Skip to content

OwnTransit 0.2.0 — Your SSH. Your keys. Untrusted transit.

Choose a tag to compare

View all tags
@sentrybottale sentrybottale released this 06 Sep 17:25
· 17 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.2.0
83aa793

OwnTransit 0.2.0

Your SSH. Your keys. Untrusted transit.

The receiver-owned stabilization release: signed native outputs for Linux
amd64/x86_64, Linux arm64/aarch64 and Apple-silicon macOS. No administrator role,
Apple signing subscription or new pairing ceremony is introduced.

Install

Linux client:

curl -fsSL https://github.com/sentrybottale/OwnTransit/releases/download/v0.2.0/install-preview-linux.sh | sudo sh -s -- client

Use connector on the private SSH machine or relay on the public VPS. Relay
setup asks for your full public URL and handles its managed container/service.

Apple-silicon Mac client, without sudo:

curl -fsSL https://github.com/sentrybottale/OwnTransit/releases/download/v0.2.0/install-preview-macos.sh | sh -s -- client

Follow the exact next command printed by installation. Normal command aliases
are added only where free or already managed. Existing *-preview names remain
usable; unrelated legacy/manual commands and SSH settings are preserved.

Upgrade and uninstall

Run the same versioned installer for the local role. Existing pairing state is
retained. The receiver installer prints its service restart command; do not
rerun receiver pair setup just to upgrade. Mac installation prints the new
client path to use in your ProxyCommand; old manual binaries are not overwritten.

Linux 0.2.0 removal uses the same command with ROLE --uninstall. Mac installation
prints an offline uninstall command. Software removal retains pairing/SSH state.
The relay retains its disabled unit configuration, keys, website route and cached
rollback images for explicit reinstall/setup. Unrecognized or modified packages
and service overrides are not silently deleted.

See the installation guide.

Other changes

  • Fixed, actionable diagnostics without raw errors, credentials or relay strings.
  • Concurrent client startups wait for their local operation lock within the
    existing opening deadline; cancellation and alarms still stop the wait.
  • Fast simultaneous-start, quiet SSH, timeout and receiver-restart regressions;
    native/isolated install, tamper, reinstall and non-purging removal checks.
  • Existing cryptography, wire profile, fixed SSH target, production security
    timers and terminal alarm semantics are unchanged.

Verification and trust

Both race/vet profiles and repository security/publication checks are required;
CI covers supported native platforms. The signed Mac installer was exercised in
an isolated fixture, Linux capsules installed/executed/removed in bounded
containers, and the final signed Mac client completed a brief live SSH session
with a concurrent integrity-checked SCP roundtrip through existing compatible
relay/receiver versions. Running operator services and pairing were not replaced.

This is the bounded 0.2.0 release scope—not an extended soak, clean-host
certification, exhaustive lifecycle qualification or independent security
assessment. Keep independent SSH/host recovery access.

The historical preview filenames, DEVELOPMENT-SHA256SUMS and existing signing
namespace are retained as format identifiers. The exact 0.2.0 inventory has six
members, including the new Mac installer. It remains distinct from the legacy
0.1.0 manifest/policy profile. Initial bootstrap trusts GitHub HTTPS delivery,
then verifies the pinned signer and signed archive. Existing releases and tags
remain immutable. Intel macOS and Windows are not supported.

Assets 12
Loading