Skip to content

Releases: mhogomchungu/sirikali

1.4.4

01 Jun 04:46
Compare
Choose a tag to compare
The signing key can be retrieved with below command:

gpg --recv-keys 0x6855E493B5B2DF96E319BB6D16E2E1ACC6F51242

CHANGELOG:

    [WINDOWS]
-- Add support for storing keys securely on Windows by using Window's Data Protection API.

    [LINUX][FSCRYPT]
-- Fix a bug that causes fscrypt folders paths that contain a space character from showing
    up in the GUI.
-- Prevent fscrypt error when creating a new volume with an already taken protector name
    by making sure we are using a unique protector name.
-- Add a GUI option to set protector's name  when creating fscrypt volume.
-- Add a GUI option to choose between using a custom passphrase,login passphrase or 
   a key file when creating fscrypt volume.
-- Add support for fscrypt keyfile.

    [ALL][ENCFS]
-- Fix a bug with encfs < 1.9.5 when used with custom config path location. SiriKali 
    will now pass the path through enviromental variable instead of
    using --config CLI option.

    [ALL][SECUREFS]
-- Add support for securefs key file(introduced in securefs version 0.11.1).

    [ALL]
-- Rework UI and move key management feature from settings windows to favorites window.

1.4.3

01 Apr 07:06
Compare
Choose a tag to compare

The signing key can be retrieved with below command:

gpg --recv-keys 0x6855E493B5B2DF96E319BB6D16E2E1ACC6F51242

Changelog
-- Add ability to set arbitrary folder paths to monitor for mount events.
-- Add ability to monitor gvfs mount events.
-- Fix a bug that prevented unlocking volumes with a path that contains "," character. 
    The bug was due to fuse using the character as an option separator.
-- Fix a bug that prevented recent versions of unlocked securefs from showing up
    in the GUI in MACOS.
-- Add a GUI option to "allow replaced file system" when creating/unlocking CryFS volume.
-- Set the option "--allow-replaced-filesystem" by default when creating a CryFS volume.
-- When dealing with CryFs volume in windows, do not support paths that are not in drive C
    to work around this bug: https://github.com/cryfs/cryfs/issues/319
-- Fix a breaking change in how fscrypt 0.2.7 reported its version info.

1.4.2

18 Dec 04:25
Compare
Choose a tag to compare
-- Assume passwords are utf8 encoded instead of latin-1. This is a breaking change 
   for those who were using a password that was not a valid latin-1 password.
-- Fix a crash on windows when an sshfs favorite entry is created with a remote 
   folder path of just ":/", example is a remote address of "abc@example:/".
-- Add a visible option to choose between creating a local drive or a network drive 
   when connecting to ssh server on windows.
-- Inforce a requirenment that says Sshfs-win should be atleast version 3.4.0.
-- Add support for "lock" command in fscrypt backend. This option is used for
   locking directories that use V2 encryption policies.

1.4.1

15 Oct 13:07
Compare
Choose a tag to compare
-- Add support for fscrypt backend. This backend will allow encrypting individual
   folders that reside in a file system that supports native encryption like ext4. 
   More info about this backend is here: https://github.com/google/fscrypt
-- Fix a bug with sshfs backend introduced in 1.4.0.
-- Various changes and improvements.

Notes on Fscrypt
SiriKali locks fscrypt encrypted directories using "--drop-caches=false"
option. More explanation about this option is here[1]. It is strongly advised to
unmount a file system after locking an encrypted directory.

Currently, fscrypt does not lock an unlocked directory but locks a file system that
hosts the unlocked directory. A recently locked directory on a file system that was not
umounted after the locking took place will probably leak a good amount of folder
content and this is why it is strongly advised to unmount a file system after a directory
is locked.

Fscrypt will work "as expected" when this[2] pull request is accepted and the version
of the kernel in use is >= 5.4

[1] https://github.com/mhogomchungu/sirikali/issues/122#issuecomment-540980754

[2] https://github.com/google/fscrypt/pull/148

  Downloads, 
  -- Arch linux users can get the latest version from: 
      https://aur.archlinux.org/packages/sirikali/

  -- Gentoo users can get the latest version from: 
      https://git.holgersson.xyz/foss/holgersson-overlay

1.4.0

01 Oct 05:30
Compare
Choose a tag to compare
changelog:
-- Make it buildable again on Qt < 5.10.0(1.3.9 broke this promise because 
    it should be buildable in debian 8)
-- Add a config option to show favorites entries on the tray icon context menu 
    with an ability to mount/unmount volume from the menu.
-- Fix a bug that prevented favorite entries with cipher path that starts with a dot 
   from showing up in the GUI.
-- Add GUI options to enable HiDPI option to scale the GUI when running 
   in HiDPI displays.

