me0nline/LOGAR
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 10 Wiki Activity

10 Releases 10 Tags

RSS Feed
  • v0.3.5.1 0edae4d797
    Compare

    LOGAR Release v0.3.5.1
    CI Test Suite / Run Component Tests & Pipeline Verification (push) Successful in 2m11s
    Details
    Release Binaries & Packages / Build & Release Standalone Binaries (Linux & Windows Cross-Compilation) (push) Successful in 4m32s
    Details
    Stable

    me0nline released this 2026-09-30 16:37:56 +00:00 | 41 commits to main since this release

    LOGAR Release Notes

    [v0.3.5.1] - 2026-09-30

    🗄️ Multi-Engine Storage Architecture

    • Dynamic Backend Switching: LOGAR Server Hub supports runtime switching between lightweight Local SQLite (WAL Mode) and Enterprise SQL servers (PostgreSQL and MySQL / MariaDB) via SQLAlchemy.
    • Automated Schema Provisioning: Database switching automatically verifies connectivity, provisions normalized tables (telemetry_events, client_seats, license_config, admin_users), and generates optimized query indices.
    • Config Isolation: Runtime backend parameters are stored persistently in server_config.json under db_engine and safely isolated from ephemeral test runs.

    ⚡ Ingestion Ring Buffer & Burst Protection

    • In-Memory Queue Buffering: Built-in ring buffer with an asynchronous background flusher decoupled from mTLS socket I/O.
    • Cache Mode: High-velocity log spikes are absorbed in memory without blocking incoming mTLS 1.3 frame streams.
    • Configurable Batching: Configurable flush interval (buffer_flush_interval_sec, default 2.0s) and batch size (buffer_batch_size, default 100).
    • Graceful Shutdown: Unflushed queue items are flushed and committed cleanly during server shutdown.
    • Opt-In Security Policy: Buffering remains an explicit administrative choice and is not auto-enabled upon license activation.

    🔐 Zero-Knowledge OpenPGP Data Encryption at Rest

    • Public-Key Envelope Encryption: External SQL payloads (event_data) can be encrypted at rest using the server's X.509 RSA-2048 / OpenPGP public key with AES-256-GCM symmetric session keys.
    • Zero-Knowledge on Database Host: External DBAs or compromised database hosts cannot read plaintext telemetry without the server's private key.
    • Opt-In Security Policy: Payload encryption is strictly opt-in and configurable per compliance requirements.

    📜 Dynamic Licensing Introspection & Clean Dashboard WebUI

    • Modular Capability Introspection: PKI X.509 extension OID 1.3.6.1.4.1.58888.1.3 and persistent license records are dynamically parsed to display active modules (enterprise_db, etc.) in a dedicated card on the 📜 Sub-CA & Licensing tab.
    • Distraction-Free Tab Navigation: Cleaned all dashboard tab headers to remove redundant item counts and visual badges for a streamlined administrative interface.
    • Graceful Feature Locking: Unlicensed enterprise controls remain visible but gracefully disabled in the WebUI and rejected by backend API validation.

    🛠️ Dynamic Installer Context Versioning & Streamlined CI/CD

    • Context-Aware Installer Builds: NSIS and Inno Setup compiler scripts dynamically derive version information directly from build context/tags (v0.3.5.1) without hardcoded version strings.
    • Pre-Integrated Builder Runner: Streamlined CI/CD workflows to rely directly on pre-installed container tools and libraries without runtime apt/pip overhead.

    📖 WebUI Administrator Guide & 51 Automated Tests

    • WebUI Administrator Guide: Published comprehensive WebUI management guide on the Gitea Wiki covering console access, telemetry filtering, seat management, licensing, database switching, queue tuning, zero-knowledge crypto, Hermes AI, and 2FA.
    • Expanded Test Suite: 51 automated unit and integration tests passing with 100% test coverage.
    Downloads