.CloudService\",\n    \"cloudEndpointPid\" : \"org.eclipse.kura.cloud.CloudService-1\"\n}\n
                                      • cloudEndpointPid: The cloudEndpointPid of the new instance that will be created. If the associated factory specifies the cloudEndpointPidRegex property, this parameter must match the provided regex.
                                      • cloudConnectionFactoryPid: The cloudConnectionFactoryPid of the factory that should be used to create the new component.
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_3","title":"Responses","text":"
                                      • 204 Ok Status
                                      • 400 malformed cloudConnectionFactoryPid or cloudEndpointPid.
                                      • 404 Wrong cloudConnectionFactoryPid
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#create-publishersubscriber-instance","title":"Create Publisher/Subscriber instance","text":"
                                      • Description: his method create a new CloudPublisher or a CloudSubscriber instance for a specific CloudEndpoint CloudEndpoint. The type of the instance depends from the type of the specified factory.
                                      • Method: POST
                                      • API PATH: services/cloudconnection/v1/pubSub
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_2","title":"Request","text":"
                                      {\n    \"pid\" : \"testPub\",\n    \"factoryPid\" : \"org.eclipse.kura.cloud.publisher.CloudPublisher\",\n    \"cloudEndpointPid\" : \"org.eclipse.kura.cloud.CloudService\"\n}\n
                                      • pid: The PID of the new publisher/subscriber component. If the publisher/subscriber factory specifies the defaultPidRegex property, this parameter must match the provided regex.
                                      • factoryPid: The factoryPid of the publisher/subscriber factory.
                                      • cloudEndpointPid: The PID of the CloudEndpoint that the new publisher/subscriber component will be associated with. The associated CloudEndpoint must have been created by the CloudConnectionFactory with the cloudConnectionFactoryPid specified by the publisher/subscriber factory.
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_4","title":"Responses","text":"
                                      • 204 Ok Status
                                      • 400 malformed pid, factoryPid or cloudEndpointPid
                                      • 404 If factoryPid or cloudEndpointPid are wrong.
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#get-configurations","title":"Get Configurations","text":"
                                      • Description: This method retrieves the complete configuration, including the metatype description, of a cloud component instance. This method will return the configuration of CloudPublisher instances, CloudSubscriber instances, or the configuration of components that are part of a cloud stack, whose pids are returned by the cloudEndpoint/stackComponentPids method.
                                      • Method: POST
                                      • API PATH: services/cloudconnection/v1/configurations
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_3","title":"Request","text":"
                                      {\n    \"pids\" : [\"testPub\", \"org.eclipse.kura.cloud.CloudService\"]\n}\n
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_5","title":"Responses","text":"

                                      {\n    \"configs\": [\n        {\n            \"pid\": \"testPub\",\n            \"definition\": {\n                \"ad\": [\n                    {\n                        \"name\": \"Application Id\",\n                        \"description\": \"The application id used to publish messages.\",\n                        \"id\": \"appId\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"W1\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Application Topic\",\n                        \"description\": \"Follows the application Id and specifies the rest of the publishing topic. Wildcards can be defined in the topic by specifing a $value in the field. The publisher will try to match \\\"value\\\" with a corresponding property in the received KuraMessage. If possible, the $value placeholder will be substituted with the real value specified in the KuraMessage received from the user application.\",\n                        \"id\": \"app.topic\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"A1/$assetName\",\n                        \"isRequired\": false\n                    },\n                    {\n                        \"option\": [\n                            {\n                                \"label\": \"0\",\n                                \"value\": \"0\"\n                            },\n                            {\n                                \"label\": \"1\",\n                                \"value\": \"1\"\n                            }\n                        ],\n                        \"name\": \"Qos\",\n                        \"description\": \"The desired quality of service for the messages that have to be published. If Qos is 0, the message is delivered at most once, or it is not delivered at all. If Qos is set to 1, the message is always delivered at least once.\",\n                        \"id\": \"qos\",\n                        \"type\": \"INTEGER\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"0\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Retain\",\n                        \"description\": \"Default retaing flag for the published messages.\",\n                        \"id\": \"retain\",\n                        \"type\": \"BOOLEAN\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"false\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"option\": [\n                            {\n                                \"label\": \"Data\",\n                                \"value\": \"data\"\n                            },\n                            {\n                                \"label\": \"Control\",\n                                \"value\": \"control\"\n                            }\n                        ],\n                        \"name\": \"Kind of Message\",\n                        \"description\": \"Type of message to be published.\",\n                        \"id\": \"message.type\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"data\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Priority\",\n                        \"description\": \"Message priority. Priority level 0 (highest) should be used sparingly and reserved for messages that should be sent with the minimum latency. Default is set to 7.\",\n                        \"id\": \"priority\",\n                        \"type\": \"INTEGER\",\n                        \"cardinality\": 0,\n                        \"min\": \"0\",\n                        \"defaultValue\": \"7\",\n                        \"isRequired\": true\n                    }\n                ],\n                \"name\": \"CloudPublisher\",\n                \"description\": \"The CloudPublisher allows to define publishing parameters and provide a simple endpoint where the applications can attach to publish their messages.\",\n                \"id\": \"org.eclipse.kura.cloud.publisher.CloudPublisher\"\n            },\n            \"properties\": {\n                \"app.topic\": {\n                    \"value\": \"A1/$assetName\",\n                    \"type\": \"STRING\"\n                },\n                \"message.type\": {\n                    \"value\": \"data\",\n                    \"type\": \"STRING\"\n                },\n                \"qos\": {\n                    \"value\": 0,\n                    \"type\": \"INTEGER\"\n                },\n                \"appId\": {\n                    \"value\": \"W1\",\n                    \"type\": \"STRING\"\n                },\n                \"retain\": {\n                    \"value\": false,\n                    \"type\": \"BOOLEAN\"\n                },\n                \"priority\": {\n                    \"value\": 7,\n                    \"type\": \"INTEGER\"\n                },\n                \"service.factoryPid\": {\n                    \"value\": \"org.eclipse.kura.cloud.publisher.CloudPublisher\",\n                    \"type\": \"STRING\"\n                },\n                \"cloud.endpoint.service.pid\": {\n                    \"value\": \"org.eclipse.kura.cloud.CloudService\",\n                    \"type\": \"STRING\"\n                },\n                \"kura.service.pid\": {\n                    \"value\": \"testPub\",\n                    \"type\": \"STRING\"\n                },\n                \"service.pid\": {\n                    \"value\": \"org.eclipse.kura.cloud.publisher.CloudPublisher-1699623980455-20\",\n                    \"type\": \"STRING\"\n                }\n            }\n        },\n        {\n            \"pid\": \"org.eclipse.kura.cloud.CloudService\",\n            \"definition\": {\n                \"ad\": [\n                    {\n                        \"option\": [\n                            {\n                                \"label\": \"Set display name as device name\",\n                                \"value\": \"device-name\"\n                            },\n                            {\n                                \"label\": \"Set display name from hostname\",\n                                \"value\": \"hostname\"\n                            },\n                            {\n                                \"label\": \"Custom\",\n                                \"value\": \"custom\"\n                            },\n                            {\n                                \"label\": \"Server defined\",\n                                \"value\": \"server\"\n                            }\n                        ],\n                        \"name\": \"Device Display-Name\",\n                        \"description\": \"Friendly name of the device. Device name is the common name of the device (eg: Reliagate 20-25, Raspberry Pi, etc.). Hostname will use the linux hostname utility.                  Custom allows for defining a unique string. Server defined relies on the remote management server to define a name.\",\n                        \"id\": \"device.display-name\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"device-name\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Device Custom-Name\",\n                        \"description\": \"Custom name for the device. This value is applied ONLY if device.display-name is set to \\\"Custom\\\"\",\n                        \"id\": \"device.custom-name\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"isRequired\": false\n                    },\n                    {\n                        \"name\": \"Topic Control-Prefix\",\n                        \"description\": \"Topic prefix for system and device management messages.\",\n                        \"id\": \"topic.control-prefix\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"$EDC\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Encode gzip\",\n                        \"description\": \"Compress message payloads before sending them to the remote server to reduce the network traffic.\",\n                        \"id\": \"encode.gzip\",\n                        \"type\": \"BOOLEAN\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"true\",\n                        \"isRequired\": false\n                    },\n                    {\n                        \"name\": \"Republish Mqtt Birth Cert On Gps Lock\",\n                        \"description\": \"Whether or not to republish the MQTT Birth Certificate on GPS lock event\",\n                        \"id\": \"republish.mqtt.birth.cert.on.gps.lock\",\n                        \"type\": \"BOOLEAN\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"false\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Republish Mqtt Birth Cert On Modem Detect\",\n                        \"description\": \"Whether or not to republish the MQTT Birth Certificate on modem detection event\",\n                        \"id\": \"republish.mqtt.birth.cert.on.modem.detect\",\n                        \"type\": \"BOOLEAN\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"false\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Republish Mqtt Birth Cert On Tamper Event\",\n                        \"description\": \"Whether or not to republish the MQTT Birth Certificate on a tamper event. This has effect only if a TamperDetectionService is available in the framework.\",\n                        \"id\": \"republish.mqtt.birth.cert.on.tamper.event\",\n                        \"type\": \"BOOLEAN\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"true\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"Enable Default Subscriptions\",\n                        \"description\": \"Manages the default subscriptions to the gateway management MQTT topics. When disabled, the gateway will not be remotely manageable.\",\n                        \"id\": \"enable.default.subscriptions\",\n                        \"type\": \"BOOLEAN\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"true\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"option\": [\n                            {\n                                \"label\": \"Kura Protobuf\",\n                                \"value\": \"kura-protobuf\"\n                            },\n                            {\n                                \"label\": \"Simple JSON\",\n                                \"value\": \"simple-json\"\n                            }\n                        ],\n                        \"name\": \"Payload Encoding\",\n                        \"description\": \"Specify the message payload encoding.\",\n                        \"id\": \"payload.encoding\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"kura-protobuf\",\n                        \"isRequired\": true\n                    }\n                ],\n                \"icon\": [\n                    {\n                        \"resource\": \"CloudService\",\n                        \"size\": 32\n                    }\n                ],\n                \"name\": \"CloudService\",\n                \"description\": \"The CloudService allows for setting a user friendly name for the current device. It also provides the option to compress message payloads to reduce network traffic.\",\n                \"id\": \"org.eclipse.kura.cloud.CloudService\"\n            },\n            \"properties\": {\n                \"topic.control-prefix\": {\n                    \"value\": \"$EDC\",\n                    \"type\": \"STRING\"\n                },\n                \"republish.mqtt.birth.cert.on.tamper.event\": {\n                    \"value\": true,\n                    \"type\": \"BOOLEAN\"\n                },\n                \"device.custom-name\": {\n                    \"value\": \"Intel UP\u00b2\",\n                    \"type\": \"STRING\"\n                },\n                \"device.display-name\": {\n                    \"value\": \"device-name\",\n                    \"type\": \"STRING\"\n                },\n                \"payload.encoding\": {\n                    \"value\": \"kura-protobuf\",\n                    \"type\": \"STRING\"\n                },\n                \"republish.mqtt.birth.cert.on.modem.detect\": {\n                    \"value\": false,\n                    \"type\": \"BOOLEAN\"\n                },\n                \"service.factoryPid\": {\n                    \"value\": \"org.eclipse.kura.cloud.CloudService\",\n                    \"type\": \"STRING\"\n                },\n                \"kura.service.pid\": {\n                    \"value\": \"org.eclipse.kura.cloud.CloudService\",\n                    \"type\": \"STRING\"\n                },\n                \"service.pid\": {\n                    \"value\": \"org.eclipse.kura.cloud.CloudService-1699623980404-13\",\n                    \"type\": \"STRING\"\n                },\n                \"enable.default.subscriptions\": {\n                    \"value\": true,\n                    \"type\": \"BOOLEAN\"\n                },\n                \"republish.mqtt.birth.cert.on.gps.lock\": {\n                    \"value\": false,\n                    \"type\": \"BOOLEAN\"\n                },\n                \"encode.gzip\": {\n                    \"value\": true,\n                    \"type\": \"BOOLEAN\"\n                },\n                \"DataService.target\": {\n                    \"value\": \"(kura.service.pid=org.eclipse.kura.data.DataService)\",\n                    \"type\": \"STRING\"\n                },\n                \"kura.cloud.service.factory.pid\": {\n                    \"value\": \"org.eclipse.kura.core.cloud.factory.DefaultCloudServiceFactory\",\n                    \"type\": \"STRING\"\n                }\n            }\n        }\n    ]\n}\n
                                      - 200 Status OK - 500 Internal Error

                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#connect-cloudendpoint","title":"Connect CloudEndpoint","text":"
                                      • Description: This method allows to trigger the connection of the specified CloudEndpoint
                                      • Method: POST
                                      • API PATH: services/cloudconnection/v1/cloudEndpoint/connect
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_4","title":"Request","text":"
                                      {\n    \"cloudEndpointPid\" : \"org.eclipse.kura.cloud.CloudService\"\n}\n
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_6","title":"Responses","text":"
                                      • 204 Status OK
                                      • 404 Wrong cloudEndpointPid
                                      • 500 Internal Server Error in case of connection problems.
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#disconnect-cloudendpoint","title":"Disconnect CloudEndpoint","text":"
                                      • Description: This method allows to trigger the disconnection of the specified CloudEndpoint
                                      • Method: POST
                                      • API PATH: services/cloudconnection/v1/cloudEndpoint/disconnect
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_5","title":"Request","text":"
                                      {\n    \"cloudEndpointPid\" : \"org.eclipse.kura.cloud.CloudService\"\n}\n
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_7","title":"Responses","text":"
                                      • 204 Status OK
                                      • 404 Wrong cloudEndpointPid
                                      • 500 Internal Server Error in case of connection problems.
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#check-cloudendpoint-connection-status","title":"Check CloudEndpoint connection status","text":"
                                      • Description: This method allows to check the status of the connection of the specified CloudEndpoint
                                      • Method: POST
                                      • API PATH: services/cloudconnection/v1/cloudEndpoint/isConnected
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_6","title":"Request","text":"
                                      {\n    \"cloudEndpointPid\" : \"org.eclipse.kura.cloud.CloudService\"\n}\n
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_8","title":"Responses","text":"

                                      {\n    \"connected\": false\n}\n
                                      - 200 Status OK - 404 Wrong cloudEndpointPid - 500 Internal Server Error

                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#put-methods","title":"PUT methods","text":""},{"location":"references/rest-apis/rest-cloudconnection-api/#update-cloudendpoint-stack-component-configurations","title":"Update CloudEndpoint stack component configurations","text":"
                                      • Description: This method allows to update the configuration of a cloud component instance. This method can be used to update the configuration of CloudPublisher instances, CloudSubscriber instances, or the configuration of components that are part of a cloud stack, whose pids are returned by the cloudEndpoint/stackComponentPids method.
                                      • Method: PUT
                                      • API PATH: services/cloudconnection/v1/configurations
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_7","title":"Request","text":"
                                      • takeSnapshot set to true o false to specify if the ConfigurationService must save a snapshot with the updated configuration.
                                      {\n    \"configs\": [\n        {\n            \"pid\": \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\",\n            \"properties\": {\n                \"broker-url\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"mqtt://mqtt.eclipseprojects.io:1883\"\n                },\n                \"topic.context.account-name\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"account-name-testX2\"\n                },\n                \"username\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"username\"\n                },\n                \"password\": {\n                    \"type\": \"PASSWORD\",\n                    \"value\": \"Placeholder\"\n                },\n                \"client-id\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"\"\n                },\n                \"keep-alive\": {\n                    \"type\": \"INTEGER\",\n                    \"value\": 30\n                },\n                \"timeout\": {\n                    \"type\": \"INTEGER\",\n                    \"value\": 20\n                },\n                \"clean-session\": {\n                    \"type\": \"BOOLEAN\",\n                    \"value\": true\n                },\n                \"lwt.topic\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"$EDC/#account-name/#client-id/MQTT/LWT\"\n                },\n                \"lwt.payload\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"\"\n                },\n                \"lwt.qos\": {\n                    \"type\": \"INTEGER\",\n                    \"value\": 0\n                },\n                \"lwt.retain\": {\n                    \"type\": \"BOOLEAN\",\n                    \"value\": false\n                },\n                \"in-flight.persistence\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"memory\"\n                },\n                \"protocol-version\": {\n                    \"type\": \"INTEGER\",\n                    \"value\": 4\n                },\n                \"SslManagerService.target\": {\n                    \"type\": \"STRING\",\n                    \"value\": \"(kura.service.pid=org.eclipse.kura.ssl.SslManagerService)\"\n                }\n            }\n        }\n    ],\n    \"takeSnapshot\" : true\n}\n
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_9","title":"Responses","text":"
                                      • 204 Status OK
                                      • 400 Bad request if pid is wrong or non existent.
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#delete-methods","title":"DELETE methods","text":""},{"location":"references/rest-apis/rest-cloudconnection-api/#delete-cloudendpoint","title":"Delete CloudEndpoint","text":"
                                      • Description: This method allow to delete a CloudEndpoint instance.
                                      • Method: DELETE
                                      • API PATH: services/cloudconnection/v1/cloudEndpoint
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_8","title":"Request","text":"
                                      {\n    \"cloudConnectionFactoryPid\" : \"org.eclipse.kura.cloud.CloudService\",\n    \"cloudEndpointPid\" : \"org.eclipse.kura.cloud.CloudService-1\"\n}\n
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_10","title":"Responses","text":"
                                      • 204 Status OK
                                      • 404 if cloudConnectionFactoryPid or cloudEndpointPid are not found
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#delete-publishersubscriber-instance","title":"Delete Publisher/Subscriber instance","text":"
                                      • Description: This method allows to delete a CloudPublisher or CloudSubscriber instance.
                                      • Method: DELETE
                                      • API PATH: services/cloudconnection/v1/pubSub
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#request_9","title":"Request","text":"
                                      {\n    \"pid\" : \"testPub\"\n}\n
                                      "},{"location":"references/rest-apis/rest-cloudconnection-api/#responses_11","title":"Responses","text":"
                                      • 204 Status OK
                                      • 404 Wrong cloudConnectionFactoryPid or cloudEndpointPid.
                                      "},{"location":"references/rest-apis/rest-command-api/","title":"Rest Command v1 API","text":""},{"location":"references/rest-apis/rest-command-api/#execute-command","title":"Execute Command","text":"
                                      • Method: POST
                                      • API PATH: /services/command/v1/command/
                                      "},{"location":"references/rest-apis/rest-command-api/#request-body","title":"Request Body","text":"
                                      {\n    //Command to be executed on gateway\n    \"command\":\"printenv TextEnvVarName1\",\n\n    //Service Password for command Service\n    \"password\":\"s3curePassw0rd\",\n\n    //String base64 encoding of a zip file to transfer to gateway\n    \"zipBytes\": \"UEsDBAoACAAAAIyD1lYAA AAAAAAAAAAAAAAJACAAdGVzdGZpbGUxVVQNAAfprpRk6a6UZOmulGR1eAsAAQT1AQAABBQAAABQSwcIAAAAAAAAAAAAAAAAUEsBAgoDCgAIAAAAjIPWVgAAAAAAAAAAAAAAAAkAIAAAAAAAAAAAAKSBAAAAAHRlc3RmaWxlMVVUDQAH6a6UZOmulGTprpRkdXgLAAEE9QEAAAQUAAAAUEsFBgAAAAABAAEAVwAAAFcAAAAAAA==\",\n\n    //Command argument String array\n    \"arguments\":[\"arg 1\"],\n\n    //Shell environment Pairs Map\n    \"environmentPairs\": \n    {\n        \"TextEnvVarName1\":\"TextEnvVarValue1\",\n        \"TextEnvVarName2\":\"TextEnvVarValue2\"\n    },\n    //Working directory of command to be executed\n    \"workingDirectory\":\"/tmp\",\n\n}\n
                                      "},{"location":"references/rest-apis/rest-command-api/#responses","title":"Responses","text":"
                                      • 200 OK status
                                      {\n    \"stdout\": \"Command error output is displayed in this field\",\n    \"stderr\": \"Command output is displayed in this field\",\n    \"exitCode\": 0,\n    \"isTimeOut\": false\n}\n
                                      • 400 Bad Request (Malformed Client JSON)
                                      • 404 Resource Not Found
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-command-api/#execute-asynchronous-command","title":"Execute Asynchronous Command","text":"
                                      • Method: POST
                                      • API PATH: /services/command/v1/command/async
                                      "},{"location":"references/rest-apis/rest-command-api/#request-body_1","title":"Request Body","text":"
                                      {\n    //Command to be executed on gateway\n    \"command\":\"printenv TextEnvVarName1\",\n\n    //Service Password for command Service\n    \"password\":\"s3curePassw0rd\",\n\n    //String base64 encoding of a zip file to transfer to gateway\n    \"zipBytes\": \"UEsDBAoACAAAAIyD1lYAA AAAAAAAAAAAAAAJACAAdGVzdGZpbGUxVVQNAAfprpRk6a6UZOmulGR1eAsAAQT1AQAABBQAAABQSwcIAAAAAAAAAAAAAAAAUEsBAgoDCgAIAAAAjIPWVgAAAAAAAAAAAAAAAAkAIAAAAAAAAAAAAKSBAAAAAHRlc3RmaWxlMVVUDQAH6a6UZOmulGTprpRkdXgLAAEE9QEAAAQUAAAAUEsFBgAAAAABAAEAVwAAAFcAAAAAAA==\",\n\n    //Command argument String array\n    \"arguments\":[\"arg 1\"],\n\n    //Shell environment Pairs Map\n    \"environmentPairs\": \n    {\n        \"TextEnvVarName1\":\"TextEnvVarValue1\",\n        \"TextEnvVarName2\":\"TextEnvVarValue2\"\n    },\n    //Working directory of command to be executed\n    \"workingDirectory\":\"/tmp\",\n\n}\n
                                      "},{"location":"references/rest-apis/rest-command-api/#responses_1","title":"Responses","text":"
                                      • 202 Accepted
                                      • 400 Bad Request (Malformed Client JSON)
                                      • 404 Resource Not Found
                                      • 500 Internal Server Error

                                      Note

                                      Use the following command to retrieve the base64 representation of a zip file. base64 -i <filename.zip>

                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/","title":"Configuration V1 REST APIs","text":"

                                      This page describes the configuration V1 rest APIs.

                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#rest-apis","title":"REST APIs","text":"

                                      The Configuration Service REST APIs are exposed by the org.eclipse.kura.rest.configuration bundle, providing the following REST APIs under the /configuration/v1 path.

                                      Method Path Allowed roles Encoding Request parameters Description GET /factoryComponents configuration JSON None The method lists all the FactoryComponents Pids tracked by the ConfigurationService POST /factoryComponents configuration JSON FactoryComponentConfiguration object Creates a new ConfigurableComponent instance by creating a new configuration from a Configuration Admin factory. The FactoryComponentConfiguration object passed as request parameter will provide all the information needed to generate the instance. It links the factory Pid to be used, the target instance Pid, the properties to be used when creating the instance, and if the request should be persisted with a snapshot DELETE /factoryComponents/{pid}?takeSnapshot={takeSnapshot} configuration JSON pid = A String representing the pid of the instance generated by a Factory Component that needs to deleted; takeSnapshot = an optional (default false) boolean to specify if a new snapshot needs to be created after the delete operation For the specified Pid and optional takeSnapshot query parameter, the ConfigurationService instance will delete the corresponding ConfigurableComponent instance GET /configurableComponents configuration JSON None Lists the tracked configurable component Pids GET /configurableComponents/configurations configuration JSON None Lists all the component configurations of all the ConfigurableComponents tracked by the ConfigurationService GET /configurableComponents/configurations/byFilter/{filter} configuration JSON filter = A String representing an OSGi filter. Lists the component configurations of all the ConfigurableComponents tracked by the ConfigurationService that match the filter specified GET /configurableComponents/configurations/byPid/{pid} configuration JSON pid = A String representing the pid of a configurable component instance Provides the ComponentConfiguration of the ConfigurableComponent matching the specified Pid GET /configurableComponents/configurations/byPid/{pid}/_default configuration JSON pid = A String representing the pid of a configurable component instance Provides the default Component Configuration for the component identified by the specified Pid POST /configurableComponents/configurations/byPid/{pid}/_update configuration JSON pid = A String representing the pid of a configurable component instance; ComponentConfigurationUpdateRequest = the updated configuration provided in the request body Allows to update the component configuration identified by the provided PID POST /configurableComponents/configurations/_update configuration JSON componentConfigurations = the list of updated configurations provided in the request body Allows to update the configuration of multiple configurable components GET /snapshots configuration JSON None Lists all the available snapshot IDs managed by the framework GET /snapshots/{id} configuration JSON id = the snapshot Id Returns the content of a given snapshot tracked by the framework POST /snapshots/_write configuration JSON None Triggers the framework to take and persist a snapshot POST /snapshots/_rollback configuration JSON None Rollbacks the framework to the last saved snapshot if available. POST /snapshots/{id}/_rollback configuration JSON id = the snapshot Id Rollbacks the framework to the snapshot identified by the provided ID POST /snapshots/_upload configuration Consumes: XML Framework snapshot in XML form provided in the request body Uploads a snapshot. The framework will update the component(s) configuration accordingly to the configurations received"},{"location":"references/rest-apis/rest-configuration-service-v1/#get-all-the-factory-components-pids","title":"Get all the factory components pids","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/factoryComponents

                                      Response: 

                                      [\n    \"org.eclipse.kura.wire.Conditional\",\n    \"org.eclipse.kura.cloudconnection.raw.mqtt.publisher.RawMqttPublisher\",\n    \"org.eclipse.kura.misc.cloudcat.CloudCat\",\n    \"org.eclipse.kura.core.db.H2DbServer\",\n    \"org.eclipse.kura.wire.Fifo\",\n    \"org.eclipse.kura.cloudconnection.raw.mqtt.cloud.RawMqttCloudEndpoint\",\n    \"org.eclipse.kura.core.keystore.FilesystemKeystoreServiceImpl\",\n    \"org.eclipse.kura.cloud.publisher.CloudPublisher\",\n    \"org.eclipse.kura.core.db.H2DbService\",\n    \"org.eclipse.kura.wire.CloudSubscriber\",\n    \"org.eclipse.kura.wire.RegexFilter\",\n    \"org.eclipse.kura.wire.Logger\",\n    \"org.eclipse.kura.wire.Timer\",\n    \"com.eurotech.framework.log.manager.LogManager\",\n    \"com.eurotech.framework.log.journald.wire.JournaldWireComponent\",\n    \"org.eclipse.kura.cloudconnection.raw.mqtt.subscriber.RawMqttSubscriber\",\n    \"org.eclipse.kura.cloud.subscriber.CloudSubscriber\",\n    \"org.eclipse.kura.ssl.SslManagerService\",\n    \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\",\n    \"com.eurotech.framework.log.journald.JournaldLogReader\",\n    \"org.eclipse.kura.provisioning.ProvisioningService\",\n    \"org.eclipse.kura.wire.CloudPublisher\",\n    \"org.eclipse.kura.wire.H2DbWireRecordFilter\",\n    \"org.eclipse.kura.cloud.CloudService\",\n    \"org.eclipse.kura.data.DataService\",\n    \"org.eclipse.kura.wire.H2DbWireRecordStore\",\n    \"org.eclipse.kura.wire.Join\",\n    \"com.eurotech.framework.log.publisher.LogPublisher\"\n]\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#create-component-from-factory","title":"Create component from factory","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/factoryComponents

                                      Request body: 

                                      {\n    \"factoryPid\": \"org.eclipse.kura.core.db.H2DbServer\",\n    \"pid\": \"myH2DbServer\",\n    \"properties\" : [],\n    \"takeSnapshot\" : false\n}\n

                                      The request must be provided with the following elements:

                                      • factoryPid: the factory used to generate the new instance
                                      • pid: the new instance process id
                                      • properties: eventual properties that will be used to instantiate the new instance and will override the defaults. A list of string, object pair is needed and can be optionally empty.
                                      • takeSnapshot: specifies if after the creation of a new component a snapshot needs to be taken.
                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#delete-a-component-and-optionally-take-a-snapshot","title":"Delete a component and optionally take a snapshot","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/factoryComponents/{pid}?takeSnapshot={takeSnapshot}

                                      • takeSnapshot: can be either true or false. If set to true, after the deletion, the framework will take a snapshot.
                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#list-the-tracked-configurable-component-pids","title":"List the tracked configurable component Pids","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents

                                      Response: 

                                      [\n    \"org.eclipse.kura.clock.ClockService\",\n    \"org.eclipse.kura.net.admin.NetworkConfigurationService\",\n    \"org.eclipse.kura.position.PositionService\",\n    \"com.eurotech.framework.internal.ansible.provider.AnsibleServiceImpl\",\n    \"org.eclipse.kura.internal.useradmin.store.RoleRepositoryStoreImpl\",\n    \"com.eurotech.framework.internal.ansible.cloud.AnsibleActivityHandler\",\n    \"default.diagnostic.publisher\",\n    \"org.eclipse.kura.net.admin.FirewallConfigurationService\",\n    \"com.eurotech.framework.internal.fail2ban.Fail2BanConfigurator\",\n    \"default.log.publisher\",\n    \"org.eclipse.kura.wire.graph.WireGraphService\",\n    \"com.eurotech.framework.internal.floodingprotection.FloodingProtectionConfigurator\",\n    \"org.eclipse.kura.ssl.SslManagerService\",\n    \"org.eclipse.kura.http.server.manager.HttpService\",\n    \"org.eclipse.kura.cloud.app.command.CommandCloudApp\",\n    \"default.ping.publisher\",\n    \"org.eclipse.kura.db.H2DbService\",\n    \"com.eurotech.framework.diagnostics.DiagnosticsService\",\n    \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\",\n    \"org.eclipse.kura.deployment.agent\",\n    \"DMKeystore\",\n    \"LogReaderJournald\",\n    \"default.alert.publisher\",\n    \"org.eclipse.kura.core.deployment.CloudDeploymentHandlerV2\",\n    \"HttpsKeystore\",\n    \"com.eurotech.framework.security.aide.AideTamperDetectionServiceConfigurator\",\n    \"org.eclipse.kura.provisioning.ProvisioningService\",\n    \"LogManagerAuth\",\n    \"com.eurotech.framework.security.journald.fss.FssTamperDetectionServiceConfigurator\",\n    \"org.eclipse.kura.watchdog.WatchdogService\",\n    \"org.eclipse.kura.cloud.CloudService\",\n    \"LogManagerActivity\",\n    \"org.eclipse.kura.data.DataService\",\n    \"LogManagerDefault\",\n    \"org.eclipse.kura.web.Console\",\n    \"SSLKeystore\",\n    \"com.eurotech.framework.net.vpn.client.VpnClient\",\n    \"org.eclipse.kura.internal.rest.provider.RestService\",\n    \"com.eurotech.framework.reboot.RebootService\"\n]\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#lists-all-the-component-configurations-of-all-the-configurablecomponents","title":"Lists all the component configurations of all the ConfigurableComponents","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents/configurations

