Files
KVM-privacy/deploy/network/dnsmasq-lan.conf
T
qiuruiandClaude Opus 4.6 eb6e4329d4 feat: v1.0.0 — two-layer privacy, Agent enhancements, model sync, HDMI DRM plan
Architecture:
- Remove Chrome extension (project fully device-side, no target-machine deps)
- Update all docs from "three-layer" to "two-layer" privacy (video redact + network intercept)
- Add comprehensive architecture docs (overview, subsystem designs)

Services:
- kvm_agent: hybrid planner (template/local/cloud), screen state detection,
  mouse-first architecture, app launcher, visual workflow tests
- privacy_gateway: upload scanner, privacy LLM integration, REST API
- doc_processor: new document processing service

Deployment:
- Add kvm-bridge, kvm-meta, kvm-privacy deb package definitions
- New systemd services (doc-processor, kvm-gateway, rkllm-server)
- Network deploy configs, journald forwarding
- Remove secrets.env templates from packages

Plans & Docs:
- HDMI-TX DRM local output + OSD design (drm_output.c, VOP2 multi-plane)
- AI Agent token optimization plan (72% savings via caching/pruning/fingerprint)
- Model sync: all RKNN/ONNX models now in project directory
- Native H.264 adaptive bitrate plan

Submodules updated:
- deps/KVM: WebUI i18n, RBAC, DDNS, Agent API, OCR models (LFS)
- deps/embedding: models synced (LFS), benchmarks, Ollama backend
- deps/info-privacy-rs: regex PII detection, face detection integration

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-06 09:16:58 +00:00

33 lines
666 B
Plaintext

# dnsmasq-lan.conf — DHCP + DNS for KVM controlled PC on LAN (eth1)
#
# Controlled PC gets: IP 10.42.0.100-200, GW 10.42.0.1, DNS 10.42.0.1
# dnsmasq forwards DNS upstream via /etc/resolv.conf
# Only listen on LAN interface
interface=eth1
bind-interfaces
# DHCP range: 10.42.0.100 to 10.42.0.200, lease 12 hours
dhcp-range=10.42.0.100,10.42.0.200,12h
# Gateway = this device
dhcp-option=3,10.42.0.1
# DNS = this device (dnsmasq also serves DNS)
dhcp-option=6,10.42.0.1
# Domain
domain=kvm.local
# Logging
log-dhcp
# Do not read /etc/hosts
no-hosts
# PID file
pid-file=/run/kvm-dnsmasq.pid
# Do not daemonize (systemd manages lifecycle)
keep-in-foreground