feat(sqlserver): add SQL Server 2025 with Ubuntu 24.04 support & refactor 2022

- Add new SQL Server 2025 scripts with Ubuntu 24.04 support
- Refactor both versions to use setup_deb822_repo
- Fix debuginfod profile causing update errors (#11522)
- Use apt instead of apt-get in CT scripts
- Consistent messaging and formatting

ct/sqlserver2022.sh

@@ -27,7 +27,8 @@ function update_script() {
         msg_error "No ${APP} Installation Found!"
         exit
     fi
-    msg_info "Updating ${APP} LXC"
+    msg_info "Updating SQL Server 2022"
+    rm -f /etc/profile.d/debuginfod.sh /etc/profile.d/debuginfod.csh
     $STD apt update
     $STD apt -y upgrade
     msg_ok "Updated successfully!"

ct/sqlserver2025.sh

@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.microsoft.com/en-us/sql-server/sql-server-2025
+
+APP="SQL Server 2025"
+var_tags="${var_tags:-sql;database}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-10}"
+var_os="${var_os:-ubuntu}"
+var_version="${var_version:-24.04}"
+var_unprivileged="${var_unprivileged:-0}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+    header_info
+    check_container_storage
+    check_container_resources
+    if [[ ! -d /opt/mssql ]]; then
+        msg_error "No ${APP} Installation Found!"
+        exit
+    fi
+    msg_info "Updating SQL Server 2025"
+    rm -f /etc/profile.d/debuginfod.sh /etc/profile.d/debuginfod.csh
+    $STD apt update
+    $STD apt -y upgrade
+    msg_ok "Updated successfully!"
+    exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following IP:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}${IP}:1433${CL}"

frontend/public/json/sqlserver2025.json

@@ -0,0 +1,52 @@
+{
+    "name": "SQL Server 2025",
+    "slug": "sqlserver2025",
+    "categories": [
+        8
+    ],
+    "date_created": "2026-02-04",
+    "type": "ct",
+    "updateable": true,
+    "privileged": true,
+    "interface_port": 1433,
+    "documentation": "https://learn.microsoft.com/en-us/sql/sql-server/?view=sql-server-ver17",
+    "website": "https://www.microsoft.com/en-us/sql-server/sql-server-2025",
+    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/microsoft-sql-server.webp",
+    "config_path": "",
+    "description": "Script to automatically set up a SQL Server 2025 installation with Ubuntu 24.04 support.",
+    "install_methods": [
+        {
+            "type": "default",
+            "script": "ct/sqlserver2025.sh",
+            "resources": {
+                "cpu": 2,
+                "ram": 2048,
+                "hdd": 10,
+                "os": "Ubuntu",
+                "version": "24.04"
+            }
+        }
+    ],
+    "default_credentials": {
+        "username": null,
+        "password": null
+    },
+    "notes": [
+        {
+            "text": "If you choose not to run the installation setup, execute: `/opt/mssql/bin/mssql-conf setup` in LXC shell.",
+            "type": "info"
+        },
+        {
+            "text": "You can setup the admin account 'SA' during installation",
+            "type": "info"
+        },
+        {
+            "text": "Make sure you disable the SA account if you intend to use this in production!",
+            "type": "warning"
+        },
+        {
+            "text": "Ubuntu 24.04 support requires SQL Server 2025 CU1 or later",
+            "type": "info"
+        }
+    ]
+}

install/sqlserver2022-install.sh

@@ -14,24 +14,32 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt install -y \
+$STD apt install -y coreutils
-  coreutils
 msg_ok "Installed Dependencies"
 
