Declare the RomM filesystem structure required since 5.3.0

Update CHANGELOG.md (#17475 )
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-09-24 11:08:07 +00:00 · 2026-09-24 10:28:54 +02:00 · 2026-09-24 06:44:33 +00:00 · 2026-09-24 06:07:14 +00:00 · 2026-09-24 08:06:49 +02:00 · 2026-09-23 18:50:08 +00:00
160 changed files with 292 additions and 252 deletions
@@ -546,17 +546,40 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

+## 2026-09-24
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - general: use apt_update_safe instead of aborting on a failed apt update [@MickLesk](https://github.com/MickLesk) ([#17462](https://github.com/community-scripts/ProxmoxVE/pull/17462))
+
+### 💾 Core
+
+  - core: accept an off-subnet gateway for /31 and /32 [@MickLesk](https://github.com/MickLesk) ([core#70](https://github.com/community-scripts/core/pull/70))
+
 ## 2026-09-23

 ### 🚀 Updated Scripts

  - #### 🐞 Bug Fixes

+    - fix(signoz): install the histogramQuantile ClickHouse function [@maksimtech](https://github.com/maksimtech) ([#17386](https://github.com/community-scripts/ProxmoxVE/pull/17386))
+    - omniroute: bump to 4 GB for the npm install [@MickLesk](https://github.com/MickLesk) ([#17461](https://github.com/community-scripts/ProxmoxVE/pull/17461))
+    - Run Borg-UI with a single gunicorn worker [@MickLesk](https://github.com/MickLesk) ([#17445](https://github.com/community-scripts/ProxmoxVE/pull/17445))
    - immich: keep geodata linked and the build deps present on update [@MickLesk](https://github.com/MickLesk) ([#17438](https://github.com/community-scripts/ProxmoxVE/pull/17438))

+  - #### 🔧 Refactor
+
+    - Refactor: Scanopy [@MickLesk](https://github.com/MickLesk) ([#16797](https://github.com/community-scripts/ProxmoxVE/pull/16797))
+
 ### 💾 Core

-  - VM-Core: decide console autologin from the image, not USE_CLOUD_INIT [@MickLesk](https://github.com/MickLesk) ([core#63](https://github.com/community-scripts/core/pull/63))
+  - stop a partial find from aborting the caller under pipefail [@MickLesk](https://github.com/MickLesk) ([core#68](https://github.com/community-scripts/core/pull/68))
+- core: give RHEL-family containers an ostype PVE accepts [@MickLesk](https://github.com/MickLesk) ([core#67](https://github.com/community-scripts/core/pull/67))
+- core: do not abort on a failed apt update [@MickLesk](https://github.com/MickLesk) ([core#66](https://github.com/community-scripts/core/pull/66))
+- VM's: report a finished VM as done, not aborted [@MickLesk](https://github.com/MickLesk) ([core#65](https://github.com/community-scripts/core/pull/65))
+- VM-Core: decide console autologin from the image, not USE_CLOUD_INIT [@MickLesk](https://github.com/MickLesk) ([core#63](https://github.com/community-scripts/core/pull/63))
 - VM-Core: report failed image steps and restore tty1 autologin without cloud-init [@MickLesk](https://github.com/MickLesk) ([core#62](https://github.com/community-scripts/core/pull/62))
 - tools: raise pnpm/yarn fetch timeout and lower network concurrency [@MickLesk](https://github.com/MickLesk) ([core#59](https://github.com/community-scripts/core/pull/59))
 - VM-Core: stop discarding cloud-init error messages [@MickLesk](https://github.com/MickLesk) ([core#60](https://github.com/community-scripts/core/pull/60))
@@ -33,7 +33,7 @@ function update_script() {
  fi
  setup_mariadb
  if check_for_gh_release "2fauth" "Bubka/2FAuth"; then
-    $STD apt update
+    apt_update_safe
    $STD apt -y upgrade

    msg_info "Creating Backup"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating Apache Cassandra"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y --only-upgrade cassandra cassandra-tools
  msg_ok "Updated Apache Cassandra"
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating Apache CouchDB"
-  $STD apt-get update
+  apt_update_safe
  $STD apt-get install -y --only-upgrade couchdb
  msg_ok "Updated Apache CouchDB"
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating Apt-Cacher-NG"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated Apt-Cacher-NG"
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating Aria2"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated Aria2"
  msg_ok "Updated successfully!"
@@ -32,7 +32,7 @@ function update_script() {
  fi