                                      Response: 

                                      [\n    {\n        \"pid\": \"org.eclipse.kura.clock.ClockService\",\n        \"definition\": {\n            \"ad\": [\n                {\n                    \"option\": [],\n                    \"name\": \"enabled\",\n                    \"description\": \"Whether or not to enable the ClockService\",\n                    \"id\": \"enabled\",\n                    \"type\": \"BOOLEAN\",\n                    \"cardinality\": 0,\n                    \"_default\": \"true\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.set.hwclock\",\n                    \"description\": \"Whether or not to sync the system hardware clock after the system time gets set\",\n                    \"id\": \"clock.set.hwclock\",\n                    \"type\": \"BOOLEAN\",\n                    \"cardinality\": 0,\n                    \"_default\": \"true\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [\n                        {\n                            \"label\": \"java-ntp\",\n                            \"value\": \"java-ntp\",\n                            \"otherAttributes\": {}\n                        },\n                        {\n                            \"label\": \"ntpd\",\n                            \"value\": \"ntpd\",\n                            \"otherAttributes\": {}\n                        },\n                        {\n                            \"label\": \"chrony-advanced\",\n                            \"value\": \"chrony-advanced\",\n                            \"otherAttributes\": {}\n                        }\n                    ],\n                    \"name\": \"clock.provider\",\n                    \"description\": \"Source for setting the system clock. Verify the availabiliy of the selected provider before activate it.\",\n                    \"id\": \"clock.provider\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"_default\": \"java-ntp\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.host\",\n                    \"description\": \"The hostname that provides the system time via NTP\",\n                    \"id\": \"clock.ntp.host\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"_default\": \"0.pool.ntp.org\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.port\",\n                    \"description\": \"The port number that provides the system time via NTP\",\n                    \"id\": \"clock.ntp.port\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"1\",\n                    \"max\": \"65535\",\n                    \"_default\": \"123\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.timeout\",\n                    \"description\": \"The NTP timeout in milliseconds\",\n                    \"id\": \"clock.ntp.timeout\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"1000\",\n                    \"_default\": \"10000\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.max-retry\",\n                    \"description\": \"The maximum number of retries for the initial synchronization (with interval clock.ntp.retry.interval). If set to 0 the service will retry forever.\",\n                    \"id\": \"clock.ntp.max-retry\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"0\",\n                    \"_default\": \"0\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.retry.interval\",\n                    \"description\": \"When sync fails, interval in seconds between each retry.\",\n                    \"id\": \"clock.ntp.retry.interval\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"1\",\n                    \"_default\": \"5\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.refresh-interval\",\n                    \"description\": \"Whether or not to sync the clock and if so, the frequency in seconds.  If less than zero - no update, if equal to zero - sync once at startup, if greater than zero - the frequency in seconds to perform a new clock sync\",\n                    \"id\": \"clock.ntp.refresh-interval\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"_default\": \"3600\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"RTC File Name\",\n                    \"description\": \"The RTC File Name. It defaults to /dev/rtc0. This option is not used if chrony-advanced option is selected in clock.provider.\",\n                    \"id\": \"rtc.filename\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"_default\": \"/dev/rtc0\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"Chrony Configuration\",\n                    \"description\": \"Chrony configuration file.|TextArea\",\n                    \"id\": \"chrony.advanced.config\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"required\": false,\n                    \"otherAttributes\": {}\n                }\n            ],\n            \"icon\": [\n                {\n                    \"resource\": \"ClockService\",\n                    \"size\": 32,\n                    \"otherAttributes\": {}\n                }\n            ],\n            \"name\": \"ClockService\",\n            \"description\": \"ClockService Configuration\",\n            \"id\": \"org.eclipse.kura.clock.ClockService\",\n            \"otherAttributes\": {}\n        },\n        \"properties\": {\n            \"clock.ntp.host\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"0.pool.ntp.org\"\n            },\n            \"clock.ntp.max-retry\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 0\n            },\n            \"clock.set.hwclock\": {\n                \"array\": false,\n                \"type\": \"Boolean\",\n                \"value\": true\n            },\n            \"clock.ntp.timeout\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 10000\n            },\n            \"enabled\": {\n                \"array\": false,\n                \"type\": \"Boolean\",\n                \"value\": false\n            },\n            \"clock.ntp.retry.interval\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 5\n            },\n            \"kura.service.pid\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"org.eclipse.kura.clock.ClockService\"\n            },\n            \"service.pid\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"org.eclipse.kura.clock.ClockService\"\n            },\n            \"clock.ntp.port\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 123\n            },\n            \"clock.provider\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"java-ntp\"\n            },\n            \"clock.ntp.refresh-interval\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 3600\n            },\n            \"rtc.filename\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"/dev/rtc1\"\n            },\n            \"chrony.advanced.config\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"\"\n            }\n        }\n    },\n  ...\n]\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#list-the-configurations-of-all-the-configurablecomponents-that-match-a-filter","title":"List the configurations of all the ConfigurableComponents that match a filter","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents/configurations/byFilter/(service.pid=org.eclipse.kura.clock.ClockService)

                                      Response: 

                                      [\n    {\n        \"pid\": \"org.eclipse.kura.clock.ClockService\",\n        \"definition\": {\n            \"ad\": [\n                {\n                    \"option\": [],\n                    \"name\": \"enabled\",\n                    \"description\": \"Whether or not to enable the ClockService\",\n                    \"id\": \"enabled\",\n                    \"type\": \"BOOLEAN\",\n                    \"cardinality\": 0,\n                    \"_default\": \"true\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.set.hwclock\",\n                    \"description\": \"Whether or not to sync the system hardware clock after the system time gets set\",\n                    \"id\": \"clock.set.hwclock\",\n                    \"type\": \"BOOLEAN\",\n                    \"cardinality\": 0,\n                    \"_default\": \"true\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [\n                        {\n                            \"label\": \"java-ntp\",\n                            \"value\": \"java-ntp\",\n                            \"otherAttributes\": {}\n                        },\n                        {\n                            \"label\": \"ntpd\",\n                            \"value\": \"ntpd\",\n                            \"otherAttributes\": {}\n                        },\n                        {\n                            \"label\": \"chrony-advanced\",\n                            \"value\": \"chrony-advanced\",\n                            \"otherAttributes\": {}\n                        }\n                    ],\n                    \"name\": \"clock.provider\",\n                    \"description\": \"Source for setting the system clock. Verify the availabiliy of the selected provider before activate it.\",\n                    \"id\": \"clock.provider\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"_default\": \"java-ntp\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.host\",\n                    \"description\": \"The hostname that provides the system time via NTP\",\n                    \"id\": \"clock.ntp.host\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"_default\": \"0.pool.ntp.org\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.port\",\n                    \"description\": \"The port number that provides the system time via NTP\",\n                    \"id\": \"clock.ntp.port\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"1\",\n                    \"max\": \"65535\",\n                    \"_default\": \"123\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.timeout\",\n                    \"description\": \"The NTP timeout in milliseconds\",\n                    \"id\": \"clock.ntp.timeout\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"1000\",\n                    \"_default\": \"10000\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.max-retry\",\n                    \"description\": \"The maximum number of retries for the initial synchronization (with interval clock.ntp.retry.interval). If set to 0 the service will retry forever.\",\n                    \"id\": \"clock.ntp.max-retry\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"0\",\n                    \"_default\": \"0\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.retry.interval\",\n                    \"description\": \"When sync fails, interval in seconds between each retry.\",\n                    \"id\": \"clock.ntp.retry.interval\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"min\": \"1\",\n                    \"_default\": \"5\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"clock.ntp.refresh-interval\",\n                    \"description\": \"Whether or not to sync the clock and if so, the frequency in seconds.  If less than zero - no update, if equal to zero - sync once at startup, if greater than zero - the frequency in seconds to perform a new clock sync\",\n                    \"id\": \"clock.ntp.refresh-interval\",\n                    \"type\": \"INTEGER\",\n                    \"cardinality\": 0,\n                    \"_default\": \"3600\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"RTC File Name\",\n                    \"description\": \"The RTC File Name. It defaults to /dev/rtc0. This option is not used if chrony-advanced option is selected in clock.provider.\",\n                    \"id\": \"rtc.filename\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"_default\": \"/dev/rtc0\",\n                    \"required\": true,\n                    \"otherAttributes\": {}\n                },\n                {\n                    \"option\": [],\n                    \"name\": \"Chrony Configuration\",\n                    \"description\": \"Chrony configuration file.|TextArea\",\n                    \"id\": \"chrony.advanced.config\",\n                    \"type\": \"STRING\",\n                    \"cardinality\": 0,\n                    \"required\": false,\n                    \"otherAttributes\": {}\n                }\n            ],\n            \"icon\": [\n                {\n                    \"resource\": \"ClockService\",\n                    \"size\": 32,\n                    \"otherAttributes\": {}\n                }\n            ],\n            \"name\": \"ClockService\",\n            \"description\": \"ClockService Configuration\",\n            \"id\": \"org.eclipse.kura.clock.ClockService\",\n            \"otherAttributes\": {}\n        },\n        \"properties\": {\n            \"clock.ntp.host\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"0.pool.ntp.org\"\n            },\n            \"clock.ntp.max-retry\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 0\n            },\n            \"clock.set.hwclock\": {\n                \"array\": false,\n                \"type\": \"Boolean\",\n                \"value\": true\n            },\n            \"clock.ntp.timeout\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 10000\n            },\n            \"enabled\": {\n                \"array\": false,\n                \"type\": \"Boolean\",\n                \"value\": false\n            },\n            \"clock.ntp.retry.interval\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 5\n            },\n            \"kura.service.pid\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"org.eclipse.kura.clock.ClockService\"\n            },\n            \"service.pid\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"org.eclipse.kura.clock.ClockService\"\n            },\n            \"clock.ntp.port\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 123\n            },\n            \"clock.provider\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"java-ntp\"\n            },\n            \"clock.ntp.refresh-interval\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 3600\n            },\n            \"rtc.filename\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"/dev/rtc1\"\n            },\n            \"chrony.advanced.config\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"\"\n            }\n        }\n    }\n]\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#get-the-configuration-of-the-configurablecomponent-matching-a-pid","title":"Get the configuration of the ConfigurableComponent matching a pid","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents/configurations/byPid/org.eclipse.kura.clock.ClockService

                                      Response: 

                                      {\n    \"pid\": \"org.eclipse.kura.clock.ClockService\",\n    \"definition\": {\n        \"ad\": [\n            {\n                \"option\": [],\n                \"name\": \"enabled\",\n                \"description\": \"Whether or not to enable the ClockService\",\n                \"id\": \"enabled\",\n                \"type\": \"BOOLEAN\",\n                \"cardinality\": 0,\n                \"_default\": \"true\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.set.hwclock\",\n                \"description\": \"Whether or not to sync the system hardware clock after the system time gets set\",\n                \"id\": \"clock.set.hwclock\",\n                \"type\": \"BOOLEAN\",\n                \"cardinality\": 0,\n                \"_default\": \"true\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [\n                    {\n                        \"label\": \"java-ntp\",\n                        \"value\": \"java-ntp\",\n                        \"otherAttributes\": {}\n                    },\n                    {\n                        \"label\": \"ntpd\",\n                        \"value\": \"ntpd\",\n                        \"otherAttributes\": {}\n                    },\n                    {\n                        \"label\": \"chrony-advanced\",\n                        \"value\": \"chrony-advanced\",\n                        \"otherAttributes\": {}\n                    }\n                ],\n                \"name\": \"clock.provider\",\n                \"description\": \"Source for setting the system clock. Verify the availabiliy of the selected provider before activate it.\",\n                \"id\": \"clock.provider\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"_default\": \"java-ntp\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.host\",\n                \"description\": \"The hostname that provides the system time via NTP\",\n                \"id\": \"clock.ntp.host\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"_default\": \"0.pool.ntp.org\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.port\",\n                \"description\": \"The port number that provides the system time via NTP\",\n                \"id\": \"clock.ntp.port\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"1\",\n                \"max\": \"65535\",\n                \"_default\": \"123\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.timeout\",\n                \"description\": \"The NTP timeout in milliseconds\",\n                \"id\": \"clock.ntp.timeout\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"1000\",\n                \"_default\": \"10000\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.max-retry\",\n                \"description\": \"The maximum number of retries for the initial synchronization (with interval clock.ntp.retry.interval). If set to 0 the service will retry forever.\",\n                \"id\": \"clock.ntp.max-retry\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"0\",\n                \"_default\": \"0\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.retry.interval\",\n                \"description\": \"When sync fails, interval in seconds between each retry.\",\n                \"id\": \"clock.ntp.retry.interval\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"1\",\n                \"_default\": \"5\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.refresh-interval\",\n                \"description\": \"Whether or not to sync the clock and if so, the frequency in seconds.  If less than zero - no update, if equal to zero - sync once at startup, if greater than zero - the frequency in seconds to perform a new clock sync\",\n                \"id\": \"clock.ntp.refresh-interval\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"_default\": \"3600\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"RTC File Name\",\n                \"description\": \"The RTC File Name. It defaults to /dev/rtc0. This option is not used if chrony-advanced option is selected in clock.provider.\",\n                \"id\": \"rtc.filename\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"_default\": \"/dev/rtc0\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"Chrony Configuration\",\n                \"description\": \"Chrony configuration file.|TextArea\",\n                \"id\": \"chrony.advanced.config\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"required\": false,\n                \"otherAttributes\": {}\n            }\n        ],\n        \"icon\": [\n            {\n                \"resource\": \"ClockService\",\n                \"size\": 32,\n                \"otherAttributes\": {}\n            }\n        ],\n        \"name\": \"ClockService\",\n        \"description\": \"ClockService Configuration\",\n        \"id\": \"org.eclipse.kura.clock.ClockService\",\n        \"otherAttributes\": {}\n    },\n    \"properties\": {\n        \"clock.ntp.host\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"0.pool.ntp.org\"\n        },\n        \"clock.ntp.max-retry\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 0\n        },\n        \"clock.set.hwclock\": {\n            \"array\": false,\n            \"type\": \"Boolean\",\n            \"value\": true\n        },\n        \"clock.ntp.timeout\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 10000\n        },\n        \"enabled\": {\n            \"array\": false,\n            \"type\": \"Boolean\",\n            \"value\": false\n        },\n        \"clock.ntp.retry.interval\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 5\n        },\n        \"kura.service.pid\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"org.eclipse.kura.clock.ClockService\"\n        },\n        \"service.pid\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"org.eclipse.kura.clock.ClockService\"\n        },\n        \"clock.ntp.port\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 123\n        },\n        \"clock.provider\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"java-ntp\"\n        },\n        \"clock.ntp.refresh-interval\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 3600\n        },\n        \"rtc.filename\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"/dev/rtc1\"\n        },\n        \"chrony.advanced.config\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"\"\n        }\n    }\n}\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#get-the-default-configuration-of-the-configurablecomponent-matching-a-pid","title":"Get the default configuration of the ConfigurableComponent matching a pid","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents/configurations/byPid/org.eclipse.kura.clock.ClockService/_default

                                      Response: 

                                      {\n    \"pid\": \"org.eclipse.kura.clock.ClockService\",\n    \"definition\": {\n        \"ad\": [\n            {\n                \"option\": [],\n                \"name\": \"enabled\",\n                \"description\": \"Whether or not to enable the ClockService\",\n                \"id\": \"enabled\",\n                \"type\": \"BOOLEAN\",\n                \"cardinality\": 0,\n                \"_default\": \"true\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.set.hwclock\",\n                \"description\": \"Whether or not to sync the system hardware clock after the system time gets set\",\n                \"id\": \"clock.set.hwclock\",\n                \"type\": \"BOOLEAN\",\n                \"cardinality\": 0,\n                \"_default\": \"true\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [\n                    {\n                        \"label\": \"java-ntp\",\n                        \"value\": \"java-ntp\",\n                        \"otherAttributes\": {}\n                    },\n                    {\n                        \"label\": \"ntpd\",\n                        \"value\": \"ntpd\",\n                        \"otherAttributes\": {}\n                    },\n                    {\n                        \"label\": \"chrony-advanced\",\n                        \"value\": \"chrony-advanced\",\n                        \"otherAttributes\": {}\n                    }\n                ],\n                \"name\": \"clock.provider\",\n                \"description\": \"Source for setting the system clock. Verify the availabiliy of the selected provider before activate it.\",\n                \"id\": \"clock.provider\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"_default\": \"java-ntp\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.host\",\n                \"description\": \"The hostname that provides the system time via NTP\",\n                \"id\": \"clock.ntp.host\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"_default\": \"0.pool.ntp.org\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.port\",\n                \"description\": \"The port number that provides the system time via NTP\",\n                \"id\": \"clock.ntp.port\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"1\",\n                \"max\": \"65535\",\n                \"_default\": \"123\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.timeout\",\n                \"description\": \"The NTP timeout in milliseconds\",\n                \"id\": \"clock.ntp.timeout\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"1000\",\n                \"_default\": \"10000\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.max-retry\",\n                \"description\": \"The maximum number of retries for the initial synchronization (with interval clock.ntp.retry.interval). If set to 0 the service will retry forever.\",\n                \"id\": \"clock.ntp.max-retry\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"0\",\n                \"_default\": \"0\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.retry.interval\",\n                \"description\": \"When sync fails, interval in seconds between each retry.\",\n                \"id\": \"clock.ntp.retry.interval\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"min\": \"1\",\n                \"_default\": \"5\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"clock.ntp.refresh-interval\",\n                \"description\": \"Whether or not to sync the clock and if so, the frequency in seconds.  If less than zero - no update, if equal to zero - sync once at startup, if greater than zero - the frequency in seconds to perform a new clock sync\",\n                \"id\": \"clock.ntp.refresh-interval\",\n                \"type\": \"INTEGER\",\n                \"cardinality\": 0,\n                \"_default\": \"3600\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"RTC File Name\",\n                \"description\": \"The RTC File Name. It defaults to /dev/rtc0. This option is not used if chrony-advanced option is selected in clock.provider.\",\n                \"id\": \"rtc.filename\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"_default\": \"/dev/rtc0\",\n                \"required\": true,\n                \"otherAttributes\": {}\n            },\n            {\n                \"option\": [],\n                \"name\": \"Chrony Configuration\",\n                \"description\": \"Chrony configuration file.|TextArea\",\n                \"id\": \"chrony.advanced.config\",\n                \"type\": \"STRING\",\n                \"cardinality\": 0,\n                \"required\": false,\n                \"otherAttributes\": {}\n            }\n        ],\n        \"icon\": [\n            {\n                \"resource\": \"ClockService\",\n                \"size\": 32,\n                \"otherAttributes\": {}\n            }\n        ],\n        \"name\": \"ClockService\",\n        \"description\": \"ClockService Configuration\",\n        \"id\": \"org.eclipse.kura.clock.ClockService\",\n        \"otherAttributes\": {}\n    },\n    \"properties\": {\n        \"clock.ntp.host\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"0.pool.ntp.org\"\n        },\n        \"clock.provider\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"java-ntp\"\n        },\n        \"clock.ntp.port\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 123\n        },\n        \"clock.ntp.max-retry\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 0\n        },\n        \"clock.ntp.refresh-interval\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 3600\n        },\n        \"rtc.filename\": {\n            \"array\": false,\n            \"type\": \"String\",\n            \"value\": \"/dev/rtc0\"\n        },\n        \"clock.set.hwclock\": {\n            \"array\": false,\n            \"type\": \"Boolean\",\n            \"value\": true\n        },\n        \"enabled\": {\n            \"array\": false,\n            \"type\": \"Boolean\",\n            \"value\": true\n        },\n        \"clock.ntp.timeout\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 10000\n        },\n        \"clock.ntp.retry.interval\": {\n            \"array\": false,\n            \"type\": \"Integer\",\n            \"value\": 5\n        }\n    }\n}\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#update-the-component-configuration-identified-matching-a-pid","title":"Update the component configuration identified matching a pid","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents/configurations/byPid/org.eclipse.kura.clock.ClockService/_update

                                      Request body: 

                                      {\n    \"takeSnapshot\":true,\n    \"componentConfigurationRequest\": {\n        \"properties\": {\n            \"enabled\": {\n                \"type\": \"boolean\",\n                \"value\": false,\n                \"array\": false\n            }\n        }\n    }\n}\n

                                      Warning

                                      Every service may need a different set of parameters and combination of them to reach the desired result. For the NetworkAdminService, for example, the following configuration is required to disable a specific network interface (enp2s0) and prevent re-enabling at reboot. Please verify offline the REST APIs executed and the different deploying scenarios before distributing updates to the fleet of devices.

                                      {\n    \"takeSnapshot\":true,\n    \"componentConfigurationRequest\": {\n        \"properties\": {\n            \"net.interface.enp2s0.config.ip4.status\": {\n                \"type\": \"string\",\n                \"value\": \"netIPv4StatusDisabled\",\n                \"array\": false\n            },\n            \"net.interface.enp2s0.config.autoconnect\": {\n                \"type\": \"boolean\",\n                \"value\": false,\n                \"array\": false\n            }\n        }\n    }\n}\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#update-the-configuration-of-multiple-configurable-components","title":"Update the configuration of multiple configurable components","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/configurableComponents/configurations/_update

                                      Request body: 

                                      {\n    \"takeSnapshot\": true,\n    \"componentConfigurations\": [\n        {\n            \"pid\": \"org.eclipse.kura.clock.ClockService\",\n            \"properties\": {\n                \"enabled\": {\n                    \"type\": \"boolean\",\n                    \"value\": false,\n                    \"array\": false\n                }\n            }\n        }\n    ]\n}\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#list-all-the-available-snapshot-ids","title":"List all the available snapshot IDs","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/snapshots

                                      Response: 

                                      [\n    0,\n    1630930775789,\n    1630930776355,\n    1630930776839,\n    1630930797402,\n    1630930805305\n]\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#get-the-content-of-a-given-snapshot","title":"Get the content of a given snapshot","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/snapshots/{id}

                                      Response: 

                                      [\n    {\n        \"pid\": \"org.eclipse.kura.clock.ClockService\",\n        \"properties\": {\n            \"clock.ntp.host\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"0.pool.ntp.org\"\n            },\n            \"clock.ntp.port\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 123\n            },\n            \"clock.provider\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"java-ntp\"\n            },\n            \"clock.ntp.max-retry\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 0\n            },\n            \"clock.ntp.refresh-interval\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 3600\n            },\n            \"rtc.filename\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"/dev/rtc1\"\n            },\n            \"clock.set.hwclock\": {\n                \"array\": false,\n                \"type\": \"Boolean\",\n                \"value\": true\n            },\n            \"clock.ntp.timeout\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 10000\n            },\n            \"enabled\": {\n                \"array\": false,\n                \"type\": \"Boolean\",\n                \"value\": true\n            },\n            \"clock.ntp.retry.interval\": {\n                \"array\": false,\n                \"type\": \"Integer\",\n                \"value\": 5\n            },\n            \"kura.service.pid\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"org.eclipse.kura.clock.ClockService\"\n            },\n            \"service.pid\": {\n                \"array\": false,\n                \"type\": \"String\",\n                \"value\": \"org.eclipse.kura.clock.ClockService\"\n            }\n        }\n    },\n  ...\n]\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#trigger-the-framework-to-take-and-persist-a-snapshot","title":"Trigger the framework to take and persist a snapshot","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/snapshots/_write

                                      Response: 

                                      1631095409516\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#rollbacks-to-the-snapshot-identified-by-the-provided-id","title":"Rollbacks to the snapshot identified by the provided ID","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/snapshots/_rollback Response: 

                                      1631093011618\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v1/#upload-a-snapshot-as-xml","title":"Upload a snapshot as XML","text":"

                                      Request: URL - https://<gateway-ip>/services/configuration/v1/snapshots/_upload

                                      Request body: 

                                      <?xml version=\"1.0\" encoding=\"UTF-8\"?><esf:configurations xmlns:esf=\"http://eurotech.com/esf/2.0\" xmlns:ocd=\"http://www.osgi.org/xmlns/metatype/v1.2.0\">\n    <esf:configuration pid=\"org.eclipse.kura.clock.ClockService\">\n        <esf:properties>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.ntp.host\" type=\"String\">\n                <esf:value>0.pool.ntp.org</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.ntp.port\" type=\"Integer\">\n                <esf:value>123</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.provider\" type=\"String\">\n                <esf:value>java-ntp</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.ntp.max-retry\" type=\"Integer\">\n                <esf:value>0</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.ntp.refresh-interval\" type=\"Integer\">\n                <esf:value>3600</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"rtc.filename\" type=\"String\">\n                <esf:value>/dev/rtc1</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.set.hwclock\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.ntp.timeout\" type=\"Integer\">\n                <esf:value>10000</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"enabled\" type=\"Boolean\">\n                <esf:value>true</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"clock.ntp.retry.interval\" type=\"Integer\">\n                <esf:value>5</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"kura.service.pid\" type=\"String\">\n                <esf:value>org.eclipse.kura.clock.ClockService</esf:value>\n            </esf:property>\n            <esf:property array=\"false\" encrypted=\"false\" name=\"service.pid\" type=\"String\">\n                <esf:value>org.eclipse.kura.clock.ClockService</esf:value>\n            </esf:property>\n        </esf:properties>\n    </esf:configuration>\n</esf:configurations>\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/","title":"Configuration V2 REST APIs and CONF-V2 Request Handler","text":"

                                      This page describes the CONF-V2 request handler and configuration/v2 rest APIs. Accessing the REST APIs requires to use an identity with the rest.configuration permission assigned.

                                      • Request definitions
                                        • GET/snapshots
                                        • GET/factoryComponents
                                        • POST/factoryComponents
                                        • DEL/factoryComponents/byPid
                                        • GET/factoryComponents/ocd
                                        • POST/factoryComponents/ocd/byFactoryPid
                                        • GET/configurableComponents
                                        • GET/configurableComponents/pidsWithFactory
                                        • GET/configurableComponents/configurations
                                        • POST/configurableComponents/configurations/byPid
                                        • POST/configurableComponents/configurations/byPid/_default
                                        • PUT/configurableComponents/configurations/_update
                                        • EXEC/snapshots/_write
                                        • EXEC/snapshots/_rollback
                                        • EXEC/snapshots/byId/_rollback
                                      • JSON definitions
                                        • PidAndFactoryPidSet
                                        • SnapshotIdSet
                                        • PropertyType
                                        • ConfigurationProperty
                                        • ConfigurationProperties
                                        • Option
                                        • AttributeDefinition
                                        • ObjectClassDefinition
                                        • ComponentConfiguration
                                        • ComponentConfigurationList
                                        • CreateFactoryComponentConfigurationsRequest
                                        • UpdateComponentConfigurationRequest
                                        • DeleteFactoryComponentConfigurationsRequest
                                        • PidSet
                                        • SnaphsotId
                                        • GenericFailureReport
                                        • BatchFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#request-definitions","title":"Request definitions","text":""},{"location":"references/rest-apis/rest-configuration-service-v2/#getsnapshots","title":"GET/snapshots","text":"
                                      • REST API path : /services/configuration/v2/snapshots
                                      • description : Returns the ids of the snapshots currently stored on the device.
                                      • responses :
                                        • 200
                                        • description : The snapshot id set.
                                        • response body :
                                          • SnapshotIdSet
                                        • 500
                                        • description : An unexpected internal error occurred.
                                        • response body :
                                          • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#getfactorycomponents","title":"GET/factoryComponents","text":"
                                      • REST API path : /services/configuration/v2/factoryComponents
                                      • description : Returns the ids of the component factories available on the device.
                                      • responses :
                                        • 200
                                        • description : The factory pid set.
                                        • response body :
                                          • PidSet
                                        • 500
                                        • description : An unexpected internal error occurred.
                                        • response body :
                                          • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#postfactorycomponents","title":"POST/factoryComponents","text":"
                                      • REST API path : /services/configuration/v2/factoryComponents
                                      • description : This is a batch request that allows to create one or more factory component instances and optionally create a new snapshot.
                                      • request body :
                                        • CreateFactoryComponentConfigurationsRequest
                                      • responses :
                                        • 200
                                        • description : The request succeeded.
                                        • 400
                                        • description : The request body is not valid JSON or it contains invalid parameters.
                                        • response body :
                                          • GenericFailureReport
                                        • 500
                                        • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: create:$pid for component creation operations, where $pid is the pid of the instance, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

                                        • response body :

                                          Variants:

                                          • object
                                            • GenericFailureReport
                                          • object
                                            • BatchFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#delfactorycomponentsbypid","title":"DEL/factoryComponents/byPid","text":"
                                      • REST API path : /services/configuration/v2/factoryComponents/byPid
                                      • description : This is a batch request that allows to delete one or more factory component instances and optionally create a new snapshot.
                                      • request body :
                                        • DeleteFactoryComponentConfigurationsRequest
                                      • responses :
                                        • 200
                                        • description : The request succeeded.
                                        • 400
                                        • description : The request body is not valid JSON or it contains invalid parameters.
                                        • response body :
                                          • GenericFailureReport
                                        • 500
                                        • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: delete:$pid for component delete operations, where $pid is the pid of the instance, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

                                        • response body :

                                          Variants:

