Ghost FTP 0.99.32 — Windows/Linux secure sessions and native performance (Preview)
Last published edition: v0.99.31. This is a proposed new development Preview; v0.99.31 assets, source tags and checksums remain immutable.
Functional and security changes under review
- The Windows/Linux Files screen now reflects the real backend session health: unhealthy connections show a warning rather than an incorrect green secure-connection badge; unknown and checking sessions remain neutral.
- Quick Connect does not preserve the submitted plaintext password in React input state after success or failure. Server identities and transfers remain real, not concept-image placeholders.
- Grant connections resolve a public issuer address once and use a direct, no-proxy HTTP client. The one-time grant token is not sent via an external proxy. Both manifest and key-install response streams enforce a byte limit even when Content-Length is absent or misleading.
- Imported grant hosts reject control characters, userinfo, URL/path delimiters, excessive lengths and invalid login ports, with focused native Rust tests.
- Windows/Linux status clock no longer wakes up each second in a hidden/minimized desktop window, reducing idle CPU and background activity.
Validation and limitations
The exact pull-request head must pass TypeScript, Rust tests, native Windows MSI/NSIS, native Linux DEB/RPM/AppImage, Android, macOS and protocol E2E checks before merge. This work does not certify 1:1 pixels against all 59 Windows/Linux concept screens or every UI action on physical devices. FTP remains unencrypted; Linux Secret Service locked/missing-session scenarios and installer upgrades need target-device testing. The existing Linux distribution matrix specifies supported package families and excludes unverified distributions and CPU architectures.
Linux installation: choose the correct Ghost FTP package
Platform: Linux x86_64 / amd64. These are package-family labels, not
certifications that every distribution/version has been tested. The native
Windows/Linux build currently runs on an Ubuntu 22.04 x86_64 GitHub runner;
installed-device checks across other distributions remain required.
| Linux edition in GitHub Releases | Intended distribution / installation family | Important prerequisite |
|---|---|---|
GhostFTP-Linux-amd64-v<VERSION>.deb
| Debian, Ubuntu, Linux Mint, Pop!_OS, and compatible Debian-family amd64 systems | APT/dpkg dependencies, WebKitGTK 4.1 and compatible GTK/GLib; test on the target distro release. |
GhostFTP-Linux-x86_64-v<VERSION>.rpm
| Fedora, openSUSE, RHEL-compatible RPM-based x86_64 systems | RPM runtime dependencies, WebKitGTK and GTK availability differ. Package format alone does not prove the build launches. |
GhostFTP-Linux-x86_64-v<VERSION>.AppImage
| Portable / cross-distribution candidate for many glibc-based x86_64 desktop systems | Check FUSE/AppImage runtime, compatible glibc, WebKitGTK/GTK libraries and display server. Not guaranteed universal. |
GhostFTP-Linux-x86_64-v<VERSION> / .tar.gz
| Manual / advanced installation on compatible x86_64 desktop Linux | Not statically linked; administrators must supply all system runtime dependencies and desktop integration. |
Replace <VERSION> with the exact published tag number. Verify
GhostFTP-v<VERSION>-SHA256SUMS.txt before executing installers. A SHA-256
checksum only verifies integrity against that manifest; it does not prove
publisher identity or replace a cryptographic code signature.
No native package is currently built for Linux ARM64/aarch64,
32-bit x86, musl-only Alpine, or every NixOS/immutable-container configuration.
Arch Linux, Manjaro, EndeavourOS, Gentoo, elementary OS and others may be
candidates for AppImage/manual installation, but are not certified based
solely on an Ubuntu runner. Check compatible dependencies first; do not force a
Debian RPM/DEB package onto an unrelated distribution. On Wayland systems,
GTK/WebKit or XWayland availability can affect behavior.
Required acceptance before claiming distribution support
For each distribution and version named as tested, record its exact image
version, x86_64 architecture, display protocol (X11/Wayland), WebKitGTK/GTK
versions, GNOME Keyring/KWallet state, and the native binary hash. Verify:
- Install, first launch, File Manager/Sites/Transfers/Settings/Sync navigation,
resize at 1290×852 and 480×600, and correct keyboard focus. - FTP warning, verified FTPS TLS and SFTP SSH host-key checks on actual
endpoints; failed identity checks must not connect. - Queue retry/cancel, interrupted upload/download preservation, symlink and
overwrite safety, and shutdown/restart without losing profile metadata. - OS-backed credentials with locked and unavailable Secret Service; no
plaintext fallback or secret-bearing logs. - Uninstall and reinstall without silently deleting stored user documents,
connection profiles, or keys.
Current GitHub Actions Linux QA produces real Xvfb/WebKit screenshots of
seven core workspaces, not mockups. Those captures prove native rendering under
the CI environment; they do not certify a GNOME/KDE/Wayland distro or pixel
parity with all 29 user-supplied Linux design references.
Related: Linux handbook ·
Native desktop build ·
Published releases.