-msg_info "Setup SQL Server 2022"
+msg_info "Setting up SQL Server 2022 Repository"
-curl -fsSL https://packages.microsoft.com/keys/microsoft.asc | sudo tee /etc/apt/trusted.gpg.d/microsoft.asc >/dev/null
+setup_deb822_repo \
-curl -fsSL https://packages.microsoft.com/config/ubuntu/22.04/mssql-server-2022.list | tee /etc/apt/sources.list.d/mssql-server-2022.list >/dev/null
+  "mssql-server-2022" \
-$STD apt-get update -y
+  "https://packages.microsoft.com/keys/microsoft.asc" \
-$STD apt-get install -y mssql-server
+  "https://packages.microsoft.com/ubuntu/22.04/mssql-server-2022" \
-msg_ok "Setup Server 2022"
+  "./" \
+  ""
+msg_ok "Repository configured"
+
+msg_info "Installing SQL Server 2022"
+$STD apt install -y mssql-server
+msg_ok "Installed SQL Server 2022"
 
 msg_info "Installing SQL Server Tools"
 export DEBIAN_FRONTEND=noninteractive
 export ACCEPT_EULA=Y
-curl -fsSL https://packages.microsoft.com/keys/microsoft.asc | tee /etc/apt/trusted.gpg.d/microsoft.asc >/dev/null
+setup_deb822_repo \
-curl -fsSL https://packages.microsoft.com/config/ubuntu/22.04/prod.list | tee /etc/apt/sources.list.d/mssql-release.list >/dev/null
+  "mssql-release" \
-$STD apt-get update
+  "https://packages.microsoft.com/keys/microsoft.asc" \
-$STD apt-get install -y -qq \
+  "https://packages.microsoft.com/ubuntu/22.04/prod" \
+  "jammy" \
+  "main"
+$STD apt-get install -y \
   mssql-tools18 \
   unixodbc-dev
 echo 'export PATH="$PATH:/opt/mssql-tools18/bin"' >>~/.bash_profile
@@ -49,6 +57,11 @@ msg_info "Start Service"
 systemctl enable -q --now mssql-server
 msg_ok "Service started"
 
+msg_info "Cleaning up"
+rm -f /etc/profile.d/debuginfod.sh
+rm -f /etc/profile.d/debuginfod.csh
+msg_ok "Cleaned up"
+
 motd_ssh
 customize
 cleanup_lxc

install/sqlserver2025-install.sh

@@ -0,0 +1,66 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.microsoft.com/en-us/sql-server/sql-server-2025
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y coreutils
+msg_ok "Installed Dependencies"
+
+msg_info "Setting up SQL Server 2025 Repository"
+setup_deb822_repo \
+  "mssql-server-2025" \
+  "https://packages.microsoft.com/keys/microsoft.asc" \
+  "https://packages.microsoft.com/ubuntu/24.04/mssql-server-2025" \
+  "./" \
+  ""
+msg_ok "Repository configured"
+
+msg_info "Installing SQL Server 2025"
+$STD apt install -y mssql-server
+msg_ok "Installed SQL Server 2025"
+
+msg_info "Installing SQL Server Tools"
+export DEBIAN_FRONTEND=noninteractive
+export ACCEPT_EULA=Y
+setup_deb822_repo \
+  "mssql-release" \
+  "https://packages.microsoft.com/keys/microsoft.asc" \
+  "https://packages.microsoft.com/ubuntu/24.04/prod" \
+  "noble" \
+  "main"
+$STD apt-get install -y \
+  mssql-tools18 \
+  unixodbc-dev
+echo 'export PATH="$PATH:/opt/mssql-tools18/bin"' >>~/.bash_profile
+source ~/.bash_profile
+msg_ok "Installed SQL Server Tools"
+
+read -r -p "${TAB3}Do you want to run the SQL Server setup now? (Later is also possible) <y/N>" prompt
+if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
+  /opt/mssql/bin/mssql-conf setup
+else
+  msg_ok "Skipping SQL Server setup. You can run it later with '/opt/mssql/bin/mssql-conf setup'."
+fi
+
+msg_info "Starting SQL Server Service"
+systemctl enable -q --now mssql-server
+msg_ok "Service started"
+
+msg_info "Cleaning up"
+rm -f /etc/profile.d/debuginfod.sh /etc/profile.d/debuginfod.csh
+msg_ok "Cleaned up"
+
+motd_ssh
+customize
+cleanup_lxc

misc/cloud-init.func

@@ -28,210 +28,13 @@
 # ==============================================================================
 # These can be overridden before sourcing this library
 
