CyberMind-FR d01828d632 feat(avatar-tap): Add session capture and replay package

New packages for passive network tap with session replay capabilities:

secubox-avatar-tap:
- Mitmproxy-based passive session capture
- Captures authenticated sessions (cookies, auth headers, tokens)
- SQLite database for session storage
- CLI tool (avatar-tapctl) for management
- Transparent proxy mode support
- Runs inside streamlit LXC container

luci-app-avatar-tap:
- KISS-style dashboard for session management
- Real-time stats (sessions, domains, replays)
- Replay/Label/Delete actions per session
- Start/Stop controls

Designed for SecuBox Avatar authentication relay system
with future Nitrokey/GPG integration.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-03-06 20:41:21 +01:00

2.2 KiB

Raw Blame History

SecuBox Lyrion Music Server

Lyrion Music Server (formerly Logitech Media Server / Squeezebox Server) for SecuBox-powered OpenWrt systems.

Overview

Runs Lyrion in a Debian Bookworm LXC container with:

Official Lyrion Debian package (v9.x)
Full audio codec support (FLAC, MP3, AAC, etc.)
Squeezebox player discovery (UDP 3483)
Web interface on configurable port (default: 9000)

Installation

opkg install secubox-app-lyrion
lyrionctl install   # Creates Debian LXC container
/etc/init.d/lyrion enable
/etc/init.d/lyrion start

Configuration

UCI config file: /etc/config/lyrion

config lyrion 'main'
    option enabled '0'
    option port '9000'
    option data_path '/srv/lyrion'
    option media_path '/srv/media'
    option memory_limit '1G'
    option extra_media_paths '/mnt/usb:/mnt/usb'

Extra Media Paths

Mount additional media directories (space-separated):

option extra_media_paths '/mnt/MUSIC /mnt/USB:/music/usb'

Usage

# Service management
/etc/init.d/lyrion start
/etc/init.d/lyrion stop
/etc/init.d/lyrion restart

# Controller CLI
lyrionctl status      # Show container status
lyrionctl install     # Create Debian LXC container
lyrionctl destroy     # Remove container (preserves config)
lyrionctl update      # Rebuild container with latest Lyrion
lyrionctl logs        # View server logs
lyrionctl logs -f     # Follow logs
lyrionctl shell       # Open shell in container
lyrionctl runtime     # Show detected runtime

Container Architecture

The container uses Debian Bookworm with:

Official Lyrion repository packages
Bind mounts for config (/srv/lyrion) and media
Shared host networking for player discovery
Memory limits via cgroup2

Ports

Port	Protocol	Description
9000	TCP	Web interface
9090	TCP	CLI/RPC interface
3483	TCP	Slim Protocol (players)
3483	UDP	Player discovery

Files

/etc/config/lyrion -- UCI configuration
/usr/sbin/lyrionctl -- Controller CLI
/srv/lyrion/ -- Persistent config and cache
/srv/lxc/lyrion/ -- LXC container rootfs

Dependencies

lxc (or docker)
debootstrap (auto-installed for LXC)
wget, tar

License

Apache-2.0

2.2 KiB Raw Blame History