A web-based inventory collector for Huawei FusionCompute, similar to RVTools for VMware. Connects to the FusionCompute VRM REST API, gathers infrastructure data (VMs, hosts, clusters, datastores, networks), and exports to a multi-sheet Excel workbook.
Version: 1.0.0 License: MIT (see LICENSE) Tested with: FusionCompute 8.9.0
- One-click web UI — open in browser, enter credentials, click Collect
- 10 Excel sheets matching RVTools conventions:
vSummary,vInfo,vCPU,vMemory,vDisk,vNetwork,vHost,vCluster,vDatastore,vSwitch - Power state per VM (ON/OFF) on every relevant sheet
- VM UUID included for asset tracking
- Hybrid field mapping — works across multiple FusionCompute versions by trying multiple field name candidates
- Auto-detect login — tries multiple API versions and auth methods
- Live progress bar with cancel support
- Remembers last credentials (host/port/username) in browser localStorage; password is never saved
- Standalone .exe — no Python install required on target machines
- Rotating log file for troubleshooting
- Production WSGI server (waitress) — not the Flask dev server
- Download/copy the
FCInventoryToolfolder to your machine - Double-click
FCInventoryTool.exe - Browser opens automatically at
http://localhost:5000 - Enter your FusionCompute VRM details:
- Host / IP: e.g.,
192.168.1.100(nohttps://needed) - Port:
7443(default for VRM REST API) - Username / Password
- Host / IP: e.g.,
- Click Collect Inventory and wait for the progress bar
- Click Download Excel when complete
The Excel file is also saved next to FCInventoryTool.exe for safekeeping.
git clone https://github.com/sukritphiboon/fc-inventory.git
cd fc-inventory
pip install -r requirements.txt
python app.pyThen open http://localhost:5000
Requires Python 3.9+ and PyInstaller.
build.batOutput goes to dist\FCInventoryTool\. Distribute the entire folder (~80 MB).
Environment variables (optional):
| Variable | Default | Description |
|---|---|---|
FC_INVENTORY_BIND |
127.0.0.1 |
Bind address. Set to 0.0.0.0 to expose on LAN (see Security below) |
FC_INVENTORY_PORT |
5000 |
Local web UI port |
Example:
set FC_INVENTORY_BIND=0.0.0.0
set FC_INVENTORY_PORT=8080
FCInventoryTool.exe| Sheet | Description |
|---|---|
| vSummary | Total counts (VMs, hosts, clusters) and Power ON/OFF breakdown per cluster |
| vInfo | VM overview: name, UUID, power state, OS, CPU, memory, disk, IPs, host, cluster |
| vCPU | VM CPU details: cores, sockets, reservation, limit, weight, hot-plug |
| vMemory | VM memory details: size, reservation, limit, hot-plug, hugepages |
| vDisk | One row per disk: capacity, bus type, thin provision, datastore |
| vNetwork | One row per NIC: MAC, IP, port group, VLAN, NIC type |
| vHost | Physical host info: CPU model/cores/MHz, memory, BMC IP, status |
| vCluster | Cluster config: HA, DRS, host count |
| vDatastore | Datastore capacity, free space, used %, type |
| vSwitch | Distributed virtual switches and port groups |
vInfo (sample columns from a real run with 86 VMs):
| VM Name | UUID | Power State | Guest OS | CPUs | Memory (MB) | Total Disk (GB) | NICs | IP Addresses | Host | Cluster |
|---|---|---|---|---|---|---|---|---|---|---|
| web-server-01 | 564d... | ON | CentOS 7.9 64bit | 4 | 8192 | 100 | 1 | 10.10.100.11 | CNA78 | ManagementCluster |
| db-master-01 | 564d... | ON | Red Hat 8.6 64bit | 8 | 32768 | 500 | 2 | 10.10.100.21 | CNA126 | ManagementCluster |
| backup-agent-01 | 564d... | OFF | Ubuntu 22.04 64bit | 2 | 4096 | 50 | 1 | CNA64 | ManagementCluster |
vHost (sample):
| Host Name | IP Address | Status | Cluster | CPU Model | CPU Cores | Memory Total (MB) | Running VMs | BMC IP |
|---|---|---|---|---|---|---|---|---|
| CNA78 | 10.10.10.78 | normal | ManagementCluster | Intel Xeon Gold 6248R | 48 | 524288 | 25 | 10.10.20.78 |
| CNA126 | 10.10.10.126 | normal | ManagementCluster | Intel Xeon Gold 6338 | 64 | 786432 | 18 | 10.10.20.126 |
vDatastore (sample):
| Datastore Name | Storage Type | Capacity (GB) | Free (GB) | Used % | Status |
|---|---|---|---|---|---|
| autoDS_CNA78 | LOCALPOME | 1529 | 712 | 53.4 | NORMAL |
| IPSAN | LUNPOME | 7167 | 2204 | 69.2 | NORMAL |
vSummary (counts):
| Item | Count |
|---|---|
| Total VMs | 86 |
| Power ON | 64 |
| Power OFF | 22 |
| Total Hosts | 8 |
| Total Clusters | 3 |
| Total Datastores | 15 |
