Pi Zero composite gadget creates both RNDIS (usb0) and CDC-ECM (usb1)
interfaces with same MAC prefix. This caused duplicate routes for
10.55.0.0/24 network, breaking connectivity to Eye Remote.
Fix:
- RNDIS (usb0): Configure with IP 10.55.0.1/24, bring up
- CDC-ECM (usb1): Disable (ip link down) to prevent route conflict
- Add serial console symlink /dev/eye-remote-console
Ref #52
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
New FastAPI modules migrated from OpenWrt:
- secubox-ad-guard: Adware/tracker detection with device-type stats
- secubox-ndpid: nDPId DPI with JA3/JA4 fingerprinting
- secubox-ai-gateway: OpenAI-compatible local AI API
- secubox-localrecall: Local RAG with Qdrant/Ollama
- secubox-master-link: Node mesh management
- secubox-threat-analyst: AI-powered threat analysis
- secubox-cve-triage: NVD/EPSS CVE triage workflow
- secubox-network-anomaly: IQR-based anomaly detection
- secubox-dns-guard: DNS filtering with RPZ
- secubox-iot-guard: IoT device security & quarantine
- secubox-config-advisor: ANSSI CSPN compliance checks
- secubox-mcp-server: MCP protocol for Claude integration
- secubox-identity: User/role management
- secubox-system-hub: System health & remote support
C library:
- zkp-hamiltonian: Zero-Knowledge Proof library (Blum 1986)
VM configuration:
- MOCHAbin-like 7-NIC topology for libvirt testing
Dev environment:
- VSCode tasks and extensions for SecuBox development
- Claude Code CLAUDE.md project instructions
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
New scripts:
- build-installer-iso.sh: Hybrid Live USB / Headless Installer ISO builder
- export-c3box-clone.sh: Export device configuration for cloning
- build-c3box-clone.sh: Combined export + ISO build workflow
Features:
- UEFI boot with GRUB (x86_64-efi)
- Live boot mode with persistence partition support
- Headless auto-install to first available disk
- Preseed system for configuration restoration
- SquashFS compressed rootfs with XZ compression
streamlitctl v1.0.0:
- Full Debian LXC installation for Streamlit apps
- Commands: install, start, stop, restart, status, destroy, logs, shell
- App management: create, list
- Debootstrap-based minimal Debian bookworm container
VSCode tasks:
- Build C3Box Clone ISO (from VM or custom host)
- Export C3Box Config Only
- Build Installer ISO / Live USB
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Includes all package APIs with public dashboard endpoints:
- secubox-system: System Hub with /info, /resources, /security
- secubox-crowdsec: CrowdSec dashboard with /status, /hub, /metrics, actions
- secubox-wireguard: WireGuard VPN with /interfaces, /peers, start/stop
- secubox-netdata: Monitoring with /stats, /processes, /alerts
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
