Update CHANGELOG.md (#14956)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -472,12 +472,21 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ## 2026-06-05
 
+### 🆕 New Scripts
+
+  - MatterJS-Server ([#14951](https://github.com/community-scripts/ProxmoxVE/pull/14951))
+- CyberChef ([#14952](https://github.com/community-scripts/ProxmoxVE/pull/14952))
+
 ### 🚀 Updated Scripts
 
   - #### 🐞 Bug Fixes
 
     - OpenThread-BR: use systemd instead of init.d [@tomfrenzel](https://github.com/tomfrenzel) ([#14942](https://github.com/community-scripts/ProxmoxVE/pull/14942))
 
+  - #### ✨ New Features
+
+    - AMD IGPU support [@Learath](https://github.com/Learath) ([#14944](https://github.com/community-scripts/ProxmoxVE/pull/14944))
+
   - #### 💥 Breaking Changes
 
     - update authentik to 2026.5.2 [@thieneret](https://github.com/thieneret) ([#14846](https://github.com/community-scripts/ProxmoxVE/pull/14846))

ct/cyberchef.sh

@@ -0,0 +1,62 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: ethan-hgwr
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/gchq/CyberChef
+
+APP="CyberChef"
+var_tags="${var_tags:-security;data;tools}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-no}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/cyberchef ]]; then
+      msg_error "No ${APP} Installation Found!"
+      exit
+  fi
+
+  if check_for_gh_release "cyberchef" "gchq/CyberChef"; then
+    msg_info "Stopping Service"
+    systemctl stop caddy
+    msg_ok "Stopped Service"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "cyberchef" "gchq/CyberChef" "tarball"
+
+    msg_info "Building CyberChef"
+    cd /opt/cyberchef
+    $STD npm ci --ignore-scripts
+    $STD npm run postinstall
+    $STD npm run build
+    msg_ok "Built CyberChef"
+
+    msg_info "Starting Service"
+    systemctl start caddy
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"

ct/headers/cyberchef

@@ -0,0 +1,6 @@
+   ______      __              ________         ____
+  / ____/_  __/ /_  ___  _____/ ____/ /_  ___  / __/
+ / /   / / / / __ \/ _ \/ ___/ /   / __ \/ _ \/ /_  
+/ /___/ /_/ / /_/ /  __/ /  / /___/ / / /  __/ __/  
+\____/\__, /_.___/\___/_/   \____/_/ /_/\___/_/     
+     /____/                                         

install/cyberchef-install.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: ethan-hgwr
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/gchq/CyberChef
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y caddy
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="24" setup_nodejs
+fetch_and_deploy_gh_release "cyberchef" "gchq/CyberChef" "tarball"
+
+msg_info "Building CyberChef (Patience)"
+cd /opt/cyberchef
+$STD npm ci --ignore-scripts
+$STD npm run postinstall
+$STD npm run build
+msg_ok "Built CyberChef"
+
+msg_info "Configuring Caddy"
+cat <<EOF >/etc/caddy/Caddyfile
+:80 {
+    root * /opt/cyberchef/build/prod
+    file_server
+}
+EOF
+systemctl enable -q --now caddy
+systemctl reload caddy
+msg_ok "Configured Caddy"
+
+motd_ssh
+customize
+cleanup_lxc

install/ollama-install.sh

@@ -69,6 +69,13 @@ if ! fetch_and_deploy_gh_release "ollama-com" "ollama/ollama" "prebuild" "latest
   msg_error "Failed to download or deploy Ollama – check network connectivity and GitHub API availability"
   exit 250
 fi
+# If /dev/kfd exists assume an AMD GPU is installed, and install ROCM support for ollama
+if [[ -e /dev/kfd ]]; then
+  if ! fetch_and_deploy_gh_release "ollama-rocm-com" "ollama/ollama" "prebuild" "latest" "$OLLAMA_INSTALL_DIR/lib" "ollama-linux-amd64-rocm.tar.zst"; then
+    msg_error "Failed to download or deploy Ollama AMD ROCM suport – check network connectivity and GitHub API availability"
+    exit 250
+  fi
+fi
 ln -sf "$OLLAMA_INSTALL_DIR/bin/ollama" "$BINDIR/ollama"
 msg_ok "Installed Ollama"
 
@@ -102,6 +109,10 @@ RestartSec=3
 [Install]
 WantedBy=multi-user.target
 EOF
+if [[ -e /dev/kfd ]]; then
+  sed -i '/Environment=OLLAMA_INTEL_GPU=true/a Environment=OLLAMA_IGPU_ENABLE=1' \
+      /etc/systemd/system/ollama.service
+fi
 systemctl enable -q --now ollama
 msg_ok "Created Service"
 

misc/build.func

@@ -3982,7 +3982,7 @@ $PCT_OPTIONS_STRING"
       if [[ -d /dev/dri ]]; then
         # Only add if not already claimed by Intel
         if [[ ${#INTEL_DEVICES[@]} -eq 0 ]]; then
-          for d in /dev/dri/renderD* /dev/dri/card*; do
+          for d in /dev/dri/renderD* /dev/dri/card* /dev/kfd; do
             [[ -e "$d" ]] && AMD_DEVICES+=("$d")
           done
         fi