PlakarKorp/plakar v1.1.5 on GitHub

Security

refuse to open an unencrypted Kloset store unless PLAKAR_INSECURE_PLAINTEXT is set in the environment
plugins are signature-checked at install time; plakar pkg add -allow-unsigned opts out
sync: the peer passphrase is no longer handed down to the peer store connector
fs exporter: confine restores to the target directory
http store: auth_token over plaintext HTTP now requires insecure=true, https->http redirects are rejected, plus assorted protocol hardening
ptar over http hardening

plakar server: -token requires clients to present an Authorization Bearer token; requests are now logged
plakar pkg add / plakar pkg show: -devel to use the integration devel tree
http and https stores: new auth_token, insecure, timeout and tls_no_verify options, documented in plakar-store(1)

backup: report the real cause of a failure when a packfile temporary file cannot be created (e.g. a full /tmp) instead of a bare cancellation
fs importer: open files with O_NONBLOCK so a FIFO no longer stalls a backup
fs exporter: restore file permissions, fix hardlink restoration
tar exporter: don't hand hard-link names over as symlink targets
ls: display the uid/gid recorded in the snapshot instead of resolving them against the local system
mount: set a valid modification time on the root directory
config: reject invalid configuration names
ui: browsing works again on cold-storage (Glacier) repositories, and unreadable entries are flagged as such
ui: login rate limiting from the auth API is reported as 429
cookies: removing the disabled-security-check no longer fails when it isn't there
grpc integration: fix error reporting in Import() and Export(); serialize the context Flags field on the wire; support custom metadata
make install: fix installation of manpages