Skip to content

v0.1.30

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 May 03:08
· 59 commits to main since this release
v0.1.30
b8b2257

Important

Critical fix. v0.1.27–v0.1.29 silently chowned host root paths (/, /usr, /usr/local, /usr/local/emhttp, ...) to UID 1001 on install, breaking SSH key authentication on systems with default StrictModes yes. All users on those versions should upgrade.

Fixes

  • Stop chowning host paths (#13)

    • The build's tar invocation lacked --owner=root --group=root, so the GitHub Actions runner's UID 1001 was baked into every directory entry of the .txz. upgradepkg then preserved that ownership on the host's matching paths.
    • Build now uses tar --owner=root --group=root --numeric-owner. All archive metadata is root:root.

  • Heal existing installs

    • Postinstall step issues a corrective chown root:root on the affected host paths. Upgrading to v0.1.30 fixes already-broken systems automatically. No-op on healthy systems.
    • After upgrade, you can safely revert any StrictModes no workaround in /etc/ssh/sshd_config.

Huge thanks to @justinmeader for the exceptional bug report, root cause and fix included.

Full Changelog: v0.1.29...v0.1.30

Assets 4
Loading