mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-03-03 18:15:53 +00:00
dbdd891a99
* fix(error-handler): prevent silent() from re-enabling error handling during recovery Root cause: silent() (core.func) unconditionally calls set -Eeuo pipefail and trap 'error_handler' ERR after every command. When build_container() intentionally disables error handling for its recovery section, any intermediate call through silent()/ re-enables it. This causes the grep/sed pipeline for missing_cmd extraction to trigger error_handler (grep returns exit code 1 on no match + pipefail = fatal). Fixes: 1. silent(): Save errexit state before disabling, only restore if it was active. Callers that intentionally disabled error handling (e.g. build_container recovery) are no longer silently re-enabled. 2. build.func: Add || true to missing_cmd grep pipeline as defense-in-depth against pipeline failure propagation. 3. build.func: Add explicit set +Eeuo pipefail / trap - ERR after post_update_to_api() call, before error classification grep/sed section. 4. build.func: Remove stale global combined_log variable from variables() that used a different path format (/tmp/install-SESSION-combined.log) than the actual local variable (/tmp/NSAPP-CTID-SESSION.log). The global was never written to and caused confusion when error_handler displayed it. * Update build.func * chore(install): add Github source links to all setup_nodejs scripts 52 install scripts had a project website in '# Source:' but no GitHub link. Merged the GitHub repo URL into the Source header as: # Source: https://website.com/ | Github: https://github.com/OWNER/REPO Repos sourced from fetch_and_deploy_gh_release calls, get_latest_github_release calls, or known project repos for npm/pip installed apps. Two scripts (fumadocs, pve-scripts-local) had no Source line at all — added one. Shinobi skipped (GitLab-only, no GitHub repo). * chore(install): add Github source links to all fetch_and_deploy scripts 77 additional install scripts had fetch_and_deploy_gh_release calls but no GitHub link in the Source header. Merged the primary app repo into the Source header as: # Source: https://website.com/ | Github: https://github.com/OWNER/REPO Where multiple fetch_and_deploy calls existed (app + dependency), the primary app repo was selected: - ersatztv: ErsatzTV/ErsatzTV (not ffmpeg) - firefly: firefly-iii/firefly-iii (not data-importer) - komga: gotson/komga (not kepubify dep) - sabnzbd: sabnzbd/sabnzbd (not par2cmdline-turbo dep) - signoz: SigNoz/signoz (not otel-collector) - tunarr: chrisbenincasa/tunarr (not ffmpeg dep) Also fixed cosmos-install.sh double https:// in Source URL. Skipped: autocaliweb (source already on codeberg, GitHub repos are deps only) * revert: restore misc/build.func and misc/core.func to main state These error-handler fixes belong to fix/error-handler-recovery, not to this sources-only branch. * chore(ct,tools): sync Source headers with install/ and add Github links to addon scripts
124 lines
3.2 KiB
Bash
124 lines
3.2 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Copyright (c) 2021-2026 community-scripts ORG
|
|
# Author: MickLesk (Canbiz)
|
|
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
|
