- \n
- Note: an adapter may be required because the 3.5″ HDD mounting holes are used to secure the PCB to the case:\n
- \n
![\"\"](\"https:\/\/dft.wiki\/wp-content\/uploads\/sites\/15\/2023\/03\/Screenshot-from-2023-03-11-08-48-51.png\")
<\/li>\n- Note:<\/strong> I have never found a confirmed case of anyone successfully replacing the drive. Please reach out if you got it working.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n
- You want full control of your device and wish to secure it with Debian. There are many basic features WD will never support, such as:\n
- \n
- Using a secondary network adapter or additional storage via USB 3,<\/li>\n
- SSH access to run or schedule tasks,<\/li>\n
- Installing virtually any application (web server, Active Directory, printer sharing, etc.)<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
If you want to keep your device secure and up-to-date, follow along to install a clean Debian 11 image (built March 2023).<\/p>\n
\nINSTALLATION PROCEDURE<\/strong><\/p>\n
Preparation<\/p>\n
- \n
- Backup<\/strong> your data from the NAS to another location (at your own risk),<\/li>\n
- Download<\/strong> the image file [Link<\/a>] and decompress it (feel free to inspect the image before using it),<\/li>\n
- Format<\/strong> an 8+ GB USB drive as FAT32<\/strong> on MBR,<\/li>\n
- Copy the contents<\/strong> of the decompressed image to the drive.<\/li>\n<\/ul>\n
Execution<\/p>\n
- \n
- Power off<\/strong> the NAS,<\/li>\n
- Insert<\/strong> the USB drive,<\/li>\n
- Press and hold the Reset<\/strong> button (just above the USB port),<\/li>\n
- While holding the button, power on the device<\/strong> and keep it held until the light turns ON (about 30 seconds),<\/li>\n
- Once released, keep pinging the NAS<\/strong> and watch for it to stop and then start responding again (this means it has rebooted),<\/li>\n
- Remove<\/strong> the USB drive.<\/li>\n<\/ul>\n
\nFIRST ACCESS<\/strong><\/p>\n
ssh root@IP<\/strong><\/pre>\n
Find the IP assigned to the NAS by checking your DHCP server, running an ARP scan, scanning port 22, etc.<\/p>\n
The default password is
password<\/code> – Change it immediately!<\/span><\/strong><\/p>\nPerform basic system hardening: create your own account, grant it
sudo<\/code> privileges, disable root SSH login, and enforce SSH key authentication.<\/p>\nThen check for updates:<\/p>\n
sudo apt update\r\nsudo apt upgrade -y\r\nsudo apt --purge autoremove -y\r\nsudo apt autoclean -y\r\nsudo apt dist-upgrade -y\r\nsudo apt --purge autoremove -y\r\nsudo apt autoclean -y<\/pre>\n
Always monitor mounted partitions with
df -h<\/code> as they are small and can fill up quickly. A workaround is to use symbolic links to redirect directories to the larger partition (\/srv\/dev-sataa24\/<\/code>).<\/p>\n
\nUNDERSTANDING THE NEW SYSTEM<\/strong><\/p>\n
![\"\"](\"https:\/\/dft.wiki\/wp-content\/uploads\/sites\/15\/2023\/03\/wd-my-cloud-home.png\")
<\/p>\nThe single-bay 2 TB version (also available in higher capacities) has the following hardware specs:<\/p>\n
- \n
- Storage: WD RED 3.5″ HDD 2TB (usable < 1.8 TB<\/strong>)<\/li>\n
- Processor: ARM<\/strong> Cortex-A53 Quad-Core 1.4 GHz 64<\/strong>-bit<\/li>\n
- Memory: 1 GB DDR3 (usable 730 MB<\/strong>)<\/li>\n
- Network: Gigabit Ethernet<\/strong><\/li>\n
- USB: One USB 3.0 Type-A<\/strong> port on the back<\/li>\n
- Power: ~7W<\/strong> (18W max) = approximately 60 kWh\/year<\/li>\n<\/ul>\n
The hard drive has 24 partitions (GPT):<\/p>\n
![\"\"](\"https:\/\/dft.wiki\/wp-content\/uploads\/sites\/15\/2023\/03\/Screenshot-from-2023-03-10-14-16-47.png\")
<\/p>\n- \n
- \n
- \n
sataa1<\/code> tosataa19<\/code> andsataa23<\/code> – Not used by the OS; leave these alone.<\/li>\nsataa20<\/code> – 775 MB (12% used) – Root filesystem\/<\/code><\/li>\nsataa21<\/code> – 775 MB (67% used) – Mounted at\/var<\/code><\/li>\nsataa22<\/code> – 2 GB (73% used) – Mounted at\/usr<\/code><\/li>\nsataa24<\/code> – 1.8 TB – User storage, mounted at\/srv\/dev-sataa24\/<\/code><\/li>\n<\/ul>\n<\/li>\n<\/ul>\nNote:<\/strong> Avoid modifying partitions 1 through 23, as doing so could break the recovery procedure. The last partition can be resized to use the full drive capacity.<\/p>\n
The USB drive image contains the following file structure:<\/p>\n
- \n
rescue.root.sata.cpio.gz_pad.img<\/code><\/li>\nrescue.sata.dtb<\/code><\/li>\nsata.uImage<\/code><\/li>\nbluecore.audio<\/code><\/li>\nomv\/20-root.tar.gz<\/code> – copied tosataa20<\/code><\/li>\nomv\/21-var.tar.gz<\/code> – copied tosataa21<\/code><\/li>\nomv\/22-usr.tar.gz<\/code> – copied tosataa22<\/code><\/li>\nomv\/bootConfig<\/code><\/li>\nomv\/fwtable.bin<\/code><\/li>\nomv\/rootfs.bin<\/code><\/li>\n<\/ul>\nAfter the image is written, expected resource usage at idle:<\/p>\n
