Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Shelf – open-source asset management software

github.com

Post reply on HN
Print view View original

61–70 of 79 posts

Re: Shelf – open-source asset management software

#61

Post by socks »

tristor wrote: post #41
poidos wrote: post #34

Is there something like this but for “home” usecases? What’s in my pantry, how much of y do I have left in my medicine cabinet, etc.

Same question, but more focus on home electronics. I'd love to track my appliances and home lab setup better than I do today in just a spreadsheet. It'd be nice to get depreciation / warranty tracking, diagrams which show tags/position in the rack for my home lab. Basically similar to enterprise asset management just on a much smaller scale and without needing to operate a full ITIL shop + deploy enterprise scale. I…

I have had some ideas over the years around home electronics (tools and components) management.

I was thinking about building myself a system of QR labelled ziplock bags (inc. antistatic ones) and QR labelled containers.

The main concept of my particular system would be to have a camera covering my workspace, and a camera covering a storage area for containers.

The system would automatically track which QR labelled bags are in which QR labelled container, and also keep a 'last seen' graph of bags that are near other bags, and containers near other containers, so that you don't have to spend too much effort maintaining the system, and when you want a list of things to work with, the system could help you perform a 'computer enhanced rummage' by using your smartphone and have it highlight containers that you want, and ziplocks that contain the things on your list.

Take all those ziplocks out, lay them on your workspace, boom, they are all checked out of the containers by the overhead camera.

Place the containers back on your shelves, boom, the shelve cameras know the positions of the boxes.

When you are done with the items, place a box on your workspace (recognised by camera) and put the packets back in the one box (those packets then checked in to that box).

I don't have a nice workspace to build the system yet, but when I settle into a place I am going to spend more time thinking about it.

Re: Shelf – open-source asset management software

#62

Post by canadianfella »

Daviey wrote: post #5

Visually, it looks GREAT. Thanks for sharing this. I do care more about the feature set than the UI tho', so I have some questions. AM to me is the foundational part of any security management. I care about 3 main things: 1) API support (for custom tooling) 2) Integration with other tools (Jira, Salesforce, etc) 3) Relationships/Dependencies with other assets (to determine the blast radius if there is an incident, or…

> Assets are more than just devices, are these catered for?

What does that mean?

Re: Shelf – open-source asset management software

#64

Post by nabilt »

tristor wrote: post #41
poidos wrote: post #34

Is there something like this but for “home” usecases? What’s in my pantry, how much of y do I have left in my medicine cabinet, etc.

Same question, but more focus on home electronics. I'd love to track my appliances and home lab setup better than I do today in just a spreadsheet. It'd be nice to get depreciation / warranty tracking, diagrams which show tags/position in the rack for my home lab. Basically similar to enterprise asset management just on a much smaller scale and without needing to operate a full ITIL shop + deploy enterprise scale. I…

Someone mentioned https://inventree.org which looks cool, but there is no distributor API connections AFAIK. I really wanted to ability to scan my Digikey bags and have it auto fill all of the parameters so I made a super basic app to do that. I'm planning on open sourcing it once I clean it up.

Re: Shelf – open-source asset management software

#65

Post by sdesol »

insouciance586 wrote: post #7

Another great open source asset management system to check out is Snipe-IT. https://github.com/snipe/snipe-it I have used it for years both self hosted and with them hosting and it's been a great low cost solution for asset management.

It also has a healthy community around it as the following shows:

https://devboard.gitsense.com/snipe/snipe-it

Full disclosure: The insights are from my tool.

Re: Shelf – open-source asset management software

#66

Post by rapnie »

sdesol wrote: post #65
insouciance586 wrote: post #7

Another great open source asset management system to check out is Snipe-IT. https://github.com/snipe/snipe-it I have used it for years both self hosted and with them hosting and it's been a great low cost solution for asset management.

It also has a healthy community around it as the following shows: https://devboard.gitsense.com/snipe/snipe-it Full disclosure: The insights are from my tool.

If I may provide a bit of feedback: Provide more background about GitSense. Who is behind it, what is the privacy policy. Things like that.

Re: Shelf – open-source asset management software

#68

Post by ticoombs »

trog wrote: post #59
insouciance586 wrote: post #7

Another great open source asset management system to check out is Snipe-IT. https://github.com/snipe/snipe-it I have used it for years both self hosted and with them hosting and it's been a great low cost solution for asset management.

Thanks for this recommendation. Been looking at asset management systems so Shelf caught my eye but the install process looks too painful, whereas this one I can just drop easily onto an existing LAMP server.

Pay them to host it. $400/year. Literally a rounding error. Works out cheaper than a cloud compute and SQL server

Re: Shelf – open-source asset management software

#69

Post by sdesol »

rapnie wrote: post #66
sdesol wrote: post #65

Earlier quoted context omitted.

It also has a healthy community around it as the following shows: https://devboard.gitsense.com/snipe/snipe-it Full disclosure: The insights are from my tool.

If I may provide a bit of feedback: Provide more background about GitSense. Who is behind it, what is the privacy policy. Things like that.

Thanks. DevBoard just came out of stealth mode, but there are still things that need to be done, like those that you pointed out.

Re: Shelf – open-source asset management software

#70

Post by manapause »

ticoombs wrote: post #68
trog wrote: post #59

Earlier quoted context omitted.

Thanks for this recommendation. Been looking at asset management systems so Shelf caught my eye but the install process looks too painful, whereas this one I can just drop easily onto an existing LAMP server.

Pay them to host it. $400/year. Literally a rounding error. Works out cheaper than a cloud compute and SQL server

If your company is of type "enterprise" i.e. large enough to have a compliance department or security-conscious enough to go through a pre-sale vendor assessment, and you intend to "sync" users from LDAP/AD with the intent to use your AD user to log in, I strongly urge against hosting on their cloud platform. The LDAP Sync job pulls the password plaintext using the OpenLDAP protocol encrypts it with an APP_KEY they control, and stores that password in the Snipe-IT database. If you ever had an AD user who couldn't log into SnipeIT, then you "sync'd" users And it magically worked - chances are that user changed their password and the correct password needs to be re-acquired before the LDAP user-bind will be successful.

In our assessment we found that these APPKEYs are also included in the backup file - which makes the SnipeIT backup ZIP files a vector for exposing all users and passwords (as well as all encrypted fields data) because of a default setting by the framework's backup provider.

That said - if you are concerned about security, you will be on-prem or within your own cloud provider to begin with. The SnipeApp company offers an "enterprise" level support at a somewhat reasonable rate for big companies, and they were a great help assisting with our installation and integrating the SnipeIT API to import new devices and licenses automatically in a way that we can control from say a PO.

This password issue may not be a problem for you as I understand they now have connectors for SSO or another OAUTH provider. That and the fact that they asked us to share our backup via email during onboarding and they did not specify to keep the secrets out of the backup made our decision to go in-house. Still a good, scrappy product, and when we asked them if they had access to our company's passwords that was not disclosed, we didn't get a response. That's OK - and it was a good lesson for my team in evaluating an open source framework behind the product vis-a-vis "trust but verify."

Its always going to be a vector of our own partial design (and/or someone we are paying), a rogue backup source of truth that is ejected into the ether like atoms forming salts in an acid-base reaction.

Post reply on HN