ServerMind for Linux/Real-Time Infrastructure State

Real-Time Infrastructure State

Unified system visibility across your servers and the services on them. Agents push live metrics over QUIC, and the browser streams over WebTransport — no page refreshes, no TCP head-of-line blocking.

3-Layer Transport Stack

Browser → BackendWebTransport (HTTP/3 over QUIC)Real-time bidirectional streaming, terminal, live metrics
Agent ↔ BackendQUIC (UDP/TLS 1.3)Agent-initiated connection: multiplexed streams, PTY output, metrics push, command execution
Browser FallbackWebSocket (TCP/TLS)Used automatically when the browser cannot open WebTransport
Stream multiplexing — hundreds of concurrent streams per connection
Outbound-only agents — no inbound ports on your servers
Keep-alives every 10s to hold connections open on lossy links
No head-of-line blocking between streams

Split-Agent Architecture

In production, each agent runs as 3 specialized processes, each its own hardened systemd unit with separate resource limits. Monitor and Control connect to the Collector via gRPC bidirectional streaming over a Unix domain socket.

CollectorOwns the QUIC connection, collects metrics, handles streaming and PTY terminal sessions, routes requests to the workersCPU 50% · 1 GB memory cap
MonitorRead-only inspection: metrics, service/log/runtime and database monitoringCPU 30% · 512 MB memory cap
ControlChanges to the system: files, commands, packages, services, fleet operations, SafeApply1.5 GB memory cap

Agent Hub — Per-Server Console

Overview Dashboard

  • CPU, memory, disk, network and load average, pushed live by the agent
  • OS, kernel, architecture, CPU model and cores, hostname
  • Disk partitions with mount points and usage
  • Running services count out of total services
  • Recent alerts with severity badges and timestamps

File Manager

  • Directory tree navigation
  • Inline code editor with multiple tabs, restored within the browser session
  • Drag & drop upload, download, create file/folder, delete
  • chmod permissions editor
  • Compress and extract archives

Service Manager

  • Grid and table views of all systemd services
  • Per-service actions: Start, Stop, Restart, Reload, Enable, Disable
  • Service details: main PID, memory, CPU time, running since
  • daemon-reload from the UI
  • Filter: All, Running, Stopped, Failed

Log Viewer

  • Log file selection with level filtering (ERROR/WARN/INFO/DEBUG)
  • Text and regex search; ANSI codes stripped for display
  • Live follow with an auto-scroll toggle
  • Virtualized rendering for large files
  • Live stream of gzip-compressed rotated logs

Terminal (PTY Shell)

  • Full PTY bash shell via xterm.js with QUIC streaming
  • Terminal resizing, in-terminal search, clickable URLs
  • Access gated by the exec.run permission

Package Manager

  • Tabs: All, Installed, Available, Updates, History
  • Install, remove, update and update-all
  • Dry-run mode and scheduled updates
  • Package audit history
  • Auto-detection: apt, dnf, yum, zypper, pacman, apk

Additional Modules

Users & Groups

Create, edit and delete users, set passwords. Manage groups and their memberships.

Network Configuration

Auto-detects Netplan, systemd-networkd, NetworkManager, Wicked. DHCP, Static, Bridge, Bond, VLAN.

Domain Management

AD, FreeIPA and LDAP. Join/leave domain via realmd, SSSD config and cache, Kerberos ticket info.

Cron & Scheduled Jobs

View systemd timers and cron jobs. Create, edit and delete cron jobs with a visual schedule builder.

Processes

Live process list with CPU/Memory sort. SIGTERM/SIGKILL and other signals, with confirmation.

Network Connections

Connection monitor with state filtering and search. Listening ports at a glance.

Disk I/O

Per-device read/write IOPS, throughput (MB/s) and read/write latency.

Hardware Inventory

CPU, Memory, Disks, Network, Sensors, USB — complete hardware profile per server.

Security Monitoring

Lynis and OpenSCAP benchmark scores, file integrity changes, failed logins, sudo activity, open ports and vulnerabilities.