  msg_info "Updating AudiobookShelf"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated AudiobookShelf"
  msg_ok "Updated successfully!"
@@ -34,7 +34,7 @@ function update_script() {
  fi

  if check_for_gh_release "authelia" "authelia/authelia"; then
-    $STD apt update
+    apt_update_safe
    $STD apt -y upgrade
    fetch_and_deploy_gh_release "authelia" "authelia/authelia" "binary"
    msg_ok "Updated successfully!"
@@ -32,6 +32,14 @@ function update_script() {
    exit
  fi

+  if grep -q -- '--workers 2' /etc/systemd/system/borg-ui.service 2>/dev/null; then
+    msg_info "Reducing Service to a single worker"
+    sed -i 's/--workers 2/--workers 1/' /etc/systemd/system/borg-ui.service
+    systemctl daemon-reload
+    systemctl try-restart borg-ui
+    msg_ok "Reduced Service to a single worker"
+  fi
+
  if check_for_gh_release "borg-ui" "karanhudia/borg-ui"; then
    msg_info "Stopping Service"
    systemctl stop borg-ui
@@ -39,7 +39,7 @@ Package: bunkerweb
 Pin: version ${RELEASE}
 Pin-Priority: 1001
 EOF
-    $STD apt update
+    apt_update_safe
    $STD apt-mark unhold bunkerweb nginx
    $STD apt install -y --allow-downgrades bunkerweb="${RELEASE}"
    msg_ok "Updated BunkerWeb"
@@ -40,7 +40,7 @@ update_deb_based() {
  fi

  msg_info "Updating Caddy LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated Caddy LXC"

@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating ${APP} LXC"
-  $STD apt-get update
+  apt_update_safe
  $STD apt-get -y upgrade
  msg_ok "Updated ${APP} LXC"
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -32,7 +32,7 @@ function update_script() {
  fi

  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated ${APP} LXC"

@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating ddclient"
-  $STD apt update
+  apt_update_safe
  $STD apt install --only-upgrade -y ddclient
  $STD systemctl restart ddclient
  msg_ok "Updated ddclient"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating deCONZ"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated deCONZ"
  msg_ok "Updated successfully!"
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating Defguard"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y defguard defguard-proxy
  msg_ok "Updated Defguard"

@@ -32,7 +32,7 @@ function update_script() {
  fi
  msg_info "Updating Deluge"
  ensure_dependencies python3-setuptools
-  $STD apt update
+  apt_update_safe
  $STD pip3 install deluge[all] "pyopenssl<25" --upgrade
  msg_ok "Updated Deluge"
  msg_ok "Updated successfully!"
@@ -32,7 +32,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating Devuan LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated Devuan LXC"
  exit
@@ -36,7 +36,7 @@ catch_errors

 update_deb_based() {
  msg_info "Updating base system"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Base system updated"

@@ -31,7 +31,7 @@ function update_script() {
        exit
    fi
    msg_info "Updating ${APP} LXC"
-    $STD apt-get update
+    apt_update_safe
    $STD apt-get -y upgrade
    msg_ok "Updated successfully!"
    exit
@@ -37,7 +37,7 @@ function update_script() {
    msg_ok "Service stopped"

    msg_info "Updating Debian LXC"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    msg_ok "Updated Debian LXC"

@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating ${APP}"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y elasticsearch
  msg_ok "Updated ${APP}"

@@ -34,7 +34,7 @@ function update_script() {
  NODE_VERSION="22" NODE_MODULE="yarn" setup_nodejs

  msg_info "Updating LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated LXC"

@@ -40,7 +40,7 @@ function update_script() {
      "main"
  fi
  msg_info "Updating evcc LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt --only-upgrade install -y evcc
  msg_ok "Updated successfully!"
  exit
@@ -32,7 +32,7 @@ function update_script() {
    fi

    msg_info "Updating FHEM"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    msg_ok "Updated FHEM"
    msg_ok "Updated successfully!"
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating GitLab (Patience)"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y gitlab-ce
  msg_ok "Updated GitLab"

