Let ArchiveBox reach 0.9 instead of staying on 0.7.4

uv pip install --system targets the container's Python 3.11, and every ArchiveBox
release from 0.9 on requires 3.13, so the resolver silently fell back to 0.7.4.
The package now lives in its own 3.13 venv, with the interpreter outside root's
home because ArchiveBox drops privileges while importing. The expect block is
gone: init and createsuperuser both run unattended now, and the server moved to
its new default port.

CHANGELOG.md

@@ -546,14 +546,32 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
+## 2026-09-25
+
+### 🚀 Updated Scripts
+
+  - #### 🔧 Refactor
+
+    - Docker-LXC: remove Portainer installation from install [@MickLesk](https://github.com/MickLesk) ([#17493](https://github.com/community-scripts/ProxmoxVE/pull/17493))
+
+### 💾 Core
+
+  - incus: do not let an install script block on an invisible prompt [@MickLesk](https://github.com/MickLesk) ([core#71](https://github.com/community-scripts/core/pull/71))
+- tel: report progress from installs only, not updates [@MickLesk](https://github.com/MickLesk) ([core#72](https://github.com/community-scripts/core/pull/72))
+
 ## 2026-09-24
 
 ### 🚀 Updated Scripts
 
   - #### 🐞 Bug Fixes
 
+    - Declare the RomM filesystem structure required since 5.3.0 [@MickLesk](https://github.com/MickLesk) ([#17480](https://github.com/community-scripts/ProxmoxVE/pull/17480))
     - general: use apt_update_safe instead of aborting on a failed apt update [@MickLesk](https://github.com/MickLesk) ([#17462](https://github.com/community-scripts/ProxmoxVE/pull/17462))
 
+  - #### 🔧 Refactor
+
+    - Journiv: Serve Node Frontend and add HTTP Auth .env [@MickLesk](https://github.com/MickLesk) ([#17479](https://github.com/community-scripts/ProxmoxVE/pull/17479))
+
 ### 💾 Core
 
   - core: accept an off-subnet gateway for /31 and /32 [@MickLesk](https://github.com/MickLesk) ([core#70](https://github.com/community-scripts/core/pull/70))

ct/archivebox.sh

@@ -32,6 +32,7 @@ function update_script() {
   fi
 
   NODE_VERSION="22" NODE_MODULE="@postlight/parser@latest,single-file-cli@latest" setup_nodejs
+  export UV_PYTHON_INSTALL_DIR="/opt/archivebox/python"
   PYTHON_VERSION="3.13" setup_uv
 
   ensure_dependencies chromium
@@ -40,15 +41,41 @@ function update_script() {
   systemctl stop archivebox
   msg_ok "Stopped Service"
 
-  msg_info "Upgrading Playwright"
-  $STD uv pip install playwright --system --break-system-packages
-  $STD playwright install-deps chromium
-  msg_ok "Upgraded Playwright"
+  # Earlier installs used the system interpreter, which caps ArchiveBox at 0.7.4.
+  if [[ ! -x /opt/archivebox/venv/bin/archivebox ]]; then
+    msg_info "Moving ArchiveBox to its own Python 3.13 environment"
+    $STD uv venv --python 3.13 /opt/archivebox/venv
+    # Keep whatever port this container already answers on, or a reverse proxy in front
+    # of it would silently stop resolving.
+    local port
+    port="$(awk -F: '/^ExecStart=/ {print $NF}' /etc/systemd/system/archivebox.service 2>/dev/null)"
+    [[ "$port" =~ ^[0-9]+$ ]] || port=5797
+    cat <<EOF >/etc/systemd/system/archivebox.service
+[Unit]
+Description=ArchiveBox Server
+After=network.target
+
+[Service]
+User=archivebox
+WorkingDirectory=/opt/archivebox/data
+ExecStart=/opt/archivebox/venv/bin/archivebox server 0.0.0.0:${port}
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+    systemctl daemon-reload
+    msg_ok "Moved ArchiveBox to its own Python 3.13 environment (port ${port})"
+  fi
 
