How novaforgectrl/lums works
LUMS centrally manages Linux clients: administrators inspect inventory and updates, authorize package work, monitor jobs, and review outcomes; agents run approved operations through APT/dpkg or pacman and report results. The graph preserves the documented client/update/job workflow alongside authentication and audit, the SOC event-analysis capability, and backup/alerts. Some feature links are README-documented rather than verified in sampled runtime code; SOC worker links follow its excerpted orchestration references.
Main entry points: app.py Server API and UI · pipeline.py Event analysis pipeline · worker.py SOC worker · agent.py Client agent
Components 28
Update management
- Server API and UI
server/app.py - Client management
server/postgres_clients.py - Software inventory
server/app.py - Update inventory
server/app.py - Update jobs
server/postgres_update_jobs.py - Client agent
agent/agent.py - Package managers
agent/package_manager.py - Client watcher
agent/watcher.py
Identity and audit
- Authentication and security
server/security.py - Roles and permissions
server/postgres_rbac.py - Audit logging
server/postgres_audit.py
Security operations
- SOC API and pages
server/soc/routes.py - Event collector
server/soc/collector_api.py - Event inbox store
server/soc/collector_store.py - SOC worker
server/soc/worker.py - Event analysis pipeline
server/soc/pipeline.py - Event validation
server/soc/ingestion.py - Deduplication
server/soc/deduplication.py - Detection rules
server/soc/detection.py - Event correlation
server/soc/correlation.py - Incident store
server/soc/incident_store.py
Operations
- Alert management
server/alerts.py - Alert routes
server/alerts_routes.py - Database backup
server/database_backup.py - Application database
server/db.py
Other components
- Administrator
- Web interface
- Linux package tools
Connections 25
- Administrator → Web interface: uses
README.md - Web interface → Server API and UI: requests
README.md - Server API and UI → Client management: manages clients
- Server API and UI → Software inventory: serves inventory
server/app.py - Server API and UI → Update inventory: serves updates
server/app.py - Server API and UI → Update jobs: creates jobs
- Update jobs → Client agent: dispatches jobs
- Client agent → Package managers: executes actions
agent/agent.py - Client agent → Client watcher: uses watcher
agent/watcher.py - Package managers → Linux package tools: runs package tools
agent/package_manager.py - Server API and UI → Authentication and security: authenticates requests
server/app.py - Server API and UI → Roles and permissions: checks permissions
- Server API and UI → Audit logging: records actions
- Server API and UI → Application database: persists state
- SOC API and pages → Event inbox store: reads dashboard data
server/soc/routes.py - Event collector → Event inbox store: stores events
- SOC worker → Event inbox store: claims events
server/soc/worker.py - SOC worker → Event analysis pipeline: processes events
server/soc/worker.py - Event analysis pipeline → Event validation: validates events
server/soc/pipeline.py - Event analysis pipeline → Deduplication: deduplicates events
server/soc/pipeline.py - Event analysis pipeline → Detection rules: evaluates rules
server/soc/pipeline.py - Event analysis pipeline → Event correlation: correlates events
server/soc/pipeline.py - SOC worker → Incident store: finalizes incidents
server/soc/worker.py - Alert routes → Alert management: manages alerts
server/alerts_routes.py - Server API and UI → Database backup: uses backups
server/app.py