@@ -31,7 +31,7 @@ function update_script() {
  fi

  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -49,7 +49,7 @@ update_deb_based() {
  fi

  msg_info "Updating Grafana LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt --only-upgrade install -y grafana
  msg_ok "Updated successfully!"
 }
@@ -43,17 +43,17 @@ function update_script() {
    MONGO_VERSION="8.2" setup_mongodb

    msg_info "Updating Graylog"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    curl -fsSL "https://packages.graylog2.org/repo/packages/graylog-7.0-repository_latest.deb" -o "graylog-7.0-repository_latest.deb"
    $STD dpkg -i graylog-7.0-repository_latest.deb
-    $STD apt update
+    apt_update_safe
    ensure_dependencies graylog-server graylog-datanode
    rm -f graylog-7.0-repository_latest.deb
    msg_ok "Updated Graylog"
  elif dpkg --compare-versions "$CURRENT_VERSION" ge "7.0"; then
    msg_info "Updating Graylog"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    msg_ok "Updated Graylog"
  fi
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating ${APP}"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y haproxy
  msg_ok "Updated ${APP}"

@@ -63,7 +63,7 @@ EOF
    fi

    msg_info "Updating Nodejs"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade nodejs -y
    msg_ok "Updated Nodejs"

@@ -63,7 +63,7 @@ function update_script() {
  fi
  if [ "$UPD" == "3" ]; then
    msg_info "Installing Home Assistant Community Store (HACS)"
-    $STD apt update
+    apt_update_safe
    cd /var/lib/docker/volumes/hass_config/_data
    $STD bash <(curl -fsSL https://get.hacs.xyz)
    msg_ok "Installed Home Assistant Community Store (HACS)"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y homebridge
  msg_ok "Updated successfully!"
  exit
@@ -32,7 +32,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -32,7 +32,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y hyperion
  msg_ok "Updated successfully!"
  exit
@@ -56,7 +56,7 @@ Pin:release a=testing
 Pin-Priority: 450
 EOF
    [[ -f /etc/apt/preferences.d/immich ]] && rm /etc/apt/preferences.d/immich
-    $STD apt update
+    apt_update_safe
    msg_ok "Added Debian Testing repo"
  fi

@@ -42,7 +42,7 @@ function update_script() {
  msg_ok "Created backup"

  msg_info "Updating Infisical"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y infisical-core
  $STD infisical-ctl reconfigure
  msg_ok "Updated Infisical"
@@ -32,7 +32,7 @@ function update_script() {
  fi
  
  msg_info "Updating InfluxDB"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated InfluxDB"
  msg_ok "Updated successfully!"
@@ -38,7 +38,7 @@ function update_script() {
  fi

  msg_info "Updating InvenTree"
-  $STD apt update
+  apt_update_safe
  $STD apt install --only-upgrade inventree -y
  msg_ok "Updated InvenTree"
  msg_ok "Updated successfully!"
@@ -34,7 +34,7 @@ function update_script() {
  NODE_VERSION="24" NPM_VERSION="11" setup_nodejs

  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated successfully!"
  exit
@@ -34,7 +34,7 @@ function update_script() {
  setup_mariadb

  msg_info "Updating ITSM-NG"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  chown -R www-data:www-data /var/lib/itsm-ng
  mkdir -p /usr/share/itsm-ng/css/palettes
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating Container OS"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated Container OS"

@@ -34,7 +34,7 @@ function update_script() {
  JAVA_VERSION="21" setup_java

  msg_info "Updating Jenkins"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated Jenkins"
  msg_ok "Updated successfully!"
@@ -41,7 +41,7 @@ function update_script() {
  fi

  msg_info "Updating Jitsi Meet"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y --only-upgrade \
    jitsi-meet \
    jicofo \
@@ -44,7 +44,7 @@ function update_script() {
    msg_ok "Stopped Service"

    msg_info "Updating packages"
-    $STD apt-get update
+    apt_update_safe
    $STD apt-get -y upgrade
    msg_ok "Updated packages"

@@ -35,7 +35,7 @@ function update_script() {
  CURRENT=$(dpkg-query -W -f='${Version}' kiwix-tools 2>/dev/null)

  msg_info "Updating Package Index"
-  $STD apt update
+  apt_update_safe
  msg_ok "Updated Package Index"

  CANDIDATE=$(apt-cache policy kiwix-tools | awk '/Candidate:/{print $2}')
@@ -38,7 +38,7 @@ function update_script() {
    msg_info "Stopped Service"

    msg_info "Updating Container"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    msg_ok "Updated Container"

