Releases: 9001/copyparty
Releases · 9001/copyparty
COPYparty
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2023-07-23)
recent important news
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- #46 #115 copy/paste files and folders cacec9c
- cut/paste still exists, but now you can copy too
- with a UI to rename files in case of filename collisions 56317b0
- files are created according to the dedup settings in the target volume (either full copies or symlinks/hardlinks)
- show currently active downloads in the controlpanel 8aba5ae
- can be made admin-only with
--dl-list=1or disabled with--dl-list=0 - hides filenames of hidden files, and files from volumes where the viewer doesn't have access
- can be made admin-only with
- #114 async reinit on new IdP users 44ee07f
- new IdP users can now always auth, even while a filesystem reindex is running
- ux:
🩹 bugfixes
- folders that fail to list due to a corrupt HDD/filesystem will now return a 404 instead of an empty listing 119e88d
- also fixes similar issues in u2c and partyfuse
- u2c (commandline uploader): detect and adapt to proxies with short connection keepalives c784e52
- ui/ux:
🔧 other changes
- choose more conservative defaults when server has less than 1 GiB RAM 2bf9055
- runs okay down to 128 MiB, but thumbnails die below 256 MiB
- update the comparison to similar software after years of optimizations on both sides 0ce7cf5
💾 what to download?
| download link | is it good? | description |
|---|---|---|
| copyparty-sfx.py | ✅ the best 👍 | runs anywhere! only needs python |
| a docker image | it's ok | good if you prefer docker 🐋 |
| copyparty.exe | for win8 or later; built-in thumbnailer | |
| u2c.exe | CLI uploader as a win7+ exe (video) | |
| copyparty.pyz | similar to the regular sfx, mostly worse | |
| copyparty32.exe | ⛔️ dangerous | for win7 -- never expose to the internet! |
| cpp-winpe64.exe | ⛔️ dangerous | runs on 64bit WinPE, otherwise useless |
temporary upload links
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2023-07-23)
recent important news
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- shares can now be uploaded into, and unpost works too 4bdcbc1
- useful to create temporary URLs for other people to upload to
- shares can be write-only, so visitors can't browse or see any files
- #110 HTTP 304 (caching):
- support
If-Rangefor HTTP 206 159f51b - add server-side and client-side options to force-disable cache dd6dbdd
--no304=1shows a button in the controlpanel to disable caching--no304=2makes that button auto-enabled- even when
--no304is not specified, accessing the URL/?setck=no304=yforce-disables cache - when cache is force-disabled, browsers will waste a lot of network traffic / data usage
- might help to avoid bugs in browsers or proxies, for example if media files suddenly stop loading
- but such bugs should be exceedingly rare, so do not enable this unless actually necessary
- support
🩹 bugfixes
- #110 HTTP 304 (caching):
- remove
Content-LengthandContent-Typeresponse headers from 304 replies 9124023- browsers don't need these, and some middlewares might get confused if they're present
- remove
- #113 fix crash on startup if
-j0was combined with--ipaor--ipu3a0d882 - #111 fix javascript crash if
--u2szwas set to an invalid value b13899c
🔧 other changes
- #110 HTTP 304 (caching):
- never automatically enable k304 because the
Varyheader killed support for caching in msie anyways 63013cc - change time comparison for
If-Modified-Sinceto require an exact timestamp match, instead of the intended "modified since". This technically violates the http-spec, but should be safer for backdating file mtimes 159f51b
- never automatically enable k304 because the
- new option
--oheadto log response headers 7678a91 - added nintendo 3ds to the list of supported browsers cb81f0a
⚠️ not the latest version!
rss server
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2023-07-23)
recent important news
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- #109 rss feed generator 7ffd805
- monitor folders recursively with RSS readers
🩹 bugfixes
- #107
--dfdiskspace limits was incompatible with webdav 2a570bb - #108 up2k javascript crash (only affected the Chinese translation) a7e2a0c
🔧 other changes
- up2k: detect buggy webworkers 5ca8f07
- up2k: improve upload retry/timeout logic a9b4436
- js: make handshake retries more aggressive
- u2c: reduce chunks timeout + ^
- main: reduce tcp timeout to 128sec (js is 42s)
- httpcli: less confusing log messages
⚠️ not the latest version!
the sky is the limit
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2023-07-23)
recent important news
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- subchunks; avoid the Cloudflare filesize limit entirely fc8298c 48147c0
- the previous max filesize was
383.9 GiB, now only the sky is the limit - if you're using another proxy with a more restrictive limit than Cloudflare's 100 MiB, for example 64 MiB, then
--u2sz 1,64,64
- the previous max filesize was
- m4v videos can be played in the gallery ff0a71f
🩹 bugfixes
- up2k: uploading duplicate files could initially fail (but would succeed after a few automatic retries) due to a toctou 114b71b
- u2c / commandline uploader:
- directory scanner got stuck if it found a FIFO cba1878
- excessive number of FDs when uploading large files 65a2b6a
- chunksize calculation; only affected files exactly 128 GiB large a2e037d
- support filenames with newlines and invalid utf-8 b2770a2
- invalid utf-8 is replaced by
?when they hit the server
- invalid utf-8 is replaced by
🔧 other changes
- don't show the toast countdown bar if duration is infinite 22dfc6e
- chickenbit to disable the browser's built-in sha512 implementation and force the bundled wasm instead d715479
⚠️ not the latest version!
the 'a' in "ip address" stands for authentication
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2023-07-23)
recent important news
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- cidr-based autologin b7f9bf5
- map a cidr ip-range to a username; anyone connecting from that ip-range will autologin as that user
- thx to @byteturtle for the idea!
