MongoDB: Implement kernel version check and patch

.github/workflows/close-invalid-pr-template.yml

@@ -1,163 +0,0 @@
-name: Close PRs Missing Template
-
-on:
-  pull_request_target:
-    branches: ["main"]
-    types: [opened, edited, reopened, synchronize, labeled]
-
-jobs:
-  validate-pr-template:
-    if: github.repository == 'community-scripts/ProxmoxVE'
-    runs-on: ubuntu-latest
-    permissions:
-      pull-requests: write
-      issues: write
-      contents: read
-    steps:
-      - name: Close PR if it does not follow the PR template
-        uses: actions/github-script@v7
-        with:
-          script: |
-            const pr = context.payload.pull_request;
-            const prNumber = pr.number;
-            const author = pr.user.login;
-            const owner = context.repo.owner;
-            const repo = context.repo.repo;
-
-            const allowedBots = [
-              "push-app-to-main[bot]",
-              "push-app-to-main",
-              "community-scripts-pr-app",
-              "github-actions[bot]",
-              "dependabot[bot]",
-            ];
-
-            if (allowedBots.includes(author) || author.endsWith("[bot]")) {
-              core.info(`PR #${prNumber} by bot "${author}" — skipping template validation.`);
-              return;
-            }
-
-            const association = pr.author_association;
-            const exemptAssociations = ["OWNER", "MEMBER", "COLLABORATOR"];
-            if (exemptAssociations.includes(association)) {
-              core.info(`PR #${prNumber} by ${association} "${author}" — skipping template validation.`);
-              return;
-            }
-
-            const labels = pr.labels.map((label) => label.name);
-            const skipLabels = ["automated pr", "keep open"];
-
-            if (skipLabels.some((label) => labels.includes(label))) {
-              core.info(`PR #${prNumber} has a skip label (${labels.join(", ")}) — skipping template validation.`);
-              return;
-            }
-
-            if (pr.draft) {
-              core.info(`PR #${prNumber} is a draft — skipping template validation.`);
-              return;
-            }
-
-            const body = pr.body || "";
-            const failures = [];
-
-            const requiredSections = [
-              "## ✍️ Description",
-              "## ✅ Prerequisites",
-              "## 🛠️ Type of Change",
-            ];
-
-            for (const section of requiredSections) {
-              if (!body.includes(section)) {
-                failures.push(`Missing required section: \`${section}\``);
-              }
-            }
-
-            const descriptionMatch = body.match(
-              /## ✍️ Description\s*\n+([\s\S]*?)(?=\n## )/i
-            );
-            const description = (descriptionMatch?.[1] || "").trim();
-            if (!description) {
-              failures.push("The **Description** section is empty.");
-            }
-
-            const prerequisiteCheckboxes = [
-              "**Self-review completed**",
-              "**Tested thoroughly**",
-              "**No security risks**",
-            ];
-
-            for (const checkbox of prerequisiteCheckboxes) {
-              const escaped = checkbox.replace(/([.*+?^=!:${}()|[\]\/\\])/g, "\\$1");
-              const regex = new RegExp(`- \\[(x|X)\\]\\s*${escaped}`, "i");
-              if (!regex.test(body)) {
-                failures.push(`Prerequisite not checked: ${checkbox}`);
-              }
-            }
-
-            const typeOfChangeCheckboxes = [
-              "🐞 **Bug fix**",
-              "✨ **New feature**",
-              "💥 **Breaking change**",
-              "🆕 **New script**",
-              "🌍 **Website update**",
-              "🔧 **Refactoring / Code Cleanup**",
-              "📝 **Documentation update**",
-            ];
-
-            const hasTypeChecked = typeOfChangeCheckboxes.some((checkbox) => {
-              const escaped = checkbox.replace(/([.*+?^=!:${}()|[\]\/\\])/g, "\\$1");
-              const regex = new RegExp(`- \\[(x|X)\\]\\s*${escaped}`, "i");
-              return regex.test(body);
-            });
-
-            if (!hasTypeChecked) {
-              failures.push("At least one **Type of Change** checkbox must be checked.");
-            }
-
-            if (failures.length === 0) {
-              core.info(`PR #${prNumber} follows the PR template.`);
-              return;
-            }
-
-            core.info(`Closing PR #${prNumber} — template validation failed.`);
-
-            const templateUrl =
-              "https://github.com/community-scripts/ProxmoxVE/blob/main/.github/pull_request_template.md";
-            const failureList = failures.map((item) => `- ${item}`).join("\n");
-
-            const comment = [
-              `👋 Hi @${author},`,
-              ``,
-              `This pull request was closed because it does not follow the [PR template](${templateUrl}).`,
-              ``,
-              `Please fix the following and open a new PR (or reopen this one after updating the description):`,
-              ``,
-              failureList,
-              ``,
-              `> Use the template sections, fill in the description, check all prerequisite boxes, and select at least one type of change.`,
-              ``,
-              `Maintainers can add the \`keep open\` label to exempt a PR from this check.`,
-              ``,
-              `Thank you for contributing! 🙏`,
-            ].join("\n");
-
-            await github.rest.issues.createComment({
-              owner,
-              repo,
-              issue_number: prNumber,
-              body: comment,
-            });
-
-            await github.rest.pulls.update({
-              owner,
-              repo,
-              pull_number: prNumber,
-              state: "closed",
-            });
-
-            await github.rest.issues.addLabels({
-              owner,
-              repo,
-              issue_number: prNumber,
-              labels: ["missing pr template"],
-            });

