| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| backupzit-appliance-vhdx.zip | 2026-10-05 | 1.4 GB | |
| backupzit-appliance.iso | 2026-10-05 | 1.0 GB | |
| backupzit-appliance.ova | 2026-10-05 | 1.4 GB | |
| backupzit-appliance.qcow2 | 2026-10-05 | 1.4 GB | |
| SHA256SUMS | 2026-10-05 | 367 Bytes | |
| install.sh | 2026-10-05 | 8.6 kB | |
| backupzit-server_0.33.1_amd64.deb | 2026-10-05 | 57.8 MB | |
| manifest.json | 2026-10-05 | 3.8 kB | |
| manifest.json.sig | 2026-10-05 | 89 Bytes | |
| notes-0.33.1.md | 2026-10-05 | 1.8 kB | |
| backupzit-server-0.33.1-1.x86_64.rpm | 2026-10-05 | 58.0 MB | |
| backupzit-repo_0.33.1_amd64.deb | 2026-10-05 | 3.3 MB | |
| backupzit-agent-0.33.1-1.x86_64.rpm | 2026-10-05 | 9.3 MB | |
| backupzit-agent-0.33.1-x64-legacy.msi | 2026-10-05 | 9.9 MB | |
| backupzit-agent-0.33.1-x64.msi | 2026-10-05 | 9.9 MB | |
| backupzit-agent_0.33.1_amd64.deb | 2026-10-05 | 9.2 MB | |
| backupzit-repo-0.33.1-1.x86_64.rpm | 2026-10-05 | 3.3 MB | |
| BackupZit 0.33.1 source code.tar.gz | 2026-10-05 | 1.3 MB | |
| BackupZit 0.33.1 source code.zip | 2026-10-05 | 1.5 MB | |
| README.md | 2026-10-05 | 1.8 kB | |
| Totals: 20 Items | 5.4 GB | 0 | |
New
- Setup menu on the appliance's screen — sign in as bzadmin on the server's own screen: network (DHCP or static address, gateway, DNS), server name, SSH on/off and port, reset of the web console's admin password, lift sign-in blocks, restart, reboot, shut down. Also
sudo backupzit-server --setup. - Settings → Network (appliance) — the same network, server name and SSH settings from the web console. A static address whose gateway does not answer within 30 seconds is undone automatically.
- Search in the user guide — search box on top of the guide; results link to the matching section.
backupzit-agent set-server https://new-address:8443points an agent at a new console address (the certificate must stay the same).
Security
Checked with OpenVAS, OWASP ZAP (signed in), gosec, govulncheck, staticcheck, Semgrep, Trivy and Gitleaks — no SQL injection or XSS found. Hardening:
- The language switch no longer accepts a return path such as
/\host(open redirect). - MySQL restore escapes backslashes in names; the console limits names of databases restored under a new name.
- Console backup restore checks table names before using them.
- ESXi certificate pinning also applies to resumed TLS sessions.
- Sign-in cookies are Secure behind a trusted reverse proxy (X-Forwarded-Proto: https).
- Console and hardened repository offer only forward-secret AEAD ciphers for TLS 1.2;
Cache-Control: no-storefor every signed-in response;Cross-Origin-Resource-Policyheader. - Appliance SSH: only AES-GCM/CTR ciphers and SHA-2 MACs.
Fixes
- A failed VMware backup could stop the agent instead of reporting the error.
Releases are signed with the BackupZit release key; consoles verify them before installing.