- u2c / commandline uploader:
- up2k: verbose logging of detected/corrected bitflips ee62836
- foreshadowing intensifies (story still developing)
🩹 bugfixes
- up2k with database disabled / running without
-e2d705f598- respect
noforgetwhen loading snaps - ...but actually forget deleted files otherwise
- snap-loader adds empty need/hash entries as necessary
- respect
🔧 other changes
- authed users can now unpost recent uploads of unauthed users from the same IP 22b58e3
- would have become problematic now that cidr-based autologin is a thing
⚠️ not the latest version!
Contributors
byteturtle
Assets 9
preadme
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2023-07-23)
recent important news
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- #105 files named
preadme.mdappear at the top of directory listings 1d68acf - entirely disable dedup with
--no-clone/ volflagnoclone3d7facd 6b7ebdb- even if a file exists for sure on the server HDD, let the client continue uploading instead of reusing the existing data
- using this option "never" makes sense, unless you're using something like S3 Glacier storage where reading is really expensive but writing is cheap
🩹 bugfixes
- up2k jank after detecting a bitflip or network glitch 4a4ec88
- instead of resuming the interrupted upload like it should, the upload client could get stuck or start over
- #104 support viewing dotfile documents when dotfiles are hidden 9ccd8bb
- fix a buttload of typos 6adc778 1e7697b
⚠️ not the latest version!
pyz all the cores
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2023-07-23)
recent important news
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🩹 bugfixes
- the pkgres / pyz changes in 1.15.4 broke multiprocessing c398553
🔧 other changes
- pyz: drop easymde to save some bytes + make it a tiny bit faster
⚠️ not the latest version!
hermetic
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2023-07-23)
recent important news
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- u2c (commandline uploader):
- partyfuse (fuse client; mount a copyparty server as a local filesystem):
- reduce ram usage down to 10% when running without
-e2d88a1c5c- does not affect servers with
-e2denabled (was already optimal)
- does not affect servers with
- share folders as qr-codes e454206
- when creating a share, you get a qr-code for quick access
- buttons in the shares controlpanel to reshow it, optionally with the password embedded into the qr-code
- #98 read embedded webdeps and templates with
pkg_resources; thx @shizmob! a462a64 d866841- copyparty.pyz now runs straight from the source file without unpacking anything to disk
- ...and is now much slower at returning resource GETs, but that is fine
- copyparty.pyz now runs straight from the source file without unpacking anything to disk
- og / opengraph / discord embeds: support filekeys ae98200
- add option for natural sorting; thx @oshiteku! 9804f25
- eyecandy timer bar on toasts 0dfe1d5
- smb-server: impacket 0.12 is out! dc4d0d8
- now possible to list folders with more than 400 files (it's REALLY slow)
🩹 bugfixes
- webdav:
- #101 show
.prologue.htmland.epilogue.htmlin directory listings even if user cannot see hidden files 21be82e - #100 confusing toast when pressing F2 without selecting anything 2715ee6
- fix prometheus metrics 678675a
🔧 other changes
- #100 allow uploading
.prologue.htmland.epilogue.html19a5985 - #102 make translation easier when running in docker
⚠️ not the latest version!
Contributors
shizmob and oshiteku
Assets 9
incoming eta
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2023-07-23)
recent important news
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- incoming uploads (and their ETA) are shown in the controlpanel 609c592 844194e
- list total directory sizes 427597b
- show the total size and number of files of each directory in listings
- makes browsing a bit slower (up to 30%) so can be disabled with
--no-dirsz - sizes are calculated during startup, so it requires
-e2dsa- file-uploads will recalculate the sizes immediately, but a full rescan is necessary to see changes caused by moves/deletes
- optimizations;
🩹 bugfixes
- fix sqlite indexes d67e9cc
- upload handshakes would get exponentially slow if a volume has more than 200'000 files
- reindex on startup can be 150x faster in some rare cases (same filename in MANY folders)
- the database is now around 10% larger (likely worst-case)
- misc ux: 58835b2
- shares: show media tags
- html hydrator assumed a folder named
foo.txtwas a doc - due to sessions, use
pwdas password placeholder on services
🔧 other changes
- add example for uploading screenshots from linux with flameshot 1c2acdc
- nginx example: use unix-sockets for higher performance a5ce103
- #97 chinese translation was improved, thx again @ultwcz 7a573ca
🗿 known issues
- prometheus metrics are busted
- workaround: disable monitoring of volume status with
--nos-vst
- workaround: disable monitoring of volume status with
⚠️ not the latest version!
Contributors
ultwcz
Assets 8
session
blessed by ⑨, this release is certified strong (artist)
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2023-07-23)
recent important news
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
new features
- login sessions b540517
- a random session cookie is generated for each known user, replacing the previous plaintext login cookie
- the logout button will nuke the session on all clients where that user is logged in
- the sessions are stored in the database at
--ses-db, default~/.config/copyparty/sessions.db(docker uses/cfg/sessions.dbsimilar to the other runtime configs)- if you run multiple copyparty instances, much like shares and user-changeable passwords you'll want to keep a separate db for each instance
- can be mostly disabled with
--no-seswhen it turns out to be buggy
bugfixes
- v1.13.8 broke the u2c
--owoption to replace/overwrite files on the server during upload 6eee601