secubox-deb/packages/secubox-hub
CyberMind-FR dc08a8c139 feat(profiles): boot reconciliation + watchdog exclusion for on-demand (ref #896)
boot_should_start(m) is the pure boot policy (always-on/eager start
immediately, on-demand/manual wait for a real wake) and
watchdog_should_manage(m) documents/tests that no sleepable module is ever
force-revived by secubox-watchdog.

Investigation found: HEAD's secubox-watchdog has no auto-revive logic at
all today (monitor_loop only logs up/down, restarts are manual-only); the
unmerged feat/watchdog-auto-revive branch adds one gated purely on
lxc.start.auto, which actuate.py::runtime_stop already clears before
lxc-stop specifically to avoid this race — the same flag streamlit sleepers
rely on for exclusion today. No separate exclusion file exists to reuse, so
none was invented; once that branch merges it is already #896-safe with
zero further wiring.

The real, closeable gap was secubox-hub's own sidebar health-batch, which
reported a sleeping on-demand module's inactive systemd unit as "warn".
Added a profiles-side export (secubox-wakectl health-sync ->
sleepable-modules.json, mirrors waf-sync/nginx-sync) and wired it into
secubox-hub so a sleepable module shows "Asleep (on-demand)" instead of an
alarm; a failed unit still alarms regardless. The full admin /health/ page
reads module_prober.py/prober.py, which aren't sourced in this repo yet
(TODO #393) -- documented as a precise cross-package follow-up.

Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
2026-07-20 16:51:56 +02:00
..
api feat(profiles): boot reconciliation + watchdog exclusion for on-demand (ref #896) 2026-07-20 16:51:56 +02:00
debian release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in 2026-07-10 09:07:42 +02:00
menu.d
nftables.d feat(hub): inet filter input policy-drop nft tap counter (ref #758) 2026-06-27 11:04:27 +02:00
nginx refactor: decommission secubox-authelia (SSO IdP) — remove package, keep gate authelia-free 2026-07-02 08:14:08 +02:00
sbin feat(hub): netstats snapshot builder + privileged collector + root wrapper (ref #758) 2026-06-27 11:16:38 +02:00
tests feat(profiles): boot reconciliation + watchdog exclusion for on-demand (ref #896) 2026-07-20 16:51:56 +02:00
www fix(billets): communiqué always-light + CSP-safe health-banner opt-out on public blog (ref #851) 2026-07-14 08:42:00 +02:00
README.md docs(wiki): refonte 126 modules — snapshots WebUI déterministes + READMEs 4 langues (ref #742) 2026-06-26 10:14:14 +02:00

🏠 SecuBox Hub

Central dashboard and control center

Category: Dashboard

Screenshot

SecuBox Hub

Features

  • System overview
  • Service monitoring
  • Quick actions
  • Metrics

Installation

# Add SecuBox repository
curl -fsSL https://apt.secubox.in/install.sh | sudo bash

# Install package
sudo apt install secubox-hub

Configuration

Configuration file: /etc/secubox/hub.toml

API Endpoints

  • GET /api/v1/hub/status - Module status
  • GET /api/v1/hub/health - Health check

License

LicenseRef-CMSD-1.0 (Source-Disclosed License) — CyberMind © 2024-2026. See LICENCE-CMSD-1.0.md.