Skip to content

1cattunnel Client 0.5.2-security-r2

Choose a tag to compare

View all tags
@TCat2003 TCat2003 released this 07 Sep 18:44
client-v0.5.2-security-r2
0f44120

1cattunnel Client 0.5.2-security-r2

This is the GitHub distribution of the 0.5.2-security Windows/Linux client. The native program still reports 1Cat-Tunnel-0.5.2-security; r2 identifies the Linux installer and distribution revision, not a new server protocol.

Linux one-command installation

curl -fsSL https://github.com/1CatAI/1Cat-Tunnel/releases/latest/download/install.sh | sh -s -- --yes

Linux x86_64/amd64 only. The default explicitly installs, starts and enables a systemd service. Run as your regular account and enter your own sudo password when requested. No npm, Node.js, Go or Python runtime is required. First-time tunnel enrollment still requires manually entered credentials in the loopback-only Web panel.

The installer downloads via verified HTTPS, checks a pinned archive SHA-256 before extraction, and elevates only the verified local installer. Previous binaries, configuration and service files are backed up before replacement; failed activation restores the previous service. The r2 package also installs the bundled public CA beside the private configuration without overwriting an existing trust file. Existing server settings are not changed.

For a fixed version, replace latest/download with download/client-v0.5.2-security-r2. Use --yes --user instead for a non-persistent, non-root trial; this never replaces an existing command managed by npm or another installer.

Assets and source

  • 1cattunnel-linux-amd64-0.5.2-security-r2.tar.gz: standalone Linux delivery including install/uninstall scripts and CA.
  • 1cattunnel-windows-amd64-0.5.2-security.zip: Windows standalone WebUI client.
  • 1CatTunnel-Windows-SSH-0.5.2-security.zip: Windows SSH/consent-based support delivery.
  • 1cattunnel-client-source-0.5.2-security-r2.tar.gz: independently buildable client source, tests, packaging and third-party notices.
  • install.sh: readable, version-pinned Linux installer.
  • SHA256SUMS.txt: file checksums.

Source is also available in the repository's client/ directory. Root-level 0.1.2 sources are historical and preserved; compile the new client inside client/, not at the repository root. Project source remains UNLICENSED; third-party licenses are retained. The Windows application is not commercially Authenticode-signed and may display an unknown-publisher warning. Bundled OpenSSH is independently verified against its fixed hash and Microsoft signatures.

GitHub downloads are public and do not use the old download password. Downloading does not grant tunnel access. No administrator passwords, customer credentials, private keys, operational backups or server state are included. This release does not claim that npm publication rights have been restored.

Verification

  • Independently rebuilt Linux, Windows and Windows SSH native programs match the previously validated 0.5.2-security binaries byte-for-byte.
  • Windows Go tests and vet passed; Linux-native client/common/launcher tests passed on the P400 test host; all 10 npm-wrapper unit tests passed.
  • 24 isolated Linux checks passed: failed/truncated downloads, hash mismatch rejection, fresh/repeated user installation, private CA/config, local authenticated panel, and cleanup.
  • Real systemd fresh install, enabled/non-root operation, custom-config-preserving upgrade and injected activation-failure rollback passed using a separately named test service. The test service was removed and the production server PID remained unchanged. No host reboot or new live tunnel forwarding stress test was performed for this packaging-only revision.
Assets 9
Loading