-# Disable 'unbound variable' errors for this library (restored at end)
-_OLD_SET_STATE=$(set +o | grep -E 'set -(e|u|o)')
-set +u
-
 CLOUDINIT_DEFAULT_USER="${CLOUDINIT_DEFAULT_USER:-root}"
 CLOUDINIT_DNS_SERVERS="${CLOUDINIT_DNS_SERVERS:-1.1.1.1 8.8.8.8}"
 CLOUDINIT_SEARCH_DOMAIN="${CLOUDINIT_SEARCH_DOMAIN:-local}"
-CLOUDINIT_SSH_KEYS="${CLOUDINIT_SSH_KEYS:-}" # Empty by default - user must explicitly provide keys
+CLOUDINIT_SSH_KEYS="${CLOUDINIT_SSH_KEYS:-/root/.ssh/authorized_keys}"
 
 # ==============================================================================
-# SECTION 2: SSH KEY DISCOVERY AND SELECTION
+# SECTION 2: HELPER FUNCTIONS
-# ==============================================================================
-
-# ------------------------------------------------------------------------------
-# _ci_ssh_extract_keys_from_file - Extracts valid SSH public keys from a file
-# ------------------------------------------------------------------------------
-function _ci_ssh_extract_keys_from_file() {
-  local file="$1"
-  [[ -f "$file" && -r "$file" ]] || return 0
-  grep -E '^(ssh-(rsa|ed25519|dss|ecdsa)|ecdsa-sha2-)' "$file" 2>/dev/null || true
-}
-
-# ------------------------------------------------------------------------------
-# _ci_ssh_discover_files - Scans standard paths for SSH keys
-# ------------------------------------------------------------------------------
-function _ci_ssh_discover_files() {
-  local -a cand=()
-  shopt -s nullglob
-  cand+=(/root/.ssh/authorized_keys /root/.ssh/authorized_keys2)
-  cand+=(/root/.ssh/*.pub)
-  cand+=(/etc/ssh/authorized_keys /etc/ssh/authorized_keys.d/*)
-  shopt -u nullglob
-  printf '%s\0' "${cand[@]}"
-}
-
-# ------------------------------------------------------------------------------
-# _ci_ssh_build_choices - Builds whiptail checklist from SSH key files
-#
-# Sets: CI_SSH_CHOICES (array), CI_SSH_COUNT (int), CI_SSH_MAPFILE (path)
-# ------------------------------------------------------------------------------
-function _ci_ssh_build_choices() {
-  local -a files=("$@")
-  CI_SSH_CHOICES=()
-  CI_SSH_COUNT=0
-  CI_SSH_MAPFILE="$(mktemp)"
-  local id key typ fp cmt base
-
-  for f in "${files[@]}"; do
-    [[ -f "$f" && -r "$f" ]] || continue
-    base="$(basename -- "$f")"
-    # Skip known_hosts and private keys
-    case "$base" in
-    known_hosts | known_hosts.* | config) continue ;;
-    id_*) [[ "$f" != *.pub ]] && continue ;;
-    esac
-
-    while IFS= read -r key; do
-      [[ -n "$key" ]] || continue
-
-      typ=""
-      fp=""
-      cmt=""
-      read -r _typ _b64 _cmt <<<"$key"
-      typ="${_typ:-key}"
-      cmt="${_cmt:-}"
-
-      # Get fingerprint via ssh-keygen if available
-      if command -v ssh-keygen >/dev/null 2>&1; then
-        fp="$(printf '%s\n' "$key" | ssh-keygen -lf - 2>/dev/null | awk '{print $2}')"
-      fi
-
-      # Shorten long comments
-      [[ ${#cmt} -gt 40 ]] && cmt="${cmt:0:37}..."
-
-      CI_SSH_COUNT=$((CI_SSH_COUNT + 1))
-      id="K${CI_SSH_COUNT}"
-      echo "${id}|${key}" >>"$CI_SSH_MAPFILE"
-      CI_SSH_CHOICES+=("$id" "[$typ] ${fp:+$fp }${cmt:+$cmt }— ${base}" "OFF")
-    done < <(_ci_ssh_extract_keys_from_file "$f")
-  done
-}
-
-# ------------------------------------------------------------------------------
-# configure_cloudinit_ssh_keys - Interactive SSH key selection for Cloud-Init
-#
-# Usage: configure_cloudinit_ssh_keys
-# Sets: CLOUDINIT_SSH_KEYS (path to temporary file with selected keys)
-# ------------------------------------------------------------------------------
-function configure_cloudinit_ssh_keys() {
-  local backtitle="Proxmox VE Helper Scripts"
-  local ssh_key_mode
-
-  # Create temp file for selected keys
-  CLOUDINIT_SSH_KEYS_TEMP="$(mktemp)"
-  : >"$CLOUDINIT_SSH_KEYS_TEMP"
-
-  # Discover keys and build choices
-  IFS=$'\0' read -r -d '' -a _def_files < <(_ci_ssh_discover_files && printf '\0')
-  _ci_ssh_build_choices "${_def_files[@]}"
-  local default_key_count="$CI_SSH_COUNT"
-
-  if [[ "$default_key_count" -gt 0 ]]; then
-    ssh_key_mode=$(whiptail --backtitle "$backtitle" --title "SSH KEY SOURCE" --menu \
-      "Provision SSH keys for Cloud-Init VM:" 14 72 4 \
