4 Commits

Author	SHA1	Message	Date
n0mad1k	06160b974a	Add TimeoutStartSec=60 to core service to allow time for PID file write after module init	2026-03-23 10:30:34 -04:00
n0mad1k	e0b8ba4b65	Fix bigbrother-core.service: Type=forking + PIDFile for daemon mode	2026-03-23 07:46:32 -04:00
n0mad1k	263e5a50d0	Add pi3b hardware tier and resource guards for condo Pi deployment ... - Add pi3b tier (700MB RAM limit, 8 passive/2 active modules, no bettercap/mitmproxy) - Update detect_hardware_tier() to detect Raspberry Pi 3B by model string and BCM2837 - Add pi3b section to hardware_tiers.yaml - Add systemd MemoryMax/CPUQuota/OOMScoreAdj to all three service files - Fix bigbrother-watchdog.service ExecStart (was calling non-existent ResourceMonitor().run()) - Add scripts/run_watchdog.py as standalone health monitor daemon	2026-03-22 20:19:57 -04:00
n0mad1k	62a1010ab4	Add Phase 1 utility modules: crypto, networking, logging, stealth, resource, permissions, config_loader, bettercap_api ... 9 files in utils/ providing the shared infrastructure layer: - crypto: AES-256-GCM file encryption, argon2id/PBKDF2 key derivation, HKDF network unlock, LUKS container management - networking: interface detection, MAC/IP helpers, BPF compilation via libpcap ctypes, gratuitous ARP, VLAN creation - logging: encrypted log writer (BBLogger) with rotation, per-module files, stdout suppression for stealth - stealth: process rename via prctl, cmdline spoofing, sysctl helpers, timestomping, core dump disable - resource: hardware tier detection (OPi Zero 3 / Pi Zero / generic) via /proc/device-tree and cpuinfo, resource monitoring - permissions: root/capability checks via capget ctypes, privilege dropping, directory permission enforcement - config_loader: YAML merge hierarchy (hardware_tiers -> bigbrother -> modules -> stealth -> CLI), tier auto-detection, SIGHUP reload - bettercap_api: REST client with per-session random credentials, session/events/command methods	2026-03-18 08:11:25 -04:00