                                          • object
                                            • GenericFailureReport
                                          • object
                                            • BatchFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#getfactorycomponentsocd","title":"GET/factoryComponents/ocd","text":"
                                      • REST API path : /services/configuration/v2/factoryComponents/ocd
                                      • description : Returns the OCD of the components created by the factories available on the device without the need of creating an instance. This request returns the information related to all available factories.
                                      • responses :
                                        • 200
                                        • description : The request succeeded. The pid property of the received configurations will report the factory pid, the ocd field will contain the definition, the properties field will not be present.
                                        • response body :
                                          • ComponentConfigurationList
                                        • 500
                                        • description : An unexpected internal error occurred.
                                        • response body :
                                          • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#postfactorycomponentsocdbyfactorypid","title":"POST/factoryComponents/ocd/byFactoryPid","text":"
                                      • REST API path : /services/configuration/v2/factoryComponents/ocd/byFactoryPid
                                      • description : Returns the OCD of the components created by the factories available on the device without the need of creating an instance. This request returns the information related to a user selected set of factories.
                                      • request body :
                                        • PidSet
                                      • responses :
                                        • 200
                                        • description : The request succeeded. The pid property of the received configurations will report the factory pid, the ocd field will contain the definition, the properties field will not be present. If the OCD for a given factory pid cannot be found, it will not be included in the result.
                                        • response body :
                                          • ComponentConfigurationList
                                        • 400
                                        • description : The request body is not valid JSON or it contains invalid parameters.
                                        • response body :
                                          • GenericFailureReport
                                        • 500
                                        • description : An unexpected internal error occurred.
                                        • response body :
                                          • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#getconfigurablecomponents","title":"GET/configurableComponents","text":"
                                      • REST API path : /services/configuration/v2/configurableComponents
                                      • description : Returns the list of the pids available on the system.
                                      • responses :
                                        • 200
                                        • description : The request succeeded.
                                        • response body :
                                          • PidSet
                                        • 500
                                        • description : An unexpected internal error occurred.
                                        • response body :
                                          • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#getconfigurablecomponentspidswithfactory","title":"GET/configurableComponents/pidsWithFactory","text":"
                                      • REST API path : /services/configuration/v2/configurableComponents/pidsWithFactory
                                      • description : Returns the list of the pids available on the system, reporting also the factory pid where applicable.
                                      • responses :
                                        • 200
                                        • description : The request succeeded.
                                        • response body :
                                          • PidAndFactoryPidSet
                                        • 500
                                        • description : An unexpected internal error occurred.
                                        • response body :
                                          • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#getconfigurablecomponentsconfigurations","title":"GET/configurableComponents/configurations","text":"
                                      • REST API path : /services/configuration/v2/configurableComponents/configurations
                                      • description : Returns all of component configurations available on the system. This request will return the pid, ocd and properties.
                                      • responses :
                                        • 200
                                        • description : The request succeeded.
                                        • response body :
                                          • ComponentConfigurationList
                                        • 500
                                        • description : An unexpected internal error occurred.
                                        • response body :
                                          • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#postconfigurablecomponentsconfigurationsbypid","title":"POST/configurableComponents/configurations/byPid","text":"
                                      • REST API path : /services/configuration/v2/configurableComponents/configurations/byPid
                                      • description : Returns a user selected set of configurations. This request will return the pid, ocd and properties.
                                      • request body :
                                        • PidSet
                                      • responses :
                                        • 200
                                        • description : The request succeeded. If the configuration for a given pid cannot be found, it will not be included in the result.
                                        • response body :
                                          • ComponentConfigurationList
                                        • 400
                                        • description : The request body is not valid JSON or it contains invalid parameters.
                                        • response body :
                                          • GenericFailureReport
                                        • 500
                                        • description : An unexpected internal error occurred.
                                        • response body :
                                          • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#postconfigurablecomponentsconfigurationsbypid_default","title":"POST/configurableComponents/configurations/byPid/_default","text":"
                                      • REST API path : /services/configuration/v2/configurableComponents/configurations/byPid/_default
                                      • description : Returns the default configuration for a given set of component pids. The default configurations are generated basing on component definition only, user applied modifications will not be taken into account. This request will return the pid, ocd and properties.
                                      • request body :
                                        • PidSet
                                      • responses :
                                        • 200
                                        • description : The request succeeded. If the configuration for a given pid cannot be found, it will not be included in the result.
                                        • response body :
                                          • ComponentConfigurationList
                                        • 400
                                        • description : The request body is not valid JSON or it contains invalid parameters.
                                        • response body :
                                          • GenericFailureReport
                                        • 500
                                        • description : An unexpected internal error occurred.
                                        • response body :
                                          • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#putconfigurablecomponentsconfigurations_update","title":"PUT/configurableComponents/configurations/_update","text":"
                                      • REST API path : /services/configuration/v2/configurableComponents/configurations/_update
                                      • description : Updates a given set of component configurations. This request can be also used to apply a configuration snapshot.
                                      • request body :
                                        • UpdateComponentConfigurationRequest
                                      • responses :
                                        • 200
                                        • description : The request succeeded.
                                        • 400
                                        • description : The request body is not valid JSON or it contains invalid parameters.
                                        • response body :
                                          • GenericFailureReport
                                        • 500
                                        • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: update:$pid for component update operations, where $pid is the pid of the instance, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

                                        • response body :

                                          Variants:

                                          • object
                                            • GenericFailureReport
                                          • object
                                            • BatchFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#execsnapshots_write","title":"EXEC/snapshots/_write","text":"
                                      • REST API path : /services/configuration/v2/snapshots/_write
                                      • description : Requests the device to create a new snasphot based on the current defice configuration. If this request is used through REST API, the POST method must be used.
                                      • responses :
                                        • 200
                                        • description : The request succeeded. The result is the identifier of the new snsapsot
                                        • response body :
                                          • SnaphsotId
                                        • 500
                                        • description : An unexpected internal error occurred.
                                        • response body :
                                          • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#execsnapshots_rollback","title":"EXEC/snapshots/_rollback","text":"
                                      • REST API path : /services/configuration/v2/snapshots/_rollback
                                      • description : Rollbacks the framework to the last saved snapshot if available. If this request is used through REST API, the POST method must be used.
                                      • responses :
                                        • 200
                                        • description : The request succeeded. The result contains the id of the snapshot used for rollback.
                                        • response body :
                                          • SnaphsotId
                                        • 500
                                        • description : An unexpected internal error occurred.
                                        • response body :
                                          • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#execsnapshotsbyid_rollback","title":"EXEC/snapshots/byId/_rollback","text":"
                                      • REST API path : /services/configuration/v2/snapshots/byId/_rollback
                                      • description : Performs a rollback to the snapshot id specified by the user.
                                      • responses :
                                        • 200
                                        • description : The request succeeded.
                                        • 400
                                        • description : The request body is not valid JSON or it contains invalid parameters.
                                        • response body :
                                          • GenericFailureReport
                                        • 500
                                        • description : An unexpected internal error occurred.
                                        • response body :
                                          • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#json-definitions","title":"JSON definitions","text":""},{"location":"references/rest-apis/rest-configuration-service-v2/#pidandfactorypidset","title":"PidAndFactoryPidSet","text":"

                                      Represents a set of pids with the corresponding factory pid. Properties:

                                      • components: array The set of pids and factory pids

                                        • array elements: object The pid and factory pid Properties:

                                        • pid: string The component pid.

                                        • factoryPid: string
                                          • optional Can be missing if the described component is not a factory instance. The factory pid
                                      {\n  \"components\": [\n    {\n      \"factoryPid\": \"org.eclipse.kura.core.db.H2DbService\",\n      \"pid\": \"org.eclipse.kura.db.H2DbService\"\n    },\n    {\n      \"factoryPid\": \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\",\n      \"pid\": \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\"\n    },\n    {\n      \"pid\": \"org.eclipse.kura.web.Console\"\n    }\n  ]\n}\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#snapshotidset","title":"SnapshotIdSet","text":"

                                      An object decribing a set of configuration snapshot ids Properties:

                                      • ids: array The set of snapshot ids.
                                        • array elements: number A snapshot id.
                                      {\n  \"ids\": [\n    0,\n    1638438049921,\n    1638438146960,\n    1638439710944,\n    1638439717931,\n    1638439734077,\n    1638439767252,\n    1638521986953,\n    1638521993692,\n    1638522572822\n  ]\n}\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#propertytype","title":"PropertyType","text":"

                                      A string that describes the type of a configuration property. * Possible values * STRING * LONG * DOUBLE * FLOAT * INTEGER * BYTE * CHAR * BOOLEAN * SHORT * PASSWORD

                                      \"STRING\"\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#configurationproperty","title":"ConfigurationProperty","text":"

                                      An object describing a configuration property. Properties:

                                      • type: string (enumerated)
                                        • PropertyType
                                      • value: variant

                                      • optional In requests, this field can be omitted or set to null to assign the null value to a non required configuration property. Describes the property value. The value type depends on the type property. Variants:

                                        • number If type is LONG, DOUBLE, FLOAT, INTEGER, BYTE or SHORT and the property does not represent an array.
                                        • string If type is STRING, PASSWORD or CHAR and the property is not an array. In case of CHAR type, the value must have a length of 1.
                                        • bool If type is BOOLEAN and the property is not an array
                                        • array If type is LONG, DOUBLE, FLOAT, INTEGER, BYTE or SHORT and the property represents an array.
                                          • array elements: number The property values as numbers.
                                        • array If type is STRING, PASSWORD or CHAR and the property is an array.
                                          • array elements: string The property values as strings. In case of CHAR type, the values must have a length of 1.
                                        • array If type is BOOLEAN and the property is an array
                                          • array elements: bool The property values as booleans.

                                      {\n  \"type\": \"STRING\",\n  \"value\": \"foo\"\n}\n
                                      {\n  \"type\": \"STRING\",\n  \"value\": [\n    \"foo\",\n    \"bar\"\n  ]\n}\n
                                      {\n  \"type\": \"INTEGER\",\n  \"value\": 12\n}\n
                                      {\n  \"type\": \"LONG\",\n  \"value\": [\n    1,\n    2,\n    3,\n    4\n  ]\n}\n
                                      {\n  \"type\": \"PASSWORD\",\n  \"value\": \"myPassword\"\n}\n
                                      {\n  \"type\": \"PASSWORD\",\n  \"value\": [\n    \"my\",\n    \"password\",\n    \"array\"\n  ]\n}\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#configurationproperties","title":"ConfigurationProperties","text":"

                                      An object representing a set of configuration properties. The members of this object represent configuration property, the member names represent the configuration property ids. This object can have a variable number of members. Properties:

                                      • propertyName: object
                                        • ConfigurationProperty
                                      {\n  \"KeystoreService.target\": {\n    \"type\": \"STRING\",\n    \"value\": \"(kura.service.pid=HttpsKeystore)\"\n  },\n  \"https.client.auth.ports\": {\n    \"type\": \"INTEGER\",\n    \"value\": [\n      4443\n    ]\n  },\n  \"https.client.revocation.soft.fail\": {\n    \"type\": \"BOOLEAN\",\n    \"value\": false\n  },\n  \"https.ports\": {\n    \"type\": \"INTEGER\",\n    \"value\": [\n      443\n    ]\n  },\n  \"https.revocation.check.enabled\": {\n    \"type\": \"BOOLEAN\",\n    \"value\": false\n  },\n  \"kura.service.pid\": {\n    \"type\": \"STRING\",\n    \"value\": \"org.eclipse.kura.http.server.manager.HttpService\"\n  },\n  \"service.pid\": {\n    \"type\": \"STRING\",\n    \"value\": \"org.eclipse.kura.http.server.manager.HttpService\"\n  },\n  \"ssl.revocation.mode\": {\n    \"type\": \"STRING\",\n    \"value\": \"PREFER_OCSP\"\n  }\n}\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#option","title":"Option","text":"

                                      An object describing an allowed element for a multi choiche field. Properties:

                                      • label: string
                                      • optional This parameter may not be specified by component configuration. An user friendly label for the option.
                                      • value: string The option value encoded as a string.

                                      {\n  \"label\": \"Value 1\",\n  \"value\": \"1\"\n}\n
                                      {\n  \"value\": \"foo\"\n}\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#attributedefinition","title":"AttributeDefinition","text":"

                                      A descriptor of a configuration property. Properties:

                                      • id: string The id of the attribute definition. This field corresponds to the configuration property name.
                                      • type: string (enumerated)
                                        • PropertyType
                                      • name: string
                                      • optional This parameter may not be specified by component configuration. An user friendly name for the property.
                                      • description: string
                                      • optional This parameter may not be specified by component configuration. An user friendly description for the property.
                                      • cardinality: number An integer describing the property cardinality. If the value is 0, then the property is a singleton value (not an array), if it is > 0, then the configuration property is an array and this property specifies the maximum allowed array length.
                                      • min: string
                                      • optional This parameter may not be specified by component configuration. If not specified, the property does not have a minimum value. Specifies the minimum value for this property as a string.
                                      • max: string
                                      • optional This parameter may not be specified by component configuration. If not specified, the property does not have a maximum value. Specifies the maximum value for this property as a string.
                                      • isRequired: bool Specifies whether the configuration parameter is required or not.
                                      • defaultValue: string
                                      • optional This parameter may not be specified by component configuration. Specifies the default value for this property as a string.
                                      • option: array
                                      • optional If specified, describes a set of allowed values for the configuration property. The allowed values for this configuration properties
                                        • array elements: object
                                        • Option

                                      {\n  \"defaultValue\": \"false\",\n  \"description\": \"Specifies whether the DB server is enabled or not.\",\n  \"id\": \"db.server.enabled\",\n  \"isRequired\": true,\n  \"name\": \"db.server.enabled\",\n  \"type\": \"BOOLEAN\"\n}\n
                                      {\n  \"defaultValue\": \"TCP\",\n  \"description\": \"Specifies the server type, see http://www.h2database.com/javadoc/org/h2/tools/Server.html for more details.\",\n  \"id\": \"db.server.type\",\n  \"isRequired\": true,\n  \"name\": \"db.server.type\",\n  \"option\": [\n    {\n      \"label\": \"WEB\",\n      \"value\": \"WEB\"\n    },\n    {\n      \"label\": \"TCP\",\n      \"value\": \"TCP\"\n    },\n    {\n      \"label\": \"PG\",\n      \"value\": \"PG\"\n    }\n  ],\n  \"type\": \"STRING\"\n}\n

                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#objectclassdefinition","title":"ObjectClassDefinition","text":"

                                      Provides some metadata information about a component configuration. Properties:

                                      • ad: array The metadata about the configuration properties.
                                        • array elements: object
                                        • AttributeDefinition
                                      • icon: array

                                      • optional Can be missing if the OCD does not define icons. A list of icons that visually represent the configuration.

                                        • array elements: object

                                        Properties:

                                        • resource: string An identifier of the icon image resource.
                                        • size: number The icon width and height in pixels.
                                        • name: string A user friendly name for the component configuration.
                                        • description: string A user friendly description of the component configuration.
                                        • id: string An identifier of the component configuration.
                                      {\n  \"ad\": [\n    {\n      \"defaultValue\": \"false\",\n      \"description\": \"The WatchdogService monitors CriticalComponents and reboots the system if one of them hangs. Once enabled the WatchdogService starts refreshing the watchdog device, which will reset the system if WatchdogService hangs.\",\n      \"id\": \"enabled\",\n      \"isRequired\": true,\n      \"name\": \"Watchdog enable\",\n      \"type\": \"BOOLEAN\"\n    },\n    {\n      \"defaultValue\": \"10000\",\n      \"description\": \"WatchdogService's refresh interval in ms of the Watchdog device. The value can be set between 1 and 60 seconds and should not be set to a value greater or equal to the Watchdog device's timeout value\",\n      \"id\": \"pingInterval\",\n      \"isRequired\": true,\n      \"max\": \"60000\",\n      \"name\": \"Watchdog refresh interval\",\n      \"type\": \"INTEGER\"\n    },\n    {\n      \"defaultValue\": \"/dev/watchdog\",\n      \"description\": \"Watchdog device path e.g. /dev/watchdog.\",\n      \"id\": \"watchdogDevice\",\n      \"isRequired\": true,\n      \"name\": \"Watchdog device path\",\n      \"type\": \"STRING\"\n    },\n    {\n      \"defaultValue\": \"/opt/eclipse/kura/data/kura-reboot-cause\",\n      \"description\": \"The path for the file that will contain the reboot cause information.\",\n      \"id\": \"rebootCauseFilePath\",\n      \"isRequired\": true,\n      \"name\": \"Reboot Cause File Path\",\n      \"type\": \"STRING\"\n    }\n  ],\n  \"description\": \"The WatchdogService handles the hardware watchdog of the platform.  The parameter define the ping periodicity of the hardware watchdog to ensure it does not reboot. The WatchdogService will reset the watchdog timeout, can disable it (where supported) with the Magic Character, but cannot set the refresh rate of a watchdog device.\",\n  \"icon\": [\n    {\n      \"resource\": \"WatchdogService\",\n      \"size\": 32\n    }\n  ],\n  \"id\": \"org.eclipse.kura.watchdog.WatchdogService\",\n  \"name\": \"WatchdogService\"\n}\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#componentconfiguration","title":"ComponentConfiguration","text":"

                                      Describes a component configuration. Properties:

                                      • pid: string The identifier of this configuration.
                                      • ocd: object
                                      • optional Can be omitted in some requests and responses, see request documentation for more information.
                                        • ObjectClassDefinition
                                      • properties: object
                                      • optional Can be omitted in some requests and responses, see request documentation for more information.
                                        • ConfigurationProperties
                                      {\n  \"definition\": {\n    \"ad\": [\n      {\n        \"cardinality\": 3,\n        \"description\": \"If set to a non empty list, REST API access will be allowed only on the specified ports. If set to an empty list, access will be allowed on all ports. Please make sure that the allowed ports are open in HttpService and Firewall configuration.\",\n        \"id\": \"allowed.ports\",\n        \"isRequired\": false,\n        \"max\": \"65535\",\n        \"min\": \"1\",\n        \"name\": \"Allowed ports\",\n        \"type\": \"INTEGER\"\n      }\n    ],\n    \"description\": \"This service allows to configure settings related to Kura REST APIs\",\n    \"id\": \"org.eclipse.kura.internal.rest.provider.RestService\",\n    \"name\": \"RestService\"\n  },\n  \"pid\": \"org.eclipse.kura.internal.rest.provider.RestService\",\n  \"properties\": {\n    \"kura.service.pid\": {\n      \"type\": \"STRING\",\n      \"value\": \"org.eclipse.kura.internal.rest.provider.RestService\"\n    },\n    \"service.pid\": {\n      \"type\": \"STRING\",\n      \"value\": \"org.eclipse.kura.internal.rest.provider.RestService\"\n    }\n  }\n}\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#componentconfigurationlist","title":"ComponentConfigurationList","text":"

                                      Represents a list of component configurations. Properties:

                                      • configs: array The component configurations
                                        • array elements: object
                                        • ComponentConfiguration
                                      {\n  \"configs\": [\n    {\n      \"definition\": {\n        \"ad\": [\n          {\n            \"defaultValue\": \"true\",\n            \"description\": \"Whether or not to enable the ClockService\",\n            \"id\": \"enabled\",\n            \"isRequired\": true,\n            \"name\": \"enabled\",\n            \"type\": \"BOOLEAN\"\n          },\n          {\n            \"defaultValue\": \"true\",\n            \"description\": \"Whether or not to sync the system hardware clock after the system time gets set\",\n            \"id\": \"clock.set.hwclock\",\n            \"isRequired\": true,\n            \"name\": \"clock.set.hwclock\",\n            \"type\": \"BOOLEAN\"\n          },\n          {\n            \"defaultValue\": \"java-ntp\",\n            \"description\": \"Source for setting the system clock. Verify the availabiliy of the selected provider before activate it.\",\n            \"id\": \"clock.provider\",\n            \"isRequired\": true,\n            \"name\": \"clock.provider\",\n            \"option\": [\n              {\n                \"label\": \"java-ntp\",\n                \"value\": \"java-ntp\"\n              },\n              {\n                \"label\": \"ntpd\",\n                \"value\": \"ntpd\"\n              },\n              {\n                \"label\": \"chrony-advanced\",\n                \"value\": \"chrony-advanced\"\n              }\n            ],\n            \"type\": \"STRING\"\n          },\n          {\n            \"defaultValue\": \"0.pool.ntp.org\",\n            \"description\": \"The hostname that provides the system time via NTP\",\n            \"id\": \"clock.ntp.host\",\n            \"isRequired\": true,\n            \"name\": \"clock.ntp.host\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"defaultValue\": \"123\",\n            \"description\": \"The port number that provides the system time via NTP\",\n            \"id\": \"clock.ntp.port\",\n            \"isRequired\": true,\n            \"max\": \"65535\",\n            \"min\": \"1\",\n            \"name\": \"clock.ntp.port\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"defaultValue\": \"10000\",\n            \"description\": \"The NTP timeout in milliseconds\",\n            \"id\": \"clock.ntp.timeout\",\n            \"isRequired\": true,\n            \"min\": \"1000\",\n            \"name\": \"clock.ntp.timeout\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"defaultValue\": \"0\",\n            \"description\": \"The maximum number of retries for the initial synchronization (with interval clock.ntp.retry.interval). If set to 0 the service will retry forever.\",\n            \"id\": \"clock.ntp.max-retry\",\n            \"isRequired\": true,\n            \"min\": \"0\",\n            \"name\": \"clock.ntp.max-retry\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"defaultValue\": \"5\",\n            \"description\": \"When sync fails, interval in seconds between each retry.\",\n            \"id\": \"clock.ntp.retry.interval\",\n            \"isRequired\": true,\n            \"min\": \"1\",\n            \"name\": \"clock.ntp.retry.interval\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"defaultValue\": \"3600\",\n            \"description\": \"Whether or not to sync the clock and if so, the frequency in seconds.  If less than zero - no update, if equal to zero - sync once at startup, if greater than zero - the frequency in seconds to perform a new clock sync\",\n            \"id\": \"clock.ntp.refresh-interval\",\n            \"isRequired\": true,\n            \"name\": \"clock.ntp.refresh-interval\",\n            \"type\": \"INTEGER\"\n          },\n          {\n            \"defaultValue\": \"/dev/rtc0\",\n            \"description\": \"The RTC File Name. It defaults to /dev/rtc0. This option is not used if chrony-advanced option is selected in clock.provider.\",\n            \"id\": \"rtc.filename\",\n            \"isRequired\": true,\n            \"name\": \"RTC File Name\",\n            \"type\": \"STRING\"\n          },\n          {\n            \"description\": \"Chrony configuration file.|TextArea\",\n            \"id\": \"chrony.advanced.config\",\n            \"isRequired\": false,\n            \"name\": \"Chrony Configuration\",\n            \"type\": \"STRING\"\n          }\n        ],\n        \"description\": \"ClockService Configuration\",\n        \"icon\": [\n          {\n            \"resource\": \"ClockService\",\n            \"size\": 32\n          }\n        ],\n        \"id\": \"org.eclipse.kura.clock.ClockService\",\n        \"name\": \"ClockService\"\n      },\n      \"pid\": \"org.eclipse.kura.clock.ClockService\",\n      \"properties\": {\n        \"clock.ntp.host\": {\n          \"type\": \"STRING\",\n          \"value\": \"0.pool.ntp.org\"\n        },\n        \"clock.ntp.max-retry\": {\n          \"type\": \"INTEGER\",\n          \"value\": 0\n        },\n        \"clock.ntp.port\": {\n          \"type\": \"INTEGER\",\n          \"value\": 123\n        },\n        \"clock.ntp.refresh-interval\": {\n          \"type\": \"INTEGER\",\n          \"value\": 3600\n        },\n        \"clock.ntp.retry.interval\": {\n          \"type\": \"INTEGER\",\n          \"value\": 5\n        },\n        \"clock.ntp.timeout\": {\n          \"type\": \"INTEGER\",\n          \"value\": 10000\n        },\n        \"clock.provider\": {\n          \"type\": \"STRING\",\n          \"value\": \"java-ntp\"\n        },\n        \"clock.set.hwclock\": {\n          \"type\": \"BOOLEAN\",\n          \"value\": true\n        },\n        \"enabled\": {\n          \"type\": \"BOOLEAN\",\n          \"value\": true\n        },\n        \"kura.service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.clock.ClockService\"\n        },\n        \"rtc.filename\": {\n          \"type\": \"STRING\",\n          \"value\": \"/dev/rtc0\"\n        },\n        \"service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.clock.ClockService\"\n        }\n      }\n    },\n    {\n      \"definition\": {\n        \"ad\": [\n          {\n            \"defaultValue\": \"(kura.service.pid=org.eclipse.kura.ssl.SslManagerService)\",\n            \"description\": \"Specifies, as an OSGi target filter, the pid of the SslManagerService used to create SSL connections for downloading packages.\",\n            \"id\": \"SslManagerService.target\",\n            \"isRequired\": true,\n            \"name\": \"SslManagerService Target Filter\",\n            \"type\": \"STRING\"\n          }\n        ],\n        \"description\": \"This service is responsible of managing the deployment packages installed on the system.\",\n        \"id\": \"org.eclipse.kura.deployment.agent\",\n        \"name\": \"DeploymentAgent\"\n      },\n      \"pid\": \"org.eclipse.kura.deployment.agent\",\n      \"properties\": {\n        \"SslManagerService.target\": {\n          \"type\": \"STRING\",\n          \"value\": \"(kura.service.pid=org.eclipse.kura.ssl.SslManagerService)\"\n        },\n        \"kura.service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.deployment.agent\"\n        },\n        \"service.pid\": {\n          \"type\": \"STRING\",\n          \"value\": \"org.eclipse.kura.deployment.agent\"\n        }\n      }\n    }\n  ]\n}\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#createfactorycomponentconfigurationsrequest","title":"CreateFactoryComponentConfigurationsRequest","text":"

                                      An object describing a factory component instance creation request. Properties:

                                      • configs: array The set of configurations to be created

                                        • array elements: object An object describing a factory component confguration. Properties:

                                        • pid: string The component pid.

                                        • factoryPid: string The component factory pid
                                        • properties: object
                                          • optional If omitted, the component innstance will be created with default configuration.
                                          • ConfigurationProperties
                                        • takeSnapshot: bool
                                        • optional The true value will be used as default if not explicitly specified Defines whether a new snapshot should be created after that the factory component configuration instances have been created.
                                      {\n  \"configs\": [\n    {\n      \"factoryPid\": \"org.eclipse.kura.core.db.H2DbServer\",\n      \"pid\": \"testComponent\",\n      \"properties\": {\n        \"db.server.type\": {\n          \"type\": \"STRING\",\n          \"value\": \"WEB\"\n        }\n      }\n    },\n    {\n      \"factoryPid\": \"org.eclipse.kura.core.db.H2DbServer\",\n      \"pid\": \"thirdComponent\"\n    }\n  ],\n  \"takeSnapshot\": true\n}\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#updatecomponentconfigurationrequest","title":"UpdateComponentConfigurationRequest","text":"

                                      An object that describes a set of configurations that need to be updated. Properties:

                                      • configs: array The configurations to be updated. The ocd field can be omitted, it will be ignored if specified.
                                        • array elements: object
                                        • ComponentConfiguration
                                      • takeSnapshot: bool
                                      • optional The true value will be used as default if not explicitly specified Defines whether a new snapshot should be created after that the component configurations have been applied.
                                      {\n  \"configs\": [\n    {\n      \"pid\": \"org.eclipse.kura.cloud.app.command.CommandCloudApp\",\n      \"properties\": {\n        \"command.enable\": {\n          \"type\": \"BOOLEAN\",\n          \"value\": true\n        },\n        \"command.timeout\": {\n          \"type\": \"INTEGER\",\n          \"value\": 60\n        }\n      }\n    },\n    {\n      \"pid\": \"org.eclipse.kura.position.PositionService\",\n      \"properties\": {\n        \"parity\": {\n          \"type\": \"STRING\",\n          \"value\": 0\n        }\n      }\n    }\n  ],\n  \"takeSnapshot\": true\n}\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#deletefactorycomponentconfigurationsrequest","title":"DeleteFactoryComponentConfigurationsRequest","text":"

                                      An object describing a factory component instance delete request. Properties:

                                      • pids: array The list of the pids of the factory component instances to be deleted.
                                        • array elements: string The component pid.
                                      • takeSnapshot: bool
                                      • optional The true value will be used as default if not explicitly specified Defines whether a new snapshot should be created after that the factory component configuration instances have been deleted.
                                      {\n  \"pids\": [\n    \"testComponent\",\n    \"otherComponent\"\n  ],\n  \"takeSnapshot\": true\n}\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#pidset","title":"PidSet","text":"

                                      Represents a set of pids or factory pids. Properties:

                                      • pids: array The set of pids
                                        • array elements: string The pid
                                      {\n  \"pids\": [\n    \"org.eclipse.kura.deployment.agent\",\n    \"org.eclipse.kura.clock.ClockService\"\n  ]\n}\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#snaphsotid","title":"SnaphsotId","text":"

                                      An object describing the identifier of a configuration snapshot. Properties:

                                      • id: number The snapshot id
                                      {\n  \"id\": 163655959932\n}\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#genericfailurereport","title":"GenericFailureReport","text":"

                                      An object reporting a failure message. Properties:

                                      • message: string A message describing the failure.
                                      {\n  \"message\": \"An unexpected error occurred.\"\n}\n
                                      "},{"location":"references/rest-apis/rest-configuration-service-v2/#batchfailurereport","title":"BatchFailureReport","text":"

                                      An object that is returned by requests that involve multiple operations, when at least one operation failed. This object report an error message for each of the operations that failed. The operations are identified by an id, see request documentation for more details. If an operation is not listed by this object, then the operation succeeded. Properties:

                                      • failures: array The list of operations that failed.

                                        • array elements: object An object reporting details about an operation failure. Properties:

                                        • id: string An identifier of the failed operation.

                                        • message: string A message describing the failure.
                                      {\n  \"failures\": [\n    {\n      \"id\": \"create:testComponent\",\n      \"message\": \"Invalid parameter. pid testComponent already exists\"\n    },\n    {\n      \"id\": \"create:otherComponent\",\n      \"message\": \"Invalid parameter. pid otherComponent already exists\"\n    }\n  ]\n}\n
                                      "},{"location":"references/rest-apis/rest-deploy-api/","title":"Rest Deploy v2 API","text":"

                                      The DeploymentRestService APIs provides methods to manage the installed deployment packages. Identities with rest.deploy permissions can access these APIs.

                                      "},{"location":"references/rest-apis/rest-deploy-api/#get-installed-packages","title":"Get installed packages","text":"
                                      • Description: Provides the list of all the deployment packages installed and tracked by the framework.
                                      • Method: GET
                                      • API PATH: /deploy/v2/
                                      "},{"location":"references/rest-apis/rest-deploy-api/#responses","title":"Responses","text":"
                                      • 200 OK status
                                      [{ \"name\": \"packageName\", \"version\": \"packageVersion\"}]\n
                                      "},{"location":"references/rest-apis/rest-deploy-api/#install-package-from-url","title":"Install package from URL","text":"
                                      • Description: Installs the deployment package specified in the InstallRequest. If the request was already issued for the same InstallRequest, it returns the status of the installation process.
                                      • Method: POST
                                      • API PATH: /deploy/v2/_install
                                      "},{"location":"references/rest-apis/rest-deploy-api/#request-body","title":"Request Body","text":"
                                      {\n  \"url\": \"deploymentPackageUrl\"\n}\n

                                      Example:

                                      {\n  \"url\": \"http://download.eclipse.org/kura/releases/4.1.0/org.eclipse.kura.demo.heater_1.0.500.dp\"\n}\n

                                      Please note that the url can refer to a .dp already in the device filesystem.

                                      "},{"location":"references/rest-apis/rest-deploy-api/#responses_1","title":"Responses","text":"
                                      • 200 OK status
                                      • 400 Bad request
                                      \"REQUEST_RECEIVED\"\n
                                      "},{"location":"references/rest-apis/rest-deploy-api/#install-package-from-upload","title":"Install package from upload","text":"
                                      • Description: Upload and install a Deployment Package.
                                      • Method: POST
                                      • API PATH: /deploy/v2/_upload
                                      "},{"location":"references/rest-apis/rest-deploy-api/#request-body_1","title":"Request Body","text":"

                                      The POST request body should be encoded in the multipart/form-data enctype, thus allowing for the upload of the Deployment Package file. The uploaded file is expected to be added in the file field of the form.

