From 28f6319b77d35c6da6b99ad7e35d0d5602dc2ee6 Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Fri, 10 Apr 2026 18:03:29 +0300
Subject: Fix known-hosts trust deadlock, host key stat, and optional nozstd
 build

- stdout logger: release mutex while waiting on pause resume so prompt
  callbacks can log (fixes hang after trusting new hosts; known_hosts
  was written but Resume never ran).
- known hosts callback: stop borrowing the SSH dial throttle channel
  (could block or interact badly with parallel handshakes).
- host key path: use errors.Is(..., fs.ErrNotExist) for RootedPath.Stat
  wrapped errors; stat errors now fail fast instead of mis-read.
- public key path: same ErrNotExist check for authorized_keys miss.
- Build: optional DTAIL_NO_ZSTD=yes / nozstd tag for CGO-free builds;
  split zstd readers into tagged files.
- Docs/examples: firewalld note for port 2222, log prune timer+script,
  SSHBindAddress note, dserver unit disabled-by-default comment;
  firewalld helper script example.
- Regression test for stdout pause/mutex behavior.

Made-with: Cursor
---
 examples/dserver-prune-logs.timer.example | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 examples/dserver-prune-logs.timer.example

(limited to 'examples/dserver-prune-logs.timer.example')

diff --git a/examples/dserver-prune-logs.timer.example b/examples/dserver-prune-logs.timer.example
new file mode 100644
index 0000000..2ec13b6
--- /dev/null
+++ b/examples/dserver-prune-logs.timer.example
@@ -0,0 +1,9 @@
+[Unit]
+Description=Daily cleanup of dserver logs older than 7 days
+
+[Timer]
+OnCalendar=daily
+RandomizedDelaySec=1800
+
+[Install]
+WantedBy=timers.target
-- 
cgit v1.2.3