Skip to content

OwnTransit 0.7.0 — Client / Relay / Target

Choose a tag to compare

View all tags
@sentrybottale sentrybottale released this 10 Sep 14:33
· 8 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.7.0
d0ade68
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

OwnTransit 0.7.0

Client. Relay. Target. One local menu, one next step.

  • Canonical commands: owntransit-client, owntransit-relay, owntransit-target.
  • New / Continue / List / Remove tunnel menus. Endpoints also have explicit Restore and terminal Killswitch choices.
  • One private pairing code, retained on the Target until used or expired. No private code on the Relay.
  • Relay drafts and scoped admission removal. Only the Client's authenticated end-to-end check reports TUNNEL READY.
  • Preserved pairing state, exact managed-service migration, and unchanged SSH ownership and inner encryption boundaries.

Install

On the public Linux VPS:

curl -fsSL https://github.com/sentrybottale/OwnTransit/releases/download/v0.7.0/install-linux.sh | sudo sh -s -- relay

On the private Linux Target running SSH:

curl -fsSL https://github.com/sentrybottale/OwnTransit/releases/download/v0.7.0/install-linux.sh | sudo sh -s -- target
sudo owntransit-target setup

On a Linux Client:

curl -fsSL https://github.com/sentrybottale/OwnTransit/releases/download/v0.7.0/install-linux.sh | sudo sh -s -- client
owntransit-client setup

On an Apple-silicon Mac Client, without sudo:

curl -fsSL https://github.com/sentrybottale/OwnTransit/releases/download/v0.7.0/install-macos.sh | sh -s -- client
"$HOME/.local/bin/owntransit-client" setup

Run each command separately, then answer the menu. Follow the short quickstart.

Upgrading

Use the installer for each local role. On the Relay, select Start or update this relay. On each existing Target tunnel, choose Continue tunnel; on the Client, Continue checks the retained tunnel. Do not replace pairing identities for a software update.

Names and commands deliberately change before 1.0; use these commands, not old preview aliases. Recognized managed installations retain state. Unknown commands, modified units and unrelated sites are not overwritten. Existing release assets are unchanged.

Endpoint Remove is recoverable and keeps private state. Killswitch is permanent for that pairing. Relay removal is an availability operation, not endpoint revocation against a malicious Relay.

Verification scope

The existing distribution signer authenticates the exact archives through DEVELOPMENT-SHA256SUMS and its detached signature. That retained namespace is not a new assurance claim. Initial installer delivery trusts GitHub HTTPS. No Apple notarization, pristine-host qualification, extended soak or independent external security certification is claimed.

Supported: Linux amd64 and arm64; Apple-silicon macOS Client. Runtime remains an SSH byte carrier with a build-fixed local SSH destination.

Assets 12
Loading