qiurui/KVM-privacy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat: add kvm-mitm and kvm-agent Debian package control trees and build script

Browse Source 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
qiurui
2026-03-04 03:29:59 +00:00
co-authored by Claude Sonnet 4.6
parent 6338f91f94
commit 8ec50e141d
14 changed files with 193 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitignore
+2
View File
@@ -5,3 +5,5 @@ __pycache__/
/deploy/systemd/*.service.override
/services/privacy_gateway/__pycache__/
.worktrees/
build/deb/
dist/
debian/kvm-agent/DEBIAN/conffiles
Vendored
+1
View File
@@ -0,0 +1 @@
/etc/kvm-agent/secrets.env
debian/kvm-agent/DEBIAN/control
Vendored
+8
View File
@@ -0,0 +1,8 @@
Package: kvm-agent
Version: 1.0.0-1
Architecture: arm64
Maintainer: KVM-Privacy <noreply@kvm-privacy.local>
Depends: mariadb-client | mysql-client
Description: KVM AI Agent v2
Self-contained AI agent daemon for autonomous KVM control.
Uses MariaDB for task queue persistence.
debian/kvm-agent/DEBIAN/postinst
Vendored Executable
+23
View File
@@ -0,0 +1,23 @@
#!/bin/bash
set -e
case "$1" in
configure)
mkdir -p /etc/kvm-agent
if [ ! -f /etc/kvm-agent/secrets.env ]; then
cat > /etc/kvm-agent/secrets.env <<'EOF'
KVM_JWT_TOKEN=
LLM_API_KEY=
KVM_AGENT_DB_HOST=localhost
KVM_AGENT_DB_USER=kvm_agent
KVM_AGENT_DB_PASS=changeme
KVM_AGENT_DB_NAME=kvm
EOF
chmod 600 /etc/kvm-agent/secrets.env
chown root:root /etc/kvm-agent/secrets.env
echo "WARNING: Edit /etc/kvm-agent/secrets.env with actual credentials"
fi
systemctl daemon-reload
systemctl enable kvm-agent.service 2>/dev/null || true
;;
esac
exit 0
debian/kvm-agent/DEBIAN/prerm
Vendored Executable
+9
View File
@@ -0,0 +1,9 @@
#!/bin/bash
set -e
case "$1" in
remove|purge)
systemctl stop kvm-agent.service 2>/dev/null || true
systemctl disable kvm-agent.service 2>/dev/null || true
;;
esac
exit 0
debian/kvm-agent/etc/kvm-agent/secrets.env
Vendored
+6
View File
@@ -0,0 +1,6 @@
KVM_JWT_TOKEN=
LLM_API_KEY=
KVM_AGENT_DB_HOST=localhost
KVM_AGENT_DB_USER=kvm_agent
KVM_AGENT_DB_PASS=changeme
KVM_AGENT_DB_NAME=kvm
debian/kvm-agent/lib/systemd/system/kvm-agent.service
Vendored
+20
View File
@@ -0,0 +1,20 @@
[Unit]
Description=KVM AI Agent v2
After=network.target mariadb.service
Wants=mem-bridge-memory.service
StartLimitInterval=300
StartLimitBurst=5
[Service]
Type=simple
User=pi
EnvironmentFile=/etc/kvm-agent/secrets.env
ExecStart=/usr/bin/kvm-agent daemon
Restart=on-failure
RestartSec=10
MemoryMax=512M
StandardOutput=journal
StandardError=journal
[Install]
WantedBy=multi-user.target
debian/kvm-mitm/DEBIAN/conffiles
Vendored
+1
View File
@@ -0,0 +1 @@
/etc/kvm-privacy/secrets.env
debian/kvm-mitm/DEBIAN/control
Vendored
+8
View File
@@ -0,0 +1,8 @@
Package: kvm-mitm
Version: 1.0.0-1
Architecture: arm64
Maintainer: KVM-Privacy <noreply@kvm-privacy.local>
Depends: mariadb-client | mysql-client
Description: KVM Privacy MITM Interceptor
Self-contained mitmproxy binary that intercepts outbound uploads
and scans for PII using info-privacy-rs.
