LCC 27H1-preview.20261106.57

Verifying this release

Every artifact carries a keyless build-provenance attestation and an
SPDX SBOM attestation (Sigstore-backed, no signing key). Verify a
download before installing:

# Build provenance (who / what commit / which workflow built it)
gh attestation verify --repo jordilopezr/LCC <artifact>

# SBOM (dependency graph that went into the build)
gh attestation verify --repo jordilopezr/LCC \
  --predicate-type https://spdx.dev/Document/v2.3 <artifact>

# Offline integrity
sha256sum -c SHA256SUMS

LCC 27H1-preview.20261105.56

What's new: own bundle identifier on macOS

Apart from this, the code is the same as v27H1-preview.20261105.55.

• The macOS app identifies itself as com.jordilopezr.lcc instead of
  Flutter's template com.example.linuxCloudConnector, and its copyright names
  its author.
• Updating loses nothing. On first launch, preferences (selected projects,
  RDP/VNC client, notices already seen) are copied from the old identifier.
  Sign-in tokens and credentials are unaffected.
• macOS treats it as a new app: it asks again for notification permission and
  may ask once for Keychain access.

First launch on macOS: the app is ad-hoc signed and not notarized, so
Gatekeeper warns about it. Unzip, move it to Applications (replacing the
previous build), then right-click the app and choose Open, or run
xattr -dr com.apple.quarantine "/Applications/Lightweight Cloud Connector.app".

macOS known gaps: tunnels, SSH and the RDP/VNC clients still need a full QA
pass on a Mac; opening SFTP in Finder does not work (sftp:// is not handled);
if the app is killed abruptly, gcloud tunnel processes are not torn down with it.

Verifying this release

Every artifact carries a keyless build-provenance attestation and an
SPDX SBOM attestation (Sigstore-backed, no signing key). Verify a
download before installing:

# Build provenance (who / what commit / which workflow built it)
gh attestation verify --repo jordilopezr/LCC <artifact>

# SBOM (dependency graph that went into the build)
gh attestation verify --repo jordilopezr/LCC \
  --predicate-type https://spdx.dev/Document/v2.3 <artifact>

# Offline integrity
sha256sum -c SHA256SUMS

LCC 27H1-preview.20261105.55

What's new: macOS fixes from the first run on real Macs

Tested on Intel and Apple Silicon Macs. Apart from these fixes, the code is the
same as v27H1-preview.20261104.54.

• Sign-in opens the browser on macOS. Native sign-in and every link in the
  app used xdg-open, which macOS does not have; they now open Safari or the
  default browser.
• Native macOS remote-desktop clients. RDP uses Microsoft's Windows App
  (free on the Mac App Store); VNC uses the built-in Screen Sharing.
• App icon and name. The app shows the LCC icon and is called
  Lightweight Cloud Connector.app (was linux_cloud_connector.app).
  Settings and stored credentials carry over.
• Remmina (Linux): generated RDP profiles use 32-bit True Color, so Windows
  hosts no longer show degraded colors.

First launch on macOS: the app is ad-hoc signed and not notarized, so
Gatekeeper warns about it. Unzip, move it to Applications, then right-click
the app and choose Open, or run
xattr -dr com.apple.quarantine "/Applications/Lightweight Cloud Connector.app".
If you installed build .54, delete linux_cloud_connector.app.

macOS known gaps: tunnels, SSH and the RDP/VNC clients still need a full QA
pass on a Mac; opening SFTP in Finder does not work (sftp:// is not handled);
if the app is killed abruptly, gcloud tunnel processes are not torn down with it.

Verifying this release

Every artifact carries a keyless build-provenance attestation and an
SPDX SBOM attestation (Sigstore-backed, no signing key). Verify a
download before installing:

# Build provenance (who / what commit / which workflow built it)
gh attestation verify --repo jordilopezr/LCC <artifact>

# SBOM (dependency graph that went into the build)
gh attestation verify --repo jordilopezr/LCC \
  --predicate-type https://spdx.dev/Document/v2.3 <artifact>

# Offline integrity
sha256sum -c SHA256SUMS

LCC 27H1-preview.20261104.54

What's new: macOS support

LCC now runs on macOS as a Universal Binary (Apple Silicon and Intel):
lightweight-cloud-connector_27H1-preview.20261104.54_macos-universal.zip.
Credentials are stored in the macOS Keychain, and the About panel now says
Linux and macOS. Apart from that, the code is the same as
v27H1-preview.20261012.50, so the known gaps listed for that build still apply
(see Known gaps in the README).

First launch on macOS: the app is ad-hoc signed and not notarized, so
Gatekeeper warns about it. Unzip, move it to Applications, then right-click
the app and choose Open (or allow it under System Settings > Privacy &
Security).

macOS caveat: if the app is killed abruptly, gcloud tunnel processes are
not torn down with it. Quitting normally cleans them up.

Verifying this release

Every artifact carries a keyless build-provenance attestation and an
SPDX SBOM attestation (Sigstore-backed, no signing key). Verify a
download before installing:

# Build provenance (who / what commit / which workflow built it)
gh attestation verify --repo jordilopezr/LCC <artifact>

# SBOM (dependency graph that went into the build)
gh attestation verify --repo jordilopezr/LCC \
  --predicate-type https://spdx.dev/Document/v2.3 <artifact>

# Offline integrity
sha256sum -c SHA256SUMS

License

GNU GPL version 3 or later, with the additional trademark terms in NOTICE.

LCC 27H1-preview.20261012.50

Verifying this release

Every artifact carries a keyless build-provenance attestation and an
SPDX SBOM attestation (Sigstore-backed, no signing key). Verify a
download before installing:

# Build provenance (who / what commit / which workflow built it)
gh attestation verify --repo jordilopezr/LCC <artifact>

# SBOM (dependency graph that went into the build)
gh attestation verify --repo jordilopezr/LCC \
  --predicate-type https://spdx.dev/Document/v2.3 <artifact>

# Offline integrity
sha256sum -c SHA256SUMS

License

Starting with this preview, LCC is distributed under the GNU GPL version 3 or
later, with the additional trademark terms in NOTICE. Releases up to and
including 26H2 Update 1 remain under the MIT License.

The NOTICE file bundled in this preview says the change starts with
"26H2 Update 2 (tag v26H2u2)". That release was never published; the first
GPL release is this preview, v27H1-preview.20261012.50. The corrected NOTICE is
on main and will ship with the next build.

LCC 26H2u1

Verifying this release

Every artifact carries a keyless build-provenance attestation and an
SPDX SBOM attestation (Sigstore-backed, no signing key). Verify a
download before installing:

# Build provenance (who / what commit / which workflow built it)
gh attestation verify --repo jordilopezr/LCC <artifact>

# SBOM (dependency graph that went into the build)
gh attestation verify --repo jordilopezr/LCC \
  --predicate-type https://spdx.dev/Document/v2.3 <artifact>

# Offline integrity
sha256sum -c SHA256SUMS

26H2

Lightweight Cloud Connector 26H2

Native Google Cloud IAP Connector for Linux. Free and open source.

Downloads

• .deb — Debian/Ubuntu
• .rpm — Fedora/RHEL/AlmaLinux/CentOS
• .AppImage — universal, no install required
• .tar.gz — generic Linux tarball