v1.2.4

Highlights

WebUI port check keeps working under Pulsed Media's socket-table privacy. PMSS has an opt-in hardening (its ADR 0068) that makes /proc/net/tcp and /proc/net/tcp6 root-only so one tenant cannot read another's connection addresses. On a host with it enabled, 1.2.3 refused every qBittorrent login with could not read the listening sockets on the box; not sending credentials unverified. The same hardening deliberately keeps ss -tlnp working, so the probe and the live re-check before credential-sending actions now fall back to it. A socket ss attributes to one of your processes counts as yours; anything it cannot attribute is treated as another account's and still refused, and a port shared with one is still contested. (#70)

A container that cannot write its data directory says so. Instead of a bare permission error the process exits with the directory, the uid and gid it ran as, and both fixes: make the directory writable for that uid, or run with --user set to the directory's owner. On Unraid, where appdata is owned by nobody:users, set Extra Parameters to --user 99:100 or chown -R 65532:65532 the appdata folder. The README's container section has an Unraid entry. (#69)

Container image: ghcr.io/alteredparadox/pmss-fleet-manager:1.2.4 (linux/amd64, linux/arm64).

Container image: ghcr.io/alteredparadox/pmss-fleet-manager:1.2.4 (linux/amd64, linux/arm64).

What's Changed

• Name the fix when the data directory is not writable; Unraid notes by @AlteredParadox in #69
• Verify the WebUI port owner with ss -tlnp where /proc/net/tcp is root-only by @AlteredParadox in #70
• README: 1.2.4 is the current release by @AlteredParadox in #71

Full Changelog: v1.2.3...v1.2.4