v1.1.5

Security

• refuse to open an unencrypted Kloset store unless PLAKAR_INSECURE_PLAINTEXT is set in the environment
• plugins are signature-checked at install time; plakar pkg add -allow-unsigned opts out
• sync: the peer passphrase is no longer handed down to the peer store connector
• fs exporter: confine restores to the target directory
• http store: auth_token over plaintext HTTP now requires insecure=true, https->http redirects are rejected, plus assorted protocol hardening
• ptar over http hardening

New

• plakar server: -token requires clients to present an Authorization Bearer token; requests are now logged
• plakar pkg add / plakar pkg show: -devel to use the integration devel tree
• http and https stores: new auth_token, insecure, timeout and tls_no_verify options, documented in plakar-store(1)

Fixes

• backup: report the real cause of a failure when a packfile temporary file cannot be created (e.g. a full /tmp) instead of a bare cancellation
• fs importer: open files with O_NONBLOCK so a FIFO no longer stalls a backup
• fs exporter: restore file permissions, fix hardlink restoration
• tar exporter: don't hand hard-link names over as symlink targets
• ls: display the uid/gid recorded in the snapshot instead of resolving them against the local system
• mount: set a valid modification time on the root directory
• config: reject invalid configuration names
• ui: browsing works again on cold-storage (Glacier) repositories, and unreadable entries are flagged as such
• ui: login rate limiting from the auth API is reported as 429
• cookies: removing the disabled-security-check no longer fails when it isn't there
• grpc integration: fix error reporting in Import() and Export(); serialize the context Flags field on the wire; support custom metadata
• make install: fix installation of manpages