Files

T

Mikhail ChusavitinandClaude Sonnet 5 4a4910f207 feat(privacy): scan ingested sources for customer-identifying data

Detection-only scan (internal/privacy) attached to every AnalysisResult:
a customer-domain guess plus a findings list (category, file, line, match,
hint), ported from the KB grep playbook. Runs on archive uploads and the
serialized Redfish tree; gated by LOGPILE_PRIVACY_SCAN (default on).

Surfaced at GET /api/privacy-scan, in the "Customer data" UI panel, and as
privacy_report.json in the raw-export bundle. IP policy keeps RFC1918 and
example ranges out of findings; allowlist covers standards-body and vendor
infrastructure domains. No customer tokens in the repo. See ADL-066 and
bible-local/docs/privacy-scan.md.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-09-02 15:24:32 +03:00

1.6 KiB

Raw Blame History

01 — Overview

Purpose

LOGPile is a standalone Go application for BMC diagnostics analysis with an embedded web UI. It runs as a single binary and normalizes hardware data from archives or live Redfish collection.

Operating modes

Mode	Entry point	Outcome
Archive upload	`POST /api/upload`	Parse a supported archive, raw export bundle, or JSON snapshot into `AnalysisResult`
Live collection	`POST /api/collect`	Collect from a live BMC via Redfish and store the result in memory
Batch convert	`POST /api/convert`	Convert multiple supported input files into Reanimator JSON in a ZIP artifact

All modes converge on the same normalized hardware model and exporter pipeline.

In scope

Single-binary desktop/server utility with embedded UI
Vendor archive parsing and live Redfish collection
Canonical hardware inventory across UI and exports
Reopenable raw export bundles for future re-analysis
Reanimator export and batch conversion workflows
Embedded pci.ids lookup for vendor/device name enrichment
Customer-data / anonymization scan of ingested sources (detection only; see docs/privacy-scan.md)

Current vendor coverage

Dell TSR
Reanimator Easy Bee support bundles
H3C SDS G5/G6
Inspur / Kaytus
HPE iLO AHS
NVIDIA HGX Field Diagnostics
NVIDIA Bug Report
Unraid
xFusion iBMC dump / file export
XigmaNAS
Generic fallback parser

Non-goals

Persistent storage or multi-user state
Production IPMI collection
Authentication/authorization on the built-in HTTP server
Long-term server-side job history beyond in-memory process lifetime

1.6 KiB Raw Blame History