rocm

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -416,8 +416,16 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
   - #### 🐞 Bug Fixes
 
+    - PowerDNS: use gsqlite3 backend instead of BIND [@MickLesk](https://github.com/MickLesk) ([#12538](https://github.com/community-scripts/ProxmoxVE/pull/12538))
+    - addon migrations: /usr/bin/update replacement to prevent syntax error [@MickLesk](https://github.com/MickLesk) ([#12540](https://github.com/community-scripts/ProxmoxVE/pull/12540))
     - fix(immich): correct LibRaw clone URL to official upstream [@DenislavDenev](https://github.com/DenislavDenev) ([#12526](https://github.com/community-scripts/ProxmoxVE/pull/12526))
 
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - fix: whitelist var_searchdomain and fix the handling of var_ns and va… [@tommoyer](https://github.com/tommoyer) ([#12521](https://github.com/community-scripts/ProxmoxVE/pull/12521))
+
 ## 2026-03-03
 
 ### 🆕 New Scripts

ct/alpine-komodo.sh

@@ -48,9 +48,11 @@ function update_script() {
   fi
 
   msg_info "Migrating update function"
-  cat <<'MIGRATION_EOF' >/usr/bin/update
+  TMP_UPDATE=$(mktemp)
+  cat <<'MIGRATION_EOF' >"$TMP_UPDATE"
 bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/komodo.sh)"
 MIGRATION_EOF
+  mv "$TMP_UPDATE" /usr/bin/update
   chmod +x /usr/bin/update
 
   ln -sf /usr/bin/update /usr/bin/update_komodo 2>/dev/null || true

ct/coolify.sh

@@ -46,9 +46,11 @@ function update_script() {
   fi
 
   msg_info "Migrating update function"
-  cat <<'MIGRATION_EOF' >/usr/bin/update
+  TMP_UPDATE=$(mktemp)
+  cat <<'MIGRATION_EOF' >"$TMP_UPDATE"
 bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/coolify.sh)"
 MIGRATION_EOF
+  mv "$TMP_UPDATE" /usr/bin/update
   chmod +x /usr/bin/update
 
   ln -sf /usr/bin/update /usr/bin/update_coolify 2>/dev/null || true

ct/dockge.sh

@@ -48,9 +48,11 @@ function update_script() {
   fi
 
   msg_info "Migrating update function"
-  cat <<'MIGRATION_EOF' >/usr/bin/update
+  TMP_UPDATE=$(mktemp)
+  cat <<'MIGRATION_EOF' >"$TMP_UPDATE"
 bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/dockge.sh)"
 MIGRATION_EOF
+  mv "$TMP_UPDATE" /usr/bin/update
   chmod +x /usr/bin/update
 
   ln -sf /usr/bin/update /usr/bin/update_dockge 2>/dev/null || true

ct/dokploy.sh

@@ -46,9 +46,11 @@ function update_script() {
   fi
 
   msg_info "Migrating update function"
-  cat <<'MIGRATION_EOF' >/usr/bin/update
+  TMP_UPDATE=$(mktemp)
+  cat <<'MIGRATION_EOF' >"$TMP_UPDATE"
 bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/dokploy.sh)"
 MIGRATION_EOF
+  mv "$TMP_UPDATE" /usr/bin/update
   chmod +x /usr/bin/update
 
   ln -sf /usr/bin/update /usr/bin/update_dokploy 2>/dev/null || true

ct/jellyseerr.sh

@@ -45,14 +45,15 @@ function update_script() {
     fi
 
     msg_info "Switching update script to Seerr"
-    cat <<'EOF' >/usr/bin/update
-#!/usr/bin/env bash
+    TMP_UPDATE=$(mktemp)
+    cat <<'EOF' >"$TMP_UPDATE"
 bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/seerr.sh)"
 EOF
+    mv "$TMP_UPDATE" /usr/bin/update
     chmod +x /usr/bin/update
     msg_ok "Switched update script to Seerr"
     msg_warn "Please type 'update' again to complete the migration"
-    exit
+    exit 0
   fi
 