- The machine running FC Inventory Tool must reach TCP 7443 on the FusionCompute VRM
- The browser only needs to reach the local machine (default
127.0.0.1:5000) - Self-signed TLS certificates on the VRM are accepted (verification disabled — see Security below)
This tool is intended for internal/trusted environments only. Please review the following before deploying:
- Local-only by default — the web UI binds to
127.0.0.1. Other machines on your network cannot reach it unless you explicitly setFC_INVENTORY_BIND=0.0.0.0 - Password is never persisted — only host/username/port are remembered (browser localStorage)
- Password is never logged — credentials are never written to
fc_inventory.log - No authentication on the web UI — because access is limited to localhost
- Production WSGI — uses
waitress, not Flask's debug server - Token-based session to FusionCompute — token is held in memory only, logout on completion
- TLS certificate verification is disabled when calling the FusionCompute API. Most FC deployments use self-signed certificates, so verification would fail for legitimate hosts. This is the same behavior as
curl -kor RVTools' SSL setting. Acceptable for trusted internal networks. - Single-user, single-job at a time — there is no multi-user session management
- No CSRF tokens on the API endpoints — relies on local-only binding
- No rate limiting — not needed because access is single-user, local-only
- The .exe is unsigned — Windows SmartScreen may show a warning the first time you run it. Click "More info" → "Run anyway". To avoid this in production, the binary should be code-signed with an organization certificate.
If you need to expose this on a network:
- Do NOT set
FC_INVENTORY_BIND=0.0.0.0without putting it behind a reverse proxy (nginx, Caddy) that adds:- HTTPS with a real certificate
- HTTP basic auth or SSO
- IP allowlist
- Run as a non-admin Windows user
- Place the executable in a write-protected directory (Excel output and log file need a writable location — pass a custom path via env var if needed)
- Use a dedicated read-only FusionCompute account for inventory collection (only needs view/query permissions, not write)
- Code-sign the executable with your organization's certificate to remove SmartScreen warnings
- Run an antivirus scan on the .exe before distributing internally
- Source code is fully open in this repository — every line is auditable
- No outbound network calls except to the FusionCompute VRM you specify (see Network Behavior below)
- No telemetry, analytics, or auto-update — runs entirely offline (apart from FC API calls)
- No persistence — does not install services, scheduled tasks, registry entries, or background processes
- Reproducible build — run
build.batagainst the same git commit to verify the binary - Built by GitHub Actions — the official .exe attached to each release is built by
.github/workflows/build-release.ymlrunning on GitHub's infrastructure, not on a developer machine. The build log is publicly auditable
This tool makes only the following outbound connections:
| Destination | Port | Protocol | Purpose | When |
|---|---|---|---|---|
| FusionCompute VRM (host you enter) | 7443 (default) | HTTPS | Login + GET inventory data | Only during a Collect operation |
localhost (your own machine) |
5000 | HTTP | Web UI | Always while running |
It does NOT contact:
- ❌ Any update server, telemetry endpoint, or analytics service
- ❌ Any cloud provider (AWS, Azure, GCP, Anthropic, OpenAI, Google, etc.)
- ❌ Any third-party server other than your FusionCompute VRM
- ❌ DNS lookups for any external domain
- ❌ NTP, license servers, or "phone home" services
You can verify this yourself:
- Run with Wireshark / Process Monitor open and observe traffic
- Run inside an air-gapped network with only the FC VRM reachable — it will work perfectly
- Search the source code for
requests.,urllib,socket.connect,webbrowser.open— there are exactly two destinations:self.base_url(FC VRM you provided) andlocalhost
Every release includes SHA-256 checksums. To verify your download:
Windows PowerShell:
Get-FileHash FCInventoryTool-v1.0.0-windows.zip -Algorithm SHA256Linux / macOS:
sha256sum FCInventoryTool-v1.0.0-windows.zipCompare the output against the SHA256SUMS-v1.0.0.txt file attached to the same GitHub Release. If the hashes match, the file has not been tampered with since release.