  Downloads, 
  -- Arch linux users can get the latest version from: 
      https://aur.archlinux.org/packages/sirikali/

  -- Gentoo users can get the latest version from: 
      https://git.holgersson.xyz/foss/holgersson-overlay

1.3.9

01 Aug 09:14
Compare
Choose a tag to compare
-- Add ability to run a custom command on user specified time interval.
-- Add ability to set premount, postmount, preunmount and postunmount 
    commands to run per favorite entry.
-- Add support for creating and unlocking volumes using yubikey's
    challenge-response feature.
-- Add ability to run user created custom backends/extensions. 
    This feature make it possible to configure SiriKali
    to run any tool that deals with mounting file systems. 
    Documentation on how to create a custom backed is
    here: 
    https://github.com/mhogomchungu/sirikali/wiki/How-to-create-SiriKali-custom-backend
-- Fix an occassional crash that happens when creating an internal wallet 
    when an internal version of lxqt_wallet is in use.

1.3.8

01 May 05:19
Compare
Choose a tag to compare
-- Remove backend timeout of 20 seconds because cryfs >= 0.10.0 may 
    take a very long time to finish.
-- Show a warning that says working with cryfs >= 0.10.0 may take a very 
    long time when creating/unlocking cryfs volumes.
-- Improves a window that manages favorites.

1.3.7

09 Feb 10:57
Compare
Choose a tag to compare
-- Add support for gocryptfs "idle" option.
-- Add ability to set a favorite volume that does not need a password. Useful when
   connecting to ssh server with a private key that does not need a password or 
   when getting credentials from external tools like keepass.
-- Add a config option to auto unmount volumes on logout(specifically, when SiriKali 
    receive sighup or sigterm).
-- Add Russian translations.
-- Fix a bug that prevented mounting gocryptfs volumes on MACOS.
-- Translations now works on MACOS.
-- Add support for Cryfs backend on windows.
-- Add support for using a mount folder on windows
    (sshfs, encfs and cryfs supports both mount folders and drive letters)

1.3.6

01 Oct 04:57
Compare
Choose a tag to compare

changelog
-- Add ability to pass both fuse options and options specific to backends when unlocking a 
    volume.
     -- For example, this ability will allow passing "--allow-filesystem-upgrade" option to 
         cryfs backend when unlocking a cryfs volume to automatically upgrade the 
         volume's file system when necessary.
-- Add a GUI way to create and unlock gocryptfs and encfs volumes in reverse mode.
-- Fix a bug in windows that allowed more than once instance to run.
-- Create drive letters on Windows with a label equals to the name of the cipher folder when
    unlocking volumes.

1.3.5

01 Aug 06:27
Compare
Choose a tag to compare
Important: The archive is signed with a new key because the old one uses SHA1
and some distributions no longer supports it. The new SHA2 and can be
imported with the following command:

gpg --recv-keys 0x6855E493B5B2DF96E319BB6D16E2E1ACC6F51242

changelog:
-- Add "-DPOLKIT_SUPPORT=" compile time option to disable polkit support. 
    Suid root-less ecryptfs-simple backend will not work if this option is turned off.
-- Fix a bug on windows that prevented SiriKali from seeing 64 bit sshfs-win.
-- Add ability to edit favorites entries.
-- Fix a bug on windows when unlocking securefs volume with a custom config path.

Supported backends on Linux:
1. Encfs
2. Securefs
3. Gocryptfs
4. Cryfs
5. Sshfs
6. Ecryptfs

Supported backends on MACOS
1. Encfs
2. Cryfs
3. Gocryptfs
4. Securefs

Supported backends on Microsoft Windows
1. Encfs[1]
2. Securefs
3. Sshfs

[1] https://github.com/mhogomchungu/encfs/releases/tag/1.9.5