   msg_info "Updating Jellyseerr"

ct/komodo.sh

@@ -52,9 +52,11 @@ function update_script() {
   fi
 
   msg_info "Migrating update function"
-  cat <<'MIGRATION_EOF' >/usr/bin/update
+  TMP_UPDATE=$(mktemp)
+  cat <<'MIGRATION_EOF' >"$TMP_UPDATE"
 bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/komodo.sh)"
 MIGRATION_EOF
+  mv "$TMP_UPDATE" /usr/bin/update
   chmod +x /usr/bin/update
 
   ln -sf /usr/bin/update /usr/bin/update_komodo 2>/dev/null || true

ct/overseerr.sh

@@ -44,10 +44,11 @@ function update_script() {
     fi
 
     msg_info "Switching update script to Seerr"
-    cat <<'EOF' >/usr/bin/update
-#!/usr/bin/env bash
+    TMP_UPDATE=$(mktemp)
+    cat <<'EOF' >"$TMP_UPDATE"
 bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/seerr.sh)"
 EOF
+    mv "$TMP_UPDATE" /usr/bin/update
     chmod +x /usr/bin/update
     msg_ok "Switched update script to Seerr"
     msg_warn "Please type 'update' again to complete the migration"

ct/runtipi.sh

@@ -46,9 +46,11 @@ function update_script() {
   fi
 
   msg_info "Migrating update function"
-  cat <<'MIGRATION_EOF' >/usr/bin/update
+  TMP_UPDATE=$(mktemp)
+  cat <<'MIGRATION_EOF' >"$TMP_UPDATE"
 bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/runtipi.sh)"
 MIGRATION_EOF
+  mv "$TMP_UPDATE" /usr/bin/update
   chmod +x /usr/bin/update
 
   ln -sf /usr/bin/update /usr/bin/update_runtipi 2>/dev/null || true

frontend/public/json/github-versions.json

@@ -1,5 +1,5 @@
 {
-  "generated": "2026-03-04T00:20:33Z",
+  "generated": "2026-03-04T06:16:35Z",
   "versions": [
     {
       "slug": "2fauth",
@@ -452,9 +452,9 @@
     {
       "slug": "gitea-mirror",
       "repo": "RayLabsHQ/gitea-mirror",
-      "version": "v3.11.0",
+      "version": "v3.12.0",
       "pinned": false,
-      "date": "2026-03-02T10:19:59Z"
+      "date": "2026-03-04T02:53:42Z"
     },
     {
       "slug": "glance",
@@ -613,9 +613,9 @@
     {
       "slug": "jackett",
       "repo": "Jackett/Jackett",
-      "version": "v0.24.1261",
+      "version": "v0.24.1275",
       "pinned": false,
-      "date": "2026-03-03T05:54:20Z"
+      "date": "2026-03-04T05:53:40Z"
     },
     {
       "slug": "jellystat",
@@ -1467,9 +1467,9 @@
     {
       "slug": "sportarr",
       "repo": "Sportarr/Sportarr",
-      "version": "v4.0.984.1059",
+      "version": "v4.0.985.1060",
       "pinned": false,
-      "date": "2026-03-03T23:28:08Z"
+      "date": "2026-03-04T01:00:04Z"
     },
     {
       "slug": "stirling-pdf",

install/ollama-install.sh

@@ -20,10 +20,33 @@ $STD apt install -y \
   zstd
 msg_ok "Installed Dependencies"
 