@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating lldap"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y lldap
  msg_ok "Updated lldap"
  msg_ok "Updated successfully!"
@@ -51,7 +51,7 @@ update_deb_based() {
    msg_ok "Stopped Loki"

    msg_info "Updating Loki"
-    $STD apt update
+    apt_update_safe
    $STD apt install -y --only-upgrade loki
    msg_ok "Updated Loki"

@@ -40,7 +40,7 @@ update_deb_based() {
  fi
  setup_mariadb
  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated successfully!"
 }
@@ -30,7 +30,7 @@ function update_script() {
    msg_error "No ${APP} Installation Found!"
    exit
  fi
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  NODE_VERSION="24" NODE_MODULE="matterbridge" setup_nodejs
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
        exit
    fi
    msg_info "Updating ${APP} LXC"
-    $STD apt update
+    apt_update_safe
    $STD apt -y upgrade
    msg_ok "Updated successfully!"
    exit
@@ -31,7 +31,7 @@ function update_script() {
        exit
    fi
    msg_info "Updating ${APP} LXC"
-    $STD apt update
+    apt_update_safe
    $STD apt -y upgrade
    msg_ok "Updated successfully!"
    exit
@@ -37,7 +37,7 @@ function update_script() {
  msg_ok "Stopped Service"

  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated ${APP} LXC"

@@ -32,7 +32,7 @@ function update_script() {
    fi
    
    msg_info "Updating MongoDB LXC"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    msg_ok "Updated successfully!"
    exit
@@ -41,7 +41,7 @@ function update_script() {
  fi

  msg_info "Updating MQTT"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated successfully!"
  exit
@@ -40,7 +40,7 @@ function update_script() {
    create_backup /etc/mumble/mumble-server.ini /var/lib/mumble-server/mumble-server.sqlite

    msg_info "Updating Mumble"
-    $STD apt update
+    apt_update_safe
    $STD apt install -y mumble-server
    cat <<EOF >~/.mumble
 $(get_latest_github_release "mumble-voip/mumble")
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated successfully!"
  exit
@@ -33,7 +33,7 @@ function update_script() {
  JAVA_VERSION="21" setup_java

  msg_info "Updating ${APP}"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated successfully!"
  exit
@@ -34,7 +34,7 @@ function update_script() {
  fi

  msg_info "Updating Netbird"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated successfully!"
  exit
@@ -31,7 +31,7 @@ function update_script() {
        exit
    fi
    msg_info "Updating ${APP} LXC"
-    $STD apt update
+    apt_update_safe
    $STD apt -y upgrade
    msg_ok "Updated successfully!"
    exit
@@ -37,7 +37,7 @@ function update_script() {
  msg_ok "Stopped Service"

  msg_info "Updating LXC packages"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated LXC packages"

@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating Notifiarr"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated Notifiarr"
  msg_ok "Updated successfully!"
@@ -54,7 +54,7 @@ update_deb_based() {
  fi

  msg_info "Updating ntfy"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated ntfy"
  msg_ok "Updated successfully!"
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating ntopng"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y ntopng
  msg_ok "Updated ntopng"

@@ -41,7 +41,7 @@ function update_script() {
  fi

  msg_info "Updating NZBGet"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated NZBGet"
  msg_ok "Updated successfully!"
@@ -39,7 +39,7 @@ function update_script() {
  create_backup /var/lib/couchdb /opt/couchdb/etc/local.d/obsidian-livesync.ini /opt/obsidian-livesync/.env

  msg_info "Updating Container OS"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated Container OS"

@@ -10,7 +10,7 @@ source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_
 APP="OmniRoute"
 var_tags="${var_tags:-ai;gateway;llm}"
 var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
+var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-10}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
@@ -39,7 +39,7 @@ function update_script() {
  fi

  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated successfully!"
  exit
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating OnlyOffice Document Server"
-  $STD apt update
+  apt_update_safe
  $STD apt -y --only-upgrade install onlyoffice-documentserver
  msg_ok "Updated OnlyOffice Document Server"

