texd

Changelog

• 68544a605984d4e70dd9eb08b0c7e8acac10b92c Update dependencies

Changelog

• b3ddd90 update dependencies

Maintenance release.

This includes a security fix for CVE-2023-39325 (moderate severity, see
advisory).

You should not be affected if you operate texd behind a reverse proxy (however
the reverse proxy may be affected, if it happens to be written in Go as well,
like Caddy or Træfik).

Otherwise, this contains no new features, only dependency updates.

Maintenance release.

(No new features, only dependency updates.)

Going forward, we're using Github Packages for the Docker images.

To migrate, pull ghcr.io/digineo/texd instead of digineode/texd, for example:

$ docker pull ghcr.io/digineo/texd:v0.6.0

Maintenance release. An update is strongly recommended.

(No new features, only dependency updates.)

Contains a security fix for CVE-2022-41723 (GHSA-vvpx-j8f3-3w6h).

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

This release adds a Memcached adapter for the reference store.

To use this adapter, start your texd instance like so:

$ texd [other options] --reference-store=memcached://cache.example.com:11211

To use this adapter in a Docker container, you need to make sure texd and Memcached operate on the same network. Use this Docker Compose file as guidance:

version: '3'

services:
  texd:
    image: digineode/texd:latest
    command: --reference-store=memcached://memcached:11211?expiration=5s
    depends_on:
      - memcached
    ports:
      - 127.0.0.1:2201:2201
    links:
      - memcached

  memcached:
    image: memcached:1-alpine
    command: memcached -m 16 -vv

See Go docs for supported features of this adapter.

This release adds a retention policy to the reference store, which allows to (optionally) keep the size of the stored files within limits. From the README:

texd supports three different retention policies:

1. keep (or none) will keep all file references forever. This is the default setting.
2. purge-on-start (or just purge) will delete file references once on startup.
3. access will keep an access list with LRU semantics, and delete file references, either if
   a max. number of items is reached, or if the total size of items exeedes a threshold, or both.

To select a specific retention policy, use the --retention-policy CLI flag:

$ texd --reference-store=dir://./refs --retention-policy=purge

To configure the access list (--retention-policy=access), you can adopt the quota to your needs:

$ texd --reference-store=dir://./refs \
    --retention-policy=access \
    --rp-access-items=1000 \
    --rp-access-size=100MB

Notes:

• The default quota for the max. number of items (--rp-access-items) is 1000.
• The default quota for the max. total file size (--rp-access-size) is 100MB.
• Total file size is measured in bytes, common suffixes (100KB, 2MiB, 1.3GB) work as expected.
• To disable either limit, set the value to 0 (e.g. --rp-access-items=0).
• It is an error to disable both limits (in this case just use --retention-policy=keep).

Changelog

• 6e8ace2 prepare v0.3.0 release

Changelog

• 94faec6 add metrics

Changelog

• 920f779 docs: describe reference store

Changelog

• a257971 move HTTP middleware

Changelog

• d165cd1 move repositories
• b082a5f docs: fix typo
• cbf2518 docs: add related work