-msg_info "Setting up Intel® Repositories"
-mkdir -p /usr/share/keyrings
-curl -fsSL https://repositories.intel.com/gpu/intel-graphics.key | gpg --dearmor -o /usr/share/keyrings/intel-graphics.gpg
-cat <<EOF >/etc/apt/sources.list.d/intel-gpu.sources
+# ══════════════════════════════════════════════════════════════════════════════
+# GPU Detection - determine which GPU backend to configure
+# ══════════════════════════════════════════════════════════════════════════════
+GPU_BACKEND="cpu"
+
+if [[ -e /dev/kfd ]]; then
+  GPU_BACKEND="rocm"
+  msg_ok "Detected AMD GPU (/dev/kfd present) - will configure ROCm backend"
+elif [[ -d /dev/dri ]]; then
+  # Check if Intel GPU is available (default for this script)
+  if lspci 2>/dev/null | grep -iE 'VGA|3D|Display' | grep -qi 'Intel'; then
+    GPU_BACKEND="intel"
+    msg_ok "Detected Intel GPU - will configure SYCL/oneAPI backend"
+  elif [[ -e /dev/dri/renderD128 ]]; then
+    GPU_BACKEND="intel"
+    msg_ok "Detected GPU (assuming Intel) - will configure SYCL/oneAPI backend"
+  fi
+fi
+
+# ══════════════════════════════════════════════════════════════════════════════
+# Intel GPU Setup
+# ══════════════════════════════════════════════════════════════════════════════
+if [[ "$GPU_BACKEND" == "intel" ]]; then
+  msg_info "Setting up Intel® Repositories"
+  mkdir -p /usr/share/keyrings
+  curl -fsSL https://repositories.intel.com/gpu/intel-graphics.key | gpg --dearmor -o /usr/share/keyrings/intel-graphics.gpg
+  cat <<EOF >/etc/apt/sources.list.d/intel-gpu.sources
 Types: deb
 URIs: https://repositories.intel.com/gpu/ubuntu
 Suites: jammy
@@ -31,37 +54,56 @@ Components: client
 Architectures: amd64 i386
 Signed-By: /usr/share/keyrings/intel-graphics.gpg
 EOF
-curl -fsSL https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB | gpg --dearmor -o /usr/share/keyrings/oneapi-archive-keyring.gpg
-cat <<EOF >/etc/apt/sources.list.d/oneAPI.sources
+  curl -fsSL https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB | gpg --dearmor -o /usr/share/keyrings/oneapi-archive-keyring.gpg
+  cat <<EOF >/etc/apt/sources.list.d/oneAPI.sources
 Types: deb
 URIs: https://apt.repos.intel.com/oneapi
 Suites: all
 Components: main
 Signed-By: /usr/share/keyrings/oneapi-archive-keyring.gpg
 EOF
-$STD apt update
-msg_ok "Set up Intel® Repositories"
+  $STD apt update
+  msg_ok "Set up Intel® Repositories"
+fi
 
 setup_hwaccel
 
-msg_info "Installing Intel® Level Zero"
-# Debian 13+ has newer Level Zero packages in system repos that conflict with Intel repo packages
-if is_debian && [[ "$(get_os_version_major)" -ge 13 ]]; then
-  # Use system packages on Debian 13+ (avoid conflicts with libze1)
-  $STD apt -y install libze1 libze-dev intel-level-zero-gpu 2>/dev/null || {
-    msg_warn "Failed to install some Level Zero packages, continuing anyway"
-  }
-else
-  # Use Intel repository packages for older systems
-  $STD apt -y install intel-level-zero-gpu level-zero level-zero-dev 2>/dev/null || {
-    msg_warn "Failed to install Intel Level Zero packages, continuing anyway"
-  }
-fi
-msg_ok "Installed Intel® Level Zero"
+# ══════════════════════════════════════════════════════════════════════════════
+# Intel-specific: Level Zero + oneAPI
+# ══════════════════════════════════════════════════════════════════════════════
+if [[ "$GPU_BACKEND" == "intel" ]]; then
+  msg_info "Installing Intel® Level Zero"
+  if is_debian && [[ "$(get_os_version_major)" -ge 13 ]]; then
+    $STD apt -y install libze1 libze-dev intel-level-zero-gpu 2>/dev/null || {
+      msg_warn "Failed to install some Level Zero packages, continuing anyway"
+    }
+  else
+    $STD apt -y install intel-level-zero-gpu level-zero level-zero-dev 2>/dev/null || {
+      msg_warn "Failed to install Intel Level Zero packages, continuing anyway"
+    }
+  fi
+  msg_ok "Installed Intel® Level Zero"
 
