mirror/gost

Fork 0

mirror of https://github.com/go-gost/gost.git synced 2026-10-08 03:55:45 +00:00

Commit Graph

Author	SHA1	Message	Date
ginuerzh	c4e789e2df	fix(release): pin capability bounding set in gost.service CapabilityBoundingSet= was dropped when CAP_NET_ADMIN was added for TUN, which leaves the bounding set unrestricted. Pin it to the capabilities the unit actually needs. Restore ~@privileged as well: TUN uses ioctl(TUNSETIFF) and netlink, neither of which is in that group.	2026-09-21 21:03:43 +08:00
iBug	2a6ba4df85	Add DEB and RPM packages for easier installation (#906 ) * Add systemd service file * Add DEB and RPM packages for amd64, amd64v3 and arm64 architectures * Remove GOMEMLIMIT from systemd service * Fix packaged systemd service defaults	2026-09-21 21:01:26 +08:00

Author

SHA1

Message

Date

ginuerzh

c4e789e2df

fix(release): pin capability bounding set in gost.service

CapabilityBoundingSet= was dropped when CAP_NET_ADMIN was added for TUN,
which leaves the bounding set unrestricted. Pin it to the capabilities the
unit actually needs. Restore ~@privileged as well: TUN uses ioctl(TUNSETIFF)
and netlink, neither of which is in that group.

2026-09-21 21:03:43 +08:00

iBug

2a6ba4df85

Add DEB and RPM packages for easier installation (#906 )

* Add systemd service file

* Add DEB and RPM packages for amd64, amd64v3 and arm64 architectures

* Remove GOMEMLIMIT from systemd service

* Fix packaged systemd service defaults

2026-09-21 21:01:26 +08:00