podssh v1.1.0-beta.1

podssh v1.1.0-beta.1

The first beta of milestone M10: v1.0.1 and the repairs of the defects that
its testers filed after it (GitHub #112, #114 and #118). A beta is a
prerelease. Its tag never moves: a defect found in it goes into the next beta.

What to test again

• Short logins through a node, with OpenSSH's ProxyCommand=podssh operator:
  operator, pipe with a node: side and ssh node:// take SIGHUP and
  SIGTERM (and SIGINT, but for ssh) as the end of their bytes and close the
  node's session, so a run of logins no longer fills the node's budget. The
  refusal of a full budget says what holds it (T-586, #112).
• ssh node:// from a Windows client: the question of a new host key no
  longer counts against ConnectTimeout and has its bound on the console, and a
  handshake that does not finish says what came, the bytes through the layer
  and the channel among them; 10 s in, a line says where it is (T-588, #114).
• A node or a client run as root with HOME of another account: the cache
  passes over a place in another user's tree, takes the home of the uid's
  entry in the user database, and reads what it kept there before without
  moving it; podssh status gives cache.passed (T-593, #118).

The files

File	For
podssh-x86_64-unknown-linux-musl	Linux on x86-64, static: no library and no loader needed
podssh-aarch64-unknown-linux-musl	Linux on aarch64, static
podssh-armv7-unknown-linux-musleabihf	Linux on 32-bit ARM with hard float, static
podssh-riscv64gc-unknown-linux-musl	Linux on 64-bit RISC-V, static
podssh-aarch64-apple-darwin	macOS on Apple silicon; it links the system's libraries only
podssh-x86_64-apple-darwin	macOS on Intel
podssh-x86_64-pc-windows-msvc.exe	Windows on x86-64, with a static C runtime
podssh-aarch64-pc-windows-msvc.exe	Windows on ARM64, with a static C runtime
SHA256SUMS	The SHA-256 of each binary
SHA256SUMS.sigstore.json	The signature of SHA256SUMS: Sigstore's keyless signing, by the release workflow at this tag
provenance.sigstore.json	The provenance of each binary (SLSA), signed the same way: the workflow, the tag and its commit
THIRD-PARTY-LICENSES.md	The licenses of the crates in the binaries, with their texts

Check a download

T=v1.1.0-beta.1; B=podssh-x86_64-unknown-linux-musl   # or another file of the table
curl -fsSLO "https://github.com/Azathothas/podssh/releases/download/$T/$B"
curl -fsSLO "https://github.com/Azathothas/podssh/releases/download/$T/SHA256SUMS"
grep " $B\$" SHA256SUMS | sha256sum -c - && chmod +x "$B"
./"$B" --version   # podssh 1.1.0-beta.1 (the commit of the tag)

podssh update --version v1.1.0-beta.1 from v1.0.1 takes it, checked by
its signature; a build of a release follows releases alone, so without
--version it stays on v1.0.1. The provenance and the signature are checked
as for v1.0.0 (its notes),
with T=v1.1.0-beta.1.

How it was checked

By the operator's ruling Q88 (2026-11-03), until podssh is stable: the gate
green at the tag's commit, the release workflow by hand on it, and the short
form of its binary (scripts/release-short.sh BINARY --net); after the tag,
release-proofs.yml and update-live.yml. The whole release check of
v1.0.1 and the live runs of each road wait until then.

What a beta does not have yet

• The whole check of a release from end to end with no human
  (scripts/release-check.sh, T-251): it waits (Q88).
• Signatures of the platforms: the Mac binaries are not signed with an
  Apple Developer ID, and the Windows binaries carry no Authenticode
  signature, so SmartScreen may warn. The proofs above stand in for them.

Report a defect

Open an issue at https://github.com/Azathothas/podssh/issues with the
output of podssh --version and podssh doctor --json. Read that output
before you post it: it names this host's proxy and addresses, and never a
token or a password.

The licenses of the crates in the binaries, with their texts: THIRD-PARTY-LICENSES.md.

The commits of this release

Other

• T-584: step 2, v1.0.1's release check before the tag passed at 6ece1f9 (43 passed, 6 skipped), each of its 21 runs green (62d26dc)
• Q88: move fast, the expensive checks wait until podssh is stable; T-584: done, v1.0.1 published at 6ece1f9 (bd3b9e0)
• Record: the citations of docs/STATUS.md moved with its intro's lines on v1.0.1 (cargo todo remap) (b5a0709)
• T-586: done, a signal ends operator, pipe node: and ssh node:// with a CLOSE, and a node charges a closing session its unacknowledged bytes (GitHub #112) (84864f2)
• T-588: done, a handshake that does not finish names what came, and the question of a new host key leaves ConnectTimeout and has its bound on Windows (GitHub #114) (ef50f8b)
• T-593: done, the cache passes over a place in another user's tree, takes the passwd home's, and only reads what was kept there (GitHub #118) (2f87d7b)
• Repair CI: the layer's session future on the heap (exit's stack overflow, T-586); roost's SIGHUP test Unix's alone; T-599 filed (bfd8f7d)
• v1.1.0-beta.1 made ready (T-446): the version 1.1.0-beta.1 and the notes (5d95e5f)