-
Notifications
You must be signed in to change notification settings - Fork 2
Home
Security Appliance for Debian | Français | 中文 | v1.6.5
SecuBox is a complete security appliance solution ported from OpenWrt to Debian bookworm, designed for GlobalScale ARM64 boards (MOCHAbin, ESPRESSObin) and x86_64 systems. Now featuring 124 packages with 2000+ API endpoints.
v1.6.5 Highlights:
- 🖼️ Kiosk Mode - Fullscreen browser dashboard (default boot)
- 🎨 Plymouth Splash - Animated boot screen
- ⌨️ Fixed Input Devices - Keyboard/mouse in GUI mode
- 🌉 Bridge Mode - Inline transparent bridge boot option
Test SecuBox instantly in VirtualBox - no USB drive needed:
# Download image
wget https://github.com/CyberMind-FR/secubox-deb/releases/download/v1.6.5/secubox-live-amd64-bookworm.img.gz
gunzip secubox-live-amd64-bookworm.img.gz
# Convert to VDI format
VBoxManage convertfromraw secubox-live-amd64-bookworm.img secubox-live.vdi --format VDI
# Create and start VM (use our script)
curl -sLO https://raw.githubusercontent.com/CyberMind-FR/secubox-deb/master/scripts/create-secubox-vm.sh
chmod +x create-secubox-vm.sh
./create-secubox-vm.sh secubox-live.vdiOr one-liner with auto-download:
curl -sL https://raw.githubusercontent.com/CyberMind-FR/secubox-deb/master/scripts/create-secubox-vm.sh | bash -s -- --downloadAccess (wait 30-60s for boot):
| Service | Access |
|---|---|
| SSH | ssh -p 2222 root@localhost |
| Web UI | https://localhost:9443 |
| Password | secubox |
See Live-USB-VirtualBox for full documentation and troubleshooting.
Boot directly from USB on physical hardware:
# Download
wget https://github.com/CyberMind-FR/secubox-deb/releases/download/v1.6.5/secubox-live-amd64-bookworm.img.gz
# Flash to USB drive (replace /dev/sdX)
zcat secubox-live-amd64-bookworm.img.gz | sudo dd of=/dev/sdX bs=4M status=progress
syncSee Live-USB for complete guide.
# Add repository and install
curl -fsSL https://apt.secubox.in/install.sh | sudo bash
sudo apt install secubox-full # or secubox-liteSee Installation for detailed instructions.
The create-secubox-vm.sh script supports:
./create-secubox-vm.sh [OPTIONS] <image.vdi|image.img>
Options:
--download Download latest image automatically
--name NAME VM name (default: SecuBox-Live)
--memory MB RAM in MB (default: 4096)
--cpus N CPU count (default: 2)
--ssh-port PORT SSH port (default: 2222)
--https-port PORT HTTPS port (default: 9443)
--headless Start without GUI
--no-start Create VM without startingExamples:
# Download and create headless VM
./create-secubox-vm.sh --download --headless
# Custom configuration
./create-secubox-vm.sh secubox.vdi --name "SecuBox-Dev" --memory 8192 --cpus 4
# Different ports (if defaults are in use)
./create-secubox-vm.sh secubox.vdi --ssh-port 2223 --https-port 9444| Category | Modules | Count |
|---|---|---|
| Security | CrowdSec, WAF, NAC, Auth, Hardening, AI-Insights, IPBlock | 15 |
| Networking | WireGuard, HAProxy, DPI, QoS, Network Modes, Interceptor | 12 |
| SOC | Fleet Monitoring, Alert Correlation, Threat Maps, Console TUI | 6 |
| Monitoring | Netdata, Metrics, Threats, OpenClaw OSINT | 8 |
| Applications | Ollama, Jellyfin, HomeAssistant, Matrix, Jitsi, PeerTube | 21 |
| System Tools | Glances, MQTT, TURN, Vault, Cloner, VM | 22 |
| Email & DNS | Postfix/Dovecot, Webmail, DNS Provider | 9 |
Total: 124 packages
| Board | SoC | Profile | Use Case |
|---|---|---|---|
| MOCHAbin | Armada 7040 | Full | Enterprise Gateway |
| ESPRESSObin v7 | Armada 3720 | Lite | Home/SMB Router |
| ESPRESSObin Ultra | Armada 3720 | Lite+ | Home with Wi-Fi |
| Raspberry Pi 4/5 | BCM2711/2712 | Lite/Full | Maker Projects |
| VM x86_64 | Any | Full | Testing/Development |
- Live-USB-VirtualBox - VirtualBox quick start ⭐
- Live-USB - Bootable USB guide
- Installation - Full installation
- Modules - All 93 modules
- API-Reference - REST API (2000+ endpoints)
- Troubleshooting - Common issues
| Service | Username | Password |
|---|---|---|
| Web UI | admin | secubox |
| SSH | root | secubox |
SecuBox-Deb · Licence : CMSD-1.0 (Source-Disclosed)
Contact : CyberMind · Gérald Kerma · Notre-Dame-du-Cruet, Savoie
Hardware-Matrix · Acknowledgments · Wiki v2.5.0
SecuBox | FR | DE | 中文 | v2.2.4-pre1
- Multiboot ⭐
-
Live-USB-VirtualBox
run-vbox.sh -
Live-USB-QEMU
run-qemu.sh - Live-USB | FR | DE | 中文
- Installation | FR | DE | 中文
- ARM-Installation | FR | DE | 中文
- ESPRESSObin | FR | DE | 中文
- Eye-Remote 📡
- Android-ToolBox 📱 one-tap R3
- Browser-Extension 🧩 cartographie
- QEMU-ARM64 🖥️
- Configuration | FR | DE | 中文
- Troubleshooting | FR | DE | 中文
- Anti-Track 🛡️ bloque · empoisonne · anonymise
- ThreatMesh 🛰️ blocklist souveraine (feeds + mesh, sans CAPI) | FR
- MODULES-EN 🇬🇧
- MODULES-FR 🇫🇷
- MODULES-DE 🇩🇪
- MODULES-ZH 🇨🇳
- API-Reference | FR | DE | 中文
- UI-COMPARISON
- Multi-Agent-Worktree — un agent · une issue · une branche