                                      "},{"location":"references/rest-apis/rest-deploy-api/#headers","title":"Headers","text":"
                                      • Content-Type: multipart/form-data
                                      "},{"location":"references/rest-apis/rest-deploy-api/#body-formdata","title":"Body (formdata)","text":"
                                      • file
                                      "},{"location":"references/rest-apis/rest-deploy-api/#example","title":"Example","text":"

                                      Example using curl:

                                      curl -X POST -k -u $USERNAME:$PASSWORD \\\n    --header 'Content-Type: multipart/form-data' \\\n    --form 'file=@\"/path/to/your/file.dp\"' \\\n    https://$ADDRESS/services/deploy/v2/_upload\n
                                      "},{"location":"references/rest-apis/rest-deploy-api/#responses_2","title":"Responses","text":"
                                      • 200 OK status
                                      • 400 Bad request
                                      \"REQUEST_RECEIVED\"\n
                                      "},{"location":"references/rest-apis/rest-deploy-api/#uninstall-a-package","title":"Uninstall a package","text":"
                                      • Description: Uninstalls the deployment package identified by the specified name. If the request was already issued, it reports the status of the uninstallation operation.
                                      • Method: DELETE
                                      • API PATH: /deploy/v2/{name}
                                      "},{"location":"references/rest-apis/rest-deploy-api/#responses_3","title":"Responses","text":"
                                      • 200 OK status
                                      \"REQUEST_RECEIVED\"\n
                                      "},{"location":"references/rest-apis/rest-deploy-api/#get-eclipse-marketplace-package-descriptor","title":"Get Eclipse Marketplace Package Descriptor","text":"
                                      • Description: Provides the Eclipse Marketplace Package Descriptor information of the deployment package identified by URL passed in the request.
                                      • Method: PUT
                                      • API PATH: /deploy/v2/_packageDescriptor
                                      "},{"location":"references/rest-apis/rest-deploy-api/#request-body_2","title":"Request Body","text":"
                                      {\n  \"url\": \"deploymentPackageUrl\"\n}\n

                                      Example:

                                      {\n  \"url\": \"http://marketplace.eclipse.org/marketplace-client-intro?mpc_install=5514714\"\n}\n
                                      "},{"location":"references/rest-apis/rest-deploy-api/#responses_4","title":"Responses","text":"
                                      • 200 OK status
                                      • 400 Bad request
                                      {\n   \"nodeId\":\"5514714\",\n   \"url\":\"https://marketplace.eclipse.org/content/ai-wire-component-eclipse-kura-5\",\n   \"dpUrl\":\"https://download.eclipse.org/kura/releases/5.3.0/org.eclipse.kura.wire.ai.component.provider-1.2.0.dp\",\n   \"minKuraVersion\":\"5.1.0\",\n   \"maxKuraVersion\":\"\",\n   \"currentKuraVersion\":\"5.4.0\",\n   \"isCompatible\":true\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/","title":"Rest Identity V1 API","text":"

                                      Warning

                                      This API id deprecated and superseded by the Identity V2 REST APIs.

                                      Note

                                      This API can also be accessed via the RequestHandler with app-id: IDN-V1.

                                      The IdentityRestService APIs provides methods to manage the system identities. Unless otherwise specified, identities with rest.identity permissions can access these APIs.

                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#post-methods","title":"POST methods","text":""},{"location":"references/rest-apis/rest-identity-api-v1/#create-user","title":"Create User","text":"
                                      • Description: This method allows to create a new user in the system.
                                      • Method: POST
                                      • API PATH: services/identity/v1/identities
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#request","title":"Request","text":"
                                      {\n    \"userName\": \"username\",\n    \"password\": \"password\",\n    \"passwordChangeNeeded\": false,\n    \"passwordAuthEnabled\": true,\n    \"permissions\": [\n        \"rest.identity\"\n    ]\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#responses","title":"Responses","text":"
                                      • 200 OK status
                                      • 400 Bad Request (Password strenght requirements not satisfied)
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#get-user-by-name","title":"Get User by Name","text":"
                                      • Description: This method allows to get data about an user in the system. The only considered field is the userName.
                                      • Method: POST
                                      • API PATH: services/identity/v1/identities/byName
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#request_1","title":"Request","text":"
                                      {\n    \"userName\": \"username\"\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#responses_1","title":"Responses","text":"
                                      {\n    \"userName\": \"kura.user.username\",\n    \"passwordAuthEnabled\": false,\n    \"passwordChangeNeeded\": false,\n    \"permissions\": []\n}\n
                                      • 200 OK status
                                      • 404 userName does not exist
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#get-methods","title":"GET methods","text":""},{"location":"references/rest-apis/rest-identity-api-v1/#get-defined-permissions","title":"Get defined permissions","text":"
                                      • Description: This method allows you to get the list of the permissions defined in the system
                                      • Method: GET
                                      • API PATH: services/identity/v1/definedPermissions

                                      No specific permission is required to access this resource.

                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#responses_2","title":"Responses","text":"
                                      {\n    \"permissions\": [\n        \"rest.command\",\n        \"rest.inventory\",\n        \"rest.configuration\",\n        \"rest.tamper.detection\",\n        \"rest.security\",\n        \"kura.cloud.connection.admin\",\n        \"rest.position\",\n        \"kura.packages.admin\",\n        \"kura.device\",\n        \"rest.wires.admin\",\n        \"kura.admin\",\n        \"rest.keystores\",\n        \"rest.assets\",\n        \"rest.system\",\n        \"kura.maintenance\",\n        \"kura.wires.admin\",\n        \"rest.identity\"\n    ]\n}\n
                                      • 200 OK status
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#get-users-configuration","title":"Get users configuration","text":"
                                      • Description: This method allows you to get the list of the users and their configuration on the system.
                                      • Method: GET
                                      • API PATH: services/identity/v1/identities
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#responses_3","title":"Responses","text":"
                                      {\n    \"userConfig\": [\n        {\n            \"userName\": \"admin\",\n            \"passwordAuthEnabled\": true,\n            \"passwordChangeNeeded\": false,\n            \"permissions\": [\n                \"kura.admin\"\n            ]\n        },\n        {\n            \"userName\": \"appadmin\",\n            \"passwordAuthEnabled\": true,\n            \"passwordChangeNeeded\": true,\n            \"permissions\": [\n                \"kura.cloud.connection.admin\",\n                \"kura.packages.admin\",\n                \"kura.wires.admin\"\n            ]\n        }\n    ]\n}\n
                                      • 200 OK status
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#get-password-requirements","title":"Get password requirements","text":"
                                      • Description: This method allows you to get the password requirements.
                                      • Method: GET
                                      • API PATH: services/identity/v1/passwordRequirements

                                      No specific permission is required to access this resource.

                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#responses_4","title":"Responses","text":"
                                      {\n    \"passwordMinimumLength\": 8,\n    \"passwordRequireDigits\": false,\n    \"passwordRequireSpecialChars\": false,\n    \"passwordRequireBothCases\": false\n}\n
                                      • 200 OK status
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#put-methods","title":"PUT methods","text":""},{"location":"references/rest-apis/rest-identity-api-v1/#update-user","title":"Update User","text":"
                                      • Description: This method allows to update an existing user in the system.
                                      • Method: PUT
                                      • API PATH: services/identity/v1/identities
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#request_2","title":"Request","text":"
                                      {\n    \"userName\": \"username\",\n    \"password\": \"password\",\n    \"passwordChangeNeeded\": false,\n    \"passwordAuthEnabled\": true,\n    \"permissions\": [\n        \"rest.identity\"\n    ]\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#responses_5","title":"Responses","text":"
                                      • 200 OK status
                                      • 400 Bad Request (Password strenght requirements not satisfied)
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#delete-methods","title":"DELETE methods","text":""},{"location":"references/rest-apis/rest-identity-api-v1/#delete-user","title":"Delete User","text":"
                                      • Description: This method allows to delete an existing user in the system. The only considered field is the userName.
                                      • Method: DELETE
                                      • API PATH: services/identity/v1/identities
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#request_3","title":"Request","text":"
                                      {\n    \"userName\": \"username\"\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v1/#responses_6","title":"Responses","text":"
                                      • 200 OK status
                                      • 404 userName does not exist
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/","title":"Rest Identity V2 API","text":"

                                      Note

                                      This API can also be accessed via the RequestHandler with app-id: IDN-V2.

                                      The IdentityRestService APIs provides methods to manage the system identities. Unless otherwise specified, identities with rest.identity permissions can access these APIs.

                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#post-methods","title":"POST methods","text":""},{"location":"references/rest-apis/rest-identity-api-v2/#create-user","title":"Create User","text":"
                                      • Description: This method allows to create a new identity in the system. Identity name must respect the requirements enforced by the IdentityService.
                                      • Method: POST
                                      • API PATH: services/identity/v2/identities
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#request","title":"Request","text":"
                                      {\n    \"name\": \"username\"\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#responses","title":"Responses","text":"
                                      • 200 OK status
                                      • 400 Missing or mispelled field name (eg: nme)
                                      • 409 Conflict (Identity already exists)
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#get-user-by-name","title":"Get User by Name","text":"
                                      • Description: This method allows to get data about an identity in the system. The request body's identity field is used to get only the name of specific identity. It is also possible to retrieve information about the specific user's component configuration, specifying the type of interest.
                                      • Method: POST
                                      • API PATH: services/identity/v2/identities/byName
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#request_1","title":"Request","text":"
                                      {\n    \"identity\": {\n        \"name\": \"test\"\n    }\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#response","title":"Response","text":"
                                      {\n    \"identity\": {\n        \"name\": \"username\"\n    }\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#request_2","title":"Request","text":"
                                      {\n    \"identity\": {\n        \"name\": \"username\"\n    }, \n    \"configurationComponents\": [\"AdditionalConfigurations\", \"AssignedPermissions\", \"PasswordConfiguration\"]\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#response_1","title":"Response","text":"
                                      {\n    \"identity\": {\n        \"name\": \"username\"\n    },\n    \"permissionConfiguration\": {\n        \"permissions\": [\n            {\n                \"name\": \"rest.identity\"\n            }\n        ]\n    },\n    \"passwordConfiguration\": {\n        \"passwordChangeNeeded\": false,\n        \"passwordAuthEnabled\": true\n    },\n    \"additionalConfigurations\": {\n        \"configurations\": []\n    }\n}\n
                                      • 200 OK status
                                      • 400 Missing or mispelled field name (eg: nme)
                                      • 404 Identity does not exist
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#get-user-default-configuration-by-name","title":"Get User Default Configuration by Name","text":"
                                      • Description: This method allows to get the default configuration data about an identity in the system. The request body's identity field is used to get only the name of specific identity. It is also possible to retrieve information about the specific user's component default configuration, specifying the type of interest. This method accepts also non-existing user's name as input: in this way it's possible to retrieve which is the default configuration applied when a user is created with the name field only.
                                      • Method: POST
                                      • API PATH: services/identity/v2/identities/default/byName
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#request_3","title":"Request","text":"
                                      {\n\"identity\": {\n        \"name\": \"username\"\n    }\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#response_2","title":"Response","text":"
                                      {\n    \"identity\": {\n        \"name\": \"username\"\n    }\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#request_4","title":"Request","text":"
                                      {\n    \"identity\": {\n        \"name\": \"username\"\n    }, \n    \"configurationComponents\": [\"AdditionalConfigurations\", \"AssignedPermissions\", \"PasswordConfiguration\"]\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#response_3","title":"Response","text":"
                                      {\n    \"identity\": {\n        \"name\": \"username\"\n    },\n    \"permissionConfiguration\": {\n        \"permissions\": []\n    },\n    \"passwordConfiguration\": {\n        \"passwordChangeNeeded\": false,\n        \"passwordAuthEnabled\": false\n    },\n    \"additionalConfigurations\": {\n        \"configurations\": []\n    }\n}\n
                                      • 200 OK status
                                      • 400 Missing or mispelled field name (eg: nme)
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#create-permission","title":"Create Permission","text":"
                                      • Description: This method allows to create a new permission in the system. Permission name must respect the requirements enforced by the IdentityService.
                                      • Method: POST
                                      • API PATH: services/identity/v2/permissions
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#request_5","title":"Request","text":"
                                      {\n    \"name\": \"permission\"\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_1","title":"Responses","text":"
                                      • 200 OK status
                                      • 400 Bad Request (Permission name not valid)
                                      • 409 Conflict (Permission already exists)
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#validate-identity-configuration","title":"Validate Identity Configuration","text":"
                                      • Description: Validates the provided list of identity configurations without performing any change to the system. It is possible to specify only the identity body field, or also the configurationComponents one.
                                      • Method: POST
                                      • API PATH: services/identity/v2/identities/validate
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#request_6","title":"Request","text":"
                                      {\n    \"identity\": {\n        \"name\": \"username\"\n    }, \n    \"configurationComponents\": [\"AdditionalConfigurations\", \"AssignedPermissions\", \"PasswordConfiguration\"]\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_2","title":"Responses","text":"
                                      • 200 OK status
                                      • 400 Missing or mispelled field name (eg: nme)
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#get-methods","title":"GET methods","text":""},{"location":"references/rest-apis/rest-identity-api-v2/#get-defined-permissions","title":"Get defined permissions","text":"
                                      • Description: This method allows you to get the list of the permissions defined in the system
                                      • Method: GET
                                      • API PATH: services/identity/v2/definedPermissions

                                      No specific permission is required to access this resource.

                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_3","title":"Responses","text":"
                                      [\n    {\n        \"name\": \"rest.identity\"\n    },\n    {\n        \"name\": \"rest.wires.admin\"\n    },\n    {\n        \"name\": \"kura.wires.admin\"\n    },\n    {\n        \"name\": \"kura.network.admin\"\n    },\n    {\n        \"name\": \"rest.network.status\"\n    },\n    {\n        \"name\": \"test-permission\"\n    },\n    {\n        \"name\": \"rest.keystores\"\n    },\n    {\n        \"name\": \"rest.assets\"\n    },\n    {\n        \"name\": \"rest.network.configuration\"\n    },\n    {\n        \"name\": \"kura.admin\"\n    },\n    {\n        \"name\": \"rest.cloudconnection\"\n    },\n    {\n        \"name\": \"kura.device\"\n    },\n    {\n        \"name\": \"rest.system\"\n    },\n    {\n        \"name\": \"kura.maintenance\"\n    },\n    {\n        \"name\": \"kura.packages.admin\"\n    },\n    {\n        \"name\": \"rest.tamper.detection\"\n    },\n    {\n        \"name\": \"rest.deploy\"\n    },\n    {\n        \"name\": \"rest.configuration\"\n    },\n    {\n        \"name\": \"kura.cloud.connection.admin\"\n    },\n    {\n        \"name\": \"rest.command\"\n    },\n    {\n        \"name\": \"rest.inventory\"\n    },\n    {\n        \"name\": \"rest.position\"\n    },\n    {\n        \"name\": \"rest.security\"\n    }\n]\n
                                      • 200 OK status
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#get-users-configuration","title":"Get users configuration","text":"
                                      • Description: This method allows you to get the list of the users and their configuration on the system.
                                      • Method: GET
                                      • API PATH: services/identity/v2/identities
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_4","title":"Responses","text":"
                                      [\n    {\n        \"identity\": {\n            \"name\": \"admin\"\n        },\n        \"permissionConfiguration\": {\n            \"permissions\": [\n                {\n                    \"name\": \"kura.admin\"\n                }\n            ]\n        },\n        \"passwordConfiguration\": {\n            \"passwordChangeNeeded\": false,\n            \"passwordAuthEnabled\": true\n        },\n        \"additionalConfigurations\": {\n            \"configurations\": []\n        }\n    },\n    {\n        \"identity\": {\n            \"name\": \"appadmin\"\n        },\n        \"permissionConfiguration\": {\n            \"permissions\": [\n                {\n                    \"name\": \"kura.packages.admin\"\n                },\n                {\n                    \"name\": \"kura.cloud.connection.admin\"\n                },\n                {\n                    \"name\": \"kura.wires.admin\"\n                }\n            ]\n        },\n        \"passwordConfiguration\": {\n            \"passwordChangeNeeded\": true,\n            \"passwordAuthEnabled\": true\n        },\n        \"additionalConfigurations\": {\n            \"configurations\": []\n        }\n    },\n    {\n        \"identity\": {\n            \"name\": \"netadmin\"\n        },\n        \"permissionConfiguration\": {\n            \"permissions\": [\n                {\n                    \"name\": \"kura.device\"\n                },\n                {\n                    \"name\": \"kura.network.admin\"\n                },\n                {\n                    \"name\": \"kura.cloud.connection.admin\"\n                }\n            ]\n        },\n        \"passwordConfiguration\": {\n            \"passwordChangeNeeded\": true,\n            \"passwordAuthEnabled\": true\n        },\n        \"additionalConfigurations\": {\n            \"configurations\": []\n        }\n    }\n]\n
                                      • 200 OK status
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#get-password-strenght-requirements","title":"Get Password Strenght Requirements","text":"
                                      • Description: This method allows you to get the password requirements.
                                      • Method: GET
                                      • API PATH: services/identity/v2/passwordStrenghtRequirements

                                      No specific permission is required to access this resource.

                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_5","title":"Responses","text":"
                                      {\n    \"passwordMinimumLength\": 8,\n    \"digitsRequired\": false,\n    \"specialCharactersRequired\": false,\n    \"bothCasesRequired\": false\n}\n
                                      • 200 OK status
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#put-methods","title":"PUT methods","text":""},{"location":"references/rest-apis/rest-identity-api-v2/#update-identity","title":"Update Identity","text":"
                                      • Description: This method allows to update an existing identity in the system. New passwords must respect the requirements enforced by the IdentityService.
                                      • Method: PUT
                                      • API PATH: services/identity/v2/identities
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#request_7","title":"Request","text":"
                                      {\n    \"identity\": {\n        \"name\": \"username\"\n    },\n    \"permissionConfiguration\": {\n        \"permissions\": [\n            {\n                \"name\": \"rest.identity\"\n            }\n        ]\n    },\n    \"passwordConfiguration\": {\n        \"passwordChangeNeeded\": false,\n        \"passwordAuthEnabled\": true,\n        \"password\": \"password123\"\n    }\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_6","title":"Responses","text":"
                                      • 200 OK status
                                      • 400 Missing or mispelled field name (eg: nme)
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#delete-methods","title":"DELETE methods","text":""},{"location":"references/rest-apis/rest-identity-api-v2/#delete-user","title":"Delete User","text":"
                                      • Description: This method allows to delete an existing user in the system. The only considered field is the name.
                                      • Method: DELETE
                                      • API PATH: services/identity/v2/identities
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#request_8","title":"Request","text":"
                                      {\n    \"name\": \"username\"\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_7","title":"Responses","text":"
                                      • 200 OK status
                                      • 404 username does not exist
                                      • 400 Missing or mispelled field name (eg: nme)
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#delete-permission","title":"Delete Permission","text":"
                                      • Description: This method allows to delete an existing permission in the system. The only considered field is the name.
                                      • Method: DELETE
                                      • API PATH: services/identity/v2/permissions
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#request_9","title":"Request","text":"
                                      {\n    \"name\": \"permission\"\n}\n
                                      "},{"location":"references/rest-apis/rest-identity-api-v2/#responses_8","title":"Responses","text":"
                                      • 200 OK status
                                      • 404 permission does not exist
                                      • 400 Missing or mispelled field name (eg: nme)
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-inventory-api/","title":"Rest Inventory v1 API","text":""},{"location":"references/rest-apis/rest-inventory-api/#global","title":"Global","text":""},{"location":"references/rest-apis/rest-inventory-api/#get-inventory-summary","title":"GET Inventory Summary","text":"
                                      • Method: GET
                                      • Description: returns a list of All Inventory Items
                                      • API PATH: /services/inventory/v1/inventory
                                      "},{"location":"references/rest-apis/rest-inventory-api/#response","title":"Response","text":"
                                      • 200 OK 
                                        {\n    \"inventory\":[\n        {\n            \"name\":\"adduser\",\n            \"version\":\"3.118\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"com.eclipsesource.jaxrs.provider.gson\",\n            \"version\":\"2.3.0.201602281253\",\n            \"type\":\"BUNDLE\"\n        },\n              {\n            \"name\":\"org.eclipse.kura.example.beacon\",\n            \"version\":\"1.0.500\",\n            \"type\":\"DP\"\n        }\n    ]\n}\n
                                      "},{"location":"references/rest-apis/rest-inventory-api/#bundles","title":"Bundles","text":""},{"location":"references/rest-apis/rest-inventory-api/#get-bundles","title":"GET bundles","text":"
                                      • Method: GET
                                      • Description: returns a list of bundles.
                                      • API PATH: /services/inventory/v1/bundles
                                      "},{"location":"references/rest-apis/rest-inventory-api/#response_1","title":"Response","text":"
                                      • 200 OK 
                                        {\n    \"bundles\":[\n        {\n            \"name\":\"org.eclipse.osgi\",\n            \"version\":\"3.16.0.v20200828-0759\",\n            \"id\":0,\n            \"state\":\"ACTIVE\",\n            \"signed\":true\n        },\n        {\n            \"name\":\"org.eclipse.equinox.cm\",\n            \"version\":\"1.4.400.v20200422-1833\",\n            \"id\":1,\n            \"state\":\"ACTIVE\",\n            \"signed\":false\n        }\n    ]\n}\n
                                      "},{"location":"references/rest-apis/rest-inventory-api/#start-bundle","title":"Start bundle","text":"
                                      • Method: POST
                                      • API PATH: /services/inventory/v1/bundles/_start
                                      "},{"location":"references/rest-apis/rest-inventory-api/#request-body","title":"Request Body","text":"
                                      { \n\"name\":\"org.eclipse.osgi\",\n}\n
                                      "},{"location":"references/rest-apis/rest-inventory-api/#responses","title":"Responses","text":"
                                      • 200 OK status
                                      • 400 Bad Request (Malformed Client JSON)
                                      • 404 Resource Not Found
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-inventory-api/#stop-bundle","title":"Stop bundle","text":"
                                      • Method: POST
                                      • API PATH: /services/inventory/v1/bundles/_stop
                                      "},{"location":"references/rest-apis/rest-inventory-api/#request-body_1","title":"Request Body","text":"
                                      { \n\"name\":\"org.eclipse.osgi\",\n}\n
                                      "},{"location":"references/rest-apis/rest-inventory-api/#responses_1","title":"Responses","text":"
                                      • 200 OK status
                                      • 400 Bad Request (Malformed Client JSON)
                                      • 404 Resource Not Found
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-inventory-api/#deployment-packages","title":"Deployment Packages","text":""},{"location":"references/rest-apis/rest-inventory-api/#get-packages","title":"GET packages","text":"
                                      • Method: GET
                                      • Description: returns a list of deployment packages.
                                      • API PATH: /services/inventory/v1/deploymentPackages
                                      "},{"location":"references/rest-apis/rest-inventory-api/#response_2","title":"Response","text":"
                                      • 200 OK 
                                        {\n    \"deploymentPackages\":[\n        {\n            \"name\":\"org.eclipse.kura.example.beacon\",\n            \"version\":\"1.0.500\",\n            \"signed\":false,\n            \"bundles\":[\n                {\n                    \"name\":\"org.eclipse.kura.example.beacon\",\n                    \"version\":\"1.0.500\",\n                    \"id\": 171,\n                    \"state\": \"ACTIVE\",\n                    \"signed\": false\n                }\n            ]\n        }\n    ]\n}\n
                                      "},{"location":"references/rest-apis/rest-inventory-api/#system-packages-debrpmapk","title":"System Packages (DEB/RPM/APK)","text":""},{"location":"references/rest-apis/rest-inventory-api/#get-system-packages","title":"GET System Packages","text":"
                                      • Method: GET
                                      • Description: returns a list of system packages.
                                      • API PATH: /services/inventory/v1/systemPackages
                                      "},{"location":"references/rest-apis/rest-inventory-api/#response_3","title":"Response","text":"
                                      • 200 OK 
                                        {\n    \"systemPackages\":[\n        {\n            \"name\":\"adduser\",\n            \"version\":\"3.118\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"alsa-utils\",\n            \"version\":\"1.1.8-2\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"ansible\",\n            \"version\":\"2.7.7+dfsg-1\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apparmor\",\n            \"version\":\"2.13.2-10\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt\",\n            \"version\":\"1.8.2.1\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt-listchanges\",\n            \"version\":\"3.19\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt-transport-https\",\n            \"version\":\"1.8.2.2\",\n            \"type\":\"DEB\"\n        },\n        {\n            \"name\":\"apt-utils\",\n            \"version\":\"1.8.2.1\",\n            \"type\":\"DEB\"\n        }\n    ]\n}\n
                                      "},{"location":"references/rest-apis/rest-inventory-api/#containers","title":"Containers","text":""},{"location":"references/rest-apis/rest-inventory-api/#get-containers","title":"GET Containers","text":"
                                      • Method: Get
                                      • Description: returns a list of Containers.
                                      • API PATH: /services/inventory/v1/containers
                                      "},{"location":"references/rest-apis/rest-inventory-api/#response_4","title":"Response","text":"
                                      • 200 OK 
                                        {\n  \"containers\":\n  [\n    {\n      \"name\":\"container_1\",\n      \"version\":\"nginx:latest\",\n      \"type\":\"DOCKER\",\n      \"state\":\"active\"\n    }\n  ]\n}\n
                                      "},{"location":"references/rest-apis/rest-inventory-api/#start-container","title":"Start container","text":"
                                      • Method: POST
                                      • API PATH: /services/inventory/v1/containers/_start
                                      "},{"location":"references/rest-apis/rest-inventory-api/#request-body_2","title":"Request Body","text":"
                                      {\n    \"name\":\"container_1\",\n    \"version\": \"nginx:latest\",\n}\n
                                      "},{"location":"references/rest-apis/rest-inventory-api/#responses_2","title":"Responses","text":"
                                      • 200 OK
                                      • 400 Bad Request (Malformed Client JSON)
                                      • 404 Resource Not Found
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-inventory-api/#stop-container","title":"Stop container","text":"
                                      • Method: POST
                                      • API PATH: /services/inventory/v1/containers/_stop
                                      "},{"location":"references/rest-apis/rest-inventory-api/#request-body_3","title":"Request Body","text":"
                                      {\n    \"name\":\"container_1\",\n    \"version\": \"nginx:latest\",\n}\n
                                      "},{"location":"references/rest-apis/rest-inventory-api/#responses_3","title":"Responses","text":"
                                      • 200 OK
                                      • 400 Bad Request (Malformed Client JSON)
                                      • 404 Resource Not Found
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-inventory-api/#images","title":"Images","text":""},{"location":"references/rest-apis/rest-inventory-api/#images-images","title":"Images Images","text":"
                                      • Method: Get
                                      • Description: returns a list of Images.
                                      • API PATH: /services/inventory/v1/images
                                      "},{"location":"references/rest-apis/rest-inventory-api/#response_5","title":"Response","text":"
                                      • 200 OK 
                                        {\n  \"containers\":\n  [\n    {\n      \"name\":\"nginx\",\n      \"version\":\"latest\",\n      \"type\":\"ContainerImage\",\n    }\n  ]\n}\n
                                      "},{"location":"references/rest-apis/rest-inventory-api/#delete-image","title":"Delete Image","text":"
                                      • Method: POST
                                      • API PATH: /services/inventory/v1/images/_delete
                                      "},{"location":"references/rest-apis/rest-inventory-api/#request-body_4","title":"Request Body","text":"
                                      {\n      \"name\":\"nginx\",\n      \"version\":\"latest\",\n}\n
                                      "},{"location":"references/rest-apis/rest-inventory-api/#responses_4","title":"Responses","text":"
                                      • 200 OK
                                      • 400 Bad Request (Malformed Client JSON)
                                      • 404 Resource Not Found
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-inventory-api/#states","title":"States","text":""},{"location":"references/rest-apis/rest-inventory-api/#bundle-states","title":"Bundle States","text":"
                                      -   `ACTIVE`: Container is running\n-   `INSTALLED`: Container is starting\n-   `UNINSTALLED`: Container has failed, or is stopped\n-   `UNKNOWN`: Container state can not be determined\n
                                      "},{"location":"references/rest-apis/rest-inventory-api/#container-states","title":"Container States","text":"
                                      -   `active`: Container is running\n-   `installed`: Container is starting\n-   `uninstalled`: Container has failed, or is stopped\n-   `unknown`: Container state can not be determined\n
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/","title":"Network Configuration V1 REST APIs","text":"

                                      This section describes the networkConfiguration/v1 REST APIs, that allow to retrieve information about the network configuration of the running system. The services pid for which it's possible to obtain and update the configurations are:

                                      • org.eclipse.kura.net.admin.NetworkConfigurationService: which manages the network configuration of the system, so the network interfaces along with their network configuration (Ip4/Ip6 settings, DHCP, Nat, and so on)
                                      • org.eclipse.kura.net.admin.FirewallConfigurationService: which manages the Ip4 firewall configurations (open ports, port forwarding and masquerading for IPv4 protocol)
                                      • org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6: which manages the Ip6 firewall configurations (open ports, port forwarding and masquerading for IPv6 protocol)

                                      To access these REST APIs, an identity with rest.network.configuration permission assigned is required.

                                      • Request definitions
                                        • GET/configurableComponents
                                        • GET/configurableComponents/configurations
                                        • POST/configurableComponents/configurations/byPid
                                        • POST/configurableComponents/configurations/byPid/_default
                                        • PUT/configurableComponents/configurations/_update
                                        • GET/factoryComponents
                                        • POST/factoryComponents
                                        • DEL/factoryComponents/byPid
                                        • GET/factoryComponents/ocd
                                        • POST/factoryComponents/ocd/byFactoryPid
                                      • JSON definitions
                                        • BatchFailureReport
                                        • ComponentConfigurationList
                                        • GenericFailureReport
                                        • PidSet
                                        • UpdateComponentConfigurationRequest
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#request-definitions","title":"Request definitions","text":""},{"location":"references/rest-apis/rest-network-configuration-api/#getconfigurablecomponents","title":"GET/configurableComponents","text":"
                                      • REST API path : /services/networkConfiguration/v1/configurableComponents
                                      • description : Returns the list of the available services that manages the network configurations on the system.
                                      • responses :
                                        • 200
                                          • description : The request succeeded.
                                          • response body :
                                            • PidSet
                                        • 500
                                          • description : An unexpected internal error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#getconfigurablecomponentsconfigurations","title":"GET/configurableComponents/configurations","text":"
                                      • REST API path : /services/networkConfiguration/v1/configurableComponents/configurations
                                      • description : Returns all of network component configurations available on the system. This request will return the pid, ocd and properties.
                                      • responses :
                                        • 200
                                          • description : The request succeeded.
                                          • response body :
                                            • ComponentConfigurationList
                                        • 500
                                          • description : An unexpected internal error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#postconfigurablecomponentsconfigurationsbypid","title":"POST/configurableComponents/configurations/byPid","text":"
                                      • REST API path : /services/networkConfiguration/v1/configurableComponents/configurations/byPid
                                      • description : Returns a user selected set of network configurations. This request will return the pid, ocd and properties.
                                      • request body :
                                        • PidSet
                                      • responses :
                                        • 200
                                          • description : The request succeeded. If the network configuration for a given pid cannot be found, it will not be included in the result.
                                          • response body :
                                            • ComponentConfigurationList
                                        • 400
                                          • description : The request body is not valid JSON or it contains invalid parameters.
                                          • response body :
                                            • GenericFailureReport
                                        • 500
                                          • description : An unexpected internal error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#postconfigurablecomponentsconfigurationsbypid_default","title":"POST/configurableComponents/configurations/byPid/_default","text":"
                                      • REST API path : /services/networkConfiguration/v1/configurableComponents/configurations/byPid/_default
                                      • description : Returns the default network configuration for a given set of network component pids. The default configurations are generated basing on component definition only, user applied modifications will not be taken into account. This request will return the pid, ocd and properties.
                                      • request body :
                                        • PidSet
                                      • responses :
                                        • 200
                                          • description : The request succeeded. If the network configuration for a given pid cannot be found, it will not be included in the result.
                                          • response body :
                                            • ComponentConfigurationList
                                        • 400
                                          • description : The request body is not valid JSON or it contains invalid parameters.
                                          • response body :
                                            • GenericFailureReport
                                        • 500
                                          • description : An unexpected internal error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#putconfigurablecomponentsconfigurations_update","title":"PUT/configurableComponents/configurations/_update","text":"
                                      • REST API path : /services/networkConfiguration/v1/configurableComponents/configurations/_update
                                      • description : Updates a given set of network component configurations. This request can be also used to apply a network configuration snapshot.
                                      • request body :
                                        • UpdateComponentConfigurationRequest
                                      • responses :
                                        • 200
                                          • description : The request succeeded.
                                        • 400
                                          • description : The request body is not valid JSON or it contains invalid parameters.
                                          • response body :
                                            • GenericFailureReport
                                        • 500
                                          • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: update:$pid for component update operations, where $pid is the pid of the instance, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.
                                          • response body :
                                            • Variants:
                                              • object
                                                • GenericFailureReport
                                              • object
                                                • BatchFailureReport

                                      Warning

                                      factoryComponents endopoints are available in the current version of Kura for future compatibility. Currently, as of Kura 5.4.0, there are no network related components that are factory components.

                                      The endopoints that should return a list of pids will always return an empty array, while those that should create, delete or update a component will always return a 500 error.

                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#getfactorycomponents","title":"GET/factoryComponents","text":"
                                      • REST API path : /services/networkConfiguration/v1/factoryComponents
                                      • description : Returns the ids of the network component factories available on the device.
                                      • responses :
                                        • 200
                                          • description : The factory pid set.
                                          • response body :
                                            • PidSet
                                        • 500
                                          • description : An unexpected internal error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#postfactorycomponents","title":"POST/factoryComponents","text":"
                                      • REST API path : /services/networkConfiguration/v1/factoryComponents
                                      • description : This is a batch request that allows to create one or more network factory component instances and optionally create a new snapshot.
                                      • request body :
                                        • CreateFactoryComponentConfigurationsRequest
                                      • responses :
                                        • 200
                                          • description : The request succeeded.
                                        • 400
                                          • description : The request body is not valid JSON or it contains invalid parameters.
                                          • response body :
                                            • GenericFailureReport

                                        • 500

                                          • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: create:$pid for component creation operations, where $pid is the pid of the instance, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.

                                          • response body :

                                            • Variants:
                                              • object
                                                • GenericFailureReport
                                              • object
                                                • BatchFailureReport
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#delfactorycomponentsbypid","title":"DEL/factoryComponents/byPid","text":"
                                      • REST API path : /services/networkConfiguration/v1/factoryComponents/byPid
                                      • description : This is a batch request that allows to delete one or more network factory component instances and optionally create a new snapshot.
                                      • request body :
                                        • DeleteFactoryComponentConfigurationsRequest
                                      • responses :
                                        • 200
                                          • description : The request succeeded.
                                        • 400
                                          • description : The request body is not valid JSON or it contains invalid parameters.
                                          • response body :
                                            • GenericFailureReport
                                        • 500
                                          • description : In case of processing errors, the device will attempt to return a detailed error response containing a message describing the failure reason for each operation. The operation ids are the following: delete:$pid for component delete operations, where $pid is the pid of the instance, and snapshot, for the snapshot creation operation. In case of an unexpected failure, a generic error response will be returned.
                                          • response body :
                                            • Variants:
                                              • object
                                                • GenericFailureReport
                                              • object
                                                • BatchFailureReport
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#getfactorycomponentsocd","title":"GET/factoryComponents/ocd","text":"
                                      • REST API path : /services/networkConfiguration/v1/factoryComponents/ocd
                                      • description : Returns the OCD of the network components created by the factories available on the device without the need of creating an instance. This request returns the information related to all available network factories.
                                      • responses :
                                        • 200
                                          • description : The request succeeded. The pid property of the received configurations will report the factory pid, the ocd field will contain the definition, the properties field will not be present.
                                          • response body :
                                            • ComponentConfigurationList
                                        • 500
                                          • description : An unexpected internal error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#postfactorycomponentsocdbyfactorypid","title":"POST/factoryComponents/ocd/byFactoryPid","text":"
                                      • REST API path : /services/networkConfiguration/v1/factoryComponents/ocd/byFactoryPid
                                      • description : Returns the OCD of the components created by the factories available on the device without the need of creating an instance. This request returns the information related to a user selected set of factories.
                                      • request body :
                                        • PidSet
                                      • responses :
                                        • 200
                                          • description : The request succeeded. The pid property of the received configurations will report the factory pid, the ocd field will contain the definition, the properties field will not be present. If the OCD for a given factory pid cannot be found, it will not be included in the result.
                                          • response body :
                                            • ComponentConfigurationList
                                        • 400
                                          • description : The request body is not valid JSON or it contains invalid parameters.
                                          • response body :
                                            • GenericFailureReport
                                        • 500
                                          • description : An unexpected internal error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#json-definitions","title":"JSON definitions","text":""},{"location":"references/rest-apis/rest-network-configuration-api/#batchfailurereport","title":"BatchFailureReport","text":"

                                      An object that is returned by requests that involve multiple operations, when at least one operation failed. This object report an error message for each of the operations that failed. The operations are identified by an id, see request documentation for more details. If an operation is not listed by this object, then the operation succeeded. Properties:

                                      • failures: array The list of operations that failed.

                                        • array elements: object An object reporting details about an operation failure. Properties:

                                        • id: string An identifier of the failed operation.

                                        • message: string A message describing the failure.
                                      {\n  \"failures\": [\n    {\n      \"id\": \"create:testComponent\",\n      \"message\": \"Invalid parameter. pid testComponent already exists\"\n    },\n    {\n      \"id\": \"create:otherComponent\",\n      \"message\": \"Invalid parameter. pid otherComponent already exists\"\n    }\n  ]\n}\n
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#componentconfigurationlist","title":"ComponentConfigurationList","text":"

                                      Represents a list of component configurations. Properties:

                                      • configs: array The component configurations
                                        • array elements: object
                                        • ComponentConfiguration
                                      {\n    \"configs\": [\n        {\n            \"pid\": \"org.eclipse.kura.net.admin.FirewallConfigurationService\",\n            \"definition\": {\n                \"ad\": [\n                    {\n                        \"name\": \"firewall.open.ports\",\n                        \"description\": \"The list of firewall opened ports.\",\n                        \"id\": \"firewall.open.ports\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"firewall.port.forwarding\",\n                        \"description\": \"The list of firewall port forwarding rules.\",\n                        \"id\": \"firewall.port.forwarding\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"firewall.nat\",\n                        \"description\": \"The list of firewall NAT rules.\",\n                        \"id\": \"firewall.nat\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"\",\n                        \"isRequired\": true\n                    }\n                ],\n                \"name\": \"FirewallConfigurationService\",\n                \"description\": \"Firewall Configuration Service\",\n                \"id\": \"org.eclipse.kura.net.admin.FirewallConfigurationService\"\n            },\n            \"properties\": {\n                \"firewall.open.ports\": {\n                    \"value\": \"22,tcp,0.0.0.0/0,eth0,,,,#;22,tcp,0.0.0.0/0,wlan0,,,,#;443,tcp,0.0.0.0/0,eth0,,,,#;443,tcp,0.0.0.0/0,wlan0,,,,#;4443,tcp,0.0.0.0/0,eth0,,,,#;4443,tcp,0.0.0.0/0,wlan0,,,,#;1450,tcp,0.0.0.0/0,eth0,,,,#;1450,tcp,0.0.0.0/0,wlan0,,,,#;5002,tcp,127.0.0.1/32,,,,,#;53,udp,0.0.0.0/0,eth0,,,,#;53,udp,0.0.0.0/0,wlan0,,,,#;67,udp,0.0.0.0/0,eth0,,,,#;67,udp,0.0.0.0/0,wlan0,,,,#;8000,tcp,0.0.0.0/0,eth0,,,,#;8000,tcp,0.0.0.0/0,wlan0,,,,#\",\n                    \"type\": \"STRING\"\n                },\n                \"firewall.port.forwarding\": {\n                    \"value\": \"\",\n                    \"type\": \"STRING\"\n                },\n                \"firewall.nat\": {\n                    \"value\": \"\",\n                    \"type\": \"STRING\"\n                },\n                \"kura.service.pid\": {\n                    \"value\": \"org.eclipse.kura.net.admin.FirewallConfigurationService\",\n                    \"type\": \"STRING\"\n                },\n                \"service.pid\": {\n                    \"value\": \"org.eclipse.kura.net.admin.FirewallConfigurationService\",\n                    \"type\": \"STRING\"\n                }\n            }\n        },\n        {\n            \"pid\": \"org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6\",\n            \"definition\": {\n                \"ad\": [\n                    {\n                        \"name\": \"firewall.ipv6.open.ports\",\n                        \"description\": \"The list of firewall opened ports.\",\n                        \"id\": \"firewall.ipv6.open.ports\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"firewall.ipv6.port.forwarding\",\n                        \"description\": \"The list of firewall port forwarding rules.\",\n                        \"id\": \"firewall.ipv6.port.forwarding\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"\",\n                        \"isRequired\": true\n                    },\n                    {\n                        \"name\": \"firewall.ipv6.nat\",\n                        \"description\": \"The list of firewall NAT rules.\",\n                        \"id\": \"firewall.ipv6.nat\",\n                        \"type\": \"STRING\",\n                        \"cardinality\": 0,\n                        \"defaultValue\": \"\",\n                        \"isRequired\": true\n                    }\n                ],\n                \"name\": \"FirewallConfigurationServiceIPv6\",\n                \"description\": \"Firewall Configuration Service IPV6\",\n                \"id\": \"org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6\"\n            },\n            \"properties\": {\n                \"firewall.ipv6.port.forwarding\": {\n                    \"value\": \"\",\n                    \"type\": \"STRING\"\n                },\n                \"firewall.ipv6.nat\": {\n                    \"value\": \"\",\n                    \"type\": \"STRING\"\n                },\n                \"firewall.ipv6.open.ports\": {\n                    \"value\": \"1234,tcp,0:0:0:0:0:0:0:0/0,,,,,#\",\n                    \"type\": \"STRING\"\n                },\n                \"kura.service.pid\": {\n                    \"value\": \"org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6\",\n                    \"type\": \"STRING\"\n                },\n                \"service.pid\": {\n                    \"value\": \"org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6\",\n                    \"type\": \"STRING\"\n                }\n            }\n        }\n    ]\n}\n
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#genericfailurereport","title":"GenericFailureReport","text":"

                                      An object reporting a failure message. Properties:

                                      • message: string A message describing the failure.
                                      {\n  \"message\": \"An unexpected error occurred.\"\n}\n
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#pidset","title":"PidSet","text":"

                                      Represents a set of pids or factory pids. Properties:

                                      • pids: array The set of pids
                                        • array elements: string The pid
                                      {\n    \"pids\": [\n        \"org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6\",\n        \"org.eclipse.kura.net.admin.NetworkConfigurationService\",\n        \"org.eclipse.kura.net.admin.FirewallConfigurationService\"\n    ]\n}\n
                                      "},{"location":"references/rest-apis/rest-network-configuration-api/#updatecomponentconfigurationrequest","title":"UpdateComponentConfigurationRequest","text":"

                                      An object that describes a set of configurations that need to be updated. Properties:

                                      • configs: array The configurations to be updated. The ocd field can be omitted, it will be ignored if specified.
                                        • array elements: object
                                        • ComponentConfiguration
                                      • takeSnapshot: bool
                                      • optional The true value will be used as default if not explicitly specified Defines whether a new snapshot should be created after that the component configurations have been applied.
                                      {\n    \"configs\": [\n        {\n            \"pid\": \"org.eclipse.kura.net.admin.ipv6.FirewallConfigurationServiceIPv6\",\n            \"properties\": {\n                \"firewall.ipv6.open.ports\": {\n                    \"value\": \"1234,tcp,0:0:0:0:0:0:0:0/0,,,,,#\",\n                    \"type\": \"STRING\"\n                }\n            }\n        },\n        {\n            \"pid\": \"org.eclipse.kura.net.admin.NetworkConfigurationService\",\n            \"properties\": {\n                \"net.interface.eth0.config.ip6.status\": {\n                    \"value\": \"netIPv6StatusUnmanaged\",\n                    \"type\": \"STRING\"\n                }\n            }\n        }\n    ],\n    \"takeSnapshot\": true\n}\n
                                      "},{"location":"references/rest-apis/rest-position-api/","title":"Position","text":"

                                      Note

                                      This API can also be accessed via the RequestHandler with app-id: POS-V1.

                                      "},{"location":"references/rest-apis/rest-position-api/#get-position","title":"Get Position","text":"
                                      • Method: GET
                                      • API PATH: /services/position/v1/position
                                      "},{"location":"references/rest-apis/rest-position-api/#responses","title":"Responses","text":"
                                      • 200 OK status
                                      {\n    //longitude of this position in degrees.\n    \"longitude\": 7.729571119959449,\n\n    //latitude of this position in degrees.\n    \"latitude\": 50.45345802194789,\n\n    //altitude of this position in meters.\n    \"altitude\": 1000.0,\n\n    //the ground speed of this position in meters per second.\n    \"speed\": 1000.0,\n\n    //the track of this position in degrees as a compass heading.\n    \"track\": 1000.0\n\n    //the gnss system used to retrieve position information\n    \"gnssType\": [\n        \"Gps\"\n    ]\n}\n
                                      • 500 Internal Server Error
                                        • will also occur when GPS Position is not locked 
                                          {\n    \"message\": \"Service unavailable. Position is not locked.\"\n}\n
                                      "},{"location":"references/rest-apis/rest-position-api/#get-date-time","title":"Get Date Time","text":"
                                      • Method: GET
                                      • API PATH: /services/position/v1/dateTime
                                      "},{"location":"references/rest-apis/rest-position-api/#responses_1","title":"Responses","text":"
                                      • 200 OK status
                                      {\n    //The dateTime string is formatted according to the ISO 8601 standard, and will always be in the UTC timezone. \n    \"dateTime\": \"2023-07-19T18:26:38Z\"\n}\n
                                      • 500 Internal Server Error
                                        • will also occur when GPS Position is not locked 
                                          {\n    \"message\": \"Service unavailable. Position is not locked.\"\n}\n
                                      "},{"location":"references/rest-apis/rest-position-api/#get-is-position-locked","title":"Get Is Position Locked","text":"
                                      • Method: GET
                                      • API PATH: /services/position/v1/isLocked
                                      "},{"location":"references/rest-apis/rest-position-api/#responses_2","title":"Responses","text":"
                                      • 200 OK status

                                      {\n    \"islocked\": false\n}\n
                                      - 500 Internal Server Error

                                      "},{"location":"references/rest-apis/rest-security-api-v1/","title":"Rest Security V1 API","text":"

                                      Warning

                                      This API id deprecated and superseded by the Security V2 REST APIs.

                                      Note

                                      This API can also be accessed via the RequestHandler with app-id: SEC-V1.

                                      This REST API requires a SecurityService implementation to be registered on the framework, which is not provided by the standard Kura distribution.

                                      The SecurityRestService APIs provides methods to manage the system security. Identities with rest.security permissions can access these APIs.

                                      "},{"location":"references/rest-apis/rest-security-api-v1/#post-methods","title":"POST methods","text":""},{"location":"references/rest-apis/rest-security-api-v1/#security-policy-fingerprint-reload","title":"Security policy fingerprint reload","text":"
                                      • Description: This method allows the reload of the security policy's fingerprint
                                      • Method: POST
                                      • API PATH: services/security/v1/security-policy-fingerprint/reload
                                      "},{"location":"references/rest-apis/rest-security-api-v1/#responses","title":"Responses","text":"
                                      • 200 OK status
                                      • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                                      "},{"location":"references/rest-apis/rest-security-api-v1/#reload-command-line-fingerprint","title":"Reload command line fingerprint","text":"
                                      • Description: This method allows the reload of the command line fingerprint
                                      • Method: POST
                                      • API PATH: services/security/v1/command-line-fingerprint/reload
                                      "},{"location":"references/rest-apis/rest-security-api-v1/#responses_1","title":"Responses","text":"
                                      • 200 OK status
                                      • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                                      "},{"location":"references/rest-apis/rest-security-api-v1/#get-methods","title":"GET methods","text":""},{"location":"references/rest-apis/rest-security-api-v1/#debug-enabled","title":"Debug enabled","text":"

                                      Note

                                      Access to this resource doesn't require the rest.security permission.

                                      • Description: This method allows you to check whether debug mode is enabled in the system.
                                      • Method: GET
                                      • API PATH: services/security/v1/debug-enabled
                                      "},{"location":"references/rest-apis/rest-security-api-v1/#responses_2","title":"Responses","text":"
                                      • 200 OK status 
                                        {\n    \"enabled\":true\n}\n
                                      • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                                      "},{"location":"references/rest-apis/rest-security-api-v2/","title":"Rest Security V2 API","text":"

                                      Note

                                      This API can also be accessed via the RequestHandler with app-id: SEC-V2.

                                      This REST API requires a SecurityService implementation to be registered on the framework, which is not provided by the standard Kura distribution.

                                      The SecurityRestService APIs provides methods to manage the system security. Identities with rest.security permissions can access these APIs.

                                      "},{"location":"references/rest-apis/rest-security-api-v2/#post-methods","title":"POST methods","text":""},{"location":"references/rest-apis/rest-security-api-v2/#security-policy-fingerprint-reload","title":"Security policy fingerprint reload","text":"
                                      • Description: This method allows the reload of the security policy's fingerprint
                                      • Method: POST
                                      • API PATH: services/security/v2/security-policy-fingerprint/reload
                                      "},{"location":"references/rest-apis/rest-security-api-v2/#responses","title":"Responses","text":"
                                      • 200 OK status
                                      • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                                      "},{"location":"references/rest-apis/rest-security-api-v2/#reload-command-line-fingerprint","title":"Reload command line fingerprint","text":"
                                      • Description: This method allows the reload of the command line fingerprint
                                      • Method: POST
                                      • API PATH: services/security/v2/command-line-fingerprint/reload
                                      "},{"location":"references/rest-apis/rest-security-api-v2/#responses_1","title":"Responses","text":"
                                      • 200 OK status
                                      • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                                      "},{"location":"references/rest-apis/rest-security-api-v2/#apply-default-production-security-policy","title":"Apply default production security policy","text":"
                                      • Description: This method allows to apply the default production security policy available in the system
                                      • Method: POST
                                      • API PATH: services/security/v2/security-policy/apply-default-production
                                      "},{"location":"references/rest-apis/rest-security-api-v2/#responses_2","title":"Responses","text":"
                                      • 200 OK status
                                      • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                                      "},{"location":"references/rest-apis/rest-security-api-v2/#apply-security-policy","title":"Apply security policy","text":"
                                      • Description: This method allows to apply the user provided security policy. The maximum allowed security policy size is 1MB.
                                      • Method: POST
                                      • API PATH: services/security/v2/security-policy/apply
                                      "},{"location":"references/rest-apis/rest-security-api-v2/#request","title":"Request","text":"
                                      <plain text security policy>\n
                                      "},{"location":"references/rest-apis/rest-security-api-v2/#responses_3","title":"Responses","text":"
                                      • 200 OK status
                                      • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                                      "},{"location":"references/rest-apis/rest-security-api-v2/#get-methods","title":"GET methods","text":""},{"location":"references/rest-apis/rest-security-api-v2/#debug-enabled","title":"Debug enabled","text":"

                                      Note

                                      Access to this resource doesn't require the rest.security permission.

                                      • Description: This method allows you to check whether debug mode is enabled in the system.
                                      • Method: GET
                                      • API PATH: services/security/v2/debug-enabled
                                      "},{"location":"references/rest-apis/rest-security-api-v2/#responses_4","title":"Responses","text":"
                                      • 200 OK status 
                                        {\n    \"enabled\":true\n}\n
                                      • 500 Internal Server Error (also returned when no SecurityService implementation is available)
                                      "},{"location":"references/rest-apis/rest-service-listing-api/","title":"Service Listing V1 REST APIs","text":"

                                      Note

                                      This API can also be accessed via the RequestHandler with app-id: SVCLIST-V1.

                                      The SVCLIST-V1 cloud request handler and the corresponding REST APIs allow to retrieve the identifiers (kura.service.pid) of the service running on the system that match user provided search criteria.

                                      • Request definitions
                                        • GET/servicePids
                                        • POST/servicePids/byInterface
                                        • POST/servicePids/byProperty
                                        • POST/servicePids/satisfyingReference
                                        • GET/factoryPids
                                        • POST/factoryPids/byInterface
                                        • POST/factoryPids/byProperty
                                      • JSON definitions
                                        • InterfaceNames
                                        • Reference
                                        • Filter
                                        • PropertyFilter
                                        • NotFilter
                                        • AndFilter
                                        • OrFilter
                                        • PidSet
                                        • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#request-definitions","title":"Request definitions","text":""},{"location":"references/rest-apis/rest-service-listing-api/#getservicepids","title":"GET/servicePids","text":"
                                      • REST API path : /services/serviceListing/v1/servicePids
                                      • description : Returns the pid of all services running in the framework.
                                      • responses :
                                        • 200
                                          • description : An object reporting the pid of all services running in the framework
                                          • response body :
                                            • PidSet
                                        • 500
                                          • description : If an unexpected failure occurs while retrieving the service pid list.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#postservicepidsbyinterface","title":"POST/servicePids/byInterface","text":"
                                      • REST API path : /services/serviceListing/v1/servicePids/byInterface
                                      • description : Returns the pid of the services providing all of the service interfaces specified in the request
                                      • request body :
                                        • InterfaceNames
                                      • responses :
                                        • 200
                                          • description : An object reporting the pid of the matching services.
                                          • response body :
                                            • PidSet
                                        • 400
                                          • description : If the request body is not syntactically correct.
                                          • response body :
                                            • GenericFailureReport
                                        • 500
                                          • description : If an unexpected failure occurs while retrieving the service pid list.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#postservicepidsbyproperty","title":"POST/servicePids/byProperty","text":"
                                      • REST API path : /services/serviceListing/v1/servicePids/byProperty
                                      • description : Returns the pid of the services whose properties match the specified filter.
                                      • request body :
                                        • Filter
                                      • responses :
                                        • 200
                                          • description : An object reporting the pid of the matching services.
                                          • response body :
                                            • PidSet
                                        • 400
                                          • description : If the request body is not syntactically correct.
                                          • response body :
                                            • GenericFailureReport
                                        • 500
                                          • description : If an unexpected failure occurs while retrieving the service pid list.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#postservicepidssatisfyingreference","title":"POST/servicePids/satisfyingReference","text":"
                                      • REST API path : /services/serviceListing/v1/servicePids/satisfyingReference
                                      • description : Returns the pid of the services that provide an interface compatible with a Declarative Service reference. Reference examples are KeystoreService and TruststoreKeystoreService defined by the org.eclipse.kura.ssl.SslManagerService component.
                                      • request body :
                                        • Reference
                                      • responses :
                                        • 200
                                          • description : An object reporting the pid of the matching services.
                                          • response body :
                                            • PidSet
                                        • 400
                                          • description : If the request body is not syntactically correct.
                                          • response body :
                                            • GenericFailureReport
                                        • 500
                                          • description : If an unexpected failure occurs while retrieving the service pid list.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#getfactorypids","title":"GET/factoryPids","text":"
                                      • REST API path : /services/serviceListing/v1/factoryPids
                                      • description : Returns the factory pids defined in the framework.
                                      • responses :
                                        • 200
                                          • description : An object reporting the factory pids defined in the framework.
                                          • response body :
                                            • PidSet
                                        • 500
                                          • description : If an unexpected failure occurs while retrieving the factory pid list.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#postfactorypidsbyinterface","title":"POST/factoryPids/byInterface","text":"
                                      • REST API path : /services/serviceListing/v1/factoryPids/byInterface
                                      • description : Returns the factory pid of the services that provide all of the specified interfaces.
                                      • request body :
                                        • InterfaceNames
                                      • responses :
                                        • 200
                                          • description : An object reporting the matching factory pids.
                                          • response body :
                                            • PidSet
                                        • 400
                                          • description : If the request body is not syntactically correct.
                                          • response body :
                                            • GenericFailureReport
                                        • 500
                                          • description : If an unexpected failure occurs while retrieving the factory pid list.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#postfactorypidsbyproperty","title":"POST/factoryPids/byProperty","text":"
                                      • REST API path : /services/serviceListing/v1/factoryPids/byProperty
                                      • description : Returns the list of factory pids whose properties match the specified filter.
                                      • request body :
                                        • Filter
                                      • responses :
                                        • 200
                                          • description : An object reporting the matching factory pids.
                                          • response body :
                                            • PidSet
                                        • 400
                                          • description : If the request body is not syntactically correct.
                                          • response body :
                                            • GenericFailureReport
                                        • 500
                                          • description : If an unexpected failure occurs while retrieving the factory pid list.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#json-definitions","title":"JSON definitions","text":""},{"location":"references/rest-apis/rest-service-listing-api/#interfacenames","title":"InterfaceNames","text":"

                                      A list of serviceinterface names.

                                      Properties:

                                      • interfaceNames: array The list of service interface names.

                                        • array element type: string A service interface name.
                                      {\n  \"interfaceNames\": [\n    \"org.eclipse.kura.security.keystore.KeystoreService\",\n    \"org.eclipse.kura.configuration.ConfigurableComponent\"\n  ]\n}\n
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#reference","title":"Reference","text":"

                                      A object specifying a service pid and a reference name.

                                      Properties:

                                      • pid: string The pid of the service containing the reference

                                      • referenceName: string The reference name

                                      {\n  \"pid\": \"org.eclipse.kura.ssl.SslManagerService\",\n  \"referenceName\": \"KeystoreService\"\n}\n
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#propertyfilter","title":"PropertyFilter","text":"

                                      A filter matching property keys and values. If the value property omitted, the filter will match if the property is set, regardless of the value. If the service property value is of array or list type, the filter will match if at least one of the elements match.

                                      Properties:

                                      • name: string The property name that should be matched, it must not contain spaces

                                      • value: string (optional) The property value that should be matched.

                                      {\n  \"name\": \"foo\",\n  \"value\": \"bar\"\n}\n
                                      {\n  \"name\": \"foo\"\n}\n

                                      "},{"location":"references/rest-apis/rest-service-listing-api/#notfilter","title":"NotFilter","text":"

                                      A filter that negates the result returned by the filter specified as the \"not\" propertiy.

                                      Properties:

                                      • not: object
                                        • Filter
                                      {\n  \"not\": {\n    \"name\": \"foo\",\n    \"value\": \"bar\"\n  }\n}\n
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#andfilter","title":"AndFilter","text":"

                                      A filter that matches if all filters specified by the \"and\" propertiy match.

                                      Properties:

                                      • and: array A list of filters that should be combined with the and operator

                                        • array element type: object
                                          • Filter
                                      {\n  \"and\": [\n    {\n      \"name\": \"foo\",\n      \"value\": \"bar\"\n    },\n    {\n      \"name\": \"baz\"\n    }\n  ]\n}\n
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#orfilter","title":"OrFilter","text":"

                                      A filter that matches if any of the filters specified by the \"or\" propertiy match.

                                      Properties:

                                      • or: array A list of filters that should be combined with the or operator

                                        • array element type: object
                                          • Filter
                                      {\n  \"or\": [\n    {\n      \"name\": \"foo\",\n      \"value\": \"bar\"\n    },\n    {\n      \"name\": \"baz\"\n    }\n  ]\n}\n
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#filter","title":"Filter","text":"

                                      A filter that operates on service properties. This object allows to specify basic property key/value matchers and the and or and not operators.

                                      • Variants:
                                      • object
                                        • PropertyFilter
                                      • object
                                        • NotFilter
                                      • object
                                        • AndFilter
                                      • object
                                        • OrFilter
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#pidset","title":"PidSet","text":"

                                      Represents a set of pids or factory pids.

                                      Properties:

                                      • pids: array The set of pids

                                        • array element type: string The pid
                                      {\n  \"pids\": [\n    \"org.eclipse.kura.cloud.app.command.CommandCloudApp\",\n    \"org.eclipse.kura.cloud.CloudService\",\n    \"org.eclipse.kura.cloud.publisher.CloudNotificationPublisher\",\n    \"org.eclipse.kura.container.orchestration.provider.ContainerOrchestrationService\",\n    \"org.eclipse.kura.core.data.transport.mqtt.MqttDataTransport\",\n    \"org.eclipse.kura.core.deployment.CloudDeploymentHandlerV2\",\n    \"org.eclipse.kura.crypto.CryptoService\",\n    \"org.eclipse.kura.data.DataService\",\n    \"org.eclipse.kura.db.H2DbService\",\n    \"org.eclipse.kura.deployment.agent\"\n  ]\n}\n
                                      "},{"location":"references/rest-apis/rest-service-listing-api/#genericfailurereport","title":"GenericFailureReport","text":"

                                      An object reporting a failure message.

                                      Properties:

                                      • message: string A message describing the failure.
                                      "},{"location":"references/rest-apis/rest-session-api/","title":"Session V1 Rest APIs","text":"

                                      The session management REST APIs allow to authenticate and establish an HTTP session. Using this APIs and creating a session is the recommended way for interact with Kura rest APIs from a browser based application.

                                      The supported workflows are the following:

                                      "},{"location":"references/rest-apis/rest-session-api/#login-and-resource-access-workflow","title":"Login and resource access workflow","text":"

                                      1. Try calling the GET/xsrfToken to get an XSRF token, if the request succeeds a vaild session is already available, it is possible to proceed to step 4.

                                        • It is not necessary to call GET/xsrfToken again until the current session expires, the obtained token is valid as long as the current session is valid.

                                      2. Call the POST/login/password or POST/login/certificate providing the credentials to create a new session.

                                        • This request will return a session cookie with the response. The session cookie name is currently JSESSIONID. It is important to provide the received cookies in successive requests using the Cookie HTTP request header. If this is not done, requests will fail with 401 code. If the request is performed by a browser, cookie management should be performed automatically.