-msg_info "Installing Intel® oneAPI Base Toolkit (Patience)"
-$STD apt install -y --no-install-recommends intel-basekit-2024.1
-msg_ok "Installed Intel® oneAPI Base Toolkit"
+  msg_info "Installing Intel® oneAPI Base Toolkit (Patience)"
+  $STD apt install -y --no-install-recommends intel-basekit-2024.1
+  msg_ok "Installed Intel® oneAPI Base Toolkit"
+fi
+
+# ══════════════════════════════════════════════════════════════════════════════
+# AMD ROCm-specific: ensure ROCm libraries are present for Ollama
+# ══════════════════════════════════════════════════════════════════════════════
+if [[ "$GPU_BACKEND" == "rocm" ]]; then
+  msg_info "Verifying ROCm runtime for Ollama"
+  # ROCm base libraries should already be installed by setup_hwaccel -> _setup_amd_gpu
+  # Ensure the ollama-relevant pieces are present
+  if ! ldconfig -p 2>/dev/null | grep -q libamdhip64; then
+    msg_warn "ROCm HIP runtime not found - Ollama may fall back to CPU"
+    msg_info "You can manually install ROCm following: https://rocm.docs.amd.com/projects/install-on-linux/en/latest/"
+  else
+    msg_ok "ROCm HIP runtime available"
+  fi
+  msg_ok "Verified ROCm runtime"
+fi
 
 msg_info "Installing Ollama (Patience)"
 RELEASE=$(curl -fsSL https://api.github.com/repos/ollama/ollama/releases/latest | grep "tag_name" | awk -F '"' '{print $4}')
@@ -104,11 +146,24 @@ After=network-online.target
 Type=exec
 ExecStart=/usr/local/bin/ollama serve
 Environment=HOME=$HOME
-Environment=OLLAMA_INTEL_GPU=true
 Environment=OLLAMA_HOST=0.0.0.0
 Environment=OLLAMA_NUM_GPU=999
+EOF
+
+# Add GPU-specific environment variables
+if [[ "$GPU_BACKEND" == "intel" ]]; then
+  cat <<EOF >>/etc/systemd/system/ollama.service
+Environment=OLLAMA_INTEL_GPU=true
 Environment=SYCL_CACHE_PERSISTENT=1
 Environment=ZES_ENABLE_SYSMAN=1
+EOF
+elif [[ "$GPU_BACKEND" == "rocm" ]]; then
+  cat <<EOF >>/etc/systemd/system/ollama.service
+Environment=HSA_OVERRIDE_GFX_VERSION=11.0.0
+EOF
+fi
+
+cat <<EOF >>/etc/systemd/system/ollama.service
 Restart=always
 RestartSec=3
 

install/powerdns-install.sh

@@ -38,6 +38,12 @@ msg_info "Setting up PowerDNS"
 $STD apt install -y \
   pdns-server \
   pdns-backend-sqlite3
+sed -i 's/^launch=$/# launch=/' /etc/powerdns/pdns.conf
+rm -f /etc/powerdns/pdns.d/bind.conf
+cat <<EOF >/etc/powerdns/pdns.d/gsqlite3.conf
+launch+=gsqlite3
+gsqlite3-database=/opt/poweradmin/powerdns.db
+EOF
 msg_ok "Setup PowerDNS"
 
 fetch_and_deploy_gh_release "poweradmin" "poweradmin/poweradmin" "tarball"
@@ -126,7 +132,10 @@ cat <<EOF >/etc/apache2/sites-enabled/poweradmin.conf
 EOF
 $STD a2enmod rewrite headers
 chown -R www-data:www-data /opt/poweradmin
-$STD systemctl restart apache2
+chown pdns:pdns /opt/poweradmin/powerdns.db
+chmod 664 /opt/poweradmin/powerdns.db
+usermod -aG pdns www-data
+$STD systemctl restart pdns apache2
 msg_info "Created Service"
 