-      "found" "Select from detected keys (${default_key_count})" \
-      "manual" "Paste a single public key" \
-      "folder" "Scan another folder (path or glob)" \
-      "none" "No SSH keys (password auth only)" 3>&1 1>&2 2>&3) || return 1
-  else
-    ssh_key_mode=$(whiptail --backtitle "$backtitle" --title "SSH KEY SOURCE" --menu \
-      "No host keys detected. Choose:" 12 72 3 \
-      "manual" "Paste a single public key" \
-      "folder" "Scan another folder (path or glob)" \
-      "none" "No SSH keys (password auth only)" 3>&1 1>&2 2>&3) || return 1
-  fi
-
-  case "$ssh_key_mode" in
-  found)
-    # Show checklist with individual keys
-    local selection
-    selection=$(whiptail --backtitle "$backtitle" --title "SELECT SSH KEYS" \
-      --checklist "Select one or more keys to import:" 20 140 10 "${CI_SSH_CHOICES[@]}" 3>&1 1>&2 2>&3) || return 1
-
-    for tag in $selection; do
-      tag="${tag%\"}"
-      tag="${tag#\"}"
-      local line
-      line=$(grep -E "^${tag}\|" "$CI_SSH_MAPFILE" | head -n1 | cut -d'|' -f2-)
-      [[ -n "$line" ]] && printf '%s\n' "$line" >>"$CLOUDINIT_SSH_KEYS_TEMP"
-    done
-    local imported
-    imported=$(wc -l <"$CLOUDINIT_SSH_KEYS_TEMP")
-    echo -e "${ROOTSSH:-  🔑  }${BOLD}${DGN}SSH Keys: ${BGN}${imported} key(s) selected${CL}"
-    ;;
-  manual)
-    local pubkey
-    pubkey=$(whiptail --backtitle "$backtitle" --title "PASTE SSH PUBLIC KEY" \
-      --inputbox "Paste your SSH public key (ssh-rsa, ssh-ed25519, etc.):" 10 76 3>&1 1>&2 2>&3) || return 1
-    if [[ -n "$pubkey" ]]; then
-      echo "$pubkey" >"$CLOUDINIT_SSH_KEYS_TEMP"
-      echo -e "${ROOTSSH:-  🔑  }${BOLD}${DGN}SSH Keys: ${BGN}1 key added manually${CL}"
-    else
-      echo -e "${ROOTSSH:-  🔑  }${BOLD}${DGN}SSH Keys: ${BGN}none (empty input)${CL}"
-      CLOUDINIT_SSH_KEYS=""
-      rm -f "$CLOUDINIT_SSH_KEYS_TEMP" "$CI_SSH_MAPFILE" 2>/dev/null
-      return 0
-    fi
-    ;;
-  folder)
-    local glob_path
-    glob_path=$(whiptail --backtitle "$backtitle" --title "SCAN FOLDER/GLOB" \
-      --inputbox "Enter a folder or glob to scan (e.g. /root/.ssh/*.pub):" 10 72 3>&1 1>&2 2>&3) || return 1
-    if [[ -n "$glob_path" ]]; then
-      shopt -s nullglob
-      local -a _scan_files=($glob_path)
-      shopt -u nullglob
-      if [[ "${#_scan_files[@]}" -gt 0 ]]; then
-        _ci_ssh_build_choices "${_scan_files[@]}"
-        if [[ "$CI_SSH_COUNT" -gt 0 ]]; then
-          local folder_selection
-          folder_selection=$(whiptail --backtitle "$backtitle" --title "SELECT FOLDER KEYS" \
-            --checklist "Select key(s) to import:" 20 140 10 "${CI_SSH_CHOICES[@]}" 3>&1 1>&2 2>&3) || return 1
-          for tag in $folder_selection; do
-            tag="${tag%\"}"
-            tag="${tag#\"}"
-            local line
-            line=$(grep -E "^${tag}\|" "$CI_SSH_MAPFILE" | head -n1 | cut -d'|' -f2-)
-            [[ -n "$line" ]] && printf '%s\n' "$line" >>"$CLOUDINIT_SSH_KEYS_TEMP"
-          done
-          local imported
-          imported=$(wc -l <"$CLOUDINIT_SSH_KEYS_TEMP")
-          echo -e "${ROOTSSH:-  🔑  }${BOLD}${DGN}SSH Keys: ${BGN}${imported} key(s) from folder${CL}"
-        else
-          whiptail --backtitle "$backtitle" --msgbox "No keys found in: $glob_path" 8 60
-        fi
-      else
-        whiptail --backtitle "$backtitle" --msgbox "Path/glob returned no files." 8 60
-      fi
-    fi
-    ;;
-  none | *)
-    echo -e "${ROOTSSH:-  🔑  }${BOLD}${DGN}SSH Keys: ${BGN}none (password auth only)${CL}"
-    CLOUDINIT_SSH_KEYS=""
-    rm -f "$CLOUDINIT_SSH_KEYS_TEMP" "$CI_SSH_MAPFILE" 2>/dev/null
-    return 0
-    ;;
-  esac
-
-  # Cleanup mapfile
-  rm -f "$CI_SSH_MAPFILE" 2>/dev/null
-
-  # Set the variable for setup_cloud_init to use
-  if [[ -s "$CLOUDINIT_SSH_KEYS_TEMP" ]]; then
-    CLOUDINIT_SSH_KEYS="$CLOUDINIT_SSH_KEYS_TEMP"
-  else
-    CLOUDINIT_SSH_KEYS=""
-    rm -f "$CLOUDINIT_SSH_KEYS_TEMP"
-  fi
-
-  return 0
-}
-
-# ==============================================================================
-# SECTION 3: HELPER FUNCTIONS
 # ==============================================================================
 
