Andy Dixon
50c0104d57
clients::rdp connects over any caller-dialled TCP stream (direct, proxy or SSH tunnel), upgrades to TLS and logs on with NLA (CredSSP/NTLM), optionally falling back to TLS-only logon for servers without NLA such as xrdp (credentials are passed so they log straight in). The server certificate is pinned through a caller check on its SHA256 fingerprint before any credentials are sent. The desktop decodes into the VNC client's RGBA framebuffer; input (IronRDP's scancode/Unicode/mouse operations), Display Control resizes and the deactivation-reactivation sequence run on the session thread. IronRDP's releases need three vendored patches (vendor/README.md): picky and sspi with their RustCrypto release-candidate pins relaxed so they share russh's stable versions (their own suites, 402 tests, pass against them), and ironrdp-session with two unreleased upstream bitmap fixes (#1486 stride, #1524 RDP6 orientation) without which xrdp desktops render sheared. Verified live against xrdp (scottyhardy/docker-remote-desktop): logon, full desktop rendering, keyboard and mouse input.
62 lines
1.4 KiB
YAML
62 lines
1.4 KiB
YAML
name: Release crates
|
|
|
|
permissions:
|
|
pull-requests: write
|
|
contents: write
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
push:
|
|
branches:
|
|
- master
|
|
|
|
jobs:
|
|
# Create a PR with the new versions and changelog, preparing the next release.
|
|
open-pr:
|
|
name: Open release PR
|
|
environment: cratesio-publish
|
|
runs-on: ubuntu-latest
|
|
concurrency:
|
|
group: release-plz-${{ github.ref }}
|
|
cancel-in-progress: false
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v6
|
|
with:
|
|
fetch-depth: 512
|
|
|
|
- name: Run release-plz
|
|
id: release-plz
|
|
uses: Devolutions/actions-public/release-plz@v1
|
|
with:
|
|
command: release-pr
|
|
git-name: Devolutions Bot
|
|
git-email: bot@devolutions.net
|
|
github-token: ${{ secrets.DEVOLUTIONSBOT_WRITE_TOKEN }}
|
|
|
|
# Release unpublished packages.
|
|
release:
|
|
name: Release crates
|
|
environment: cratesio-publish
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
id-token: write
|
|
contents: write # Required to push the version tag.
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v6
|
|
with:
|
|
fetch-depth: 512
|
|
|
|
- name: Authenticate with crates.io
|
|
id: auth
|
|
uses: rust-lang/crates-io-auth-action@v1
|
|
|
|
- name: Run release-plz
|
|
uses: Devolutions/actions-public/release-plz@v1
|
|
with:
|
|
command: release
|
|
registry-token: ${{ steps.auth.outputs.token }}
|