 motd_ssh

misc/build.func

@@ -1033,7 +1033,7 @@ load_vars_file() {
     var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_gpu var_keyctl
     var_gateway var_hostname var_ipv6_method var_mac var_mknod var_mount_fs var_mtu
     var_net var_nesting var_ns var_protection var_pw var_ram var_tags var_timezone var_tun var_unprivileged
-    var_verbose var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage
+    var_verbose var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage var_searchdomain
   )
 
   # Whitelist check helper
@@ -3620,13 +3620,13 @@ $PCT_OPTIONS_STRING"
   # Add storage if specified
   if [ -n "$SD" ]; then
     PCT_OPTIONS_STRING="$PCT_OPTIONS_STRING
-  $SD"
+  -searchdomain $SD"
   fi
 
   # Add nameserver if specified
   if [ -n "$NS" ]; then
     PCT_OPTIONS_STRING="$PCT_OPTIONS_STRING
-  $NS"
+  -nameserver $NS"
   fi
 
   # Network configuration
@@ -3738,6 +3738,11 @@ $PCT_OPTIONS_STRING"
           done
         fi
       fi
+      # /dev/kfd is required for AMD ROCm compute (GPU inference in Ollama, etc.)
+      if [[ -e /dev/kfd ]]; then
+        AMD_DEVICES+=("/dev/kfd")
+        msg_custom "🎮" "${RD}" "Detected /dev/kfd (ROCm compute device)"
+      fi
     fi
 
     # Check for NVIDIA GPU - look for NVIDIA vendor ID [10de]

misc/tools.func

@@ -4451,9 +4451,36 @@ _setup_amd_gpu() {
   fi
   # Ubuntu includes AMD firmware in linux-firmware by default
 
-  # ROCm for compute (optional - large download)
-  # Uncomment if needed:
-  # $STD apt -y install rocm-opencl-runtime 2>/dev/null || true
+  # ROCm for GPU compute (needed for AI/ML workloads like Ollama)
+  if [[ -e /dev/kfd ]]; then
+    msg_info "Installing ROCm runtime (AMD GPU compute)"
+    if [[ "$os_id" == "ubuntu" ]]; then
+      # Official AMD ROCm repo for Ubuntu
+      mkdir -p /usr/share/keyrings
+      curl -fsSL https://repo.radeon.com/rocm/rocm.gpg.key | gpg --dearmor -o /usr/share/keyrings/rocm-archive-keyring.gpg 2>/dev/null || true
+      local rocm_version="6.4.1"
+      cat <<EOF >/etc/apt/sources.list.d/rocm.sources
+Types: deb
+URIs: https://repo.radeon.com/rocm/apt/${rocm_version}
+Suites: noble
+Components: main
+Signed-By: /usr/share/keyrings/rocm-archive-keyring.gpg
+EOF
+      cat <<EOF >/etc/apt/sources.list.d/amdgpu.sources
+Types: deb
+URIs: https://repo.radeon.com/amdgpu/${rocm_version}/ubuntu
+Suites: noble
+Components: main
+Signed-By: /usr/share/keyrings/rocm-archive-keyring.gpg
+EOF
+      $STD apt update 2>/dev/null || true
+      $STD apt -y install rocm-opencl-runtime rocm-hip-runtime 2>/dev/null || msg_warn "ROCm install failed - GPU compute may not work"
+    elif [[ "$os_id" == "debian" ]]; then
+      # Debian: use distro ROCm packages if available
+      $STD apt -y install rocm-opencl-runtime 2>/dev/null || msg_warn "ROCm not available in Debian repos"
+    fi
+    msg_ok "Installed ROCm runtime"
+  fi
 
   msg_ok "AMD GPU configured"
 }