@@ -39,7 +39,7 @@ function update_script() {
    msg_ok "Stopped services"

    msg_info "Updating packages"
-    $STD apt-get update
+    apt_update_safe
    $STD apt-get dist-upgrade -y
    ensure_dependencies "inotify-tools"
    msg_ok "Updated packages"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated successfully!"
  exit
@@ -32,7 +32,7 @@ function update_script() {
  fi

  msg_info "Updating OpenProject"
-  $STD apt update
+  apt_update_safe
  $STD apt install --only-upgrade -y openproject
  msg_ok "Updated OpenProject"
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating Orb"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y --only-upgrade orb
  msg_ok "Updated successfully!"
  exit
@@ -33,7 +33,7 @@ function update_script() {
  fi

  msg_info "Updating ${APP}"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y ot-recorder
  msg_ok "Updated ${APP}"

@@ -32,7 +32,7 @@ function update_script() {
  fi
  setup_mariadb
  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated $APP LXC"
  exit
@@ -32,7 +32,7 @@ function update_script() {
    fi
    msg_info "Updating PiHole"
    set +e
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    /usr/local/bin/pihole -up
    msg_ok "Updated PiHole"
@@ -79,7 +79,7 @@ function update_script() {
  fi

  msg_info "Updating Plex Media Server"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y plexmediaserver
  msg_ok "Updated Plex Media Server"

@@ -38,7 +38,7 @@ function update_script() {

  if [ "$UPD" == "1" ]; then
    msg_info "Updating ${APP} LXC"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    msg_ok "Updated successfully!"

@@ -59,7 +59,7 @@ function update_script() {
  fi
  if [ "$UPD" == "2" ]; then
    msg_info "Installing Home Assistant Community Store (HACS)"
-    $STD apt update
+    apt_update_safe
    cd /var/lib/containers/storage/volumes/hass_config/_data
    $STD bash <(curl -fsSL https://get.hacs.xyz)
    msg_ok "Installed Home Assistant Community Store (HACS)"
@@ -31,7 +31,7 @@ function update_script() {
        exit
    fi
    msg_info "Updating ${APP} LXC"
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    msg_ok "Updated successfully!"
    exit
@@ -39,7 +39,7 @@ update_deb_based() {
      exit
  fi
  msg_info "Updating ${APP} LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated successfully!"
 }
@@ -46,7 +46,7 @@ function update_script() {
  fi

  msg_info "Updating PowerDNS"
-  $STD apt update
+  apt_update_safe
  $STD apt install -y --only-upgrade pdns-server pdns-backend-sqlite3
  msg_ok "Updated PowerDNS"

@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -36,7 +36,7 @@ function update_script() {
    echo "deb [signed-by=/usr/share/keyrings/proxmox-archive-keyring.gpg] http://download.proxmox.com/debian/pdm bookworm pdm-test" >/etc/apt/sources.list.d/pdm-test.list
    curl -fsSL https://enterprise.proxmox.com/debian/proxmox-archive-keyring-trixie.gpg -o /usr/share/keyrings/proxmox-archive-keyring.gpg
    rm -f /etc/apt/keyrings/proxmox-release-bookworm.gpg /etc/apt/sources.list.d/proxmox-release-bookworm.list
-    $STD apt update
+    apt_update_safe
    msg_ok "Updated old sources"
  fi

@@ -55,7 +55,7 @@ function update_script() {
  fi

  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -32,7 +32,7 @@ function update_script() {
  fi

  msg_info "Updating Proxmox-Mail-Gateway"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated Proxmox-Mail-Gateway"
  msg_ok "Updated successfully!"
@@ -45,7 +45,7 @@ Suites: $(lsb_release -sc)
 Components: main
 Signed-By: /usr/share/keyrings/deb.sury.org-php.gpg
 EOF
-    $STD apt update
+    apt_update_safe
    $STD apt remove -y php"${CURRENT_PHP//./}"*
    $STD apt install -y \
      php8.4 \
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt -y upgrade
  msg_ok "Updated $APP LXC"
  msg_ok "Updated successfully!"
@@ -40,7 +40,7 @@ update_deb_based() {
  fi

  msg_info "Updating $APP LXC"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated $APP LXC"
 }
@@ -31,7 +31,7 @@ function update_script() {
    exit
  fi
  msg_info "Updating Resilio Sync"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated successfully!"
  exit
@@ -218,6 +218,18 @@ DROPEOF
    fi
    msg_ok "Updated ROMM"