   msg_info "Updating ArchiveBox"
+  $STD uv pip install --python /opt/archivebox/venv/bin/python --upgrade archivebox playwright
+  $STD /opt/archivebox/venv/bin/playwright install-deps chromium
+  chown -R archivebox:archivebox /opt/archivebox/python /opt/archivebox/venv
+  # Without this a shell still reaches the old 0.7.4 entry point against a 0.9 collection.
+  ln -sf /opt/archivebox/venv/bin/archivebox /usr/local/bin/archivebox
   cd /opt/archivebox/data
-  $STD uv pip install --system --break-system-packages --upgrade --no-reinstall archivebox
-  sudo -u archivebox archivebox init
+  $STD sudo -u archivebox /opt/archivebox/venv/bin/archivebox init
   msg_ok "Updated ArchiveBox"
 
   msg_info "Starting Service"
@@ -65,4 +92,4 @@ description
 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8000/admin/login${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:5797/admin/login${CL}"

ct/docker.sh

@@ -73,5 +73,3 @@ description
 
 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Portainer is available as a separate addon. Install it with:${CL}"
-echo -e "${GATEWAY}${BGN}bash -c \"\$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/portainer.sh)\"${CL}"

ct/immich.sh

@@ -193,8 +193,6 @@ EOF
     export SHARP_FORCE_GLOBAL_LIBVIPS=true
     $STD pnpm --dir "$APP_DIR/node_modules/sharp" exec npm run build
 
-    ln -sfn "$GEO_DIR" "$APP_DIR/geodata"
-
     # Patch helmet.json: disable upgrade-insecure-requests for HTTP access
     if [[ -f "$APP_DIR/helmet.json" ]]; then
       jq '.contentSecurityPolicy.directives["upgrade-insecure-requests"] = null' "$APP_DIR/helmet.json" >"$APP_DIR/helmet.json.tmp" && mv "$APP_DIR/helmet.json.tmp" "$APP_DIR/helmet.json"
@@ -325,7 +323,7 @@ EOF
     [[ ! -f "$GEO_DIR/countryInfo.txt" ]] && curl_with_retry "https://download.geonames.org/export/dump/countryInfo.txt" "countryInfo.txt"
     ln -s "${UPLOAD_DIR:-/opt/immich/upload}" "$APP_DIR"/upload
     ln -s "${UPLOAD_DIR:-/opt/immich/upload}" "$ML_DIR"/upload
-    ln -s "$GEO_DIR" "$APP_DIR"
+    ln -sfn "$GEO_DIR" "$APP_DIR/geodata"
     [[ ! -f /usr/bin/immich ]] && ln -sf "$APP_DIR"/cli/bin/immich /usr/bin/immich
     [[ ! -f /usr/bin/immich-admin ]] && ln -sf "$APP_DIR"/bin/immich-admin /usr/bin/immich-admin
 

ct/journiv.sh

@@ -45,6 +45,17 @@ function update_script() {
     $STD uv sync --locked --no-editable --no-install-project
     msg_ok "Updated Python Environment"
 
+    NODE_VERSION="24" setup_nodejs
+    msg_info "Building Frontend"
+    cd /opt/journiv/frontend
+    $STD npm ci
+    $STD npm run build
+    cd /opt/journiv
+    msg_ok "Built Frontend"
+
+    grep -q '^ALLOW_INSECURE_COOKIE_AUTH_OVER_HTTP=' /opt/journiv.env ||
+      echo 'ALLOW_INSECURE_COOKIE_AUTH_OVER_HTTP=true' >>/opt/journiv.env
+
     msg_info "Running Database Migrations"
     set -a
     source /opt/journiv.env

ct/romm.sh

@@ -218,6 +218,18 @@ DROPEOF
     fi
     msg_ok "Updated ROMM"
 
+    # 5.3.0 refuses to start without filesystem.structure and dropped
+    # roms_folder/firmware_folder. A custom layout cannot be inferred.
+    ROMM_CFG=/var/lib/romm/config/config.yml
+    if [[ -f "$ROMM_CFG" ]] && ! grep -qE '^[[:space:]]*structure:' "$ROMM_CFG"; then
+      if grep -qE '^[[:space:]]*(roms_folder|firmware_folder):' "$ROMM_CFG"; then
+        msg_warn "RomM 5.3.0 removed roms_folder/firmware_folder - replace them with filesystem.structure in ${ROMM_CFG}"
+      else
+        printf '\nfilesystem:\n  structure:\n    default: "roms/{platform}/{game}"\n    firmware: "bios/{platform}"\n' >>"$ROMM_CFG"
+        msg_ok "Added filesystem.structure to ${ROMM_CFG}"
+      fi
+    fi
+
     msg_info "Starting Services"
     systemctl start romm-backend romm-worker romm-scheduler romm-watcher
     msg_ok "Started Services"

install/archivebox-install.sh

@@ -16,7 +16,6 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt-get install -y \
   git \
-  expect \
   libssl-dev \
   libldap2-dev \
   libsasl2-dev \
@@ -26,51 +25,33 @@ $STD apt-get install -y \
   chromium
 msg_ok "Installed Dependencies"
 
