qiuruiandClaude Sonnet 4.6
1c5cf01e4a
- kvm-server 1.0.0-3 installed (upgraded from 1.0.0-1): native Go privacy handlers replace port 8889 proxy; service running on :8080 - MariaDB tables verified: privacy_audit_log + agent_tasks present - DB users verified: kvm_mitm (SELECT+INSERT on privacy_audit_log), kvm_agent (ALL on agent_tasks) - Privacy API endpoints confirmed: GET/POST /api/v1/privacy/mode (off|audit|redact), GET /api/v1/privacy/stats — all return correct JSON via native Go handlers - Port 8889: privacy-gateway (mitmproxy) still listening as independent service - kvm-mitm deb install: SKIPPED — PyInstaller binary not available; mitmproxy 6.0.2 has broken deps on this machine; requires clean Python env with mitmproxy 10+ - kvm-agent deb install: SKIPPED — same reason as above - Python unit test suite: 349 passed (test_integration skipped — requires live KVM hardware with HDMI input connected) - Go privacy handler tests: 7/7 passed (TestPrivacyHandlerGetMode, TestPrivacyHandlerSetMode, TestPrivacyHandlerSetModeInvalid, TestPrivacyHandlerGetCertMissing, TestPrivacyHandlerGetStatsNilDB, TestPrivacyHandlerGetAuditNilDB, TestPrivacyProxy_ForwardsRequest) - Added kvm_agent source + tests, chrome-extension, web UI source, workflow YAML files, and privacy evaluation docs Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
KVM-Privacy Hub
在 KVM-over-IP 系统基础上叠加三层隐私保护能力，运行于 NanoPC-T6 (RK3588)。
架构概览
┌─────────────────────────────────────────────────────────┐
│ KVM 控制台 (8080) │
│ Go 单体 + React Web UI + WebRTC 推流 │
└──────────────┬──────────────────────┬───────────────────┘
│ │
┌──────────▼──────────┐ ┌────────▼────────────────┐
│ Phase 1: 视频遮罩 │ │ Phase 3: AI 路由层 │
│ OCR 检测 → YUV黑框 │ │ mem-bridge 8003/8002 │
│ /api/v1/privacy/ │ │ Qwen2-1.5B(Ollama本地) │
└──────────┬──────────┘ └─────────────────────────┘
│
┌──────────▼──────────┐
│ Phase 2: 隐私网关 │
│ mitmproxy (8888) │
│ 拦截 AI 平台上传 │
└──────────┬──────────┘
│
┌──────────▼──────────┐
│ info-privacy-rs │
│ RKNN PII 检测/脱敏 │
│ Rust 加速 (8001) │
└─────────────────────┘
端口规划
| 服务 | 端口 | 说明 |
|---|---|---|
| kvm-server | 8080 | KVM 主服务（systemd 管理） |
| info-privacy-rs | 8001 | Rust/RKNN PII 检测与脱敏 |
| mem-bridge memory | 8003 | 会话记忆服务 |
| mem-bridge router | 8002 | AI 路由服务 |
| privacy-gateway | 8888 | mitmproxy 代理网关 |
依赖项目（submodule）
| 路径 | 说明 |
|---|---|
deps/KVM |
KVM-over-IP 核心服务（Go + React） |
deps/embedding |
mem-bridge 记忆服务与 AI 路由 |
deps/info-privacy-rs |
Rust/RKNN 加速的 PII 检测脱敏服务 |
快速部署
git clone --recurse-submodules http://edge-stack.synology.me:3000/qiurui/KVM-privacy.git
cd KVM-privacy
# 部署隐私网关 + systemd 服务
make deploy-gateway
# 部署 mem-bridge 记忆服务
make deploy-memory
# 查看所有服务状态
make status
详见 DEVELOP.md。