Fix protocol variable usage in patchmon.sh

Fix sed command for environment variable updates
Update ct/patchmon.sh
2026-02-19 19:45:54 +01:00 · 2026-02-19 10:06:43 -05:00 · 2026-02-19 09:38:42 -05:00 · 2026-02-19 08:21:57 -05:00 · 2026-02-19 08:34:21 +01:00 · 2026-02-19 06:23:51 +00:00
45 changed files with 378 additions and 213 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -404,6 +404,22 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

+## 2026-02-19
+
+## 2026-02-18
+
+### 🚀 Updated Scripts
+
+  - #### 💥 Breaking Changes
+
+    - [Fix] PatchMon: use `SERVER_PORT` in Nginx config if set in env [@vhsdream](https://github.com/vhsdream) ([#12053](https://github.com/community-scripts/ProxmoxVE/pull/12053))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - core: Execution ID & Telemetry Improvements [@MickLesk](https://github.com/MickLesk) ([#12041](https://github.com/community-scripts/ProxmoxVE/pull/12041))
+
 ## 2026-02-17

 ### 🆕 New Scripts
@@ -414,6 +430,7 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

  - #### 🐞 Bug Fixes

+    - [Hotfix] Cleanuparr: backup config before update [@vhsdream](https://github.com/vhsdream) ([#12039](https://github.com/community-scripts/ProxmoxVE/pull/12039))
    - fix: pterodactyl-panel add symlink [@CrazyWolf13](https://github.com/CrazyWolf13) ([#11997](https://github.com/community-scripts/ProxmoxVE/pull/11997))

 ### 💾 Core
@@ -424,14 +441,23 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

  - #### ✨ New Features

+    - tools/pve: add data analytics / formatting / linting [@MickLesk](https://github.com/MickLesk) ([#12034](https://github.com/community-scripts/ProxmoxVE/pull/12034))
    - core: smart recovery for failed installs | extend exit_codes  [@MickLesk](https://github.com/MickLesk) ([#11221](https://github.com/community-scripts/ProxmoxVE/pull/11221))

+  - #### 🔧 Refactor
+
+    - core: error-handler improvements | better exit_code handling | better tools.func source check [@MickLesk](https://github.com/MickLesk) ([#12019](https://github.com/community-scripts/ProxmoxVE/pull/12019))
+
 ### 🧰 Tools

  - #### 🔧 Refactor

    - Immich Public Proxy: centralize and fix systemd service creation [@MickLesk](https://github.com/MickLesk) ([#12025](https://github.com/community-scripts/ProxmoxVE/pull/12025))

+### 📚 Documentation
+
+  - fix contribution/setup-fork [@andreasabeck](https://github.com/andreasabeck) ([#12047](https://github.com/community-scripts/ProxmoxVE/pull/12047))
+
 ## 2026-02-16

 ### 🆕 New Scripts
--- a/ct/cleanuparr.sh
+++ b/ct/cleanuparr.sh
@@ -32,8 +32,17 @@ function update_script() {
    systemctl stop cleanuparr
    msg_ok "Stopped Service"

+    msg_info "Backing up config"
+    cp -r /opt/cleanuparr/config /opt/cleanuparr_config_backup
+    msg_ok "Backed up config"
+
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Cleanuparr" "Cleanuparr/Cleanuparr" "prebuild" "latest" "/opt/cleanuparr" "*linux-amd64.zip"

+    msg_info "Restoring config"
+    [[ -d /opt/cleanuparr/config ]] && rm -rf /opt/cleanuparr/config
+    mv /opt/cleanuparr_config_backup /opt/cleanuparr/config
+    msg_ok "Restored config"
+
    msg_info "Starting Service"
    systemctl start cleanuparr
    msg_ok "Started Service"
--- a/ct/patchmon.sh
+++ b/ct/patchmon.sh
@@ -29,6 +29,13 @@ function update_script() {
    exit
  fi

+  if ! grep -q "PORT=3001" /opt/patchmon/backend/.env; then
+    msg_warn "⚠️ The next PatchMon update will include breaking changes (port changes)."
+    msg_warn "See details here: https://github.com/community-scripts/ProxmoxVE/pull/11888"
+    msg_warn "Press Enter to continue with the update, or Ctrl+C to abort..."
+    read -r
+  fi
+
  NODE_VERSION="24" setup_nodejs
  if check_for_gh_release "PatchMon" "PatchMon/PatchMon"; then
    msg_info "Stopping Service"
@@ -46,7 +53,8 @@ function update_script() {
    VERSION=$(get_latest_github_release "PatchMon/PatchMon")
    PROTO="$(sed -n '/SERVER_PROTOCOL/s/[^=]*=//p' /opt/backend.env)"
    HOST="$(sed -n '/SERVER_HOST/s/[^=]*=//p' /opt/backend.env)"
-    [[ "${PROTO:-http}" == "http" ]] && PORT=":3001"
+    SERVER_PORT="$(sed -n '/SERVER_PORT/s/[^=]*=//p' /opt/backend.env)"
+    [[ "$PROTO" == "http" ]] && PORT=":3001"
    sed -i 's/PORT=3399/PORT=3001/' /opt/backend.env
    sed -i -e "s/VERSION=.*/VERSION=$VERSION/" \
      -e "\|VITE_API_URL=|s|http.*|${PROTO:-http}://${HOST:-$LOCAL_IP}${PORT:-}/api/v1|" /opt/frontend.env
@@ -66,6 +74,9 @@ function update_script() {
      -e '\|try_files |i\        root /opt/patchmon/frontend/dist;' \
      -e 's|alias.*|alias /opt/patchmon/frontend/dist/assets;|' \
      -e '\|expires 1y|i\        root /opt/patchmon/frontend/dist;' /etc/nginx/sites-available/patchmon.conf
+    if [[ -n "$SERVER_PORT" ]] && [[ "$SERVER_PORT" != "443" ]]; then
+      sed -i "s/listen [[:digit:]].*/listen ${SERVER_PORT};/" /etc/nginx/sites-available/patchmon.conf
+    fi
    ln -sf /etc/nginx/sites-available/patchmon.conf /etc/nginx/sites-enabled/
    rm -f /etc/nginx/sites-enabled/default
    $STD nginx -t
--- a/docs/contribution/setup-fork.sh
+++ b/docs/contribution/setup-fork.sh
@@ -134,7 +134,7 @@ update_links() {
  # Find all files containing the old repo reference
  while IFS= read -r file; do
    # Count occurrences
-    local count=$(grep -c "github.com/$old_repo/$old_name" "$file" 2>/dev/null || echo 0)
+    local count=$(grep -E -c "(github.com|githubusercontent.com)/$old_repo/$old_name" "$file" 2>/dev/null || echo 0)