 # ------------------------------------------------------------------------------
@@ -341,10 +144,9 @@ function setup_cloud_init() {
   local cipassword=$(openssl rand -base64 16)
   qm set "$vmid" --cipassword "$cipassword" >/dev/null
 
-  # Add SSH keys only if explicitly provided (not auto-imported from host)
+  # Add SSH keys if available
-  if [ -n "${CLOUDINIT_SSH_KEYS:-}" ] && [ -f "$CLOUDINIT_SSH_KEYS" ]; then
+  if [ -f "$CLOUDINIT_SSH_KEYS" ]; then
     qm set "$vmid" --sshkeys "$CLOUDINIT_SSH_KEYS" >/dev/null 2>&1 || true
-    _ci_msg_info "SSH keys imported from: $CLOUDINIT_SSH_KEYS"
   fi
 
   # Configure network
@@ -657,11 +459,6 @@ export -f wait_for_cloud_init 2>/dev/null || true
 export -f validate_ip_cidr 2>/dev/null || true
 export -f validate_ip 2>/dev/null || true
 
-# Restore previous shell options if they were saved
-if [ -n "${_OLD_SET_STATE:-}" ]; then
-  eval "$_OLD_SET_STATE"
-fi
-
 # ==============================================================================
 # SECTION 7: EXAMPLES & DOCUMENTATION
 # ==============================================================================