- \n
- ~20% RAM (~140 MB \/ 730 MB)<\/li>\n
- <5% CPU<\/li>\n<\/ul>\n
\nHOW IT WAS BUILT<\/strong><\/p>\n
Credit to CyberTalk [Link<\/a>], who originally released an image that replaces the WD OS with Debian 9 and OMV 4 pre-installed.<\/p>\n
Goals and Reflections<\/p>\n
- \n
- OMV (OpenMediaVault) 4 (Arrakis) was released in 2018 and reached EOL in 2020.\n
- \n
- Not all repositories were still available at the time of writing.<\/li>\n<\/ul>\n<\/li>\n
- Debian 9 (Stretch) was released in 2017 and reached EOL in 2020.\n
- \n
- There was not enough space to run
apt update<\/code>.<\/li>\n<\/ul>\n<\/li>\n- Not every use case needs OMV installed.\n
- \n
- All OMV-related components were stripped before upgrading.<\/li>\n
- The goal was to keep the base image lightweight so users can install only what they need.<\/li>\n<\/ul>\n<\/li>\n
- In the event of a hard drive failure, a full image with the complete partition schema is available to write to a new drive [Link<\/a>].\n
- \n
- It is unclear whether the partition schema must be preserved (cloned) for the firmware to boot correctly.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
Thanks again to the CyberTalk team for the base image. I only cleaned it up and updated it.<\/p>\n
\nBONUS<\/strong><\/p>\n
- \n
- Disable IPv6 if not needed,<\/li>\n
- Update
\/etc\/fstab<\/code> to mount the large partition at your preferred location instead of\/srv\/dev-sataa24<\/code>,<\/li>\n- Do not try to install UFW as it will not work as expected. Use
iptables<\/code> for firewall rules instead (if you know how to get UFW working, please reach out).\n- NFS was broken on the original Debian 9 image and I could not get it working on any version (if you know how, please reach out).\n
- \n
- As an alternative, NFS Ganesha works:\n
- \n
- \n
sudo apt install nfs-ganesha nfs-ganesha-vfs -y\r\nsudo nano \/etc\/ganesha\/ganesha.conf<\/pre>\n<\/li>\n
- \n
EXPORT {\r\n Export_Id = 1;\r\n Path = \/PATH_TO_SHARE;\r\n Pseudo = \/SHARE_NAME;\r\n Access_Type = RW;\r\n Squash = No_Root_Squash;\r\n FSAL {\r\n Name = VFS;\r\n }\r\n clients = 192.168.1.0\/24;\r\n}<\/pre>\n<\/li>\n - \n
sudo systemctl restart nfs-ganesha\r\nsudo systemctl status nfs-ganesha<\/pre>\n<\/li>\n<\/ul>\n<\/li>\n
- For local network file sharing,
samba<\/code> is available out of the box.<\/li>\n- For secure remote file storage, I recommend MinIO, an enterprise-grade AWS S3-compatible server [Link<\/a>].<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
If you own a Western Digital My Cloud Home, you might have noticed that product […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,1],"tags":[],"class_list":["post-3465","post","type-post","status-publish","format-standard","hentry","category-linux","category-ccna"],"_links":{"self":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/3465","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3465"}],"version-history":[{"count":16,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/3465\/revisions"}],"predecessor-version":[{"id":5646,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/3465\/revisions\/5646"}],"wp:attachment":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3465"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3465"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3465"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- For secure remote file storage, I recommend MinIO, an enterprise-grade AWS S3-compatible server [Link<\/a>].<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
- \n
- Do not try to install UFW as it will not work as expected. Use
- It is unclear whether the partition schema must be preserved (cloned) for the firmware to boot correctly.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
- Not every use case needs OMV installed.\n
- There was not enough space to run
- OMV (OpenMediaVault) 4 (Arrakis) was released in 2018 and reached EOL in 2020.\n
- Processor: ARM<\/strong> Cortex-A53 Quad-Core 1.4 GHz 64<\/strong>-bit<\/li>\n
- Insert<\/strong> the USB drive,<\/li>\n
- Download<\/strong> the image file [Link<\/a>] and decompress it (feel free to inspect the image before using it),<\/li>\n
- Backup<\/strong> your data from the NAS to another location (at your own risk),<\/li>\n
- You want full control of your device and wish to secure it with Debian. There are many basic features WD will never support, such as:\n