Commit Graph

384 Commits

Author SHA1 Message Date
nicolargo
23ffad1b64 Merge branch 'develop' into develop-v5 2026-05-23 19:45:17 +02:00
nicolargo
0de3b8f875 XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard - CVE-2026-46608 2026-05-23 11:40:20 +02:00
nicolargo
d9316dfac2 docs(conf): document xmlrpc_allowed_hosts in glances.conf
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-23 09:56:28 +02:00
nicolargo
1da7047688 Change default thresolds minimum duration for memswap 2026-05-15 17:11:47 +02:00
nicolargo
dbcfbffd51 Change default thresolds minimum duration for memswap 2026-05-15 17:06:38 +02:00
nicolargo
0e07c22bbc Change defaulkt thresolds for memswap 2026-05-15 17:02:12 +02:00
nicolargo
bbb93100c3 feat(v5): memswap — surface sin/sout in TUI, drop used/free
Two UX changes on the swap panel:

1. Body rows shifted from (total, used, free) to (total, sin, sout).
   ``used`` and ``free`` are derivable from ``percent`` + ``total`` so
   showing them on dedicated lines is redundant. Replacing them with
   the swap I/O rates surfaces actionable live paging activity:

       SWAP   25.0%
       total  16.0G
       sin    97.7K/s
       sout     0B/s

   On cycle 1 the rates are absent (no baseline yet); the renderer
   shows ``-`` for both fields and stays the same height.

2. ``sin`` / ``sout`` are watched but ship **no default thresholds**.
   Sustained swap traffic is host-specific (database servers may
   page steadily by design), so alerts only fire when the user opts
   in via ``[memswap]`` in glances.conf. Suggested ladder shipped
   commented:

       # sin_careful=40960
       # sin_warning=409600
       # sin_critical=819200
       # (and the same for sout)

   ≈ 40 / 400 / 800 KB/s. ``watched=True`` lets the framework wire
   the levels when the user uncomments them; absent defaults +
   ``read_thresholds → {} → _compute_levels_for_item skips``
   guarantees silence on a stock install.

5 new tests:
- ``test_sin_sout_are_watched_without_default_thresholds`` — schema
  asserts.
- ``test_sin_sout_no_levels_without_user_thresholds`` — runtime
  confirms no _levels entries for sin/sout when config is stock.
- ``test_sin_threshold_from_config_triggers_level`` — config-set
  ``sin_warning=10000`` actually fires a warning at 15_000 bytes/s.
- ``test_render_body_rows_have_total_sin_sout`` /
  ``test_render_does_not_show_used_or_free`` /
  ``test_render_handles_missing_sin_sout_on_first_cycle`` — renderer
  layout contract.

