cli: add opensnitch-cli, a headless client for machines with no graphical environment - #1650

Draft

suinswofi wants to merge 24 commits into

evilsocket:masterfrom

suinswofi:opensnitch-cli

Commits on Aug 14, 2026

ui: make the protobuffers importable without Qt

suinswofi
and
claude
committed
8b9029a
ui: move the rule constants to a module that doesn't need Qt

suinswofi
and
claude
committed
fcfb75e
ui: move the operand builders out of the pop-up

suinswofi
and
claude
committed
beb88a6
ui: don't require Qt to collect the tests

suinswofi
and
claude
committed
9d14a77
cli: add the configuration and the review queue

suinswofi
and
claude
committed
50a02d2
cli: add the service and the policy for unreviewed connections

suinswofi
and
claude
committed
196bd80
cli: add the interactive review

suinswofi
and
claude
committed
d92f951
cli: add the opensnitch-cli command

suinswofi
and
claude
committed
8c45c9a
cli: add tests

suinswofi
and
claude
committed
75e7aab
cli: deny unreviewed connections by default

suinswofi
and
claude
committed
a6ba2e5
cli: match the executable too when the command line can't be trusted

suinswofi
and
claude
committed
09ab28f
cli: record when each node was last seen, and tidy up

suinswofi
and
claude
committed
2aabf3d
cli: document installing, using and checking opensnitch-cli

suinswofi
and
claude
committed
e8d261c
cli: stop describing the package split as unfinished work

suinswofi
and
claude
committed
ec43f98
cli: refuse to start when something else already serves the socket

suinswofi
and
claude
committed
970cf85
cli: survive the daemon restarting

suinswofi
and
claude
committed
15123fd
cli: one approval settles everything the new rule covers

suinswofi
and
claude
committed
5a0f249

Commits on Aug 15, 2026

cli: fix rule name collisions, outbox starvation, TCP node identity and stuck failures

suinswofi
and
claude
committed
b480142
cli: add rule delete, enable and disable

suinswofi
and
claude
committed
5e23719
cli: agree on what online means, show the daemon version, warn on an old one

suinswofi
and
claude
committed
25435d3
cli: accept --config, --db and --log-level after the subcommand too

suinswofi
and
claude
committed
4622e71
cli: add undo, and pending --decided to find what to undo

suinswofi
and
claude
committed
c05c713
cli: let undo take a rule name as well as a queue id

suinswofi
and
claude
committed
953dbf0
cli: never cut a rule name short, and accept a unique prefix of one

suinswofi
and
claude
committed
4b02059

Navigation Menu

Uh oh!

cli: add opensnitch-cli, a headless client for machines with no graphical environment - #1650

cli: add opensnitch-cli, a headless client for machines with no graphical environment#1650
suinswofi wants to merge 24 commits into
evilsocket:masterfrom
suinswofi:opensnitch-cli

Commits on Aug 14, 2026

ui: make the protobuffers importable without Qt

ui: move the rule constants to a module that doesn't need Qt

ui: move the operand builders out of the pop-up

ui: don't require Qt to collect the tests

cli: add the configuration and the review queue

cli: add the service and the policy for unreviewed connections

cli: add the interactive review

cli: add the opensnitch-cli command

cli: add tests

cli: deny unreviewed connections by default

cli: match the executable too when the command line can't be trusted

cli: record when each node was last seen, and tidy up

cli: document installing, using and checking opensnitch-cli

cli: stop describing the package split as unfinished work

cli: refuse to start when something else already serves the socket

cli: survive the daemon restarting

cli: one approval settles everything the new rule covers

Commits on Aug 15, 2026

cli: fix rule name collisions, outbox starvation, TCP node identity and stuck failures

cli: add rule delete, enable and disable

cli: agree on what online means, show the daemon version, warn on an old one

cli: accept --config, --db and --log-level after the subcommand too

cli: add undo, and pending --decided to find what to undo

cli: let undo take a rule name as well as a queue id

cli: never cut a rule name short, and accept a unique prefix of one