SFTP

Fixes

• The posix-rename@openssh.com check now runs on the first write to a store instead of when connecting. Stores on read-only OpenSSH servers, which do not advertise the extension, can be read from again.

New

• The destination connector accepts a skip_permissions option to restore without setting permission bits.

Improvements

• A store checks for the posix-rename@openssh.com extension when connecting and fails early if the server does not support it.
• Restores use posix-rename when the server supports it, so existing files are replaced atomically.

Fixes

• With set_owner, restored files are given their owner before their mode, so setuid and setgid bits are no longer cleared.

Security

• Restores verify that every path stays inside the restore root.
• Stores enforce 0700 permissions on Kloset subdirectories.
• The new host_key option verifies the server against a given host key entry.

Improvements

• Restores of large files are faster, using concurrent transfers.
• The SSH control socket is created in XDG_RUNTIME_DIR, or in the user’s local cache directory.
• The integration was reworked and simplified.

Fixes

• Cancellation errors are reported correctly.
• Failures to start the SSH master connection are reported, along with the command that was attempted.

New

• The set_owner option sets the owner and group of restored files on the server.

Fixes

• On Windows, the integration no longer depends on SSH multiplexing or an authentication socket.
• Hardlinks are created correctly on restore.
• Restores no longer fail when creating the restore root.
• The dont_traverse_fs check was removed, since it cannot be implemented over SFTP.

Fixes

• Backups record the user and group IDs of each file.