1.17

• built on Go 1.18.2 (+ golang/go@2c7c98c), github.com/moby/sys/user 0.1.0;
  see SECURITY.md for CVE/security advice
• swap from runc's library to the new github.com/moby/sys/user which is a faithful, history-preserving lift-and-shift of the same code (#134)
• also explicitly block setgid, even though that vector is a lot smaller (#129)

4096R / B42F 6819 007F 00F8 8E36 4FD4 036A 9C25 BF35 7DD4

See INSTALL.md for (example) installation instructions.

1.16

• built on Go 1.18.2 (+ golang/go@2c7c98c), runc 1.1.0; see SECURITY.md for CVE/security advice
• fixed mips64le builds (#121)

4096R / B42F 6819 007F 00F8 8E36 4FD4 036A 9C25 BF35 7DD4

See INSTALL.md for (example) installation instructions.

1.15

• built on Go 1.18.2, runc 1.1.0, Alpine 3.14
• added SECURITY.md with CVE/security advice (#120)

4096R / B42F 6819 007F 00F8 8E36 4FD4 036A 9C25 BF35 7DD4

See INSTALL.md for (example) installation instructions.

Note: the mips64le builds here are affected by golang/go#56426, which isn't actually fixed until Go 1.20+ (not GA as of the time of this release 😩)

1.14

• built on Go 1.16.7, runc 1.0.1, Alpine 3.14
• explicitly disavow/disallow horribly insecure setuid installations (#89)

4096R / B42F 6819 007F 00F8 8E36 4FD4 036A 9C25 BF35 7DD4

See INSTALL.md for (example) installation instructions.

1.13

• built on Go 1.16.5, runc 1.0.0-rc95, Alpine 3.13
• added riscv64 support
• re-licensed to Apache-2.0 (#83)

4096R / B42F 6819 007F 00F8 8E36 4FD4 036A 9C25 BF35 7DD4

See INSTALL.md for (example) installation instructions.

1.12

• built on Go 1.13.10, runc 1.0.0-rc10, Alpine 3.11
• added mips64le support (#69)
• dropped ppc64 support (not to be confused with ppc64le)

4096R / B42F 6819 007F 00F8 8E36 4FD4 036A 9C25 BF35 7DD4

See INSTALL.md for (example) installation instructions.

1.11

• built on Go 1.11.1, runc 1.0.0-rc5, Alpine 3.8
• added explicit --version and --help flags (#44)

4096R / B42F 6819 007F 00F8 8E36 4FD4 036A 9C25 BF35 7DD4

See INSTALL.md for (example) installation instructions.

1.10

• built on Go 1.7 (#25)
• official s390x release binary (#28)
• slightly simpler usage output

4096R / B42F 6819 007F 00F8 8E36 4FD4 036A 9C25 BF35 7DD4

$ arch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"
$ wget -O gosu "https://github.com/tianon/gosu/releases/download/1.10/gosu-$arch"
$ chmod +x gosu
$ ./gosu
Usage: gosu user-spec command [args]
   ie: gosu tianon bash
       gosu nobody:root bash -c 'whoami && id'
       gosu 1000:1 id

gosu version: 1.10 (go1.7.1 on linux/amd64; gc)
     license: GPL-3 (full text at https://github.com/tianon/gosu)

1.9

• fix cross-compilation of official binaries (#19)

4096R / B42F 6819 007F 00F8 8E36 4FD4 036A 9C25 BF35 7DD4

$ arch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"
$ wget -O gosu "https://github.com/tianon/gosu/releases/download/1.9/gosu-$arch"
$ chmod +x gosu
$ ./gosu
Usage: ./gosu user-spec command [args]
   ie: ./gosu tianon bash
       ./gosu nobody:root bash -c 'whoami && id'
       ./gosu 1000:1 id

./gosu version: 1.9 (go1.6.2 on linux/amd64; gc)

1.8

• build against Go 1.6
• add -s and -w to -ldflags so that release binaries are even smaller (~2.6M down to ~1.8M)
• add simple integration test suite

4096R / B42F 6819 007F 00F8 8E36 4FD4 036A 9C25 BF35 7DD4

$ curl -o gosu -fsSL "https://github.com/tianon/gosu/releases/download/1.8/gosu-$(dpkg --print-architecture)"
$ chmod +x gosu
$ ./gosu
Usage: ./gosu user-spec command [args]
   ie: ./gosu tianon bash
       ./gosu nobody:root bash -c 'whoami && id'
       ./gosu 1000:1 id

./gosu version: 1.8 (go1.6.1 on linux/amd64; gc)

Update: binaries had to be pulled; for details, see #19 (and 1.9)