Let core unpack the restic binary for zerobyte

core's singlefile mode now unpacks a .bz2 single binary itself
(community-scripts/core fix/singlefile-compressed-asset). The manual mv +
bzip2 -d would then run on an already unpacked binary and fail.

Merge only after that core branch.

.github/workflows/scripts/pve-run-script.sh

@@ -373,20 +373,6 @@ setup_error() {
   exit 1
 }
 
-# Any answer means the app is up, unless it says it isn't: nothing at all,
-# 404/410 (the printed URL leads nowhere), 5xx (server error, proxy without
-# backend), or a 3xx left after 5 redirects (a loop). 401/403 are a login
-# wall (warpgate answers 401), 400 a quirk of the app: both pass.
-url_ok() { [[ "$1" =~ ^[1-4][0-9][0-9]$ && ! "$1" =~ ^(3[0-9][0-9]|404|410)$ ]]; }
-url_why() {
-  case "$1" in
-  404 | 410) echo "the printed URL leads nowhere" ;;
-  5??) echo "server error" ;;
-  3??) echo "still redirecting after 5 hops" ;;
-  *) echo "the app never answered" ;;
-  esac
-}
-
 # --- Reserve a container ID ---------------------------------------------------
 # A lock file per ID, not just "first free one", because the engine only creates
 # the container minutes later and two jobs would otherwise pick the same ID.
@@ -629,8 +615,8 @@ take_screenshot() {
 }
 
 # Is the app up? No failed services, and the URL the script tells the user to
-# open, e.g. http://${IP}:1337/admin, answers without an error (see url_ok;
-# redirects are followed, so a jump to /login is fine). A script that prints no URL has no web UI to check.
+# open, e.g. http://${IP}:1337/admin, answers 200 (after redirects, so a jump
+# to /login is fine). A script that prints no URL has no web UI to check.
 # Run after the install and again after the update. Sets health_problem.
 app_url() { # the URL the script at $1 tells the user to open
   local pattern
@@ -653,13 +639,13 @@ check_health() {
   local waited
   for ((waited = 0; waited < URL_WAIT; waited += 5)); do
     http_code=$(curl -sk -L --max-redirs 5 -o /dev/null -w '%{http_code}' --max-time 10 "$url" || true)
-    url_ok "$http_code" && break
+    [[ "$http_code" =~ ^2[0-9][0-9]$ ]] && break
     sleep 5
   done
   # Also when the check fails: an error page explains more than a status code.
   [[ "$http_code" =~ ^[1-5][0-9][0-9]$ ]] && take_screenshot "$1"
-  url_ok "$http_code" ||
-    { health_problem="${url} answered ${http_code/#000/nothing} within ${URL_WAIT}s ($(url_why "$http_code"))"; return 1; }
+  [[ "$http_code" =~ ^2[0-9][0-9]$ ]] ||
+    { health_problem="${url} answered ${http_code/#000/nothing} instead of 200 within ${URL_WAIT}s"; return 1; }
 }
 
 check_health screenshot.png || fail "$health_problem"

.github/workflows/scripts/pve-run-vm.sh

@@ -121,7 +121,7 @@ vm_build_and_check() {
     for ((waited = 0; waited < VM_URL_WAIT; waited += 10)); do
       vm_running || fail "VM ${ctid} stopped by itself while its web UI was awaited"
       http_code=$(curl -sk -L --max-redirs 5 -o /dev/null -w '%{http_code}' --max-time 10 "$url" || true)
-      url_ok "$http_code" && break
+      [[ "$http_code" =~ ^2[0-9][0-9]$ ]] && break
       sleep 10
     done
     [[ "$http_code" =~ ^[1-5][0-9][0-9]$ ]] && take_screenshot screenshot.png
@@ -130,8 +130,8 @@ vm_build_and_check() {
     sleep 20
   fi
   [[ -s "$OUT_DIR/screenshot.png" ]] || vm_console_shot
-  if [[ -n "$url" ]] && ! url_ok "$http_code"; then
-    fail "${url} answered ${http_code/#000/nothing} within ${VM_URL_WAIT}s"
+  if [[ -n "$url" && ! "$http_code" =~ ^2[0-9][0-9]$ ]]; then
+    fail "${url} answered ${http_code/#000/nothing} instead of 200 within ${VM_URL_WAIT}s"
   fi
   vm_running || fail "VM ${ctid} stopped by itself"
 

CHANGELOG.md

@@ -581,15 +581,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
-## 2026-11-13
-
-### 💾 Core
-
-  - fetch the install script before the container is created [@MickLesk](https://github.com/MickLesk) ([core#236](https://github.com/community-scripts/core/pull/236))
-- Download a corrupt local template again instead of keeping it [@MickLesk](https://github.com/MickLesk) ([core#235](https://github.com/community-scripts/core/pull/235))
-- core: say why a container stopped by itself during its setup [@MickLesk](https://github.com/MickLesk) ([core#234](https://github.com/community-scripts/core/pull/234))
-- Shield pct start and the template check from a closed console [@MickLesk](https://github.com/MickLesk) ([core#239](https://github.com/community-scripts/core/pull/239))
-
 ## 2026-11-12
 
 ### 🆕 New Scripts
@@ -600,7 +591,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
   - #### 🐞 Bug Fixes
 
-    - OnlyOffice: change ct port to 8083 [@MickLesk](https://github.com/MickLesk) ([#18642](https://github.com/community-scripts/ProxmoxVE/pull/18642))
     - dotnetaspwebapi: start the service only once an app is deployed [@MickLesk](https://github.com/MickLesk) ([#18639](https://github.com/community-scripts/ProxmoxVE/pull/18639))
     - Whisparr-eros: set the first login and save it [@MickLesk](https://github.com/MickLesk) ([#18617](https://github.com/community-scripts/ProxmoxVE/pull/18617))
 