-msg_info "Installing Python Dependencies"
-$STD apt-get install -y \
-  python3-ldap \
-  python3-msgpack \
-  python3-regex
-msg_ok "Installed Python Dependencies"
-
 NODE_VERSION="22" NODE_MODULE="@postlight/parser@latest,single-file-cli@latest" setup_nodejs
+# ArchiveBox drops privileges on import, so its interpreter may not sit in root's home.
+export UV_PYTHON_INSTALL_DIR="/opt/archivebox/python"
 PYTHON_VERSION="3.13" setup_uv
 
-msg_info "Installing Playwright"
-$STD uv pip install playwright --system --break-system-packages
-$STD playwright install-deps chromium
-msg_ok "Installed Playwright"
-
 msg_info "Installing ArchiveBox"
 mkdir -p /opt/archivebox/{data,.npm,.cache,.local}
 $STD adduser --system --shell /bin/bash --gecos 'Archive Box User' --group --disabled-password --home /home/archivebox archivebox
-chown -R archivebox:archivebox /opt/archivebox/{data,.npm,.cache,.local}
+# A venv, not --system: the system interpreter is 3.11 and silently caps us at 0.7.4.
+$STD uv venv --python 3.13 /opt/archivebox/venv
+$STD uv pip install --python /opt/archivebox/venv/bin/python archivebox playwright
+$STD /opt/archivebox/venv/bin/playwright install-deps chromium
+ln -sf /opt/archivebox/venv/bin/archivebox /usr/local/bin/archivebox
+chown -R archivebox:archivebox /opt/archivebox
 chmod -R 755 /opt/archivebox/data
-$STD uv pip install archivebox --system --break-system-packages
-cd /opt/archivebox/data
-expect <<EOF
-set timeout -1
-log_user 0
-
-spawn sudo -u archivebox playwright install chromium
-spawn sudo -u archivebox archivebox setup
-
-expect "Username"
-send "\r"
-
-expect "Email address"
-send "\r"
-
-expect "Password"
-send "community-scripts.org\r"
-
-expect "Password (again)"
-send "community-scripts.org\r"
-
-expect eof
-EOF
 msg_ok "Installed ArchiveBox"
 
+msg_info "Initializing ArchiveBox"
+cd /opt/archivebox/data
+$STD sudo -u archivebox /opt/archivebox/venv/bin/archivebox init
+$STD sudo -u archivebox env \
+  DJANGO_SUPERUSER_USERNAME=admin \
+  DJANGO_SUPERUSER_EMAIL=admin@archivebox.local \
+  DJANGO_SUPERUSER_PASSWORD=community-scripts.org \
+  /opt/archivebox/venv/bin/archivebox manage createsuperuser --noinput
+msg_ok "Initialized ArchiveBox"
+
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/archivebox.service
 [Unit]
@@ -80,7 +61,7 @@ After=network.target
 [Service]
 User=archivebox
 WorkingDirectory=/opt/archivebox/data
-ExecStart=/usr/local/bin/archivebox server 0.0.0.0:8000
+ExecStart=/opt/archivebox/venv/bin/archivebox server 0.0.0.0:5797
 Restart=always
 