                                        • If password authentication has been used and the response object reports that a password change is needed, perform the Update password workflow

                                      3. Repeat step 1. to get an XSRF token.

                                      4. Access the desired resources, set the XSRF token previously obtained as the value of the X-XSRF-Token HTTP header on each request. If a reuqest fails with error code 401, proceed to step 2.

                                      "},{"location":"references/rest-apis/rest-session-api/#login-example-with-curl","title":"Login example with curl","text":""},{"location":"references/rest-apis/rest-session-api/#1-login-with-usernamepassword-and-collect-the-session-cookie","title":"1. Login with username/password and collect the session cookie","text":"
                                      curl -k -X POST \\\n    -H 'Content-Type: application/json' \\\n    https://$ADDRESS/services/session/v1/login/password \\\n    -d '{\"password\": \"$KURA_PASS\", \"username\": \"$KURA_USER\"}' -v\n

                                      where:

                                      • $ADDRESS: is the address of the Kura instance
                                      • $KURA_USER: is the Kura username
                                      • $KURA_PASS: is the Kura password

                                      in the log you should find a JSESSIONID you'll use in subsequent requests

                                      ...\n< HTTP/1.1 200 OK\n< Date: Tue, 14 Nov 2023 08:17:26 GMT\n< Set-Cookie: JSESSIONID=myawesomecookie; Path=/; Secure; HttpOnly\n< Expires: Thu, 01 Jan 1970 00:00:00 GMT\n< Content-Type: application/json\n< Content-Length: 30\n<\n* Connection #0 to host 192.168.1.111 left intact\n{\"passwordChangeNeeded\":false}%\n
                                      "},{"location":"references/rest-apis/rest-session-api/#2-retrieve-the-xsrf-token","title":"2. Retrieve the XSRF token","text":"
                                      curl -k -X GET \\\n    -b \"JSESSIONID=myawesomecookie\" \\\n    https://$ADDRESS/services/session/v1/xsrfToken\n

                                      in the response you'll find your XSRF token you'll need to use in subsequent requests

                                      {\"xsrfToken\":\"myawesometoken\"}%\n
                                      "},{"location":"references/rest-apis/rest-session-api/#3-access-the-resource","title":"3. Access the resource","text":"

                                      Using the Cookie and the XSRF token you just retrieved you can access your desired resource

                                      curl -k -X GET \\\n    -H 'X-XSRF-Token: myawesometoken' \\\n    -b \"JSESSIONID=myawesomecookie\" \\\n    https://$ADDRESS/services/deploy/v2/\n
                                      "},{"location":"references/rest-apis/rest-session-api/#update-password-workflow","title":"Update password workflow","text":"

                                      1. Get an XSRF token using the GET/xsrfToken endpoint.

                                      2. Call the POST/changePassword, providing both the new and old password, make sure to include the X-XSRF-Token HTTP header.

                                      3. Repeat the Authentication and resource access workflow, starting from step 1.

                                      Sessions will expire after an inactivity interval that can be configured using the Session Inactivity Interval (Seconds) RestService configuration parameter. After session expiration, a new login will be necessary.

                                      In order to add protection against XSRF attacks, it is necessary to provide an token using the X-XSRF-Token HTTP header in all requests. The token can be obtained using the GET/xsrfToken endpoint after a successful login.

                                      Session will be invalidated if the current identity credentials are changed, in this case a new login will be necessary.

                                      If a password change is required for the current identity, it will be necessary to perform the Update password workflow before being able to access the other resources.

                                      "},{"location":"references/rest-apis/rest-session-api/#reference","title":"Reference","text":"
                                      • Request definitions
                                        • POST/login/password
                                        • POST/login/certificate
                                        • GET/xsrfToken
                                        • POST/logout
                                        • POST/changePassword
                                        • GET/currentIdentity
                                        • GET/authenticationMethods
                                      • JSON definitions
                                        • AuthenticationResponse
                                        • UsernamePassword
                                        • XSRFToken
                                        • PasswordChangeRequest
                                        • IdentityInfo
                                        • AuthenticationInfo
                                        • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-session-api/#request-definitions","title":"Request definitions","text":""},{"location":"references/rest-apis/rest-session-api/#postloginpassword","title":"POST/login/password","text":"
                                      • REST API path : /services/session/v1/login/password
                                      • description : Creates a new session by providing identity name and password. If the response reports that a password change is needed, it is necessary to update the current password in order to be able to access other REST APIs.
                                      • request body :
                                        • UsernamePassword
                                      • responses :
                                        • 200
                                          • description : Request succeeded.
                                          • response body :
                                            • AuthenticationResponse
                                        • 401
                                          • description : The provided credentials are not correct.
                                        • 500
                                          • description : An unexpected error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-session-api/#postlogincertificate","title":"POST/login/certificate","text":"
                                      • REST API path : /services/session/v1/login/certificate
                                      • description : Creates a new session using certificate based authentication. The response will report if the current identity needs a password change for informational purposes only. If authentication is performed using this endpoint, access to other REST APIs will be allowd even if password change is required for the current identity.
                                      • responses :
                                        • 200
                                          • description : Request succeeded.
                                          • response body :
                                            • AuthenticationResponse
                                        • 401
                                          • description : The provided credentials are not correct.
                                        • 500
                                          • description : An unexpected error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-session-api/#getxsrftoken","title":"GET/xsrfToken","text":"
                                      • REST API path : /services/session/v1/xsrfToken
                                      • description : Gets the XSRF token associated with the current session. It is not necessary to call this method again until the current session expires, the obtained token is valid as long as the current session is valid.
                                      • responses :
                                        • 200
                                          • description : Request succeeded, the XSRF token is returned in response body.
                                          • response body :
                                            • XSRFToken
                                        • 401
                                          • description : The current session is not valid.
                                        • 500
                                          • description : An unexpected error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-session-api/#postlogout","title":"POST/logout","text":"
                                      • REST API path : /services/session/v1/logout
                                      • description : Terminates the current session.
                                      • responses :
                                        • 204
                                          • description : Request succeeded, the session is no longer valid.
                                        • 401
                                          • description : The current session is not valid
                                        • 500
                                          • description : An unexpected error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-session-api/#postchangepassword","title":"POST/changePassword","text":"
                                      • REST API path : /services/session/v1/changePassword
                                      • description : Changes the password associated with the current identity. The new password will be validated against the currently configured password strength requirements. The current password strenght requirements can be retrieved using the identity/v1/passwordRequirements endpoint.
                                      • request body :
                                        • PasswordChangeRequest
                                      • responses :
                                        • 204
                                          • description : Request succeeded. The current password has been changed. The session is no longer valid, a new login is required.
                                        • 400
                                          • description : The new password is not valid. This can be due to the fact that it does not fullfill the current password strenght requirements.
                                        • 401
                                          • description : The current session is not valid.
                                        • 500
                                          • description : An unexpected error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-session-api/#getcurrentidentity","title":"GET/currentIdentity","text":"
                                      • REST API path : /services/session/v1/currentIdentity
                                      • description : Provides information about the currently authenticated identity.
                                      • responses :
                                        • 200
                                          • description : Request succeeded
                                          • response body :
                                            • IdentityInfo
                                        • 401
                                          • description : The current session is not valid.
                                        • 500
                                          • description : An unexpected error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-session-api/#getauthenticationmethods","title":"GET/authenticationMethods","text":"
                                      • REST API path : /services/session/v1/authenticationInfo
                                      • description : Provides information about the available authentication methods.
                                      • responses :
                                        • 200
                                          • description : Request succeeded
                                          • response body :
                                            • AuthenticationInfo
                                        • 401
                                          • description : The current session is not valid.
                                        • 500
                                          • description : An unexpected error occurred.
                                          • response body :
                                            • GenericFailureReport
                                      "},{"location":"references/rest-apis/rest-session-api/#json-definitions","title":"JSON definitions","text":""},{"location":"references/rest-apis/rest-session-api/#authenticationresponse","title":"AuthenticationResponse","text":"

                                      Represents the response for a successful authentication request.

                                      Properties:

                                      • passwordChangeNeeded: bool Determines whether a password change is required for the current identity.
                                      {\n  \"passwordChangeNeeded\": true\n}\n
                                      "},{"location":"references/rest-apis/rest-session-api/#usernamepassword","title":"UsernamePassword","text":"

                                      Contains an username and password.

                                      Properties:

                                      • username: string The user name.

                                      • password: string The user password.

                                      {\n  \"password\": \"bar\",\n  \"username\": \"foo\"\n}\n
                                      "},{"location":"references/rest-apis/rest-session-api/#xsrftoken","title":"XSRFToken","text":"

                                      An object containing an XSRF token.

                                      Properties:

                                      • xsrfToken: string The XSRF token.
                                      {\n  \"xsrfToken\": \"d2b68613-152f-41d5-8b5b-a19448ed0e4e\"\n}\n
                                      "},{"location":"references/rest-apis/rest-session-api/#passwordchangerequest","title":"PasswordChangeRequest","text":"

                                      An object containing the current password and a new password.

                                      Properties:

                                      • currentPassword: string The current password.

                                      • newPassword: string The new password.

                                      {\n  \"currentPassword\": \"foo\",\n  \"newPassword\": \"bar\"\n}\n
                                      "},{"location":"references/rest-apis/rest-session-api/#identityinfo","title":"IdentityInfo","text":"

                                      An object containing information about the current identity

                                      Properties:

                                      • name: string The name of the current identity.

                                      • passwordChangeNeeded: bool Determines whether a password change is required for the current identity.

                                      • permissions: array The list of permissions assigned to the current identity.

                                        • array element type: string The permission name.
                                      {\n  \"name\": \"foo\",\n  \"passwordChangeNeeded\": false,\n  \"permissions\": [\n    \"rest.bar\",\n    \"rest.assets\",\n    \"rest.foo\"\n  ]\n}\n
                                      "},{"location":"references/rest-apis/rest-session-api/#authenticationinfo","title":"AuthenticationInfo","text":"

                                      An object containing information about the enabled authentication methods.

                                      Properties:

                                      • passwordAuthenticationEnabled: bool Reports whether authentication using the login/password endpoint is enabled.

                                      • certificateAuthenticationEnabled: bool Reports whether authentication using the login/certificate endpoint is enabled.

                                      • certificateAuthenticationPorts: array (optional) The list of ports available for certificate based authentication. This property will be present only if certificateAuthenticationEnabled is true

                                        • array element type: string A port that can be used for certificate based authentication.

                                      • message: string (optional) Reports the content of the Login Banner, if configured on the device. A browser based application should display this message to the user before login if this property is set. This property will be missing if the login banner is not enabled.

                                      {\n  \"certificateAuthenticationEnabled\": false,\n  \"passwordAuthenticationEnabled\": true\n}\n
                                      {\n  \"certificateAuthenticationEnabled\": true,\n  \"certificateAuthenticationPorts\": [\n    4443,\n    4444\n  ],\n  \"passwordAuthenticationEnabled\": true\n}\n
                                      {\n  \"certificateAuthenticationEnabled\": false,\n  \"message\": \"login banner content\",\n  \"passwordAuthenticationEnabled\": true\n}\n

                                      "},{"location":"references/rest-apis/rest-session-api/#genericfailurereport","title":"GenericFailureReport","text":"

                                      An object reporting a failure message.

                                      Properties:

                                      • message: string A message describing the failure.
                                      "},{"location":"references/rest-apis/rest-system-api/","title":"System","text":"

                                      Note

                                      This API can also be accessed via the RequestHandler with app-id: SYS-V1.

                                      The SystemService APIs return properties that are divided into 3 categories:

                                      • framework properties,
                                      • extended properties, and
                                      • kura properties.

                                      Identities with rest.system permissions can access these APIs.

                                      "},{"location":"references/rest-apis/rest-system-api/#framework-properties","title":"Framework properties","text":"Property name Type biosVersion String cpuVersion String deviceName String modelId String modelName String partNumber String platform String numberOfProcessors Integer totalMemory Integer freeMemory Integer serialNumber String javaHome String javaVendor String javaVersion String javaVmInfo String javaVmName String javaVmVersion String javaVmVendor String jdkVendorVersion String osArch String osDistro String osDistroVersion String osName String osVersion String isLegacyBluetoothBeaconScan Boolean isLegacyPPPLoggingEnabled Boolean primaryMacAddress String primaryNetworkInterfaceName String fileSeparator String firmwareVersion String kuraDataDirectory String kuraFrameworkConfigDirectory String kuraHomeDirectory String kuraMarketplaceCompatibilityVersion String kuraSnapshotsCount Integer kuraSnapshotsDirectory String kuraStyleDirectory String kuraTemporaryConfigDirectory String kuraUserConfigDirectory String kuraVersion String kuraHaveWebInterface Boolean kuraHaveNetAdmin Boolean kuraWifiTopChannel Integer kuraDefaultNetVirtualDevicesConfig String osgiFirmwareName String osgiFirmwareVersion String commandUser String commandZipMaxUploadNumber Integer commandZipMaxUploadSize Integer"},{"location":"references/rest-apis/rest-system-api/#kura-properties","title":"Kura properties","text":"Property name Type kura.platform String org.osgi.framework.version String kura.user.config String java.vm.vendor String kura.name String file.command.zip.max.number String kura.legacy.ppp.logging.enabled String kura.tmp String kura.packages String build.version String kura.log.download.journal.fields String kura.data String os.name String dpa.read.timeout String file.upload.size.max String console.device.management.service.ignore String kura.command.user String kura.device.name String kura.partNumber String kura.project String kura.company String java.home String version String kura.style.dir String kura.model.id String file.separator String jdk.vendor.version String kura.model.name String kura.serialNumber.provider String kura.have.web.inter String kura.legacy.bluetooth.beacon.scan String java.runtime.version String kura.bios.version String kura.marketplace.compatibility.version String kura.framework.config String kura.firmware.version String kura.plugins String os.version String kura.version String org.osgi.framework.vendor String java.runtime.name String kura.log.download.sources String os.distribution String java.vm.name String kura.primary.network.interface String kura.home String file.command.zip.max.size String os.arch String os.distribution.version String file.upload.in.memory.size.threshold String kura.net.virtual.devices.config String kura.snapshots String kura.have.net.admin String java.vm.info String java.vm.version String dpa.connection.timeout String build.number String ccs.status.notification.url String

                                      Note

                                      Some of the listed properties, depending on the device, might not be available.

                                      "},{"location":"references/rest-apis/rest-system-api/#get-methods","title":"GET methods","text":""},{"location":"references/rest-apis/rest-system-api/#get-framework-properties","title":"Get framework properties","text":"
                                      • Method: GET
                                      • API PATH: /services/system/v1/properties/framework
                                      "},{"location":"references/rest-apis/rest-system-api/#responses","title":"Responses","text":"
                                      • 200 OK status
                                      {\n    \"biosVersion\": \"N/A\",\n    \"cpuVersion\": \"unknown\",\n    \"deviceName\": \"raspberry\",\n    \"modelId\": \"raspberry\",\n    \"modelName\": \"raspberry\",\n    \"partNumber\": \"raspberry\",\n    \"platform\": \"aarch64\",\n    \"numberOfProcessors\": 4,\n    \"totalMemory\": 506816,\n    \"freeMemory\": 380379,\n    \"serialNumber\": \"10000000ba7c7bfd\",\n    \"javaHome\": \"/usr/lib/jvm/java-8-openjdk-armhf/jre\",\n    \"javaVendor\": \"OpenJDK Runtime Environment\",\n    \"javaVersion\": \"1.8.0_312-8u312-b07-1+rpi1-b07\",\n    \"javaVmInfo\": \"mixed mode\",\n    \"javaVmName\": \"OpenJDK Client VM\",\n    \"javaVmVersion\": \"25.312-b07\",\n    \"javaVmVendor\": \"Temurin\",\n    \"jdkVendorVersion\": \"Zulu 8.70.0.24-SA-linux64\",\n    \"osArch\": \"arm\",\n    \"osDistro\": \"Linux\",\n    \"osDistroVersion\": \"N/A\",\n    \"osName\": \"Linux\",\n    \"osVersion\": \"6.1.21-v8+ #1642 SMP PREEMPT Mon Apr  3 17:24:16 BST 2023\",\n    \"isLegacyBluetoothBeaconScan\": false,\n    \"isLegacyPPPLoggingEnabled\": true,\n    \"primaryMacAddress\": \"E4:5F:01:35:7F:F4\",\n    \"primaryNetworkInterfaceName\": \"eth0\",\n    \"fileSeparator\": \"/\",\n    \"firmwareVersion\": \"N/A\",\n    \"kuraDataDirectory\": \"/opt/eclipse/kura/data\",\n    \"kuraFrameworkConfigDirectory\": \"/opt/eclipse/kura/framework\",\n    \"kuraHomeDirectory\": \"/opt/eclipse/kura\",\n    \"kuraMarketplaceCompatibilityVersion\": \"5.4.0.SNAPSHOT\",\n    \"kuraSnapshotsCount\": 10,\n    \"kuraSnapshotsDirectory\": \"/opt/eclipse/kura/user/snapshots\",\n    \"kuraStyleDirectory\": \"/opt/eclipse/kura/console/skin\",\n    \"kuraTemporaryConfigDirectory\": \"/tmp/.kura\",\n    \"kuraUserConfigDirectory\": \"/opt/eclipse/kura/user\",\n    \"kuraVersion\": \"KURA_5.4.0-SNAPSHOT\",\n    \"kuraHaveWebInterface\": true,\n    \"kuraHaveNetAdmin\": true,\n    \"kuraWifiTopChannel\": 2147483647,\n    \"kuraDefaultNetVirtualDevicesConfig\": \"netIPv4StatusUnmanaged\",\n    \"osgiFirmwareName\": \"Eclipse\",\n    \"osgiFirmwareVersion\": \"1.10.0\",\n    \"commandUser\": \"kura\",\n    \"commandZipMaxUploadNumber\": 1024,\n    \"commandZipMaxUploadSize\": 100\n}\n
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-system-api/#get-extended-properties","title":"Get extended properties","text":"
                                      • Method: GET
                                      • API PATH: /services/system/v1/properties/extended
                                      "},{"location":"references/rest-apis/rest-system-api/#responses_1","title":"Responses","text":"
                                      • 200 OK status
                                      {\n    \"version\": \"1.0\",\n    \"extendedProperties\": {\n        \"Device Info 1\": {\n            \"exampleKey1\": \"value1\",\n            \"exampleKey2\": \"value2\"\n        },\n        \"Device Info 2\": {\n            \"key1\": \"val1\",\n            \"key2\": \"val2\"\n        }\n    }\n}\n
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-system-api/#get-kura-properties","title":"Get Kura properties","text":"
                                      • Method: GET
                                      • API PATH: /services/system/v1/properties/kura
                                      "},{"location":"references/rest-apis/rest-system-api/#responses_2","title":"Responses","text":"
                                      • 200 OK status
                                      {\n    \"kuraProperties\": {\n        \"kura.platform\": \"aarch64\",\n        \"org.osgi.framework.version\": \"1.10.0\",\n        \"kura.user.config\": \"/opt/eclipse/kura/user\",\n        \"java.vm.vendor\": \"Temurin\",\n        \"kura.name\": \"Eclipse Kura\",\n        \"file.command.zip.max.number\": \"1024\",\n        \"kura.legacy.ppp.logging.enabled\": \"true\",\n        \"kura.tmp\": \"/tmp/.kura\",\n        \"kura.packages\": \"/opt/eclipse/kura/packages\",\n        \"build.version\": \"buildNumber\",\n        \"kura.log.download.journal.fields\": \"SYSLOG_IDENTIFIER,PRIORITY,MESSAGE,STACKTRACE\",\n        \"kura.data\": \"/opt/eclipse/kura/data\",\n        \"os.name\": \"Linux\",\n        \"dpa.read.timeout\": \"60000\",\n        \"file.upload.size.max\": \"-1\",\n        \"console.device.management.service.ignore\": \"org.eclipse.kura.net.admin.NetworkConfigurationService,org.eclipse.kura.net.admin.FirewallConfigurationService\",\n        \"kura.command.user\": \"kura\",\n        \"kura.device.name\": \"raspberry\",\n        \"kura.partNumber\": \"raspberry\",\n        \"kura.project\": \"generic-arm32\",\n        \"kura.company\": \"EUROTECH\",\n        \"java.home\": \"/usr/lib/jvm/java-8-openjdk-armhf/jre\",\n        \"version\": \"5.4.0-SNAPSHOT\",\n        \"kura.style.dir\": \"/opt/eclipse/kura/console/skin\",\n        \"kura.model.id\": \"raspberry\",\n        \"file.separator\": \"/\",\n        \"jdk.vendor.version\": \"Zulu 8.70.0.24-SA-linux64\",\n        \"kura.model.name\": \"raspberry\",\n        \"kura.serialNumber.provider\": \"cat /proc/cpuinfo | grep Serial | cut -d ' ' -f 2\",\n        \"kura.have.web.inter\": \"true\",\n        \"kura.legacy.bluetooth.beacon.scan\": \"false\",\n        \"java.runtime.version\": \"1.8.0_312-8u312-b07-1+rpi1-b07\",\n        \"kura.bios.version\": \"N/A\",\n        \"kura.marketplace.compatibility.version\": \"KURA_5.4.0-SNAPSHOT\",\n        \"kura.framework.config\": \"/opt/eclipse/kura/framework\",\n        \"kura.firmware.version\": \"N/A\",\n        \"kura.plugins\": \"/opt/eclipse/kura/plugins\",\n        \"os.version\": \"6.1.21-v8+ #1642 SMP PREEMPT Mon Apr  3 17:24:16 BST 2023\",\n        \"kura.version\": \"KURA_5.4.0-SNAPSHOT\",\n        \"org.osgi.framework.vendor\": \"Eclipse\",\n        \"java.runtime.name\": \"OpenJDK Runtime Environment\",\n        \"kura.log.download.sources\": \"/var/log\",\n        \"os.distribution\": \"Linux\",\n        \"java.vm.name\": \"OpenJDK Client VM\",\n        \"kura.primary.network.interface\": \"eth0\",\n        \"kura.home\": \"/opt/eclipse/kura\",\n        \"file.command.zip.max.size\": \"100\",\n        \"os.arch\": \"arm\",\n        \"os.distribution.version\": \"N/A\",\n        \"file.upload.in.memory.size.threshold\": \"10240\",\n        \"kura.net.virtual.devices.config\": \"unmanaged\",\n        \"kura.snapshots\": \"/opt/eclipse/kura/user/snapshots\",\n        \"kura.have.net.admin\": \"true\",\n        \"java.vm.info\": \"mixed mode\",\n        \"java.vm.version\": \"25.312-b07\",\n        \"dpa.connection.timeout\": \"60000\",\n        \"build.number\": \"generic-arm32-buildNumber\",\n        \"ccs.status.notification.url\": \"ccs:log\"\n    }\n}\n
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-system-api/#post-methods","title":"POST methods","text":""},{"location":"references/rest-apis/rest-system-api/#filter-framework-properties","title":"Filter framework properties","text":"

                                      This method allows to retrieve framework-related properties by their name. Available properties are in table Framework properties.

                                      • Method: POST
                                      • API PATH: /services/system/v1/properties/framework/filter
                                      "},{"location":"references/rest-apis/rest-system-api/#request-body","title":"Request Body","text":"
                                      {\n    \"names\": [\"deviceName\", \"numberOfProcessors\", \"kuraHaveNetAdmin\"]\n}\n
                                      "},{"location":"references/rest-apis/rest-system-api/#responses_3","title":"Responses","text":"
                                      • 200 OK status
                                      {\n    \"deviceName\": \"RASBPERRY PI 4\",\n    \"numberOfProcessors\": 4,\n    \"kuraHaveNetAdmin\": true\n}\n
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-system-api/#filter-extended-properties","title":"Filter extended properties","text":"

                                      This method allows to retrieve the extended properties and to filter them by group name.

                                      • Method: POST
                                      • API PATH: /services/system/v1/properties/extended/filter
                                      "},{"location":"references/rest-apis/rest-system-api/#request-body_1","title":"Request Body","text":"
                                      {\n    \"groupNames\": [\"Device Info 1\"]\n}\n
                                      "},{"location":"references/rest-apis/rest-system-api/#responses_4","title":"Responses","text":"
                                      • 200 OK status
                                      {\n    \"extendedProperties\": {\n        \"Device Info 1\": {\n            \"exampleKey1\": \"value1\",\n            \"exampleKey2\": \"value2\"\n        }\n    }\n}\n
                                      • 500 Internal Server Error
                                      "},{"location":"references/rest-apis/rest-system-api/#filter-kura-properties","title":"Filter kura properties","text":"

                                      This method allows to retrieve Kura-related properties (derived from the kura.properties file) and filter by their name. Available properties are listed in the table Kura properties.

                                      • Method: POST
                                      • API PATH: /services/system/v1/properties/kura/filter
                                      "},{"location":"references/rest-apis/rest-system-api/#request-body_2","title":"Request Body","text":"
                                      {\n    \"names\": [\"kura.platform\", \"file.upload.size.max\", \"kura.have.net.admin\"]\n}\n
                                      "},{"location":"references/rest-apis/rest-system-api/#responses_5","title":"Responses","text":"
                                      • 200 OK status
                                      {\n    \"kuraProperties\": {\n        \"kura.platform\": \"aarch64\",\n        \"kura.have.net.admin\": \"true\",\n        \"file.upload.size.max\": \"-1\"\n    }\n}\n
                                      • 500 Internal Server Error
                                      "},{"location":"tutorials/AD-EdgeAI/","title":"Edge AI Anomaly Detection","text":"In\u00a0[1]: Copied! 
                                      !wget https://raw.githubusercontent.com/mattdibi/eclipsecon-edgeAI-talk/master/notebook/train-data-raw.csv\n
                                      !wget https://raw.githubusercontent.com/mattdibi/eclipsecon-edgeAI-talk/master/notebook/train-data-raw.csv 
                                      --2022-10-18 15:32:34--  https://raw.githubusercontent.com/mattdibi/eclipsecon-edgeAI-talk/master/notebook/train-data-raw.csv\nResolving raw.githubusercontent.com (raw.githubusercontent.com)... 185.199.110.133, 185.199.111.133, 185.199.108.133, ...\nConnecting to raw.githubusercontent.com (raw.githubusercontent.com)|185.199.110.133|:443... connected.\nHTTP request sent, awaiting response... 200 OK\nLength: 13288126 (13M) [text/plain]\nSaving to: \u2018train-data-raw.csv.1\u2019\n\ntrain-data-raw.csv. 100%[===================>]  12,67M  4,56MB/s    in 2,8s    \n\n2022-10-18 15:32:38 (4,56 MB/s) - \u2018train-data-raw.csv.1\u2019 saved [13288126/13288126]\n\n
                                      In\u00a0[2]: Copied! 
                                      !ls *.csv\n
                                      !ls *.csv 
                                      train-data-raw.csv\n

                                      Let's start taking a look at the content of this dataset, we'll use pandas (Python Data Analysis library) for this.

                                      In\u00a0[3]: Copied! 
                                      import pandas as pd\n\nraw_data = pd.read_csv(\"./train-data-raw.csv\")\n\nraw_data.head()\n
                                      import pandas as pd raw_data = pd.read_csv(\"./train-data-raw.csv\") raw_data.head() Out[3]: ID TIMESTAMP MAGNET_X TEMP_HUM_timestamp MAGNET_Z MAGNET_Y ACC_Y ACC_X GYRO_Y_timestamp ACC_Z ... PRESSURE_timestamp MAGNET_X_timestamp ACC_X_timestamp GYRO_Z_timestamp HUMIDITY_timestamp assetName ACC_Z_timestamp GYRO_X GYRO_Y GYRO_Z 0 1 1645778791786 -2.680372 1645778791413 5.036951 8.646852 0.004364 0.080122 1645778791413 0.984048 ... 1645778791413 1645778791413 1645778791413 1645778791413 1645778791413 asset-sensehat 1645778791413 0.053243 0.028920 0.036950 1 2 1645778792381 -3.110756 1645778792378 5.952562 10.521458 0.005091 0.080122 1645778792378 0.992090 ... 1645778792378 1645778792378 1645778792378 1645778792378 1645778792378 asset-sensehat 1645778792378 -0.051105 -0.028920 -0.037256 2 3 1645778793412 -3.482263 1645778793408 6.719675 11.944528 0.005334 0.080122 1645778793408 0.986729 ... 1645778793408 1645778793408 1645778793408 1645778793408 1645778793408 asset-sensehat 1645778793408 -0.025253 0.025560 0.038478 3 4 1645778794411 -3.813552 1645778794407 7.375115 13.093461 0.006061 0.080122 1645778794407 0.990384 ... 1645778794407 1645778794407 1645778794407 1645778794407 1645778794407 asset-sensehat 1645778794407 0.100695 -0.023422 -0.037867 4 5 1645778795411 -4.050513 1645778795407 7.854155 14.029530 0.004849 0.080607 1645778795407 0.988922 ... 1645778795407 1645778795407 1645778795407 1645778795407 1645778795407 asset-sensehat 1645778795407 -0.100389 0.021895 0.038172

                                      5 rows \u00d7 29 columns

                                      In\u00a0[4]: Copied! 
                                      features = ['ACC_Y', 'ACC_X', 'ACC_Z',\n            'PRESSURE', 'TEMP_PRESS', 'TEMP_HUM',\n            'HUMIDITY', 'GYRO_X', 'GYRO_Y', 'GYRO_Z']\n\ndata = raw_data[features]\n\ndata.head()\n
                                      features = ['ACC_Y', 'ACC_X', 'ACC_Z', 'PRESSURE', 'TEMP_PRESS', 'TEMP_HUM', 'HUMIDITY', 'GYRO_X', 'GYRO_Y', 'GYRO_Z'] data = raw_data[features] data.head() Out[4]: ACC_Y ACC_X ACC_Z PRESSURE TEMP_PRESS TEMP_HUM HUMIDITY GYRO_X GYRO_Y GYRO_Z 0 0.004364 0.080122 0.984048 992.322998 38.724998 40.330822 19.487146 0.053243 0.028920 0.036950 1 0.005091 0.080122 0.992090 992.288330 38.772915 40.385788 19.465750 -0.051105 -0.028920 -0.037256 2 0.005334 0.080122 0.986729 992.275635 38.795834 40.349144 19.572731 -0.025253 0.025560 0.038478 3 0.006061 0.080122 0.990384 992.279053 38.797916 40.330822 19.358767 0.100695 -0.023422 -0.037867 4 0.004849 0.080607 0.988922 992.333008 38.845833 40.385788 19.390862 -0.100389 0.021895 0.038172 In\u00a0[5]: Copied! 
                                      %matplotlib inline\nimport matplotlib.pyplot as plt\n\ndata.hist(bins=50, figsize=(20,15))\nplt.show()\n
                                      %matplotlib inline import matplotlib.pyplot as plt data.hist(bins=50, figsize=(20,15)) plt.show()

                                      Note: Some of you might notice that this is a really simple dataset: some of the input data (like GYRO_* and ACC_*) do not change much over time. Such a dataset is not very challenging and a few, well-placed, thresholds might be sufficient to spot anomalous behaviour. For this tutorial we decided to keep things simple and easy to replicate. Anomalies can be simply triggered by moving the Raspberry Pi around.