Full v5 suite: 692 passed (+5), lint clean.
2026-05-15 16:36:02 +02:00
nicolargo
ebe0382252 docs(v5): G3-MCP Task 5 — conf + architecture §11 (MCP endpoint)
- ``conf/glances.conf``: add a commented ``[outputs] enable_mcp``
  entry above the existing ``mcp_path`` / ``mcp_allowed_hosts`` keys.
  Notes that the gate is off by default and that ``--enable-mcp``
  flips it via the config overlay.
- ``docs/architecture/glances-v5-architecture-decisions.md``: new
  §11 "MCP endpoint" covering:
  - §11.1 opt-in lifecycle (CLI + config)
  - §11.2 adapter architecture + flow diagram
  - §11.3 resource/prompt inventory with v5 status per entry
  - §11.4 known v5 gaps (logged on mount)
  - §11.5 alert schema (v5-native, no v4 translation — decision
    logged in the G3-MCP plan)
  - §11.6 auth (HTTP middleware passes SSE through; no special MCP
    middleware needed)
  - §11.7 DNS rebinding (independent ``mcp_allowed_hosts``)
  - §11.8 out of scope (history buffer, unported v4 plugins,
    WebSocket transport)
2026-05-15 13:58:30 +02:00
nicolargo
6ade42c142 Increase CPU context switch thresolds 2026-05-15 10:15:19 +02:00
nicolargo
15fbf5de58 Introduce min_duration_seconds per field for thresolds / Add a new main entry point for Glances v5 2026-05-12 13:28:14 +02:00
cswaltzinger
4aa56a1734 quicklook gpu status thresholds added 2026-05-04 17:29:57 -04:00
cswaltzinger
e1eb0970ab issue-1711 improvement completed - awaiting PR approval
config files restored to defaults
2026-04-29 20:02:35 -04:00
cswaltzinger
6b4428fbda quicklook plugin almost finished, awaiting testing
memory leak test fixed
2026-04-29 20:01:18 -04:00
nicolargo
cec380536f Overwrite thresholds for a specific sensor is not taken into account - Related to #3525 2026-04-18 09:45:29 +02:00
csvke
a8023b3e4c RV1126BP-70: Add config, docs, and unit tests for MPP plugin
- Add [mpp] section to conf/glances.conf with disable=True
- Add docs/aoa/mpp.rst documentation page and index entry
- Add unit test test_026_mpp with Rockchip MPP test fixtures
2026-04-11 01:34:44 +08:00
nicolargo
111a97a67f Improve plugins refresh rates 2026-03-28 14:19:20 +01:00
nicolargo
b90a8f2a16 Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard - Mitigate CVE-2026-33533 2026-03-28 10:20:49 +01:00
nicolargo
b6a694f38f Add export to ClickHouse #3320 2026-03-22 10:15:17 +01:00
nicolargo
d691238478 Default CORS Configuration Allows Cross-Origin Credential Theft - Correct CVE-2026-32610 2026-03-14 14:54:02 +01:00
nicolargo
a8443489e3 REST/WebUI Lacks Host Validation and Remains Exposed to DNS Rebinding - Correct CVE-2026-32632 2026-03-14 13:48:25 +01:00
nicolargo
f3e94930e3 SQL Injection in DuckDB Export via Unparameterized DDL Statements - Correct CVE-2026-32611 2026-03-14 10:33:24 +01:00
nicolargo
ee4fab4c32 Browser API Exposes Reusable Downstream Credentials via - Correct CVE-2026-32633 2026-03-14 09:07:59 +01:00
nicolargo
e6bce5bc7c MCP server rejects external host connections due to DNS rebinding protection #3467 2026-03-07 11:06:28 +01:00
nicolargo
0cb59f87b1 Disable NPU plugin by default waiting more test - see #3425 2026-02-09 08:13:34 +01:00
nicolargo
5f2e49dc96 Docker image for Glances release 4.5.0 failed to start if no [putputs] section in the glances.conf file #3424 2026-02-08 15:22:32 +01:00
nicolargo
1b6c553afa Change default bar char in the default configuration file 2026-02-08 10:09:13 +01:00
nicolargo
7d149b14bc Add NPU display for TUI 2026-01-24 15:57:32 +01:00
nicolargo
83da3de1a7 Add freq information about NPU 2026-01-24 15:57:31 +01:00
nicolargo
3c6057f192 Make the CPU_num option disable by default 2026-01-24 15:53:39 +01:00
Fabian Fleischer
7748003d8b Add CPU core number field to processlist 2026-01-22 12:49:10 +01:00
nicolargo
a9562e361a Implementation of a JWT token thanks to Jose lib 2026-01-18 14:26:01 +01:00
nicolargo
84324615c5 Align conf file between default and the one used in Docker compose 2026-01-03 09:32:34 +01:00
Drakarah
862ac41b58 Merge branch 'develop' of https://github.com/nicolargo/glances into develop 2026-01-03 07:33:53 +00:00
nicolargo
b7c6cce373 First version ok. Log message should be removed. Code should be tested. 2025-12-30 19:04:07 +01:00
Drakarah
29d7a15dab Add a hide_attributes to well hide attributes 2025-12-22 09:17:20 +00:00
nicolargo
50818213b1 What a sexy pre-commit config file ! 2025-11-22 18:48:13 +01:00
nicolargo
728b36a8c9 Correct an issue with FS Alert following implementation of action for all plugins 2025-11-16 09:55:32 +01:00
nicolargo
e2a1606479 Remove test from config file 2025-11-16 09:41:54 +01:00
nicolargo
ccb00ec252 Make WebUI and Restful API SSL compliant #3340 2025-11-11 18:34:51 +01:00
nicolargo
ab68fcbe28 Add a focus option for the processlist plugin #3293 2025-11-11 10:40:06 +01:00
nicolargo
25da171479 Add some fetch templates as an example 2025-11-10 11:45:33 +01:00
nicolargo
fb17066692 Update docs 2025-11-09 13:05:07 +01:00
nicolargo
ea10748e07 Fs is OK 2025-11-09 12:58:12 +01:00
nicolargo
8bb2a8a91b Network IO is OK 2025-11-09 12:49:44 +01:00
nicolargo
5efa3a01a3 Update docs 2025-11-08 19:22:49 +01:00
nicolargo
e11cb80492 First issue corrected. It is now possible to generate alarm for plugins returning a list (tested only with sensors). To be done for all plugins (add header adn actions_keys) 2025-11-08 18:40:20 +01:00
nicolargo
133f97efd8 Show used port in container section #2054 2025-11-01 10:27:34 +01:00
nicolargo
067eb918ad Sensors plugin refresh by default every 10 seconds 2025-10-24 18:35:30 +02:00
nicolargo
1b93758b65 [UI] Process virtual memory display can be disable by configuration #3299 2025-10-18 16:03:23 +02:00
nicolargo
d0137830c2 Choose between used or available in the mem plugin #3288 2025-09-25 22:20:23 +02:00