+    # 5.3.0 refuses to start without filesystem.structure and dropped
+    # roms_folder/firmware_folder. A custom layout cannot be inferred.
+    ROMM_CFG=/var/lib/romm/config/config.yml
+    if [[ -f "$ROMM_CFG" ]] && ! grep -qE '^[[:space:]]*structure:' "$ROMM_CFG"; then
+      if grep -qE '^[[:space:]]*(roms_folder|firmware_folder):' "$ROMM_CFG"; then
+        msg_warn "RomM 5.3.0 removed roms_folder/firmware_folder - replace them with filesystem.structure in ${ROMM_CFG}"
+      else
+        printf '\nfilesystem:\n  structure:\n    default: "roms/{platform}/{game}"\n    firmware: "bios/{platform}"\n' >>"$ROMM_CFG"
+        msg_ok "Added filesystem.structure to ${ROMM_CFG}"
+      fi
+    fi
+
    msg_info "Starting Services"
    systemctl start romm-backend romm-worker romm-scheduler romm-watcher
    msg_ok "Started Services"
@@ -36,7 +36,7 @@ function update_script() {
  if check_for_gh_release "salt" "saltstack/salt"; then
    msg_info "Updating Salt"
    sed -i "s/^\(Pin: version \).*/\1${RELEASE}/" /etc/apt/preferences.d/salt-pin-1001
-    $STD apt update
+    apt_update_safe
    $STD apt upgrade -y
    echo "${RELEASE}" >~/.salt
    msg_ok "Updated successfully!"
@@ -38,35 +38,20 @@ function update_script() {
    [[ -f /etc/systemd/system/scanopy-daemon.service ]] && systemctl stop scanopy-daemon
    msg_ok "Stopped services"

-    create_backup /opt/scanopy/.env /opt/scanopy/oidc.toml
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Scanopy" "scanopy/scanopy" "tarball" "latest" "/opt/scanopy"
-
-    restore_backup
-
-    ensure_dependencies pkg-config libssl-dev
-    TOOLCHAIN="$(grep "channel" /opt/scanopy/backend/rust-toolchain.toml | awk -F\" '{print $2}')"
-    RUST_TOOLCHAIN=$TOOLCHAIN setup_rust
+    cp -f /usr/bin/scanopy-server /usr/bin/scanopy-server.bak 2>/dev/null || true
+    cp -f /opt/scanopy/.env /opt/scanopy/.env.bak
+    cp -f /etc/systemd/system/scanopy-server.service /etc/systemd/system/scanopy-server.service.bak

    if ! grep -q "PUBLIC_URL" /opt/scanopy/.env; then
-      sed -i "\|_PATH=|a\\scanopy_PUBLIC_URL=http://${LOCAL_IP}:60072" /opt/scanopy/.env
+      sed -i "\|_PATH=|a\\SCANOPY_PUBLIC_URL=http://${LOCAL_IP}:60072" /opt/scanopy/.env
    fi
    sed -i 's|_TARGET=.*$|_URL=http://127.0.0.1:60072|' /opt/scanopy/.env
+    sed -i '/^SCANOPY_WEB_EXTERNAL_PATH=/d' /opt/scanopy/.env
+    sed -i 's|^WorkingDirectory=/opt/scanopy/backend$|WorkingDirectory=/opt/scanopy|' /etc/systemd/system/scanopy-server.service
+    systemctl daemon-reload

-    msg_info "Building Scanopy Server (patience)"
-    cd /opt/scanopy/backend
-    CARGO_BUILD_JOBS="$(get_parallel_jobs)" $STD cargo build --release --bin server --bin generate-fixtures
-    $STD ./target/release/generate-fixtures --output-dir /opt/scanopy/ui/src/lib/data
-    mv ./target/release/server /usr/bin/scanopy-server
-    msg_ok "Built Scanopy Server"
-
-    msg_info "Creating frontend UI"
-    export PUBLIC_SERVER_HOSTNAME=default
-    export PUBLIC_SERVER_PORT=""
-    cd /opt/scanopy/ui
-    $STD npm ci --no-fund --no-audit
-    $STD npm run build
-    msg_ok "Created frontend UI"
+    fetch_and_deploy_gh_release "Scanopy" "scanopy/scanopy" "singlefile" "latest" "/usr/bin" "scanopy-server-linux-$(arch_resolve)"
+    mv -f /usr/bin/Scanopy /usr/bin/scanopy-server

