Skip to content

OwnTransit 0.8.0 — bounded reconnects

Choose a tag to compare

View all tags
@sentrybottale sentrybottale released this 12 Sep 21:28
· 7 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.8.0
e46ce16
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

OwnTransit 0.8.0

Recover stalled pending relay connections without resetting the pairing.

  • Local 45-second bound on runtime preface, outer TLS and READY waits after the WebSocket dial. A silent attempt is aborted and the Target retries using the same identity.
  • The guard is retired before promotion: established SSH streams are not replayed, reconnected or killed by a startup timer.
  • Fixed, rate-limited Target timeout notices and a specific Client pending-stall diagnostic.
  • Canonical 0.7.0-to-0.8.0 package upgrades retain pairing state, previous software and operator-owned SSH settings.
  • The exact legacy /connects/enrollment sibling no longer blocks reuse of the separate exact /connects route. No website rewrite or weaker route matching is required.

Update the Target first

On the private Linux machine running SSH:

curl -fsSL https://github.com/sentrybottale/OwnTransit/releases/download/v0.8.0/install-linux.sh | sudo sh -s -- target
sudo owntransit-target setup

Choose Continue tunnel for each existing tunnel to start the installed version. A service restart briefly interrupts its connections. Do not create a new tunnel or replace pairing keys just to upgrade. Keep independent SSH or console access during service updates.

Update Client and Relay

On a Linux Client:

curl -fsSL https://github.com/sentrybottale/OwnTransit/releases/download/v0.8.0/install-linux.sh | sudo sh -s -- client
owntransit-client setup

On an Apple-silicon Mac Client, without sudo:

curl -fsSL https://github.com/sentrybottale/OwnTransit/releases/download/v0.8.0/install-macos.sh | sh -s -- client
"$HOME/.local/bin/owntransit-client" setup

Choose Continue tunnel to verify the retained Client pairing.

On the public Linux VPS:

curl -fsSL https://github.com/sentrybottale/OwnTransit/releases/download/v0.8.0/install-linux.sh | sudo sh -s -- relay

Select the intended existing Relay and Start or update this relay. Use its existing URL. To reopen the menu: sudo owntransit-relay setup.

Supported: Linux amd64/arm64 and Apple-silicon macOS Client. Full guide.

The existing distribution signer authenticates the exact nine assets; prior releases remain immutable. The initial installer delivery trusts GitHub HTTPS. No new cryptographic profile, SSH management, Apple notarization, extended soak or independent security certification is introduced. The pending-stall defect is reproduced in isolated tests; an earlier live network trigger is not claimed proven after process restart.

Assets 12
Loading