ct/headers/invidious

@@ -1,6 +0,0 @@
-    ____           _     ___                 
-   /  _/___ _   __(_)___/ (_)___  __  _______
-   / // __ \ | / / / __  / / __ \/ / / / ___/
- _/ // / / / |/ / / /_/ / / /_/ / /_/ (__  ) 
-/___/_/ /_/|___/_/\__,_/_/\____/\__,_/____/  
-                                             

ct/invidious.sh

@@ -1,77 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: vhsdream
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/iv-org/invidious
-
-APP="Invidious"
-var_tags="${var_tags:-streaming}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-20}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/invidious ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "Invidious" "iv-org/invidious"; then
-    msg_info "Stopping services"
-    $STD systemctl stop invidious-companion invidious
-    msg_ok "Stopped services"
-
-    create_backup /opt/invidious/config/config.yml
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Invidious" "iv-org/invidious" "tarball" "latest" "/opt/invidious"
-    if check_for_gh_release "Invidious-Companion" "iv-org/invidious-companion"; then
-      CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Invidious-Companion" "iv-org/invidious-companion" "prebuild" "latest" "/opt/invidious-companion" "invidious_companion-$(arch_resolve x86_64 aarch64)-unknown-linux-gnu.tar.gz"
-    fi
-
-    msg_info "Rebuilding Invidious"
-    cd /opt/invidious
-    INVIDIOUS_VERSION="$(cat ~/.invidious 2>/dev/null || echo "unknown")"
-    INVIDIOUS_VERSION="${INVIDIOUS_VERSION#v}"
-    sed -i \
-      -e "s~^\(\s*CURRENT_BRANCH\s*=\).*~\1 \"master\"~" \
-      -e "s~^\(\s*CURRENT_COMMIT\s*=\).*~\1 \"\"~" \
-      -e "s~^\(\s*CURRENT_VERSION\s*=\).*~\1 \"${INVIDIOUS_VERSION}\"~" \
-      -e "s~^\(\s*CURRENT_TAG\s*=\).*~\1 \"${INVIDIOUS_VERSION}\"~" \
-      -e "s~^\(\s*ASSET_COMMIT\s*=\).*~\1 \"\"~" \
-      src/invidious.cr
-    $STD make
-    msg_ok "Rebuilt Invidious"
-
-    restore_backup
-
-    msg_info "Starting services"
-    $STD systemctl start invidious invidious-companion
-    msg_ok "Started services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"