# Source: https://tandoor.dev/ | Github: https://github.com/TandoorRecipes/recipes
|
|
|
|
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
|
color
|
|
verb_ip6
|
|
catch_errors
|
|
setting_up_container
|
|
network_check
|
|
update_os
|
|
|
|
msg_info "Installing Dependencies (Patience)"
|
|
$STD apt install -y \
|
|
build-essential \
|
|
python3 \
|
|
libpq-dev \
|
|
libmagic-dev \
|
|
libzbar0 \
|
|
nginx \
|
|
libsasl2-dev \
|
|
libldap2-dev \
|
|
libssl-dev \
|
|
pkg-config \
|
|
libxmlsec1-dev \
|
|
libxml2-dev \
|
|
libxmlsec1-openssl
|
|
msg_ok "Installed Dependencies"
|
|
|
|
NODE_VERSION="22" NODE_MODULE="yarn" setup_nodejs
|
|
fetch_and_deploy_gh_release "tandoor" "TandoorRecipes/recipes" "tarball" "latest" "/opt/tandoor"
|
|
PG_VERSION="17" setup_postgresql
|
|
PYTHON_VERSION="3.13" setup_uv
|
|
PG_DB_USER="tandoor" PG_DB_NAME="db_recipes" PG_DB_EXTENSIONS="unaccent,pg_trgm" setup_postgresql_db
|
|
SECRET_KEY=$(openssl rand -base64 45 | sed 's/\//\\\//g')
|
|
|
|
msg_info "Setup Tandoor"
|
|
mkdir -p /opt/tandoor/{config,api,mediafiles,staticfiles}
|
|
cd /opt/tandoor
|
|
$STD uv venv --clear .venv --python=python3
|
|
$STD uv pip install -r requirements.txt --python .venv/bin/python
|
|
cd /opt/tandoor/vue3
|
|
$STD yarn install
|
|
$STD yarn build
|
|
cat <<EOF >/opt/tandoor/.env
|
|
SECRET_KEY=$SECRET_KEY
|
|
TZ=Europe/Berlin
|
|
|
|
DB_ENGINE=django.db.backends.postgresql
|
|
POSTGRES_HOST=localhost
|
|
POSTGRES_DB=$PG_DB_NAME
|
|
POSTGRES_PORT=5432
|
|
POSTGRES_USER=$PG_DB_USER
|
|
POSTGRES_PASSWORD=$PG_DB_PASS
|
|
|
|
STATIC_URL=/staticfiles/
|
|
MEDIA_URL=/media/
|
|
EOF
|
|
|
|
TANDOOR_VERSION=$(get_latest_github_release "TandoorRecipes/recipes")
|
|
cat <<EOF >/opt/tandoor/cookbook/version_info.py
|
|
TANDOOR_VERSION = "$TANDOOR_VERSION"
|
|
TANDOOR_REF = "bare-metal"
|
|
VERSION_INFO = []
|
|
EOF
|
|
|
|
cd /opt/tandoor
|
|
$STD /opt/tandoor/.venv/bin/python manage.py migrate
|
|
$STD /opt/tandoor/.venv/bin/python manage.py collectstatic --no-input
|
|
msg_ok "Installed Tandoor"
|
|
|
|
msg_info "Creating Services"
|
|
cat <<EOF >/etc/systemd/system/tandoor.service
|
|
[Unit]
|
|
Description=gunicorn daemon for tandoor
|
|
After=network.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
Restart=always
|
|
RestartSec=3
|
|
WorkingDirectory=/opt/tandoor
|
|
EnvironmentFile=/opt/tandoor/.env
|
|
ExecStart=/opt/tandoor/.venv/bin/gunicorn --error-logfile /tmp/gunicorn_err.log --log-level debug --capture-output --bind unix:/opt/tandoor/tandoor.sock recipes.wsgi:application
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
|
|
cat <<'EOF' >/etc/nginx/conf.d/tandoor.conf
|
|
server {
|
|
listen 8002;
|
|
access_log /var/log/nginx/access.log;
|
|
error_log /var/log/nginx/error.log;
|
|
client_max_body_size 128M;
|
|
# serve media files
|
|
location /static/ {
|
|
alias /opt/tandoor/staticfiles/;
|
|
}
|
|
|
|
location /media/ {
|
|
alias /opt/tandoor/mediafiles/;
|
|
}
|
|
|
|
location / {
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;
|
|
proxy_pass http://unix:/opt/tandoor/tandoor.sock;
|
|
}
|
|
}
|
|
EOF
|
|
systemctl reload nginx
|
|
systemctl enable -q --now tandoor
|
|
msg_ok "Created Services"
|
|
|
|
motd_ssh
|
|
customize
|
|
cleanup_lxc
|