                                      Keep in mind that this approach is generic: any dataset from any appliance/connected device can be processed in the same way we're showing here. That's the magic of neural networks!

                                      In\u00a0[6]: Copied! 
                                      print(\"Data used in the Triton preprocessor\")\nprint(\"-----------Min-----------\")\nprint(data.min())\nprint(\"-----------Max-----------\")\nprint(data.max())\nprint(\"-------------------------\")\n
                                      print(\"Data used in the Triton preprocessor\") print(\"-----------Min-----------\") print(data.min()) print(\"-----------Max-----------\") print(data.max()) print(\"-------------------------\") 
                                      Data used in the Triton preprocessor\n-----------Min-----------\nACC_Y          -0.132551\nACC_X          -0.049693\nACC_Z           0.759847\nPRESSURE      976.001709\nTEMP_PRESS     38.724998\nTEMP_HUM       40.220890\nHUMIDITY       13.003981\nGYRO_X         -1.937896\nGYRO_Y         -0.265019\nGYRO_Z         -0.250647\ndtype: float64\n-----------Max-----------\nACC_Y            0.093099\nACC_X            0.150289\nACC_Z            1.177543\nPRESSURE      1007.996338\nTEMP_PRESS      46.093750\nTEMP_HUM        48.355824\nHUMIDITY        23.506138\nGYRO_X           1.923712\nGYRO_Y           0.219204\nGYRO_Z           0.671759\ndtype: float64\n-------------------------\n
                                      In\u00a0[7]: Copied! 
                                      from sklearn.preprocessing import MinMaxScaler\n\nscaler = MinMaxScaler()\nscaled_data = scaler.fit_transform(data.to_numpy())\n
                                      from sklearn.preprocessing import MinMaxScaler scaler = MinMaxScaler() scaled_data = scaler.fit_transform(data.to_numpy()) In\u00a0[8]: Copied! 
                                      pd.DataFrame(scaled_data).describe()\n
                                      pd.DataFrame(scaled_data).describe() Out[8]: 0 1 2 3 4 5 6 7 8 9 count 25278.000000 25278.000000 25278.000000 25278.000000 25278.000000 25278.000000 25278.000000 25278.000000 25278.000000 25278.000000 mean 0.603124 0.674196 0.550454 0.526446 0.605576 0.552252 0.466400 0.501160 0.545457 0.271295 std 0.049333 0.015135 0.031627 0.054050 0.288300 0.256587 0.176293 0.062908 0.067678 0.014665 min 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 25% 0.597087 0.667343 0.544924 0.481917 0.501060 0.441442 0.325637 0.501348 0.544670 0.270709 50% 0.603534 0.673413 0.551342 0.521377 0.655357 0.608108 0.511715 0.501841 0.547096 0.271685 75% 0.611055 0.680698 0.555426 0.552892 0.819339 0.734234 0.575212 0.502407 0.549386 0.272577 max 1.000000 1.000000 1.000000 1.000000 1.000000 1.000000 1.000000 1.000000 1.000000 1.000000 In\u00a0[9]: Copied! 
                                      from sklearn.model_selection import train_test_split\nimport numpy as np\n\nx_train, x_test = train_test_split(scaled_data, test_size=0.3, random_state=42)\nx_train = x_train.astype(np.float32)\nx_test = x_test.astype(np.float32)\n
                                      from sklearn.model_selection import train_test_split import numpy as np x_train, x_test = train_test_split(scaled_data, test_size=0.3, random_state=42) x_train = x_train.astype(np.float32) x_test = x_test.astype(np.float32) In\u00a0[10]: Copied! 
                                      import os\nos.environ['TF_CPP_MIN_LOG_LEVEL']='2' # Avoid AVX2 error\n\nfrom tensorflow.keras.models import Model\nfrom tensorflow.keras.layers import Input, Dense, Dropout\n\ndef create_model(input_dim):\n    # The encoder will consist of a number of dense layers that decrease in size\n    # as we taper down towards the bottleneck of the network, the latent space\n    input_data = Input(shape=(input_dim,), name='INPUT0')\n\n    # hidden layers\n    encoder = Dense(9, activation='tanh', name='encoder_1')(input_data)\n    encoder = Dropout(.15)(encoder)\n    encoder = Dense(6, activation='tanh', name='encoder_2')(encoder)\n    encoder = Dropout(.15)(encoder)\n\n    # bottleneck layer\n    latent_encoding = Dense(3, activation='linear', name='latent_encoding')(encoder)\n\n    # The decoder network is a mirror image of the encoder network\n    decoder = Dense(6, activation='tanh', name='decoder_1')(latent_encoding)\n    decoder = Dropout(.15)(decoder)\n    decoder = Dense(9, activation='tanh', name='decoder_2')(decoder)\n    decoder = Dropout(.15)(decoder)\n\n    # The output is the same dimension as the input data we are reconstructing\n    reconstructed_data = Dense(input_dim, activation='linear', name='OUTPUT0')(decoder)\n\n    autoencoder_model = Model(input_data, reconstructed_data)\n\n    return autoencoder_model\n
                                      import os os.environ['TF_CPP_MIN_LOG_LEVEL']='2' # Avoid AVX2 error from tensorflow.keras.models import Model from tensorflow.keras.layers import Input, Dense, Dropout def create_model(input_dim): # The encoder will consist of a number of dense layers that decrease in size # as we taper down towards the bottleneck of the network, the latent space input_data = Input(shape=(input_dim,), name='INPUT0') # hidden layers encoder = Dense(9, activation='tanh', name='encoder_1')(input_data) encoder = Dropout(.15)(encoder) encoder = Dense(6, activation='tanh', name='encoder_2')(encoder) encoder = Dropout(.15)(encoder) # bottleneck layer latent_encoding = Dense(3, activation='linear', name='latent_encoding')(encoder) # The decoder network is a mirror image of the encoder network decoder = Dense(6, activation='tanh', name='decoder_1')(latent_encoding) decoder = Dropout(.15)(decoder) decoder = Dense(9, activation='tanh', name='decoder_2')(decoder) decoder = Dropout(.15)(decoder) # The output is the same dimension as the input data we are reconstructing reconstructed_data = Dense(input_dim, activation='linear', name='OUTPUT0')(decoder) autoencoder_model = Model(input_data, reconstructed_data) return autoencoder_model In\u00a0[11]: Copied! 
                                      autoencoder_model = create_model(len(features))\nautoencoder_model.summary()\n
                                      autoencoder_model = create_model(len(features)) autoencoder_model.summary() 
                                      Model: \"model\"\n_________________________________________________________________\n Layer (type)                Output Shape              Param #   \n=================================================================\n INPUT0 (InputLayer)         [(None, 10)]              0         \n                                                                 \n encoder_1 (Dense)           (None, 9)                 99        \n                                                                 \n dropout (Dropout)           (None, 9)                 0         \n                                                                 \n encoder_2 (Dense)           (None, 6)                 60        \n                                                                 \n dropout_1 (Dropout)         (None, 6)                 0         \n                                                                 \n latent_encoding (Dense)     (None, 3)                 21        \n                                                                 \n decoder_1 (Dense)           (None, 6)                 24        \n                                                                 \n dropout_2 (Dropout)         (None, 6)                 0         \n                                                                 \n decoder_2 (Dense)           (None, 9)                 63        \n                                                                 \n dropout_3 (Dropout)         (None, 9)                 0         \n                                                                 \n OUTPUT0 (Dense)             (None, 10)                100       \n                                                                 \n=================================================================\nTotal params: 367\nTrainable params: 367\nNon-trainable params: 0\n_________________________________________________________________\n

                                      In\u00a0[12]: Copied! 
                                      from tensorflow.keras import optimizers\n\nbatch_size = 32\nmax_epochs = 15\nlearning_rate = .0001\n\nopt = optimizers.Adam(learning_rate=learning_rate)\nautoencoder_model.compile(optimizer=opt, loss='mse', metrics=['accuracy'])\ntrain_history = autoencoder_model.fit(x_train, x_train,\n                      shuffle=True,\n                      epochs=max_epochs,\n                      batch_size=batch_size,\n                      validation_data=(x_test, x_test))\n
                                      from tensorflow.keras import optimizers batch_size = 32 max_epochs = 15 learning_rate = .0001 opt = optimizers.Adam(learning_rate=learning_rate) autoencoder_model.compile(optimizer=opt, loss='mse', metrics=['accuracy']) train_history = autoencoder_model.fit(x_train, x_train, shuffle=True, epochs=max_epochs, batch_size=batch_size, validation_data=(x_test, x_test)) 
                                      Epoch 1/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.2282 - accuracy: 0.1129 - val_loss: 0.0922 - val_accuracy: 0.0045\nEpoch 2/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0949 - accuracy: 0.1541 - val_loss: 0.0279 - val_accuracy: 0.4210\nEpoch 3/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0613 - accuracy: 0.1779 - val_loss: 0.0206 - val_accuracy: 0.4426\nEpoch 4/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0466 - accuracy: 0.2152 - val_loss: 0.0186 - val_accuracy: 0.5276\nEpoch 5/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0366 - accuracy: 0.2514 - val_loss: 0.0157 - val_accuracy: 0.5944\nEpoch 6/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0290 - accuracy: 0.3083 - val_loss: 0.0119 - val_accuracy: 0.6403\nEpoch 7/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0228 - accuracy: 0.3930 - val_loss: 0.0078 - val_accuracy: 0.7182\nEpoch 8/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0186 - accuracy: 0.4668 - val_loss: 0.0059 - val_accuracy: 0.8195\nEpoch 9/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0157 - accuracy: 0.5021 - val_loss: 0.0048 - val_accuracy: 0.8256\nEpoch 10/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0136 - accuracy: 0.5277 - val_loss: 0.0042 - val_accuracy: 0.8263\nEpoch 11/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0121 - accuracy: 0.5409 - val_loss: 0.0037 - val_accuracy: 0.8296\nEpoch 12/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0107 - accuracy: 0.5569 - val_loss: 0.0036 - val_accuracy: 0.8306\nEpoch 13/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0098 - accuracy: 0.5857 - val_loss: 0.0034 - val_accuracy: 0.8256\nEpoch 14/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0089 - accuracy: 0.6076 - val_loss: 0.0033 - val_accuracy: 0.8281\nEpoch 15/15\n553/553 [==============================] - 1s 1ms/step - loss: 0.0083 - accuracy: 0.6337 - val_loss: 0.0032 - val_accuracy: 0.8262\n
                                      In\u00a0[13]: Copied! 
                                      plt.plot(train_history.history['loss'])\nplt.plot(train_history.history['val_loss'])\nplt.legend(['loss on train data', 'loss on test data'])\n
                                      plt.plot(train_history.history['loss']) plt.plot(train_history.history['val_loss']) plt.legend(['loss on train data', 'loss on test data']) Out[13]: 
                                      <matplotlib.legend.Legend at 0x16d0c3400>

                                      Here we can see the loss for the training set and the test set on the epochs.

                                      Some of you might notice that this graph is somewhat unexpected. Why the validation loss is lower than the train loss? This is the effect of the regularization: regularization terms and dropout layer are affecting the network during training. A good writeup of this effect can be found here.

                                      As an excercise try and compute the average MSE on the training set and the test set. You'll find that the MSE is lower in the training set!

                                      We can now save the model on disk as we'll use this later.

                                      In\u00a0[14]: Copied! 
                                      autoencoder_model.save(\"./saved_model/autoencoder\")\n
                                      autoencoder_model.save(\"./saved_model/autoencoder\") 
                                      WARNING:absl:Function `_wrapped_model` contains input name(s) INPUT0 with unsupported characters which will be renamed to input0 in the SavedModel.\n
                                      INFO:tensorflow:Assets written to: ./saved_model/autoencoder/assets\n
                                      INFO:tensorflow:Assets written to: ./saved_model/autoencoder/assets\n
                                      In\u00a0[15]: Copied! 
                                      !ls ./saved_model/autoencoder\n
                                      !ls ./saved_model/autoencoder 
                                      assets            keras_metadata.pb saved_model.pb    variables\n
                                      In\u00a0[16]: Copied! 
                                      input_sample = x_test[3:4].copy() # Deep copy\n\nreconstructed_sample = autoencoder_model.predict(input_sample)\n\nprint(input_sample)\nprint(reconstructed_sample)\n
                                      input_sample = x_test[3:4].copy() # Deep copy reconstructed_sample = autoencoder_model.predict(input_sample) print(input_sample) print(reconstructed_sample) 
                                      1/1 [==============================] - 0s 109ms/step\n[[0.603534   0.6770555  0.54900813 0.5327966  0.6680801  0.6171171\n  0.5198642  0.50135666 0.54716927 0.2718224 ]]\n[[0.59638697 0.67410123 0.5484349  0.52024144 0.64766663 0.5916597\n  0.4445051  0.499677   0.54471916 0.26904327]]\n
                                      In\u00a0[17]: Copied! 
                                      import matplotlib.pyplot as plt\n\nindex = np.arange(10)\nbar_width = 0.35\n\nfigure, ax = plt.subplots()\n\ninbar = ax.bar(index, input_sample[0], bar_width, label=\"Input data\")\nrecbar = ax.bar(index+bar_width, reconstructed_sample[0], bar_width, label=\"Reconstruced data\")\n\nax.set_xlabel('Features')\nax.set_xticks(index + bar_width / 2)\nax.set_xticklabels(features, rotation = 45)\nax.legend()\n
                                      import matplotlib.pyplot as plt index = np.arange(10) bar_width = 0.35 figure, ax = plt.subplots() inbar = ax.bar(index, input_sample[0], bar_width, label=\"Input data\") recbar = ax.bar(index+bar_width, reconstructed_sample[0], bar_width, label=\"Reconstruced data\") ax.set_xlabel('Features') ax.set_xticks(index + bar_width / 2) ax.set_xticklabels(features, rotation = 45) ax.legend() Out[17]: 
                                      <matplotlib.legend.Legend at 0x16d184880>

                                      As we can see from the graph above it reconstructed the input fairly well. It is not perfect since the Autoencoder is lossy but it is good enough

                                      What happens if we manipulate this sample in a way the autoencoder doesn't expect (i.e. we introduce an anomaly)?

                                      Let's try and set the ACC_Z to a value the autoencoder has never seen before.

                                      In\u00a0[18]: Copied! 
                                      input_anomaly = input_sample.copy() # Deep copy\n\ninput_anomaly[0][2] = 0.15\n\nreconstructed_anomaly = autoencoder_model.predict(input_anomaly)\n\nprint(input_anomaly)\nprint(reconstructed_anomaly)\n
                                      input_anomaly = input_sample.copy() # Deep copy input_anomaly[0][2] = 0.15 reconstructed_anomaly = autoencoder_model.predict(input_anomaly) print(input_anomaly) print(reconstructed_anomaly) 
                                      1/1 [==============================] - 0s 21ms/step\n[[0.603534   0.6770555  0.15       0.5327966  0.6680801  0.6171171\n  0.5198642  0.50135666 0.54716927 0.2718224 ]]\n[[0.60162103 0.69035804 0.55594885 0.51874125 0.7346029  0.6700014\n  0.40932336 0.5034408  0.5424664  0.26861513]]\n
                                      In\u00a0[19]: Copied! 
                                      figure, ax = plt.subplots()\n\ninbar = ax.bar(index, input_anomaly[0], bar_width, label=\"Input anomaly\")\nrecbar = ax.bar(index+bar_width, reconstructed_anomaly[0], bar_width, label=\"Reconstruced anomaly\")\n\nax.set_xlabel('Features')\nax.set_xticks(index + bar_width / 2)\nax.set_xticklabels(features, rotation = 45)\nax.legend()\n
                                      figure, ax = plt.subplots() inbar = ax.bar(index, input_anomaly[0], bar_width, label=\"Input anomaly\") recbar = ax.bar(index+bar_width, reconstructed_anomaly[0], bar_width, label=\"Reconstruced anomaly\") ax.set_xlabel('Features') ax.set_xticks(index + bar_width / 2) ax.set_xticklabels(features, rotation = 45) ax.legend() Out[19]: 
                                      <matplotlib.legend.Legend at 0x16d3c0220>

                                      The autoencoder fails to reconstruct the data it received at the input. This means that the reconstruction error is very high.

                                      In\u00a0[20]: Copied! 
                                      from sklearn.metrics import mean_squared_error\n\nprint(\"Anomaly %f\"% mean_squared_error(input_anomaly[0], reconstructed_anomaly[0]))\nprint(\"Normal  %f\"% mean_squared_error(input_sample[0], reconstructed_sample[0]))\n
                                      from sklearn.metrics import mean_squared_error print(\"Anomaly %f\"% mean_squared_error(input_anomaly[0], reconstructed_anomaly[0])) print(\"Normal %f\"% mean_squared_error(input_sample[0], reconstructed_sample[0])) 
                                      Anomaly 0.018465\nNormal  0.000698\n

                                      It's working as expected!

                                      We now need to decide when to trigger an alarm (i.e. classify an input sample as anomalous) from this reconstruction error. In other words we need to decide our threshold.

                                      There are multiple ways to set this value, in this example we'll use the Z-Score.

                                      From Wikipedia:

                                      In statistics, the standard score is the number of standard deviations by which the value of a raw score (i.e., an observed value or data point) is above or below the mean value of what is being observed or measured.[...]

                                      It is calculated by subtracting the population mean from an individual raw score and then dividing the difference by the population standard deviation.

                                      We'll consider a sample an anomaly if the Reconstruction Error Z-Score is not in the range [-2, +2]. This means that if the reconstruction error for a sample is more than 2 standard deviation away from the average reconstruction error computed on the test set, the sample is an anomaly. This choice is arbirtary, we can control the sensitivity of the detector by changing this range.

                                      In\u00a0[21]: Copied! 
                                      x_test_recon = autoencoder_model.predict(x_test)\nreconstruction_scores = np.mean((x_test - x_test_recon)**2, axis=1)  # MSE\n\nreconstruction_scores_pd = pd.DataFrame({'recon_score': reconstruction_scores})\nprint(reconstruction_scores_pd.describe())\n
                                      x_test_recon = autoencoder_model.predict(x_test) reconstruction_scores = np.mean((x_test - x_test_recon)**2, axis=1) # MSE reconstruction_scores_pd = pd.DataFrame({'recon_score': reconstruction_scores}) print(reconstruction_scores_pd.describe()) 
                                      237/237 [==============================] - 0s 620us/step\n       recon_score\ncount  7584.000000\nmean      0.003175\nstd       0.005438\nmin       0.000098\n25%       0.000816\n50%       0.001211\n75%       0.002108\nmax       0.106237\n
                                      In\u00a0[22]: Copied! 
                                      def z_score(mse_sample):\n    return (mse_sample - reconstruction_scores_pd.mean())/reconstruction_scores_pd.std()\n
                                      def z_score(mse_sample): return (mse_sample - reconstruction_scores_pd.mean())/reconstruction_scores_pd.std() In\u00a0[23]: Copied! 
                                      mse_anomaly = mean_squared_error(input_anomaly[0], reconstructed_anomaly[0])\nmse_normal = mean_squared_error(input_sample[0], reconstructed_sample[0])\n\nz_score_anomaly = z_score(mse_anomaly)\nz_score_normal = z_score(mse_normal)\n\nprint(\"Anomaly Z-score %f\"% z_score_anomaly)\nprint(\"Normal Z-score %f\"% z_score_normal)\n
                                      mse_anomaly = mean_squared_error(input_anomaly[0], reconstructed_anomaly[0]) mse_normal = mean_squared_error(input_sample[0], reconstructed_sample[0]) z_score_anomaly = z_score(mse_anomaly) z_score_normal = z_score(mse_normal) print(\"Anomaly Z-score %f\"% z_score_anomaly) print(\"Normal Z-score %f\"% z_score_normal) 
                                      Anomaly Z-score 2.811887\nNormal Z-score -0.455488\n

                                      We now have our anomaly detector... let's see how we can deploy it on our Kura\u2122-powered edge device.

                                      In\u00a0[24]: Copied! 
                                      !rm -rf ./tf_autoencoder_fp32/ && mkdir -p ./tf_autoencoder_fp32/1\n
                                      !rm -rf ./tf_autoencoder_fp32/ && mkdir -p ./tf_autoencoder_fp32/1 In\u00a0[25]: Copied! 
                                      !ls\n
                                      !ls 
                                      AD-EdgeAI.ipynb      requirements.txt     train-data-raw.csv\nREADME.md            saved_model          train-data-raw.csv.1\nimgs                 tf_autoencoder_fp32\n
                                      In\u00a0[26]: Copied! 
                                      cp -r ./saved_model/autoencoder tf_autoencoder_fp32/1/model.savedmodel\n
                                      cp -r ./saved_model/autoencoder tf_autoencoder_fp32/1/model.savedmodel In\u00a0[27]: Copied! 
                                      !tree tf_autoencoder_fp32\n
                                      !tree tf_autoencoder_fp32 
                                      tf_autoencoder_fp32\n\u2514\u2500\u2500 1\n    \u2514\u2500\u2500 model.savedmodel\n        \u251c\u2500\u2500 assets\n        \u251c\u2500\u2500 keras_metadata.pb\n        \u251c\u2500\u2500 saved_model.pb\n        \u2514\u2500\u2500 variables\n            \u251c\u2500\u2500 variables.data-00000-of-00001\n            \u2514\u2500\u2500 variables.index\n\n4 directories, 4 files\n

                                      Now comes the hard part: we need to provide the model configuration (i.e. the config.pbtxt file). In the case of the autoencoder is pretty simple:

                                      name: \"tf_autoencoder_fp32\"\nbackend: \"tensorflow\"\nmax_batch_size: 0\ninput [\n    {\n    name: \"INPUT0\"\n    data_type: TYPE_FP32\n    dims: [ 1, 10 ]\n    }\n]\noutput [\n    {\n    name: \"OUTPUT0\"\n    data_type: TYPE_FP32\n    dims: [ -1, 10 ]\n    }\n]\nversion_policy: { all { }}\ninstance_group [{ kind: KIND_CPU }]\n

                                      Each model input and output must specify the name, data_type and dims. We already know all of these:

                                      • name: corresponds to the layer name we've seen in the Model Training section. INPUT0 for the input and OUTPUT0 for the output.
                                      • data_type: will be float since we didn't perform any quantization
                                      • dims: is the shape of the in/out tensor. In this case it will correspond to an array with the same length as the number of features.

                                      Other interesting parameters of this configuration are:

                                      • backend: where we set the backend for the model. In this case it will be the Tensorflow backend
                                      • name: the name of the model that must correspond to the name of the folder
                                      • instance_group: where we set where we want the model to run. In this case we'll use the CPU since we're on a Raspberry Pi but keep in mind that Triton support multiple accelerators.

                                      for a deep dive into the model configuration parameter take a look at the official documentation.

                                      "},{"location":"tutorials/AD-EdgeAI/#edge-ai-anomaly-detection","title":"Edge AI Anomaly Detection\u00b6","text":""},{"location":"tutorials/AD-EdgeAI/#overview","title":"Overview\u00b6","text":"

                                      This document contains the code and the instructions for our EclipseCON 2022 Talk: \"How to Train Your Dragon and Its Friends: AI on the Edge with Eclipse Kura\u2122\"

                                      This notebook can also be viewed and ran on Google Colab.

                                      In this example scenario we will collect the data provided by a Raspberry Pi Sense HAT using Eclipse Kura\u2122 and upload them to a Eclipse Kapua\u2122 instance. We will then download this data and train an AI-based anomaly detector using TensorFlow. Finally we will deploy the trained anomaly detector model leveraging Nvidia Triton\u2122 Inference Server and Eclipse Kura\u2122 integration.

                                      We'll subdivide this example scenario in three main sections:

                                      1. Data collection: in this section we'll discuss how to retrieve training data from the field leveraging Eclipse Kura\u2122 and Eclipse Kapua\u2122
                                      2. Model building and training: we'll further divide this section in three subsections:
                                        • Data processing: where we'll show how to explore our training data and manipulate them to make them suitable for training (feature selection, scaling and dataset splitting). This will provide us with the \"Preprocessing\" stage of the resulting AI data-processing pipeline
                                        • Model training: where we'll discuss how we can create a simple Autoencoder in Tensorflow Keras and how to train it. This will provide us with the \"Inference\" stage of the AI pipeline
                                        • Model evaluation: where we'll cover how can we extract the high level data from the model output and ensure the model was trained correctly. This will provide us with the \"Postprocessing\" stage of the AI pipeline
                                      3. Model deployment: finally we will convert the model to make it suitable for running on Eclipse Kura\u2122 and Nvidia Triton\u2122 and deploy it on the edge.
                                      "},{"location":"tutorials/AD-EdgeAI/#data-collection","title":"Data collection\u00b6","text":""},{"location":"tutorials/AD-EdgeAI/#overview","title":"Overview\u00b6","text":"

                                      In this setup we'll leverage Eclipe Kura\u2122 and Kapua\u2122 for retrieving data from a Raspberry Pi Sense HAT and upload them to the cloud.

                                      The Sense HAT is an add-on board for Raspberry Pi which provides an 8\u00d78 RGB LED matrix, a five-button joystick and includes the following sensors:

                                      • Gyroscope
                                      • Accelerometer
                                      • Magnetometer
                                      • Temperature
                                      • Barometric pressure
                                      • Humidity

                                      "},{"location":"tutorials/AD-EdgeAI/#kuratm-installation","title":"Kura\u2122 installation\u00b6","text":"

                                      Requirement: A Raspberry Pi 3/4 running the latest version of Raspberry Pi OS 64 bit.

                                      To make everything work on the Raspberry Pi we need to use the develop version of the raspberry-pi-ubuntu-20-nn Kura installer (yes, I know we're installing the Ubuntu package on the Raspberry Pi OS but bear with me...) . You can do so by downloading the repo and building locally or by downloading a pre-built installer from the Kura CI artifacts.

                                      Copy the resulting file kura_<version>_raspberry-pi-ubuntu-20_installer-nn.deb on the target device.

                                      On the target device run the following commands:

                                      sudo apt-get install -y wget apt-transport-https gnupg\n
                                      sudo wget -O - https://packages.adoptium.net/artifactory/api/gpg/key/public | sudo apt-key add -\n
                                      sudo echo \"deb https://packages.adoptium.net/artifactory/deb $(awk -F= '/^VERSION_CODENAME/{print$2}' /etc/os-release) main\" | sudo tee /etc/apt/sources.list.d/adoptium.list\n
                                      sudo apt-get update && sudo apt-get install temurin-8-jdk chrony\n

                                      Finally install Kura with:

                                      sudo apt install ./kura_<version>_raspberry-pi-ubuntu-20_installer-nn.deb\n
                                      "},{"location":"tutorials/AD-EdgeAI/#cloud-connection","title":"Cloud connection\u00b6","text":"

                                      After setting up an Eclipse Kura\u2122 instance on the Raspberry Pi we'll need to connect it to an Eclipse Kapua\u2122 instance.

                                      An excellent tutorial on how to deploy a Kapua\u2122 instance using Docker is available in the official repository. For the purpose of this tutorial we'll assume a Kapua\u2122 instance is already running and is available for connection from Kura\u2122

                                      After setting up the Kapua\u2122 instance you can refer to the official Kura\u2122 documentation for connecting the Raspberry Pi to the Kapua\u2122 instance. For the remaining of this tutorial we'll assume a connection with the Kapua\u2122 was correctly established.

                                      "},{"location":"tutorials/AD-EdgeAI/#data-publisher","title":"Data publisher\u00b6","text":"

                                      To publish the collected data on the Cloud we'll need to create a new Cloud Publisher through the Kura\u2122 web interface. Go to \"Cloud Connections\" and press \"New Pub/Sub\", in the example below we'll call our new publisher KapuaSenseHatPublisher.

                                      To keep things clean we'll create a new topic called SenseHat. To do so we'll move to the KapuaSenseHatPublisher configuration and we'll update the Application Topic field to A1/SenseHat

                                      "},{"location":"tutorials/AD-EdgeAI/#sensehat-driver","title":"SenseHat driver\u00b6","text":"

                                      Kura\u2122 provides a driver that allows to interact to a RaspberryPi SenseHat device using Kura Driver, Asset and Wires frameworks.

                                      From the Kura\u2122 documentation:

                                      Eclipse Kura introduces a model based on the concepts of Drivers and Assets to simplify the communication with the field devices attached to a gateway.

                                      A Driver encapsulates the communication protocol and its configuration parameters, dealing with the low-level characteristics of the field protocol. It opens, closes and performs the communication with the end field device. It also exposes field protocol specific information that can be used by upper levels of abstraction to simplify the interaction with the end devices.

                                      An Asset is a logical representation of a field device, described by a list of Channels. The Asset uses a specific Driver instance to communicate with the underlying device and it models a generic device resource as a Channel. A register in a PLC or a GATT Characteristic in a Bluetooth device are examples of Channels. In this way, each Asset has multiple Channels for reading and writing data from/to an Industrial Device.

                                      The Kura Sense Hat driver requires a few changes on the Raspberry Pi:

                                      • Configured SenseHat: see SenseHat documentation
                                      • I2C interface should be unlocked using sudo raspi-config

                                      As others Drivers supported by Kura, it is distributed as a deployment package on the Eclipse Marketplace. It consists of two packages:

                                      • SenseHat Example Driver.
                                      • SenseHat Support Library

                                      We need to install both. Complete installation instructions are available here.

                                      "},{"location":"tutorials/AD-EdgeAI/#driver-configuration","title":"Driver configuration\u00b6","text":"

                                      We now need to configure the driver to access the sensors on the SenseHat. Move to the \"Driver and Assets\" section of the web UI and create a new driver. We'll call it driver-sensehat.

                                      Then add a new Asset (which we'll call asset-sensehat) to this driver and configure it as per the screenshots below. We'll need a Channel for every sensor we want to access.

                                      Refer to the following table for the driver parameters:

                                      name type value.type resource ACC_X READ FLOAT ACCELERATION_X ACC_Y READ FLOAT ACCELERATION_Y ACC_Z READ FLOAT ACCELERATION_Z GYRO_X READ FLOAT GYROSCOPE_X GYRO_Y READ FLOAT GYROSCOPE_Y GYRO_Z READ FLOAT GYROSCOPE_Z HUMIDITY READ FLOAT HUMIDITY PRESSURE READ FLOAT PRESSURE TEMP_HUM READ FLOAT TEMPERATURE_FROM_HUMIDITY TEMP_PRESS READ FLOAT TEMPERATURE_FROM_PRESSURE

                                      After correctly configuring it you should see the data in the \"Data\" page of the UI.

