Skip to content

Releases: ajchemist/boring

Release list

boring v0.16.2-openssh.1

boring v0.16.2-openssh.1 Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Sep 04:49
v0.16.2-openssh.1
7940583

Adds an opt-in OpenSSH backend for TCP SOCKS tunnels on macOS and Linux.

[[tunnels]]
name = "dev"
backend = "openssh"
mode = "socks"
host = "dev-server"
local = 8899
  • macOS uses Apple's /usr/bin/ssh, including SecurityKeyProvider support for Secure Enclave keys.
  • Linux resolves ssh from PATH, including on NixOS.
  • For agent-independent authentication, configure IdentityAgent none and AddKeysToAgent no for both the destination and any jump hosts.
  • Existing Go-backed tunnels remain the default. OpenSSH startup readiness, reconnect, and process cleanup are managed by boring.
  • Scope: TCP SOCKS only; no terminal prompt relay; startup timeout is 60 seconds.

Downloads include macOS arm64/x86_64 and Linux x86_64/arm64 archives, plus SHA256SUMS. Each archive contains boring and LICENSE. Linux binaries are statically linked but require an OpenSSH executable for this backend.

All tests and go vet passed on macOS arm64, Linux x86_64, and Linux arm64 in the release workflow. Agent-independent Secure Enclave authentication and SOCKS HTTPS traffic were also verified on a physical Mac using the downloaded release binary.

For Nix, pin the versioned archive URL and SHA-256, preserve the Mach-O signature with dontStrip = true, and include OpenSSH in the Linux wrapper's PATH. Restart the existing boring daemon after upgrading.

Loading