• v0.5.5 44a2212abe

    mward4 released this 2026-06-03 11:49:37 -04:00 | 21 commits to main since this release

    OpenPXE v0.5.5 — SFTP-over-SSH remote shares

    Adds SFTP as a third remote ISO-library protocol alongside SMB and NFS.

    docker pull gitea.milesward.dev/mward4/openpxe:0.5.5   # or :latest
    

    What's new

    • SFTP remote shares — point OpenPXE at an SSH/SFTP server and boot ISOs straight off it. Pure-Rust (russh + russh-sftp, ring crypto backend): no kernel mount, no subprocess, no OpenSSL, no new C dependencies.
    • HTTP Range support — like NFS (and unlike SMB), SFTP-sourced ISOs support byte-range reads (the SFTP file handle seeks), so kernel/initrd extraction and httpdisk range requests work.
    • Auth — password or SSH private key (optional passphrase). The server's SSH host key is pinned trust-on-first-use; a changed key is refused with a clear warning.
    • UI — "SFTP (SSH)" added to the Remote shares protocol dropdown with a password/key toggle and host-key fingerprint display. Plus sftp terminal commands (list/add/remove/scan) and /api/sftp-shares.

    Why not SCP

    SCP is sequential-only (no random access → no HTTP Range, unlike SFTP/NFS), and the mature Rust SCP crates wrap libssh2 (C + OpenSSL), which would break the static-musl, OpenSSL-free build.

    Notes

    • russh is pinned to =0.55.0 — the newest release that coexists with the SAML crypto stack (bergshamra-crypto pins RustCrypto release-candidate crates that conflict with russh 0.61's stable ones). Functionally identical; ring-backed, OpenSSL-free.
    • Static x86_64-unknown-linux-musl binary; 252 tests pass, clippy clean.
    Downloads