stegasoo/rpi/README.md

Stegasoo Raspberry Pi

Scripts and resources for deploying Stegasoo on Raspberry Pi.

Quick Install

On a fresh Raspberry Pi OS (64-bit) installation:

# Pre-setup (git not included in Lite image)
sudo chown $USER:$USER /opt
sudo apt-get update && sudo apt-get install -y git

# Clone and run setup
cd /opt
git clone -b 4.2 https://github.com/adlee-was-taken/stegasoo.git stegasoo
cd stegasoo
./rpi/setup.sh

What the Setup Script Does

1. Verifies Python 3.11+ - uses system Python (no pyenv needed)
2. Installs system dependencies - build tools, libraries
3. Installs jpeglib - DCT steganography (Python 3.11-3.14 compatible)
4. Installs Stegasoo - with web UI and all dependencies
5. Creates systemd service - auto-starts on boot
6. Enables the service - ready to start

Requirements

• Raspberry Pi 4 or 5
• Raspberry Pi OS (64-bit) - Bookworm (Python 3.11) or Trixie (Python 3.13)
• 4GB+ RAM recommended (2GB minimum)
• 16GB+ SD card (pre-built images are 16GB)
• Internet connection

Python Compatibility

Raspberry Pi OS	Python	Supported
Bookworm	3.11	Yes
Trixie	3.13	Yes

Performance

On a Pi 4 at 2GHz with USB 3.0 NVMe, expect ~60 seconds to encode/decode a 10MB JPEG with full encryption (passphrase + PIN + reference photo).

Pre-built Image Defaults

If using a pre-built image from GitHub Releases:

• Default login: admin / stegasoo
• Hostname: stegasoo.local
• First boot: A setup wizard runs on first SSH login

Security note: Change the default password after setup with passwd

Updating an Existing Installation

To update to the latest version:

cd /opt/stegasoo
git pull origin main
sudo systemctl restart stegasoo

That's it - the editable install means Python uses the source directly.

If dependencies changed (check release notes), also run:

source venv/bin/activate
pip install -e ".[web]"
sudo systemctl restart stegasoo

After Installation

Start the Service

sudo systemctl start stegasoo

Check Status

sudo systemctl status stegasoo

View Logs

journalctl -u stegasoo -f

Access Web UI

Open in browser: http://<pi-ip>:5000

On first access, you'll create an admin account.

Configuration

Edit the systemd service to change settings:

sudo systemctl edit stegasoo

Add overrides:

[Service]
Environment="STEGASOO_AUTH_ENABLED=true"
Environment="STEGASOO_HTTPS_ENABLED=true"
Environment="STEGASOO_HOSTNAME=stegasoo.local"

Then reload:

sudo systemctl daemon-reload
sudo systemctl restart stegasoo

Uninstall

sudo systemctl stop stegasoo
sudo systemctl disable stegasoo
sudo rm /etc/systemd/system/stegasoo.service
rm -rf /opt/stegasoo

Pre-built Images

Check GitHub Releases for pre-built SD card images.

---

Building Your Own Image

To create a distributable SD card image:

1. Flash Fresh Raspberry Pi OS

Use rpi-imager to flash Raspberry Pi OS (64-bit) to an SD card.

In advanced settings, set:

• Hostname: stegasoo
• Enable SSH (password auth for initial setup)
• Username/password (temporary, will work for any user)
• Skip WiFi for distributable image

2. Boot and Run Setup

# SSH into the Pi
ssh admin@stegasoo.local

# Pre-setup
sudo chown admin:admin /opt
sudo apt-get update && sudo apt-get install -y git

# Clone and run setup
cd /opt
git clone -b 4.2 https://github.com/adlee-was-taken/stegasoo.git stegasoo
cd stegasoo
./rpi/setup.sh

3. Test It Works

sudo systemctl start stegasoo
curl -k https://localhost:5000  # Should return HTML

4. Sanitize for Distribution

# Full sanitize (removes WiFi, shuts down for imaging)
sudo /opt/stegasoo/rpi/sanitize-for-image.sh

# Or soft reset (keeps WiFi for testing, reboots)
sudo /opt/stegasoo/rpi/sanitize-for-image.sh --soft

This removes:

• WiFi credentials (unless --soft)
• SSH host keys (regenerate on boot)
• SSH authorized keys
• Bash history
• Stegasoo auth database (users create their own admin)
• Logs and temp files

The script validates cleanup and reports any issues.

5. Create the Image

After Pi shuts down, remove SD card and on another Linux machine:

# Find SD card device (BE CAREFUL - wrong device = data loss!)
lsblk

# Pull image (auto-resizes to 16GB, compresses with zstd)
sudo ./rpi/pull-image.sh /dev/sdX stegasoo-rpi-4.2.1.img.zst

The pull-image.sh script automatically:

• Resizes rootfs to exactly 16GB (for smaller download)
• Preserves auto-expand (image fills SD card on first boot)
• Compresses with zstd for fast decompression

6. Distribute

Upload the .img.zst file to GitHub Releases.

Users flash with:

# Option 1: rpi-imager CLI (supports .zst.zip directly)
sudo rpi-imager --cli --disable-verify stegasoo-rpi-*.img.zst.zip /dev/sdX

# Option 2: flash-image.sh (auto-detects SD card, shows progress)
sudo ./rpi/flash-image.sh stegasoo-rpi-*.img.zst.zip

# Option 3: Manual dd
zstdcat stegasoo-rpi-*.img.zst | sudo dd of=/dev/sdX bs=4M status=progress