Start9Labs/start-technologies start-cli/v2.5.0

start-cli v2.5.0

on GitHub

start-cli 2.5.0 signs requests and registry assets with an updated scheme, can keep its identity key in gpg-agent, and manages trusted OS update signers and per-gateway DNS.

Highlights

• The identity key can live in gpg-agent. Set id-key-gpg: <key> in the config (or pass --id-key-gpg) to sign with an Ed25519 key held by gpg-agent instead of id.key.pem. Requires GnuPG 2.3 or later.
• Requests and registry signatures use an updated scheme. Signatures made with id.key.pem carry their own Ed25519ph label.
• Manage trusted OS update signing keys with server update-signers.
• Set DNS overrides per gateway with net dns set-static <GATEWAY> [SERVERS]...; omit servers to restore automatic gateway DNS.
• package start records running intent while critical tasks block execution and prints a warning. The service starts automatically once those tasks clear.
• Complete start-cli commands, nested subcommands, and options with Tab in new Bash shells, without editing a shell profile.
• Dependencies are updated with security fixes, including TLS certificate verification and handshake handling, HTTP/2 flow control, and XML parsing.

Full changelog for v2.5.0 — every change in this release.

Important

• Managing a server or publishing to a registry requires StartOS 0.4.0.3, StartTunnel 1.4.0, or start-registry 1.2.0 or later. Reading from older registries still works.
• Servers running StartOS 0.4.0.3 or earlier cannot verify registry assets signed only by a gpg-agent key.
• package start --force is removed. Remove --force from scripts.

start-cli Checksums

SHA-256

54d66d0c43f98276b82f2a5fbd8972ace2a6c5cdb3613f4f09a3723cfbbb1ad0  start-cli_aarch64-linux
e313d9ebeba2784266b5f301b100b0b9621e59aad09420f55b9295cee4d0406a  start-cli_aarch64-macos
d00543f7b51dac30140d2517238757ef76a954d96fbdab30375f5de8fb282ecb  start-cli_riscv64-linux
023f410cbad4b2971cb6ccdac117aaa27d80cc48eef52212a6f3755697962294  start-cli_x86_64-linux
0b2767bea91d398a74c4e7e00a9fe401a19a0b20fe9602eaa93f7a6e15685468  start-cli_x86_64-macos

BLAKE-3

84a3923dd49bdd1af039fcb4dba34fcd89e10e22b5be3464a9569e976e7f337c  start-cli_aarch64-linux
585c6c1f1a4601c36d5ad385cc0a511fd39404d0284174226768bbc88c1b7715  start-cli_aarch64-macos
cfde4041bdd0b26883507320165dbfe5bfae708da48cd1582d988f6f627e429a  start-cli_riscv64-linux
11a5d5086ec15e4f1929da282d4995024257d4a23f8a945528efcd743dd8cf9a  start-cli_x86_64-linux
3cf5e538503c7b8dc8423134a2d2ebca1124f521f360f5f0f1f15e6714cac524  start-cli_x86_64-macos

start-cli packages Checksums

SHA-256

8562171687e9c63b9a103d5ea79ac0ee8d37c0bfe3956f3b765f1253700138bd  start-cli_2.5.0_amd64.deb
581f0de4d8006c7d0ca62a9d3303fc11f2b4e6fb9a68685f33592dd4d21d2867  start-cli_2.5.0_arm64.deb
7ca2a07a255d4deec1c32ffb920b1c6e15440b9629ed5513e331aba6a4c66804  start-cli_2.5.0_riscv64.deb

BLAKE-3

8e5fe80d7a029c787dc64503454f26a1615c3af47a00f479ce394c0d5083166c  start-cli_2.5.0_amd64.deb
62c37544dacec7e4f1d2fcd29b2b3c3af0c7dc5ec823b7bc87232acc78f3827c  start-cli_2.5.0_arm64.deb
de26d174e597375090ff5d8d6ef177c587731adcaf05682ec51d33201dfbe9b3  start-cli_2.5.0_riscv64.deb