@@ -608,18 +598,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
     - Updated ASP.NET Web App script to Debian and adds a .Net selection [@kris701](https://github.com/kris701) ([#18628](https://github.com/community-scripts/ProxmoxVE/pull/18628))
 
-### 💾 Core
-
-  - github: bump workflow actions to their current majors [@MickLesk](https://github.com/MickLesk) ([core#240](https://github.com/community-scripts/core/pull/240))
-- Say what the host sees when a container gets no address [@MickLesk](https://github.com/MickLesk) ([core#230](https://github.com/community-scripts/core/pull/230))
-- Fall back to public DNS for Alpine containers too [@MickLesk](https://github.com/MickLesk) ([core#231](https://github.com/community-scripts/core/pull/231))
-- Do not fail a finished install over the monitoring service [@MickLesk](https://github.com/MickLesk) ([core#232](https://github.com/community-scripts/core/pull/232))
-- Deploy a release by moving it, and stop on a full disk² [@MickLesk](https://github.com/MickLesk) ([core#233](https://github.com/community-scripts/core/pull/233))
-- core: say when pct create fails because timedatectl does not answer [@MickLesk](https://github.com/MickLesk) ([core#237](https://github.com/community-scripts/core/pull/237))
-- ref: stop calling every exit 255 a dpkg error [@MickLesk](https://github.com/MickLesk) ([core#238](https://github.com/community-scripts/core/pull/238))
-- Write uv's shell completions without STD [@MickLesk](https://github.com/MickLesk) ([core#241](https://github.com/community-scripts/core/pull/241))
-- Generate database passwords with random_password / Keep the database helpers' credentials files private [@MickLesk](https://github.com/MickLesk) ([core#242](https://github.com/community-scripts/core/pull/242))
-
 ### 📚 Documentation
 
   - github: bump workflow actions to their current majors [@MickLesk](https://github.com/MickLesk) ([#18637](https://github.com/community-scripts/ProxmoxVE/pull/18637))

ct/marimo.sh

@@ -1,66 +0,0 @@
-#!/usr/bin/env bash
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/marimo-team/marimo
-
-APP="marimo"
-var_tags="${var_tags:-notebook;python;data}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-6}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-export var_token_password="${var_token_password:-}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/marimo ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "marimo" "marimo-team/marimo"; then
-    msg_info "Stopping marimo"
-    systemctl stop marimo
-    msg_ok "Stopped marimo"
-
-    PYTHON_VERSION="3.13" setup_uv
-
-    msg_info "Updating marimo"
-    $STD uv pip install --upgrade --python /opt/marimo/.venv/bin/python "marimo[recommended]==${CHECK_UPDATE_RELEASE}" pandas
-    cat <<EOF >~/.marimo
-${CHECK_UPDATE_RELEASE}
-EOF
-    msg_ok "Updated marimo"
-
-    msg_info "Starting marimo"
-    systemctl start marimo
-    msg_ok "Started marimo"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:2718${CL}"
-echo -e "${INFO}${YW}Password: MARIMO_TOKEN_PASSWORD in /opt/marimo_data/.env (inside the container)${CL}"

ct/onlyoffice.sh

@@ -52,4 +52,4 @@ description
 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:8083${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}${CL}"

install/marimo-install.sh

@@ -1,62 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/marimo-team/marimo
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-PYTHON_VERSION="3.13" setup_uv
-
-MARIMO_VERSION="${var_appversion:-$(get_latest_github_release "marimo-team/marimo")}"
-msg_info "Installing marimo ${MARIMO_VERSION}"
-$STD uv venv --python 3.13 /opt/marimo/.venv
-$STD uv pip install --python /opt/marimo/.venv/bin/python "marimo[recommended]==${MARIMO_VERSION}" pandas
-cat <<EOF >~/.marimo
-${MARIMO_VERSION}
-EOF
-msg_ok "Installed marimo ${MARIMO_VERSION}"
-
-msg_info "Configuring marimo"
-mkdir -p /opt/marimo_data/notebooks /root/.config/marimo
-cat <<EOF >/opt/marimo_data/.env
-MARIMO_TOKEN_PASSWORD=${var_token_password:-$(random_password)}
-EOF
-chmod 600 /opt/marimo_data/.env
-cat <<EOF >/root/.config/marimo/marimo.toml
-[package_management]
-manager = "uv"
-EOF
-msg_ok "Configured marimo"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/marimo.service
-[Unit]
-Description=marimo
-After=network.target
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/marimo_data/notebooks
-EnvironmentFile=/opt/marimo_data/.env
-Environment=MARIMO_SKIP_UPDATE_CHECK=1
-ExecStart=/opt/marimo/.venv/bin/marimo -y edit --headless --host 0.0.0.0 --port 2718 --token-password \${MARIMO_TOKEN_PASSWORD} /opt/marimo_data/notebooks
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now marimo
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/zerobyte-install.sh

@@ -25,9 +25,6 @@ $STD apt install -y \
 msg_ok "Installed Dependencies"
 
 fetch_and_deploy_gh_release "restic" "restic/restic" "singlefile" "latest" "/usr/local/bin" "restic_*_linux_$(arch_resolve).bz2"
-mv /usr/local/bin/restic /usr/local/bin/restic.bz2
-bzip2 -d /usr/local/bin/restic.bz2
-chmod +x /usr/local/bin/restic
 
 fetch_and_deploy_gh_release "rclone" "rclone/rclone" "prebuild" "latest" "/opt/rclone" "rclone-*-linux-$(arch_resolve).zip"
 ln -sf /opt/rclone/rclone /usr/local/bin/rclone