• v2.2.5+rs.1 2639d353ab

    portal-tunnel-rs v2.2.5+rs.1
    All checks were successful
    Rust CI / Format, lint, and test (push) Successful in 40s
    Build and publish container image / Build linux/arm64 image (push) Successful in 3m36s
    Stable

    ada released this 2026-06-01 01:05:36 +00:00 | 3 commits to master since this release

    Summary

    Retargets portal-tunnel-rs to upstream portal-tunnel v2.2.5 and publishes the first Rust relay build for this upstream target.

    Changes

    • Retargeted workspace/release metadata and compatibility defaults to upstream v2.2.5.
    • Hardened relay identity directory setup for non-root containers with pre-owned bind mounts.
    • Installed the rustls ring crypto provider explicitly at startup to avoid rustls 0.23 provider-selection panic when both ring and aws-lc-rs are present in the dependency graph.

    Verification

    • PR CI passed:
      • #75 retarget: pull_request #105, post-merge #106
      • #76 identity directory hardening: pull_request #108, post-merge #109
      • #77 rustls provider fix: pull_request #111, post-merge #112
    • Dev deploy trail:
      • v2.2.5+rs.1-dev.1: image built, live gate failed on non-root chmod.
      • v2.2.5+rs.1-dev.2: image built, live gate advanced to rustls CryptoProvider panic.
      • v2.2.5+rs.1-dev.3: image built from the same revision as this release and live-verified.
    • Verified dev image:
      • Git tag: v2.2.5+rs.1-dev.3
      • Revision: 2639d353abdff3baecfbdd9f3d635a672405309d
      • Image: code.rly.best/gofix/portal-tunnel-rs:v2.2.5-rs.1-dev.3
      • Live relay reported release_version = v2.2.5+rs.1-dev.3.
      • Official upstream v2.2.5 CLI HTTP smoke passed against the live relay SNI path.

    Production artifact

    • Git tag: v2.2.5+rs.1
    • Revision: 2639d353abdff3baecfbdd9f3d635a672405309d
    • Image: code.rly.best/gofix/portal-tunnel-rs:v2.2.5-rs.1
    • Digest: sha256:1139c43540f6f7127b34f5122f1cfe3c02a50ef68825b3bf7c9983eb68d613b5

    Deployment

    • Deployed production image to the live relay.
    • Sanity check passed: /healthz is OK and /sdk/domain reports release_version = v2.2.5+rs.1 with protocol version 7.

    Compatibility

    • Upstream target: portal-tunnel v2.2.5.
    • Live verification covered the supported HTTP expose path with the official v2.2.5 client. TCP/UDP are disabled in the current live environment configuration and were not exercised in production sanity.
    Downloads