install/invidious-install.sh

@@ -1,121 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: vhsdream
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/iv-org/invidious
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  build-essential \
-  git \
-  pkg-config \
-  libssl-dev \
-  libxml2-dev \
-  libyaml-dev \
-  libgmp-dev \
-  libreadline-dev \
-  librsvg2-bin \
-  libsqlite3-dev \
-  zlib1g-dev \
-  libpcre2-dev \
-  libevent-dev \
-  fonts-open-sans
-msg_ok "Installed Dependencies"
-
-if [[ "$(arch_resolve amd64 arm64)" == "amd64" ]]; then
-  setup_deb822_repo "crystal" "https://download.opensuse.org/repositories/devel:/languages:/crystal/Debian_13/Release.key" "https://download.opensuse.org/repositories/devel:/languages:/crystal/Debian_13/" "./"
-  $STD apt install -y crystal
-else
-  fetch_and_deploy_gh_release "Crystal" "crystal-lang/crystal" "prebuild" "latest" "/opt/crystal" "crystal-*-linux-aarch64-bundled.tar.gz"
-  ln -sf /opt/crystal/bin/crystal /usr/local/bin/crystal
-  ln -sf /opt/crystal/bin/shards /usr/local/bin/shards
-fi
-
-PG_VERSION="17" setup_postgresql
-PG_DB_NAME="invidious" PG_DB_USER="invidious" setup_postgresql_db
-fetch_and_deploy_gh_release "Invidious" "iv-org/invidious" "tarball" "latest" "/opt/invidious"
-fetch_and_deploy_gh_release "Invidious Companion" "iv-org/invidious-companion" "prebuild" "latest" "/opt/invidious-companion" "invidious_companion-$(arch_resolve x86_64 aarch64)-unknown-linux-gnu.tar.gz"
-
-msg_info "Building Invidious"
-cd /opt/invidious
-INVIDIOUS_VERSION="$(cat ~/.invidious 2>/dev/null || echo "unknown")"
-INVIDIOUS_VERSION="${INVIDIOUS_VERSION#v}"
-sed -i \
-  -e "s~^\(\s*CURRENT_BRANCH\s*=\).*~\1 \"master\"~" \
-  -e "s~^\(\s*CURRENT_COMMIT\s*=\).*~\1 \"\"~" \
-  -e "s~^\(\s*CURRENT_VERSION\s*=\).*~\1 \"${INVIDIOUS_VERSION}\"~" \
-  -e "s~^\(\s*CURRENT_TAG\s*=\).*~\1 \"${INVIDIOUS_VERSION}\"~" \
-  -e "s~^\(\s*ASSET_COMMIT\s*=\).*~\1 \"\"~" \
-  src/invidious.cr
-$STD make
-msg_ok "Built Invidious"
-
-msg_info "Configuring Invidious"
-SECRET_KEY="$(openssl rand -hex 8)"
-HMAC_KEY="$(openssl rand -hex 32)"
-sed -e '\~^db:~,\~dbname:~d' \
-  -e "s~^#database_.*~database_url: postgres://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}~" \
-  -e 's~^#check_tables.*~check_tables: true~' \
-  -e 's~^#invidious_companion:~invidious_companion:~' \
-  -e 's~^#  - private_~  - private_~' \
-  -e "s~^#invidious_companion_key:.*~invidious_companion_key: \"${SECRET_KEY}\"~" \
-  -e "s~^hmac_key:.*~hmac_key: \"${HMAC_KEY}\"~" \
-  /opt/invidious/config/config.example.yml >/opt/invidious/config/config.yml
-chmod 600 /opt/invidious/config/config.yml
-
-cat <<EOF >/etc/logrotate.d/invidious.logrotate
-/opt/invidious/invidious.log {
-  rotate 4
-  weekly
-  notifempty
-  missingok
-  compress
-  minsize 1048576
-}
-EOF
-chmod 0644 /etc/logrotate.d/invidious.logrotate
-msg_ok "Configured Invidious"
-
-msg_info "Migrating database"
-$STD ./invidious --migrate
-msg_ok "Migrated database"
-
-msg_info "Configuring services"
-sed -e 's|^User=invidious|User=root|' \
-  -e 's|^Group=invidious|Group=root|' \
-  -e 's|/home/invidious/invidious|/opt/invidious|g' \
-  /opt/invidious/invidious.service >/etc/systemd/system/invidious.service
-mkdir -p /var/tmp/youtubei.js
-cat <<EOF >/etc/systemd/system/invidious-companion.service
-[Unit]
-Description=Invidious Companion
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/invidious-companion
-Environment=SERVER_SECRET_KEY=${SECRET_KEY}
-Environment=CACHE_DIRECTORY=/var/tmp/youtubei.js
-ExecStart=/opt/invidious-companion/invidious_companion
-Restart=always
-RestartSec=2s
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl -q enable --now invidious invidious-companion
-msg_ok "Configured services"
-
-motd_ssh
-customize
-cleanup_lxc

misc/tools.func

@@ -7431,6 +7431,18 @@ setup_mongodb() {
   mkdir -p /var/lib/mongodb
   chown -R mongodb:mongodb /var/lib/mongodb
 
+  local KERNEL_VERSION MONGO_MAJOR
+  KERNEL_VERSION=$(uname -r | cut -d- -f1)
+  MONGO_MAJOR="${MONGO_VERSION%%.*}"
+  if ((MONGO_MAJOR >= 8)) && [[ "$(printf '%s\n' "6.19" "$KERNEL_VERSION" | sort -V | head -n1)" == "6.19" ]]; then
+    mkdir -p /etc/systemd/system/mongod.service.d
+    cat <<EOF >/etc/systemd/system/mongod.service.d/rseq.conf
+[Service]
+Environment=GLIBC_TUNABLES=glibc.pthread.rseq=1
+EOF
+    systemctl daemon-reload
+  fi
+
   $STD systemctl enable mongod || {
     msg_warn "Failed to enable mongod service"
   }