pig v1.9.0

Ruohang FengAuthor of pig and founder of Pigsty.

Pig v1.9.0 adds one-command Xray client/server setup, automatic Pigsty repository-key preparation, and a refreshed 600-entry extension catalog. The default cargo-pgrx version is now 0.19.3; the embedded Pigsty version remains 4.5.0.

Xray clients and servers

• pig build proxy installs or verifies Xray. pig build proxy client configures a VLESS/REALITY/Vision HTTP/SOCKS client; pig build proxy server configures a Linux server. Linux uses systemd; the macOS client uses a dedicated user LaunchAgent.
• Client input accepts a standard VLESS URI, --from FILE/-, or explicit connection flags. The first client listener is 127.0.0.1:12345; the first direct server listener is 0.0.0.0:443. Repeated setup preserves existing listeners and server credentials.
• Matching configuration, ownership, permissions, and service state avoid rewrites and restarts. Failed client connectivity checks restore prior managed files and service state. Replacing a different client requires --replace --yes; --plan previews either role.
• server --export-only --export - exports an existing connection without changing the deployment. File exports use mode 0600; explicit stdout export requires text output. Ordinary results and plans omit credentials. The historical VMess positional form remains available through V2Ray.

sudo pig build proxy server --host proxy.example.com --target www.sraoss.co.jp:443 --export ./client.uri
sudo pig build proxy client --from ./client.uri

See pig build for prerequisites, macOS setup, credential handling, and the separate public-ingress boundary.

Repository keys

• repo add, repo set, and sty boot prepare the embedded Pigsty public key when selected repositories need it. Existing regular key files are reused; missing defaults are installed offline at /etc/pki/rpm-gpg/RPM-GPG-KEY-pigsty or /etc/apt/keyrings/pigsty.asc.
• Implicit default-key failure emits a warning and falls back only for selected Pigsty definitions. Default key references remain stable, including APT signed-by.
• Explicit signing-key references are mandatory: invalid or unavailable keys fail before repository replacement or cache refresh. EL imports explicit references with rpm --import. Selecting unrelated repositories does not prepare the Pigsty key.

See pig repo for signature-enforcement defaults and the distinction between key preparation and metadata refresh.

Catalog and build defaults

• The embedded catalog contains 600 entries, adding 22 entries to the v1.8.1 snapshot. New entries include edtf_postgres, plphp, pg_lexo, pg_money, istore, colnames, pg_statkit, pgtelemetry, pg_rusage, pgexporter_ext, pg_statvfs, and libx509pq. Package versions and platform-availability metadata are refreshed as well.
• The catalog total includes retained lifecycle records. Installability depends on each extension’s state and OS/architecture/PostgreSQL matrix; 600 is not a per-platform count.
• pig build pgrx defaults to cargo-pgrx 0.19.3. An explicit -v and extension-specific catalog metadata continue to select another required version.
• Platform debug packages remain enabled by default, as in v1.8.1. Use --nodbg for RPM debuginfo/debugsource and DEB dbgsym suppression; -s|--symbol is a deprecated no-op.

Compatibility

No existing command or flag is removed. New Xray role commands use VLESS/REALITY/Vision; existing positional VMess commands retain their V2Ray behavior. A server setup result verifies the local listener and service; firewall, Nginx, cloud security groups, and public reachability remain separate operator responsibilities.

Verification

The verified v1.9.0 tag points to 9eb5488. The exact commit passed full CI, including randomized tests, command race regressions, vet, static analysis, vulnerability scanning, and a release snapshot. The Release workflow produced eight Linux/macOS archives and RPM/DEB packages. Published downloads were verified against SHA-256.

Checksums