Plakar

Security

• Plakar refuses to open an unencrypted Kloset store unless PLAKAR_INSECURE_PLAINTEXT is set in the environment.
• Plugins are signature-checked at install time. Pass plakar pkg add -allow-unsigned to opt out.
• sync no longer hands the peer passphrase down to the peer store connector.
• The fs exporter confines restores to the target directory.
• The HTTP store now requires insecure=true before it will send auth_token over plaintext HTTP, and it rejects https to http redirects. Assorted other protocol hardening landed alongside it.
• ptar over HTTP was hardened.

New

• plakar server -token requires clients to present an Authorization: Bearer token. Requests are now logged.
• plakar pkg add and plakar pkg show accept -devel to use the integration devel tree.
• The http and https stores accept new auth_token, insecure, timeout and tls_no_verify options, documented in plakar-store(1).

Fixes

• backup reports the real cause of a failure when a packfile temporary file cannot be created, a full /tmp for instance, instead of a bare cancellation.
• The fs importer opens files with O_NONBLOCK, so a FIFO no longer stalls a backup.
• The fs exporter restores file permissions, and hardlink restoration is fixed.
• The tar exporter no longer hands hard-link names over as symlink targets.
• ls displays the uid and gid recorded in the snapshot instead of resolving them against the local system.
• mount sets a valid modification time on the root directory.
• config rejects invalid configuration names.
• The UI browses cold-storage (Glacier) repositories again, and flags unreadable entries as such.
• The UI reports login rate limiting from the auth API as a 429.
• Removing the disabled-security-check cookie no longer fails when it is not there.
• The gRPC integration reports errors correctly in Import() and Export(), serializes the context Flags field on the wire, and supports custom metadata.
• make install installs the manpages correctly.