    if [[ -f /etc/systemd/system/scanopy-daemon.service ]]; then
      fetch_and_deploy_gh_release "Scanopy Daemon" "scanopy/scanopy" "singlefile" "latest" "/usr/local/bin" "scanopy-daemon-linux-$(arch_resolve)"
@@ -81,6 +66,26 @@ function update_script() {

    msg_info "Starting services"
    systemctl start scanopy-server
+    healthy=0
+    for _ in {1..30}; do
+      if curl -fsS -o /dev/null http://127.0.0.1:60072/api/health 2>/dev/null; then
+        healthy=1
+        break
+      fi
+      sleep 2
+    done
+    if [[ "$healthy" -ne 1 ]]; then
+      systemctl stop scanopy-server
+      [[ -f /usr/bin/scanopy-server.bak ]] && mv -f /usr/bin/scanopy-server.bak /usr/bin/scanopy-server
+      mv -f /opt/scanopy/.env.bak /opt/scanopy/.env
+      mv -f /etc/systemd/system/scanopy-server.service.bak /etc/systemd/system/scanopy-server.service
+      systemctl daemon-reload
+      systemctl start scanopy-server
+      msg_error "New server did not answer /api/health, restored the previous version"
+      exit 1
+    fi
+    rm -rf /opt/scanopy/backend /opt/scanopy/ui
+    rm -f /usr/bin/scanopy-server.bak /opt/scanopy/.env.bak /etc/systemd/system/scanopy-server.service.bak
    [[ -f /etc/systemd/system/scanopy-daemon.service ]] && systemctl start scanopy-daemon
    msg_ok "Updated successfully!"
  fi
@@ -38,7 +38,7 @@ function update_script() {
  "trixie"
  
  msg_info "Updating SFTPGo"
-  $STD apt update
+  apt_update_safe
  $STD apt upgrade -y
  msg_ok "Updated SFTPGo"
  msg_ok "Updated successfully!"
@@ -31,6 +31,31 @@ function update_script() {
    exit
  fi

+  if [[ ! -f /var/lib/clickhouse/user_scripts/histogramQuantile ]]; then
+    fetch_and_deploy_gh_release "histogram-quantile" "SigNoz/signoz" "prebuild" "histogram-quantile/v0.0.1" "/opt/histogram-quantile" "histogram-quantile_linux_$(arch_resolve).tar.gz"
+
+    msg_info "Adding ClickHouse histogramQuantile Function"
+    mkdir -p /var/lib/clickhouse/user_scripts
+    install -m 755 -o clickhouse -g clickhouse /opt/histogram-quantile/histogram-quantile /var/lib/clickhouse/user_scripts/histogramQuantile
+    cat <<EOF >/etc/clickhouse-server/histogram_quantile_function.yaml
+functions:
+  name: histogramQuantile
+  type: executable
+  format: CSV
+  command: ./histogramQuantile
+  return_type: Float64
+  argument:
+    - name: buckets
+      type: Array(Float64)
+    - name: counts
+      type: Array(Float64)
+    - name: quantile
+      type: Float64
+EOF
+    systemctl restart clickhouse-server
+    msg_ok "Added ClickHouse histogramQuantile Function"
+  fi
+
  if check_for_gh_release "signoz" "SigNoz/signoz"; then
    msg_info "Stopping Services"
    systemctl stop signoz
@@ -32,7 +32,7 @@ function update_script() {
    fi

    msg_info "Updating ${APP}"
-    $STD apt update
+    apt_update_safe
    $STD apt -y upgrade
    msg_ok "Updated successfully!"
    exit
@@ -50,7 +50,7 @@ function update_script() {
    setup_composer