For extra peace of mind, scan the released .exe against 70+ antivirus engines at virustotal.com:
- Go to https://www.virustotal.com/gui/home/upload
- Upload
FCInventoryTool.exe(or the.zip) - Wait for the scan to complete
- Check the report — a clean PyInstaller-built Python app should show 0 detections from reputable engines
Note: Some heuristic engines occasionally false-positive on PyInstaller bundles because malware authors also use PyInstaller. Cross-check with multiple engines and the source code if in doubt.
The official release is built by GitHub Actions. You can reproduce it locally and confirm the binary matches:
git clone https://github.com/sukritphiboon/fc-inventory.git
cd fc-inventory
git checkout v1.0.0
build.batThe output dist\FCInventoryTool\FCInventoryTool.exe should be functionally identical to the released version. (Byte-exact reproducibility is not guaranteed because PyInstaller embeds timestamps and the OS embeds local paths, but the behavior is identical and you have full control over what code is inside.)
- Verify the username/password works on the FusionCompute web console
- Check the log file
fc_inventory.log— it tries multiple login methods and logs each attempt - Confirm port 7443 is reachable:
Test-NetConnection <vrm_ip> -Port 7443
- Check
fc_inventory.logfor=== SAMPLE ... keys:lines — these show the actual API field names returned by your FusionCompute version - File a bug report with those log lines so the field mapping can be extended
- Output is saved next to the .exe. Make sure there's at least 50 MB free in that location.
set FC_INVENTORY_PORT=5050
FCInventoryTool.exeOpen http://localhost:5000 (or your custom port) manually.
- Location:
fc_inventory.lognext to the .exe (or working directory if running from source) - Rotation: 5 MB max per file, 3 backups kept
- Level: INFO (DEBUG details available by editing
app.py) - What is logged: API request paths, HTTP status codes, response sizes, sample field keys, errors. Passwords are never logged.
https://github.com/sukritphiboon/fc-inventory
fc-inventory/
├── app.py # Flask app + production main entry point
├── fc_client.py # FusionCompute REST API client
├── collector.py # Orchestrates collection + field mapping
├── excel_builder.py # Multi-sheet Excel generator
├── requirements.txt # Python dependencies
├── build.bat # Build standalone .exe
├── CHANGELOG.md # Version history
├── LICENSE # MIT license
├── templates/
│ ├── index.html # Main web UI
│ └── changelog.html # Release notes page
├── static/
│ ├── style.css # UI styling
│ └── app.js # UI logic, progress polling
├── docs/
│ ├── images/ # README screenshots
│ └── take_screenshots.py # Helper to regenerate screenshots
└── README.md # This file
This project follows Semantic Versioning (MAJOR.MINOR.PATCH):
- MAJOR — breaking changes (e.g. CLI/API changes that require user action)
- MINOR — new features, backwards-compatible
- PATCH — bug fixes only
See CHANGELOG.md for the full history. Release notes are also viewable in the web UI by clicking What's new in the footer.
This project is licensed under the MIT License — see the LICENSE file for the full text.
In short:
- ✅ Free to use, copy, modify, distribute (commercial or private)
- ✅ Free to integrate into closed-source software
⚠️ Provided "as is" without warranty⚠️ The original copyright and license notice must be included in copies
This tool depends on the following open-source libraries (installed via pip and bundled in the .exe):
| Library | License | Purpose |
|---|---|---|
| Flask | BSD-3-Clause | Web framework |
| waitress | ZPL-2.1 | Production WSGI server |
| requests | Apache-2.0 | HTTP client |
| openpyxl | MIT | Excel generation |
| PyInstaller (build only) | GPL with exception | Standalone .exe builder |
This tool is not affiliated with or endorsed by Huawei Technologies Co., Ltd. "FusionCompute" is a trademark of Huawei. The tool consumes Huawei's published REST API for inventory purposes only.
See AUTHORS.md for the full list of contributors and acknowledgments, including disclosure of AI-assisted development.
- Built with Flask, openpyxl, requests, waitress
- API field references from Huawei FusionCompute 8.9.0 VRM API documentation
- Architecture and implementation pair-programmed with Claude (Anthropic) Opus 4.6 — see AUTHORS.md