 [Install]

install/docker-install.sh

@@ -14,27 +14,7 @@ network_check
 update_os
 
 setup_deb_based() {
-  PORTAINER_AGENT_LATEST_VERSION=$(get_latest_github_release "portainer/agent")
-
   setup_docker
-
-  if prompt_confirm "${TAB3}Would you like to install Portainer (UI) via the community-scripts addon?" "n" 60; then
-    bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/portainer.sh)" <<<"y"
-  else
-    read -r -p "${TAB3}Would you like to install the Portainer Agent (for remote management)? <y/N> " prompt_agent
-    if [[ ${prompt_agent,,} =~ ^(y|yes)$ ]]; then
-      msg_info "Installing Portainer Agent $PORTAINER_AGENT_LATEST_VERSION"
-      $STD docker run -d \
-        -p 9001:9001 \
-        --name portainer_agent \
-        --restart=always \
-        -v /var/run/docker.sock:/var/run/docker.sock \
-        -v /var/lib/docker/volumes:/var/lib/docker/volumes \
-        portainer/agent
-      msg_ok "Installed Portainer Agent $PORTAINER_AGENT_LATEST_VERSION"
-    fi
-  fi
-
   read -r -p "${TAB3}Expose Docker TCP socket (insecure) ? [n = No, l = Local only (127.0.0.1), a = All interfaces (0.0.0.0)] <n/l/a>: " socket_choice
   case "${socket_choice,,}" in
   l)
@@ -89,8 +69,6 @@ setup_alpine() {
     curl -fsSL https://api.github.com/repos/"$1"/releases/latest | grep '"tag_name":' | cut -d'"' -f4
   }
   DOCKER_COMPOSE_LATEST_VERSION=$(get_latest_release "docker/compose")
-  PORTAINER_AGENT_LATEST_VERSION=$(get_latest_release "portainer/agent")
-
   read -r -p "${TAB3}Would you like to add Docker Compose? <y/N> " prompt
   if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
     msg_info "Installing Docker Compose $DOCKER_COMPOSE_LATEST_VERSION"
@@ -100,24 +78,6 @@ setup_alpine() {
     chmod +x "$DOCKER_CONFIG"/cli-plugins/docker-compose
     msg_ok "Installed Docker Compose $DOCKER_COMPOSE_LATEST_VERSION"
   fi
-
-  if prompt_confirm "${TAB3}Would you like to install Portainer (UI) via the community-scripts addon?" "n" 60; then
-    bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/portainer.sh)" <<<"y"
-  else
-    read -r -p "${TAB3}Would you like to add the Portainer Agent? <y/N> " prompt
-    if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
-      msg_info "Installing Portainer agent $PORTAINER_AGENT_LATEST_VERSION"
-      $STD docker run -d \
-        -p 9001:9001 \
-        --name portainer_agent \
-        --restart=always \
-        -v /var/run/docker.sock:/var/run/docker.sock \
-        -v /var/lib/docker/volumes:/var/lib/docker/volumes \
-        portainer/agent
-      msg_ok "Installed Portainer Agent $PORTAINER_AGENT_LATEST_VERSION"
-    fi
-  fi
-
   read -r -p "${TAB3}Would you like to expose the Docker TCP socket? <y/N> " prompt
   if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
     msg_info "Exposing Docker TCP socket"
@@ -129,7 +89,6 @@ setup_alpine() {
 }
 
 run_os_setup
-
 motd_ssh
 customize
 cleanup_lxc

install/journiv-install.sh

@@ -53,11 +53,21 @@ EXPORT_DIR=/opt/journiv_data/exports
 IMPORT_TEMP_DIR=/opt/journiv_data/imports/temp
 DOMAIN_NAME=${LOCAL_IP}
 DOMAIN_SCHEME=http
+# Journiv refuses to start on plain HTTP without this.
+ALLOW_INSECURE_COOKIE_AUTH_OVER_HTTP=true
 PYTHONPATH=/opt/journiv
 EOF
 chmod 600 /opt/journiv.env
 msg_ok "Configured Journiv"
 
+NODE_VERSION="24" setup_nodejs
+msg_info "Building Frontend"
+cd /opt/journiv/frontend
+$STD npm ci
+$STD npm run build
+cd /opt/journiv
+msg_ok "Built Frontend"
+
 msg_info "Initializing Database"
 set -a
 source /opt/journiv.env

install/romm-install.sh

@@ -117,9 +117,11 @@ cat <<'EOF' >/var/lib/romm/config/config.yml
 #     gc: ngc
 #     ps1: psx
 
-# The folder name where your roms are located (relative to library path)
-# filesystem:
-#   roms_folder: 'roms'
+# Required since 5.3.0: RomM refuses to start without an explicit structure.
+filesystem:
+  structure:
+    default: "roms/{platform}/{game}"
+    firmware: "bios/{platform}"
 
 # scan:
 #   priority: