gandalf/secubox-deb
0
1
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-29 09:14:00 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
d67e2c03b7
secubox-deb/packages
History
CyberMind-FR d67e2c03b7 feat(profiles): package waker/sleeper + lifecycle policy, v0.8.0 (ref #896) 
Wires the scale-to-zero services into debian/ packaging: secubox-wakectl
entry point (/usr/sbin), templates/waking.html now ships, secubox-waker
and secubox-sleeper systemd units registered via dh_installsystemd
--name=, enabled/restarted (try-restart, preserving runtime state) in
postinst alongside secubox-profiles.service. postinst now also runs
secubox-wakectl waf-sync/health-sync so sbxwaf and the health monitor
have their lists from first install (nginx-sync stays unwired per the
2026-07-20 pivot).

Hardens secubox-sleeper.service with ProtectSystem=strict and an
explicit ReadWritePaths covering the actuator's real write set, traced
through api/actuate.py/snapshot.py/audit.py: /run/secubox,
/var/lib/secubox/profiles/rollback, /var/log/secubox, /data/lxc, and
/etc/secubox/waf (haproxy-routes.json, written on a routed module's
STOP — missed by a naive reading of the write set).

Documents the lifecycle/wake_class policy, the waker/sleeper mechanism
and a pilot procedure in README.md, wiki/Architecture.md and
.claude/MODULE-COMPLIANCE.md. Bumps changelog to 0.8.0.

Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
2026-07-20 17:06:47 +02:00
..
secubox-ad-guard release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-admin release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-aggregator
secubox-ai-gateway release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-ai-insights release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-annuaire release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-appstore release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-auth release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-avatar release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-backup release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-billets feat(billets): emoji hashtags, quick views, and feed resumes 2026-07-17 10:35:24 +02:00
secubox-c3box release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-cdn release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-certs release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-cloner release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-config-advisor release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-console
secubox-cookies release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-core
secubox-crowdsec release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-cve-triage release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-cyberfeed release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-daemon/debian
secubox-defaults
secubox-device-intel release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-dns release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-dns-guard release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-dns-provider release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-domoticz release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-dpi release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-droplet release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-egress
secubox-exposure release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-eye-remote release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-eye-square
secubox-fmrelay release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-frigate release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-full/debian
secubox-gitea release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-glances release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-gotosocial release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-grafana release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-haproxy release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-hardening release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-health-doctor
secubox-hexo release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-homeassistant release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-hub feat(profiles): boot reconciliation + watchdog exclusion for on-demand (ref #896) 2026-07-20 16:51:56 +02:00
secubox-identity release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-interceptor release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-iot-guard release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-ipblock release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-jabber release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-jellyfin release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-jitsi release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-ksm release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-led-heartbeat
secubox-lite/debian
secubox-localai release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-localrecall release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-lyrion release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-mac-guard release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-macro feat(macro): auto-detect firewall table (secubox_filter|filter) via /etc/secubox/macro.conf — tor-exit works on gk2's inet filter too (closes #772) (ref #771) 2026-07-01 13:40:25 +02:00
secubox-magicmirror release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-maigret feat(maigret): stylized PDF report from raw lookup (ref #845) 2026-07-12 15:24:00 +02:00
secubox-mail release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-mail-lxc/debian
secubox-master-link
secubox-matrix release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-mcp-server release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-mediaflow release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-mesh release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-mesh-bt
secubox-meshname release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-metablogizer release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-metabolizer release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-metacatalog release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-metoblizer fix(metoblizer): install api + fix ExecStart (was crash-looping 4042x) 2026-07-10 15:08:24 +02:00
secubox-metrics release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-mirror release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-mitmproxy release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-mmpm/debian
secubox-modem release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-mqtt release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-nac release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-ndpid release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-netdata release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-netdiag release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-netifyd release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-netmodes release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-nettweak release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-network-anomaly release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-newsbin release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-nextcloud release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-ollama release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-openclaw fix(openclaw): certSpotter fallback for CT lookup + whois registrable domain 2026-07-16 10:12:32 +02:00
secubox-ossec release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-p2p release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-peertube release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-photoprism release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-picobrew release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-podcaster fix(podcaster): stage YouTube imports on the SSD, not the eMMC root 2026-07-17 19:30:35 +02:00
secubox-portal feat(portal): full in-browser TOTP flow in login.html (mfa + enrollment + backup codes) 2026-07-11 07:01:39 +02:00
secubox-profiles feat(profiles): package waker/sleeper + lifecycle policy, v0.8.0 (ref #896) 2026-07-20 17:06:47 +02:00
secubox-proxypac release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-publish release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-qos release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-rbs-sensor
secubox-reality release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-redroid release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-repo release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-reporter release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-rezapp release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-roadmap release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-routes release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-rtty release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-rustdesk release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-saas-relay release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-security-posture release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-sentinelle-gsm feat(webui): extend hybrid-dark overlay to remaining custom panels 2026-07-10 08:56:47 +02:00
secubox-simplex release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-smart-strip
secubox-smtp-relay release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-soc release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-soc-agent
secubox-soc-gateway
secubox-soc-web
secubox-spiderfoot feat(spiderfoot): expose UI at https://spiderfoot.gk2.secubox.in (root proxy) (ref #845) 2026-07-12 15:05:48 +02:00
secubox-streamforge release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-streamlit release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-system release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-system-hub
secubox-system-tuning
secubox-threat-analyst release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-threatmesh release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-threats release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-toolbox release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-toolbox-ng fix(waf-ng): vhost signal excludes WAF-blocked/banned traffic (real activity only) (ref #896) 2026-07-20 16:17:59 +02:00
secubox-tor release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-torrent release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-traffic release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-turn release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-ui-manager
secubox-users release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-vault release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-vhost release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-vm release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-voip release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-vortex-dns release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-vortex-firewall release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-waf release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-waf-ng feat(waf-ng): per-vhost last-request/active-conns signal emitter (ref #896) 2026-07-20 16:04:58 +02:00
secubox-watchdog release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-wazuh release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-webext
secubox-webmail
secubox-webmail-lxc/debian
secubox-webradio release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-wireguard release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-yacy release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-yggdrasil release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
secubox-zigbee release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
secubox-zkp release: bump minor on the 87 modules converted to Wants=secubox-core (Phase 2) 2026-07-19 09:08:22 +02:00
zkp-hamiltonian