    msg_info "Updating Snipe-IT"
-    $STD apt update
+    apt_update_safe
    $STD apt -y upgrade
    cp /opt/snipe-it-backup/.env /opt/snipe-it/.env
    cp -r /opt/snipe-it-backup/public/uploads/. /opt/snipe-it/public/uploads/
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
MickLesk	8b8bbe784d	Declare the RomM filesystem structure required since 5.3.0	2026-09-24 10:28:54 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	03702ce31a	Update CHANGELOG.md (#17475 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-24 06:44:33 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	e38cc1c631	Update CHANGELOG.md (#17474 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-24 06:07:14 +00:00
CanbiZ (MickLesk)	b855a5782a	Use apt_update_safe instead of aborting on a failed apt update (#17462 )	2026-09-24 08:06:49 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	ba1409a920	Update CHANGELOG.md (#17468 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 18:50:08 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	79b10733ed	Update CHANGELOG.md (#17467 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 16:24:04 +00:00
maksimtech	31ead526dc	fix(signoz): install the histogramQuantile ClickHouse function (#17386 )	2026-09-23 18:23:31 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	16f9714662	Update CHANGELOG.md (#17465 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 16:17:07 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	7dc23b42b4	Update CHANGELOG.md (#17464 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 15:59:17 +00:00
CanbiZ (MickLesk)	572e9f6512	Give omniroute 4 GB for the npm install (#17461 )	2026-09-23 17:58:47 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	1f092bcfc3	Update CHANGELOG.md (#17463 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 14:52:25 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	a77102b390	Update CHANGELOG.md (#17459 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 14:27:13 +00:00
CanbiZ (MickLesk)	050e6a02b7	Refactor: Scanopy (#16797 ) * scanopy: use prebuilt server binary, relax release profile for generate-fixtures * scanopy: drop unneeded rust build, use committed UI fixtures * scanopy: restore generate-fixtures build, ui/src/lib/data is gitignored and incomplete * scanopy: serve the UI from the binary, drop the source build Upstream confirmed in scanopy/scanopy#698 that scanopy-server-linux-* has carried the built UI since v0.17.13, fixtures and service logos included, served on the same port as the API. The release notes never said so, which is why we kept building it. That removes the source tarball, the Rust toolchain and generate-fixtures, Node with npm ci and npm run build, and SCANOPY_WEB_EXTERNAL_PATH. With the variable set to a directory that no longer has an index.html, v0.17.14 and earlier refuse to start, so the update deletes the line rather than leaving it. build-essential, libssl-dev and pkg-config go too: the release binary is static-pie with no INTERP segment, so it has no runtime library dependencies. /opt/scanopy stays, now only for .env and oidc.toml, and the unit's WorkingDirectory follows it out of the removed backend directory. Since nothing wipes that directory any more, the config survives an update on its own, which is the report upstream passed on of an update coming back without SCANOPY_WEB_EXTERNAL_PATH and the server starting API-only. The update keeps the running binary until the new one answers /api/health and puts it back if it does not, so a bad release leaves a working server instead of a stopped one. check_for_gh_release now keys on scanopy-server, matching the version file the binary deploy writes; the Scanopy key belonged to the tarball that is gone. Existing containers run one extra update, then agree. * Refactor scanopy-install.sh for server setup Updated installation script to configure Scanopy server and removed daemon configuration section. * Update service names from 'scanopy-server' to 'Scanopy' * Fix case sensitivity in fetch_and_deploy_gh_release * scanopy: make the rollback restore the whole old setup The health check put the previous binary back but nothing else, and the source tree it needs was already gone by then: the update deleted /opt/scanopy/ui before starting the new server, and removed SCANOPY_WEB_EXTERNAL_PATH from the env at the same time. A failed health check therefore left the old binary running without the UI it serves from disk, so the rollback produced an API-only server. Back up the env file and the unit alongside the binary, restore all three when the check fails, and delete the source tree only once the new server has answered. Nothing the old version needs is removed before the new one has proven itself. * scanopy: name the deployed binary what the unit starts singlefile mode writes the asset to <target>/<app name>: local target_file="$app" [[ "${USE_ORIGINAL_FILENAME:-false}" == "true" ]] && target_file="$filename" so with the app renamed to Scanopy the binary lands at /usr/bin/Scanopy while the unit starts /usr/bin/scanopy-server, and the service never comes up on a fresh install. Rename it after the deploy, the same way the daemon block already renames "Scanopy Daemon". Keeping the app name is what matters here: it is also the version file (~/.scanopy), and changing it would make every existing container report an update it does not need.	2026-09-23 16:26:45 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	9a8bd0c380	Update CHANGELOG.md (#17458 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 14:26:14 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	4c03276ef7	Update CHANGELOG.md (#17456 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-23 14:18:04 +00:00
CanbiZ (MickLesk)	ab57fd7f94	Run Borg-UI with a single gunicorn worker (#17445 )	2026-09-23 16:17:35 +02:00