Skip to content

v2.0.0 — Go rewrite

Choose a tag to compare

@xxvcc xxvcc released this 08 Jul 04:31

linux-temp-admin v2.0.0 — a full rewrite in Go, shipped as a signed static binary.

What's new

  • Rewritten in Go. A single static binary (linux/amd64, linux/arm64) with near-zero runtime dependencies, at feature parity with the v1.2.x bash tool.
  • Native crypto & I/O. ed25519 SSH keys are generated in-process (no ssh-keygen); HTTP download, the account registry, and file locking are all native (no curl/wget/flock/getent).
  • Signed self-upgrade. sudo linux-temp-admin upgrade downloads over HTTPS and verifies a detached ed25519 signature against a public key embedded in the binary before installing — it fails closed on any mismatch.
  • Clean break from v1. v2 keeps its own state under /var/lib/linux-temp-admin/v2/ and does not adopt v1 state. The bash tool remains available as v1.x maintenance.

Install

curl -fsSL https://raw.githubusercontent.com/xxvcc/linux-temp-admin/main/scripts/install.sh | sudo sh

The bootstrap downloads over HTTPS and verifies the SHA-256 checksum before installing. Later upgrades (sudo linux-temp-admin upgrade) are ed25519-signature-verified in-process.

Verify the download

sha256sum -c SHA256SUMS

Both binaries are statically linked and ship a detached .sig (raw 64-byte ed25519) that chains to the public key embedded in the binary.

Assets

  • linux-temp-admin-linux-amd64 (+ .sig)
  • linux-temp-admin-linux-arm64 (+ .sig)
  • SHA256SUMS