Release opsdeck 0.5.0 · vahidid/opsdeck

Graceful quit with a shutdown screen. Quitting (the tray, ⌘Q, closing the window
without a tray, an update, or the session ending) shows Shutting down opsdeck with each
step while agent sessions end, port forwards and MCP servers close, VPN clients log out
of their gateways and remove their routes, and the vault locks.
Tray icon on Linux and Windows. Open opsdeck / Quit opsdeck; closing the window
hides it there, so VPNs, forwards and the MCP server keep running. On macOS the app
stays in the Dock when its window is closed.
Your shell's PATH on Linux. Started from the desktop's menu, the app now reads
PATH from your login shell (as on macOS) and adds ~/.local/bin, so agent CLIs such
as claude are found.
Claude Desktop in Agent access, and every stdio setup uses the full path of the
running opsdeck (/usr/bin/opsdeck-desktop on Linux), which agents started from a
desktop menu can find without your PATH.

Touch ID for system-mode VPNs on macOS, with nothing to set up. The first time sudo
needs your password, opsdeck asks for it once, checks it and keeps it in the vault
(macOS sudo password); from then on it asks for your fingerprint and gives sudo the
password itself. Without Touch ID, or when you cancel, sudo asks in the password dialog.
The Touch ID for sudo button in App settings is gone: macOS 27 keeps apps out of
/etc/pam.d, so it could not work without Full Disk Access.

OpenConnect and WireGuard system tunnels on macOS. opsdeck named the tunnel device
oc-<profile> / od-<profile>, which macOS refuses ("must match 'utun%d'"); macOS now
picks the utunN device and opsdeck finds it by its address.
System-mode VPNs ask for your sudo password. opsdeck ran VPN clients with sudo -n,
so without passwordless sudo a system (TUN) VPN failed with "sudo: a password is
required". sudo now asks in the system's password dialog (macOS, or zenity, kdialog or
an ssh-askpass on Linux desktops), and a cancelled dialog or a wrong password is the
connection's error.

Install

System	Download
Windows 10/11 (x64)	`opsdeck-0.5.0-windows-x64-setup.exe` (or the portable `.exe`)
macOS 12+ (Apple silicon and Intel)	`opsdeck-0.5.0-macos-universal.dmg`
Debian / Ubuntu (x86_64)	`opsdeck_0.5.0_amd64.deb`
Fedora / RHEL / openSUSE (x86_64)	`opsdeck-0.5.0-1.x86_64.rpm`
CLI only (`opsdeck serve`, opens in the browser)	`opsdeck-cli-0.5.0-<os>-<arch>`

Or run the install script — see Install.
Already installed? opsdeck shows the update in its sidebar and installs it for you.

SHA256SUMS.txt is signed with the opsdeck release key. To check a download yourself:

minisign -Vm SHA256SUMS.txt -P RWRns3uLxhaLFYGyA2gOUMh1YqtebJGtbVhNL1qWwsaoi2g6Mk6g4+XN
sha256sum --check --ignore-missing SHA256SUMS.txt