debian/kvm-mitm/DEBIAN/postinst
Vendored Executable
+21
View File
@@ -0,0 +1,21 @@
#!/bin/bash
set -e
case "$1" in
configure)
mkdir -p /etc/kvm-privacy
if [ ! -f /etc/kvm-privacy/secrets.env ]; then
cat > /etc/kvm-privacy/secrets.env <<'EOF'
KVM_MITM_DB_HOST=localhost
KVM_MITM_DB_USER=kvm_mitm
KVM_MITM_DB_PASS=changeme
KVM_MITM_DB_NAME=kvm
EOF
chmod 600 /etc/kvm-privacy/secrets.env
chown root:root /etc/kvm-privacy/secrets.env
echo "WARNING: Edit /etc/kvm-privacy/secrets.env with actual DB password"
fi
systemctl daemon-reload
systemctl enable kvm-mitm.service 2>/dev/null || true
;;
esac
exit 0
debian/kvm-mitm/DEBIAN/prerm
Vendored Executable
+9
View File
@@ -0,0 +1,9 @@
#!/bin/bash
set -e
case "$1" in
remove|purge)
systemctl stop kvm-mitm.service 2>/dev/null || true
systemctl disable kvm-mitm.service 2>/dev/null || true
;;
esac
exit 0
debian/kvm-mitm/etc/kvm-privacy/secrets.env
Vendored
+4
View File
@@ -0,0 +1,4 @@
KVM_MITM_DB_HOST=localhost
KVM_MITM_DB_USER=kvm_mitm
KVM_MITM_DB_PASS=changeme
KVM_MITM_DB_NAME=kvm
debian/kvm-mitm/lib/systemd/system/kvm-mitm.service
Vendored
+21
View File
@@ -0,0 +1,21 @@
[Unit]
Description=KVM Privacy MITM Interceptor
After=network.target mariadb.service info-privacy.service
Wants=info-privacy.service
StartLimitInterval=300
StartLimitBurst=5
[Service]
Type=simple
User=root
EnvironmentFile=/etc/kvm-privacy/secrets.env
ExecStart=/usr/bin/kvm-mitm
Restart=on-failure
RestartSec=10
MemoryMax=768M
LimitNOFILE=8192
StandardOutput=journal
StandardError=journal
[Install]
WantedBy=multi-user.target
scripts/build-python-debs.sh
Executable
+60
View File
@@ -0,0 +1,60 @@
#!/usr/bin/env bash
# Build kvm-mitm and kvm-agent Debian packages using PyInstaller.
# Run from the KVM-privacy project root.
set -euo pipefail
PROJECT_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
cd "$PROJECT_ROOT"
# ── Pre-flight ──────────────────────────────────────────────────────────────
echo "==> Pre-flight checks"
command -v pyinstaller >/dev/null 2>&1 || { echo "ERROR: pyinstaller not found. Run: pip install pyinstaller"; exit 1; }
python3 -c "import pymysql" 2>/dev/null || { echo "ERROR: pymysql not found. Run: pip install pymysql"; exit 1; }
python3 -c "from mitmproxy.tools.dump import DumpMaster" 2>/dev/null || { echo "ERROR: mitmproxy not importable"; exit 1; }
# ── Build kvm-mitm binary ───────────────────────────────────────────────────
echo "==> Building kvm-mitm binary"
PYTHONPATH="$PROJECT_ROOT/services" pyinstaller --onefile \
--collect-all mitmproxy \
--hidden-import pymysql \
--hidden-import privacy_gateway \
--hidden-import privacy_gateway.addon \
--name kvm-mitm \
services/privacy_gateway/mitm_launcher.py
echo "==> kvm-mitm binary: $(du -sh dist/kvm-mitm | cut -f1)"
# ── Build kvm-agent binary ──────────────────────────────────────────────────
echo "==> Building kvm-agent binary"
PYTHONPATH="$PROJECT_ROOT/services" pyinstaller --onefile \
--hidden-import kvm_agent.actions \
--hidden-import kvm_agent.workflows \
--hidden-import pymysql \
--add-data "services/kvm_agent/configs:kvm_agent/configs" \
--name kvm-agent \
services/kvm_agent/__main__.py
echo "==> kvm-agent binary: $(du -sh dist/kvm-agent | cut -f1)"
# ── Assemble kvm-mitm deb ───────────────────────────────────────────────────
echo "==> Assembling kvm-mitm deb"
cp dist/kvm-mitm debian/kvm-mitm/usr/bin/kvm-mitm
chmod 755 debian/kvm-mitm/usr/bin/kvm-mitm
chmod 755 debian/kvm-mitm/DEBIAN/postinst
chmod 755 debian/kvm-mitm/DEBIAN/prerm
mkdir -p build/deb
dpkg-deb --build debian/kvm-mitm build/deb/kvm-mitm_1.0.0-1_arm64.deb
echo "==> kvm-mitm deb: build/deb/kvm-mitm_1.0.0-1_arm64.deb"
# ── Assemble kvm-agent deb ──────────────────────────────────────────────────
echo "==> Assembling kvm-agent deb"
cp dist/kvm-agent debian/kvm-agent/usr/bin/kvm-agent
chmod 755 debian/kvm-agent/usr/bin/kvm-agent
chmod 755 debian/kvm-agent/DEBIAN/postinst
chmod 755 debian/kvm-agent/DEBIAN/prerm
dpkg-deb --build debian/kvm-agent build/deb/kvm-agent_1.0.0-1_arm64.deb
echo "==> kvm-agent deb: build/deb/kvm-agent_1.0.0-1_arm64.deb"
echo ""
echo "==> Done! Packages in build/deb/:"
ls -lh build/deb/kvm-mitm_1.0.0-1_arm64.deb build/deb/kvm-agent_1.0.0-1_arm64.deb