                                      "},{"location":"tutorials/AD-EdgeAI/#wire-graph","title":"Wire graph\u00b6","text":"

                                      Now that we have our Driver and Cloud Publisher ready we can put everything together with a Kura Wire Graph.

                                      From Kura\u2122 documentation:

                                      The Kura\u2122 Wires feature aims to simplify the development of IoT Edge Computing Applications leveraging reusable configurable components that can be wired together and which, eventually, allows configurable cooperation between these components.

                                      In the dataflow programming model, the application logic is expressed as a directed graph (flow) where each node can have inputs, outputs, and independent processing units. There are nodes that only produce outputs and ones that only consume inputs, which usually represent the start and the end of the flow. The inner-graph nodes process the inputs and produce outputs for downstream nodes. The processing unit of a node executes independently and does not affect the execution of other nodes. Thus, the nodes are highly reusable and portable.

                                      Move to the \"Wire Graph\" section of the UI. We'll need a graph with three components:

                                      • A Timer which will dictate the sample rate at which we will collect data coming from the Sense Hat
                                      • A WireAsset for the Sense Hat driver asset
                                      • A Publisher for the Kapua publisher we created before.

                                      The resulting Wire Graph will look like this:

                                      "},{"location":"tutorials/AD-EdgeAI/#timer","title":"Timer\u00b6","text":"

                                      Configure the timer such that it will poll the SenseHat each second, this can be done by setting the simple.interval to 1.

                                      "},{"location":"tutorials/AD-EdgeAI/#wireasset","title":"WireAsset\u00b6","text":"

                                      Select the driver-sensehat when creating the WireAsset. No further configuration is needed for this component.

                                      "},{"location":"tutorials/AD-EdgeAI/#publisher","title":"Publisher\u00b6","text":"

                                      Create a \"Publisher\" Wire component and select the KapuaSensehatPublisher from the target filter.

                                      Don't forget to press \"Apply\" to start the Wire Graph!

                                      "},{"location":"tutorials/AD-EdgeAI/#collect-the-data","title":"Collect the data\u00b6","text":"

                                      At this point you should see data coming from the Rasperry Pi from the Kapua\u2122 console under the SenseHat topic.

                                      You can download the .csv file directly from the console using the \"Export to CSV\" button.

                                      "},{"location":"tutorials/AD-EdgeAI/#model-building-and-training","title":"Model building and training\u00b6","text":""},{"location":"tutorials/AD-EdgeAI/#overview","title":"Overview\u00b6","text":"

                                      We will now use the data collected in the previous section to train an artificial neural network-based Anomaly Detector of our design. To this end we will use an Autoencoder model. To understand why we choose such model we need to understand how it works. From Wikipedia:

                                      An autoencoder is a type of artificial neural network used to learn efficient codings of unlabeled data (unsupervised learning). The encoding is validated and refined by attempting to regenerate the input from the encoding. The autoencoder learns a representation (encoding) for a set of data, typically for dimensionality reduction, by training the network to ignore insignificant data (\u201cnoise\u201d).

                                      Another application for autoencoders is anomaly detection. By learning to replicate the most salient features in the training data [...] the model is encouraged to learn to precisely reproduce the most frequently observed characteristics. When facing anomalies, the model should worsen its reconstruction performance. In most cases, only data with normal instances are used to train the autoencoder; in others, the frequency of anomalies is small compared to the observation set so that its contribution to the learned representation could be ignored. After training, the autoencoder will accurately reconstruct \"normal\" data, while failing to do so with unfamiliar anomalous data. Reconstruction error (the error between the original data and its low dimensional reconstruction) is used as an anomaly score to detect anomalies

                                      In simple terms:

                                      • The Autoencoder is a artificial neural network model that learns how to reconstruct the input data at the output.
                                      • If trained on \"normal\" data, it learns to recontruct only normal data and fails to reconstruct anomalies.
                                      • We can detect anomalies by computing the reconstruction error of the Autoencoder. If the error is above a certain threshold (which we will decide) the input sample is an anomaly.

                                      Why did we choose this approach over others?

                                      • The Autoencoder falls in the \"Unsupervised Learning\" category: it doesn't need labeled data to be trained i.e. we don't need to go through all the dataset and manually label the samples as \"normal\" or \"anomaly\" (Supervised Learning).
                                      • Simpler data collection: we just need to provide it with the \"normal\" data. We don't need to artificially generate anomalies to train it on them.
                                      "},{"location":"tutorials/AD-EdgeAI/#data-processing","title":"Data Processing\u00b6","text":"

                                      We can now work on our .csv file downloaded from Kapua. For demonstration purposes an already available dataset is provided within this repository.

                                      If you're running this notebook through Google Colab you'll need to download the dataset running the cell below:

                                      "},{"location":"tutorials/AD-EdgeAI/#feature-selection","title":"Feature selection\u00b6","text":"

                                      As you might notice there's some information in the dataset we don't care about and are not meaningful for our application:

                                      • ID
                                      • The various timestamps
                                      • assetName which doesn't change

                                      Then we can remove them from the dataset.

                                      "},{"location":"tutorials/AD-EdgeAI/#feature-scaling","title":"Feature scaling\u00b6","text":"

                                      AI models don't perform well when the input numerical attributes have very different scales. As you can see ACC_X, ACC_Y and ACC_Z range from 0 to 1, while the PRESSURE have far higher values.

                                      There are two common ways to address this: normalization and standardization.

                                      Normalization (a.k.a. Min-max scaling) shifts and rescales values so that they end up ranging from 0 to 1. This can be done by subtracting the min value and dividing by the max minus the min.

                                      x' = $\\frac{x - min(x)}{max(x) - min(x)}$

                                      Standardization makes the values of each feature in the data have zero-mean (when subtracting the mean in the numerator) and unit-variance. The general method of calculation is to determine the distribution mean and standard deviation for each feature. Next we subtract the mean from each feature. Then we divide the values (mean is already subtracted) of each feature by its standard deviation.

                                      x' = $\\frac{x - avg(x)}{\\sigma}$

                                      Fortunately for us scikit-learn library provides a function for both of them. In this case we'll use normalization because it works well for this application.

                                      "},{"location":"tutorials/AD-EdgeAI/#train-test-split","title":"Train test split\u00b6","text":"

                                      The only way to know how well a model will generalize to new data points is to try it on new data. To do so we split our data into two sets: the training set and the test set.

                                      To do so we'll use a function from scikit-learn.

                                      "},{"location":"tutorials/AD-EdgeAI/#model-training","title":"Model training\u00b6","text":"

                                      We can now leverage the Keras API of Tensorflow for creating our Autoencoder and then train it on our dataset.

                                      We'll design a neural network architecture such that we impose a bottleneck in the network which forces a compressed knowledge representation of the original input (also called the latent-space representation). If the input features were each independent of one another, this compression and subsequent reconstruction would be a very difficult task. However, if some sort of structure exists in the data (ie. correlations between input features), this structure can be learned and consequently leveraged when forcing the input through the network's bottleneck.

                                      The bottleneck consists of reducing the number of neurons for each layer of the neural network up to a certain point, and then increase the number until the original input number is reached. This will result in a hourglass shape which is typical for the Autoencoders.

                                      "},{"location":"tutorials/AD-EdgeAI/#build-the-autoencoder-model","title":"Build the Autoencoder model\u00b6","text":"

                                      In this example we'll use a basic fully-connected autoencoder but keep in mind that autoencoders can be built with different classes of neural network (i.e. Convolutional Neural Networks, Recurrent Neural Networks etc).

                                      "},{"location":"tutorials/AD-EdgeAI/#model-training","title":"Model training\u00b6","text":"

                                      As we already explained, the autoencoder is a type of artificial neural network used to learn efficient codings of unlabeled data. We'll use that to reconstruct the input at the output. To train an autoencoder we don\u2019t need to do anything fancy, just throw the raw input data at it. Autoencoders are considered an unsupervised learning technique since they don\u2019t need explicit labels to train on but to be more precise they are self-supervised because they generate their own labels from the training data.

                                      To train our neural network we need to have a performance metric to measure how well it is learning to reconstruct the data i.e. our loss function. The loss function in our example, which we need to minimize during our training, is the error between the input data and the data reconstructed by the autoencoder. We'll use the Mean Squared Error.

                                      MSE = $\\frac{1}{n}\\sum_{i=1}^{n}{(Y_i - Y'_i)^2}$

                                      Where:

                                      • $n$: is the number of features (10 in our example)
                                      • $Y_i$: is the original data point i.e. the input of the autoencoder
                                      • $Y'_i$: is the reconstructed data point i.e. the output of the autoencoder

                                      Before starting the training we need to set the hyperparameters). Hyperparameters are parameters whose values control the learning process and determine the values of model parameters that a learning algorithm ends up learning. These are the learning_rate, max_epochs, optimizer and the batch_size you see in the code snippet below. You may ask yourself how to set them, it all comes down to trial and error. Try tweaking them below and see how they affect the learning process...

                                      A good explaination of their meaning can be found in the Keras documentation.

                                      "},{"location":"tutorials/AD-EdgeAI/#model-evaluation","title":"Model evaluation\u00b6","text":"

                                      We now have a model that reconstruct the input at the output... doesn't sounds really useful right?

                                      Let's see it in action. Let's take a sample from the test set and run it through our autoencoder.

                                      "},{"location":"tutorials/AD-EdgeAI/#model-deployment","title":"Model deployment\u00b6","text":"

                                      To deploy our model on the target device we'll leverage Kura\u2122's newly added Nvidia\u2122 Triton Inferece Server integration.

                                      The Nvidia\u2122 Triton Inference Server is an open-source inference service software that enables the user to deploy trained AI models from any framework on GPU or CPU infrastructure. It supports all major frameworks like TensorFlow, TensorRT, PyTorch, ONNX Runtime, and even custom framework backend. With specific backends, it is also possible to run Python scripts, mainly for pre-and post-processing purposes, and exploit the DALI building block for optimized operations.

                                      For installation refer to the official Kura\u2122 and Triton documentation. For the rest of this tutorial we'll assume a Triton container is available on the target device. It can be simply installed with:

                                      docker pull nvcr.io/nvidia/tritonserver:22.07-tf2-python-py3\n

                                      We'll also need to install Kura\u2122's Triton bundles:

                                      • Triton Server Component: for Kura-Triton integration
                                      • AI Wire Component: for making the Triton Inference Server available through the Kura Wires as a Wire component.
                                      "},{"location":"tutorials/AD-EdgeAI/#model-conversion","title":"Model conversion\u00b6","text":"

                                      The first step in using Triton to serve your models is to place one or more models into a model repository i.e. a folder were the model are available for Triton to load. Depending on the type of the model and on what Triton capabilities you want to enable for the model, you may need to create a model configuration for the model. This configuration is a protobuf containing informations about runtime configuration and input/output shape accepted by the model.

                                      For our autoencoder model we'll need three \"models\":

                                      • A Preprocessor for performing the operations described in the \"Data processing\" section (Wire envelop translation, feature selection and scaling)
                                      • The Autoencoder model we exported in the \"Model training\" section
                                      • A Postprocessor for performing the operations described in the \"Model evaluation\" section (Reconstruction error computation)

                                      To simplify the handling of these models and improve inference performance, we'll use an advanced feature of Triton wich is an Ensemble Model. From Triton official documentation:

                                      An ensemble model represents a pipeline of one or more models and the connection of input and output tensors between those models. Ensemble models are intended to be used to encapsulate a procedure that involves multiple models, such as \"data preprocessing -> inference -> data postprocessing\". Using ensemble models for this purpose can avoid the overhead of transferring intermediate tensors and minimize the number of requests that must be sent to Triton.

                                      "},{"location":"tutorials/AD-EdgeAI/#autoencoder","title":"Autoencoder\u00b6","text":"

                                      As seen in the \"Model training\" section, our model is available as a Tensorflow SavedModel which can be simply loaded by the Triton Tensorflow backend. We just need to configure it properly.

                                      We'll start by creating the following folder structure

                                      tf_autoencoder_fp32\n\u251c\u2500\u2500 1\n\u2502   \u2514\u2500\u2500 model.savedmodel\n\u2502       \u251c\u2500\u2500 assets\n\u2502       \u251c\u2500\u2500 keras_metadata.pb\n\u2502       \u251c\u2500\u2500 saved_model.pb\n\u2502       \u2514\u2500\u2500 variables\n\u2502           \u251c\u2500\u2500 variables.data-00000-of-00001\n\u2502           \u2514\u2500\u2500 variables.index\n\u2514\u2500\u2500 config.pbtxt\n

                                      This can be done by copying the model we saved in the Model Training section:

                                      "},{"location":"tutorials/AD-EdgeAI/#preprocessor","title":"Preprocessor\u00b6","text":"

                                      As discussed in the \"Data processing\" section, before providing the incoming data to the autoencoder, we need to perform feature selection and scaling. In addition to these responsibilites, the Preprocessor will need to perform a sort of serialization of the data to comply to the input shape accepted by the Autoencoder. This is due to how Kura manages the data running on Wires. More details can be found here.

                                      To perform all of this we'll use the Python backend available in Triton.

                                      As described in the previous section we will need to provide the following folder structure:

                                      preprocessor\n\u251c\u2500\u2500 1\n\u2502   \u2514\u2500\u2500 model.py\n\u2514\u2500\u2500 config.pbtxt\n
                                      "},{"location":"tutorials/AD-EdgeAI/#preprocessor-configuration","title":"Preprocessor Configuration\u00b6","text":"

                                      As discussed in the official Kura documentation:

                                      The AI wire component takes a WireEnvelope as an input, it processes its records and feeds them to the specified preprocessing or inference model.

                                      ...

                                      The models that manage the input and the output must expect a list of inputs such that:

                                      • each input corresponds to an entry of the WireRecord properties
                                      • the entry key will become the input name (e.g. in the case of an asset, the channel name becomes the tensor name)
                                      • input shape will be [1]

                                      Therefore for our input we'll have that each name corresponds to the names we've seen in the Data Collection section. The output needs to correspond to the input accepted by the model (i.e. INPUT0).

                                      name: \"preprocessor\"\nbackend: \"python\"\n\ninput [\n  {\n    name: \"ACC_X\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\ninput [\n  {\n    name: \"ACC_Y\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\n ...\ninput [\n  {\n    name: \"TEMP_PRESS\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"INPUT0\"\n    data_type: TYPE_FP32\n    dims: [ 1, 10 ]\n  }\n]\ninstance_group [{ kind: KIND_CPU }]\n
                                      "},{"location":"tutorials/AD-EdgeAI/#preprocessor-model","title":"Preprocessor Model\u00b6","text":"

                                      As we've seen in the Data Processing section the Preprocessor is responsible for scaling the input features and serializing them in the tensor shape expected by the Autoencoder model.

                                      This can be done with the following python script:

                                      import numpy as np\nimport json\n\nimport triton_python_backend_utils as pb_utils\n\n\nclass TritonPythonModel:\n\n    def initialize(self, args):\n        self.model_config = model_config = json.loads(args['model_config'])\n\n        output0_config = pb_utils.get_output_config_by_name(\n            model_config, \"INPUT0\")\n\n        self.output0_dtype = pb_utils.triton_string_to_numpy(\n            output0_config['data_type'])\n\n    def execute(self, requests):\n        output0_dtype = self.output0_dtype\n\n        responses = []\n\n        for request in requests:\n            acc_x      = pb_utils.get_input_tensor_by_name(request, \"ACC_X\").as_numpy()\n            acc_y      = pb_utils.get_input_tensor_by_name(request, \"ACC_Y\").as_numpy()\n            acc_z      = pb_utils.get_input_tensor_by_name(request, \"ACC_Z\").as_numpy()\n            gyro_x     = pb_utils.get_input_tensor_by_name(request, \"GYRO_X\").as_numpy()\n            gyro_y     = pb_utils.get_input_tensor_by_name(request, \"GYRO_Y\").as_numpy()\n            gyro_z     = pb_utils.get_input_tensor_by_name(request, \"GYRO_Z\").as_numpy()\n            humidity   = pb_utils.get_input_tensor_by_name(request, \"HUMIDITY\").as_numpy()\n            pressure   = pb_utils.get_input_tensor_by_name(request, \"PRESSURE\").as_numpy()\n            temp_hum   = pb_utils.get_input_tensor_by_name(request, \"TEMP_HUM\").as_numpy()\n            temp_press = pb_utils.get_input_tensor_by_name(request, \"TEMP_PRESS\").as_numpy()\n\n            out_0 = np.array([acc_y, acc_x, acc_z, pressure, temp_press, temp_hum, humidity, gyro_x, gyro_y, gyro_z]).transpose()\n\n            #                  ACC_Y     ACC_X     ACC_Z    PRESSURE   TEMP_PRESS   TEMP_HUM   HUMIDITY    GYRO_X    GYRO_Y    GYRO_Z\n            min = np.array([-0.132551, -0.049693, 0.759847, 976.001709, 38.724998, 40.220890, 13.003981, -1.937896, -0.265019, -0.250647])\n            max = np.array([ 0.093099, 0.150289, 1.177543, 1007.996338, 46.093750, 48.355824, 23.506138, 1.923712, 0.219204, 0.671759])\n\n            # MinMax scaling\n            out_0_scaled = (out_0 - min)/(max - min)\n\n            # Create output tensor\n            out_tensor_0 = pb_utils.Tensor(\"INPUT0\",\n                                           out_0_scaled.astype(output0_dtype))\n\n            inference_response = pb_utils.InferenceResponse(\n                output_tensors=[out_tensor_0])\n            responses.append(inference_response)\n\n        return responses\n

                                      Here there are two important things to note:

                                      • The template we're using is taken from the Triton documentation and can be found here.
                                      • The MinMax scaling must be the same we used in our training. For illustration purposes we wrote the min and max arrays we found in the Data Processing section but we could have serialized the MinMaxScaler using pickle instead.
                                      "},{"location":"tutorials/AD-EdgeAI/#postprocessor","title":"Postprocessor\u00b6","text":"

                                      As discussed in the \"Data processing\" section, to perform the anomaly detection step we need to compute the Mean Squared Error between the recontructed data and the actual input data. Due to this the configuration of the Postprocessor model will be somewhat more complicated than before: in addition to the output of the Autoencoder model we will need the output of the Preprocessor model.

                                      To perform all of this we'll use the Python backend again.

                                      As described in the previous section we will need to provide the following folder structure:

                                      postprocessor\n\u251c\u2500\u2500 1\n\u2502   \u2514\u2500\u2500 model.py\n\u2514\u2500\u2500 config.pbtxt\n
                                      "},{"location":"tutorials/AD-EdgeAI/#postprocessor-configuration","title":"Postprocessor Configuration\u00b6","text":"
                                      name: \"postprocessor\"\nbackend: \"python\"\n\ninput [\n  {\n    name: \"RECONSTR0\"\n    data_type: TYPE_FP32\n    dims: [ 1, 10 ]\n  }\n]\ninput [\n  {\n    name: \"ORIG0\"\n    data_type: TYPE_FP32\n    dims: [ 1, 10 ]\n  }\n]\noutput [\n  {\n    name: \"ANOMALY_SCORE0\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"ANOMALY0\"\n    data_type: TYPE_BOOL\n    dims: [ 1 ]\n  }\n]\ninstance_group [{ kind: KIND_CPU }]\n

                                      As we can see we have two inputs and two outputs:

                                      • The first input tensor is the reconstruction performed by the autoencoder model
                                      • The second input tensor is the original data (already scaled and serialized by the Preprocessor model)
                                      • The first output is the anomaly score i.e. the reconstruction error between the original and the reconstructed data.
                                      • The second output is a boolean representing whether the data constitute an anomaly or not

                                      Let's see how this is computed by the Python model.

                                      "},{"location":"tutorials/AD-EdgeAI/#postprocessor-model","title":"Postprocessor Model\u00b6","text":"
                                      import numpy as np\nimport json\n\nimport triton_python_backend_utils as pb_utils\n\ndef z_score(mse):\n    return (mse - MEAN_MSE)/STD_MSE\n\n\nclass TritonPythonModel:\n\n    def initialize(self, args):\n        self.model_config = model_config = json.loads(args['model_config'])\n\n        output0_config = pb_utils.get_output_config_by_name(\n            model_config, \"ANOMALY_SCORE0\")\n        output1_config = pb_utils.get_output_config_by_name(\n            model_config, \"ANOMALY0\")\n\n        self.output0_dtype = pb_utils.triton_string_to_numpy(\n            output0_config['data_type'])\n        self.output1_dtype = pb_utils.triton_string_to_numpy(\n            output1_config['data_type'])\n\n    def execute(self, requests):\n        output0_dtype = self.output0_dtype\n        output1_dtype = self.output1_dtype\n\n        responses = []\n\n        for request in requests:\n            # Get input\n            x_recon = pb_utils.get_input_tensor_by_name(request, \"RECONSTR0\").as_numpy()\n            x_orig = pb_utils.get_input_tensor_by_name(request, \"ORIG0\").as_numpy()\n\n            # Get Mean square error between reconstructed input and original input\n            reconstruction_score = np.mean((x_orig - x_recon)**2, axis=1)\n            \n            #\u00a0Z-Score of Mean square error must be inside [-2; 2]\n            anomaly = np.array([z_score(reconstruction_score) < -2.0 or z_score(reconstruction_score) > 2.0])\n\n            # Create output tensors\n            out_tensor_0 = pb_utils.Tensor(\"ANOMALY_SCORE0\",\n                                           reconstruction_score.astype(output0_dtype))\n            out_tensor_1 = pb_utils.Tensor(\"ANOMALY0\",\n                                           anomaly.astype(output1_dtype))\n\n            inference_response = pb_utils.InferenceResponse(\n                output_tensors=[out_tensor_0, out_tensor_1])\n            responses.append(inference_response)\n\n        return responses\n

                                      As you can see the script is simple:

                                      • It gets the input tensors
                                      • It computes the Mean Squared Error between the inputs (which is what we called the reconstruction error)
                                      • It computes the Z-Score of the MSE computed for the current sample and flags it as an anomaly if it is farther than 2 standard deviations away from the average MSE.

                                      Note: MEAN_MSE and STD_MSE are the mean value and the standard deviation of the Mean Squared Error computed on the test set and correspond to the reconstruction_scores_pd.mean() and reconstruction_scores_pd.std() we used in the previous section. We didn't set them as they change for every training performed on the Autoencoder. Be sure to set it to their proper values before trying this model on the Triton server!

                                      "},{"location":"tutorials/AD-EdgeAI/#ensemble-model","title":"Ensemble model\u00b6","text":"

                                      To make things easier for ourselves and improve performance we'll consolidate the AI pipeline into an Ensemble Model.

                                      We will need to provide the following folder structure:

                                      ensemble_pipeline\n\u251c\u2500\u2500 1\n\u2514\u2500\u2500 config.pbtxt\n

                                      Note that the 1 folder is empty. The ensemble model essentially describe how to connect the models that belong to the processing pipeline.

                                      Therefore we'll need to focus on the configuration only.

                                      name: \"ensemble_pipeline\"\nplatform: \"ensemble\"\nmax_batch_size: 0\ninput [\n  {\n    name: \"ACC_X\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\ninput [\n  {\n    name: \"ACC_Y\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\n ...\ninput [\n  {\n    name: \"TEMP_PRESS\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"ANOMALY_SCORE0\"\n    data_type: TYPE_FP32\n    dims: [ 1 ]\n  }\n]\noutput [\n  {\n    name: \"ANOMALY0\"\n    data_type: TYPE_BOOL\n    dims: [ 1 ]\n  }\n]\nensemble_scheduling {\n  step [\n    {\n      model_name: \"preprocessor\"\n      model_version: -1\n      input_map{\n          key: \"ACC_X\"\n          value: \"ACC_X\"\n      }\n      input_map{\n          key: \"ACC_Y\"\n          value: \"ACC_Y\"\n      }\n       ...\n      input_map{\n          key: \"TEMP_PRESS\"\n          value: \"TEMP_PRESS\"\n      }\n      output_map {\n        key: \"INPUT0\"\n        value: \"preprocess_out\"\n      }\n    },\n    {\n      model_name: \"tf_autoencoder_fp32\"\n      model_version: -1\n      input_map {\n        key: \"INPUT0\"\n        value: \"preprocess_out\"\n      }\n      output_map {\n        key: \"OUTPUT0\"\n        value: \"autoencoder_output\"\n      }\n    },\n    {\n      model_name: \"postprocessor\"\n      model_version: -1\n      input_map {\n        key: \"RECONSTR0\"\n        value: \"autoencoder_output\"\n      }\n      input_map {\n        key: \"ORIG0\"\n        value: \"preprocess_out\"\n      }\n      output_map {\n        key: \"ANOMALY_SCORE0\"\n        value: \"ANOMALY_SCORE0\"\n      }\n      output_map {\n        key: \"ANOMALY0\"\n        value: \"ANOMALY0\"\n      }\n    }\n  ]\n}\n

                                      The configuration is split in two main parts:

                                      • The first is the usual configuration we've seen before: we describe what are the input and the output of our model. In this case the input will correspond to the input of the first model of the pipeline (the Preprocessor) and the output to the output of the last model of the pipeline (the Postprocessor)
                                      • The second part describe how to map the input/output of the models within the pipeline

                                      To better visualize the configuration we can look at the graph below.

                                      "},{"location":"tutorials/AD-EdgeAI/#conversion-results","title":"Conversion results\u00b6","text":"

                                      At this point we should have a folder structure that looks like this:

                                      models\n\u251c\u2500\u2500 ensemble_pipeline\n\u2502\u00a0\u00a0 \u251c\u2500\u2500 1\n\u2502\u00a0\u00a0 \u2514\u2500\u2500 config.pbtxt\n\u251c\u2500\u2500 postprocessor\n\u2502\u00a0\u00a0 \u251c\u2500\u2500 1\n\u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u2514\u2500\u2500 model.py\n\u2502\u00a0\u00a0 \u2514\u2500\u2500 config.pbtxt\n\u251c\u2500\u2500 preprocessor\n\u2502\u00a0\u00a0 \u251c\u2500\u2500 1\n\u2502\u00a0\u00a0 \u2502\u00a0\u00a0 \u2514\u2500\u2500 model.py\n\u2502\u00a0\u00a0 \u2514\u2500\u2500 config.pbtxt\n\u2514\u2500\u2500 tf_autoencoder_fp32\n    \u251c\u2500\u2500 1\n    \u2502\u00a0\u00a0 \u2514\u2500\u2500 model.savedmodel\n    \u2502\u00a0\u00a0     \u251c\u2500\u2500 assets\n    \u2502\u00a0\u00a0     \u251c\u2500\u2500 keras_metadata.pb\n    \u2502\u00a0\u00a0     \u251c\u2500\u2500 saved_model.pb\n    \u2502\u00a0\u00a0     \u2514\u2500\u2500 variables\n    \u2502\u00a0\u00a0         \u251c\u2500\u2500 variables.data-00000-of-00001\n    \u2502\u00a0\u00a0         \u2514\u2500\u2500 variables.index\n    \u2514\u2500\u2500 config.pbtxt\n
                                      "},{"location":"tutorials/AD-EdgeAI/#kura-deployment","title":"Kura Deployment\u00b6","text":"

                                      We can now move our pipeline to the target device for inference on the edge.

                                      We want to perform anomaly detection in real time, directly within the edge device, using the same data we used to collect for our training.

                                      "},{"location":"tutorials/AD-EdgeAI/#triton-component-configuration","title":"Triton component configuration\u00b6","text":"

                                      To do so we need to copy the models folder on the target device. For this example we'll use the /home/pi/models path.

                                      We can now move to the Kura web UI and create a new Triton Server Container Service component instance. The complete documentation can be found here.

                                      In this example we'll call it TritonContainerService.

                                      Then we'll need to configure it to run our models. Move to the TritonContainerService configuration interface and set the following parameters:

                                      • Image name/Image tag: use the name and tag of the Triton container image you installed. We're using nvcr.io/nvidia/tritonserver:22.07-tf2-python-py3 in this example.
                                      • Local model repository path: in our example is /home/pi/models
                                      • Inference Models: we'll need to load all the models of the pipeline so: preprocessor,postprocessor,tf_autoencoder_fp32,ensemble_pipeline
                                      • Optional configuration for the local backends: tensorflow,version=2 since Tensorflow 2 is the only available Tensorflow backend in the Triton container image we're using.

                                      You can leave everything else as default.

                                      Once you press the \"Apply\" button Kura will create a new container from the Triton image we set and spin up the service with our models loaded.

                                      pi@raspberrypi:~ $ docker ps\nCONTAINER ID   IMAGE                                              COMMAND                  CREATED          STATUS          PORTS                                                                                                                             NAMES\n4deae2857b6f   nvcr.io/nvidia/tritonserver:22.07-tf2-python-py3   \"tritonserver --mode\u2026\"   13 seconds ago   Up 11 seconds   0.0.0.0:4000->8000/tcp, :::4000->8000/tcp, 0.0.0.0:4001->8001/tcp, :::4001->8001/tcp, 0.0.0.0:4002->8002/tcp, :::4002->8002/tcp   tritonserver-kura\n

                                      Note: if no container is created check that the \"Container Orchestration Service\" is enabled in the Kura UI. Full documentation for the service can be found here.

                                      Note: if you see an error in the logs like \"Internal: Unable to initialize shared memory key 'triton_python_backend_shm_region_2' to requested size (67108864 bytes). If you are running Triton inside docker, use '--shm-size' flag to control the shared memory region size. Each Python backend model instance requires at least 64MBs of shared memory.\", you can update the default shared memory size allocated by the Docker daemon. Go to /etc/docker/daemon.json, set \"default-shm-size\": \"200m\" and restart the Docker daemon with: sudo systemctl restart docker.

                                      "},{"location":"tutorials/AD-EdgeAI/#wire-graph","title":"Wire Graph\u00b6","text":"

                                      Finally we can move to the \"Wire Graph\" UI and create the AI component (in the Emitters/Receiver menu) for interfacing with the Triton instance we just created. We'll call it Triton in this example.

                                      We just need to change two parameter in the configuration:

                                      • InferenceEngineService Target Filter: we need to select the TritonContainerService we created at the step above
                                      • inference.model.name: Since we're using an ensemble pipeline we need only that as our inference model.

                                      The resulting wire graph is the following:

                                      And that's it! We should now see the anomaly detection results coming to Kapua in addition to the SenseHat data.

                                      "},{"location":"tutorials/AD-EdgeAI/#complete-example","title":"Complete Example\u00b6","text":"

                                      A similar but more complete example of the feature presented in this notebook is available in the official Kura\u2122 repository containing all the code and the configuration needed to make it work.

                                      Give it a try!

                                      "}]} \ No newline at end of file diff --git a/docs-develop/sitemap.xml.gz b/docs-develop/sitemap.xml.gz index cc376260f9f1e87dff0f720444f708b91daea187..0bb2c5c48de1fef717b2994f73f7e18053b90039 100644 GIT binary patch delta 13 Ucmb=gXP58h;Mi?pKasrx02~1X0ssI2 delta 13 Ucmb=gXP58h;Ba!Yn8;oM02x&SkN^Mx