    if [[ $count -gt 0 ]]; then
      # Backup original
@@ -143,16 +143,16 @@ update_links() {
      # Replace links - use different sed syntax for BSD/macOS vs GNU sed
      if sed --version &>/dev/null 2>&1; then
        # GNU sed
-        sed -i "s|github.com/$old_repo/$old_name|github.com/$new_owner/$new_repo|g" "$file"
+        sed -E -i "s@(github.com|githubusercontent.com)/$old_repo/$old_name@\\1/$new_owner/$new_repo@g" "$file"
      else
        # BSD sed (macOS)
-        sed -i '' "s|github.com/$old_repo/$old_name|github.com/$new_owner/$new_repo|g" "$file"
+        sed -E -i '' "s@(github.com|githubusercontent.com)/$old_repo/$old_name@\\1/$new_owner/$new_repo@g" "$file"
      fi

      ((files_updated++))
      print_success "Updated $file ($count links)"
    fi
-  done < <(find "$search_path" -type f \( -name "*.md" -o -name "*.sh" -o -name "*.func" -o -name "*.json" \) -not -path "*/.git/*" 2>/dev/null | xargs grep -l "github.com/$old_repo/$old_name" 2>/dev/null)
+  done < <(find "$search_path" -type f \( -name "*.md" -o -name "*.sh" -o -name "*.func" -o -name "*.json" \) -not -path "*/.git/*" 2>/dev/null | xargs grep -E -l "(github.com|githubusercontent.com)/$old_repo/$old_name" 2>/dev/null)

  return $files_updated
 }
--- a/frontend/public/json/github-versions.json
+++ b/frontend/public/json/github-versions.json
@@ -1,5 +1,5 @@
 {
-  "generated": "2026-02-17T06:22:06Z",
+  "generated": "2026-02-19T06:23:43Z",
  "versions": [
    {
      "slug": "2fauth",
@@ -158,9 +158,9 @@
    {
      "slug": "bookstack",
      "repo": "BookStackApp/BookStack",
-      "version": "v25.12.3",
+      "version": "v25.12.6",
      "pinned": false,
-      "date": "2026-01-29T15:29:25Z"
+      "date": "2026-02-18T19:53:07Z"
    },
    {
      "slug": "byparr",
@@ -207,9 +207,9 @@
    {
      "slug": "comfyui",
      "repo": "comfyanonymous/ComfyUI",
-      "version": "v0.13.0",
+      "version": "v0.14.2",
      "pinned": false,
-      "date": "2026-02-10T20:27:38Z"
+      "date": "2026-02-18T06:12:02Z"
    },
    {
      "slug": "commafeed",
@@ -221,9 +221,9 @@
    {
      "slug": "configarr",
      "repo": "raydak-labs/configarr",
-      "version": "v1.20.0",
+      "version": "v1.21.0",
      "pinned": false,
-      "date": "2026-01-10T21:25:47Z"
+      "date": "2026-02-17T22:59:07Z"
    },
    {
      "slug": "convertx",
@@ -253,6 +253,13 @@
      "pinned": false,
      "date": "2026-02-11T15:39:05Z"
    },
+    {
+      "slug": "databasus",
+      "repo": "databasus/databasus",
+      "version": "v3.14.1",
+      "pinned": false,
+      "date": "2026-02-18T10:43:45Z"
+    },
    {
      "slug": "dawarich",
      "repo": "Freika/dawarich",
@@ -263,9 +270,9 @@
    {
      "slug": "discopanel",
      "repo": "nickheyer/discopanel",
-      "version": "v1.0.36",
+      "version": "v1.0.37",
      "pinned": false,
-      "date": "2026-02-09T21:15:44Z"
+      "date": "2026-02-18T08:53:43Z"
    },
    {
      "slug": "dispatcharr",
@@ -410,9 +417,9 @@
    {
      "slug": "ghostfolio",
      "repo": "ghostfolio/ghostfolio",
-      "version": "2.239.0",
+      "version": "2.240.0",
      "pinned": false,
-      "date": "2026-02-15T09:51:16Z"
+      "date": "2026-02-18T20:08:56Z"
    },
    {
      "slug": "gitea",
@@ -550,9 +557,9 @@
    {
      "slug": "huntarr",
      "repo": "plexguide/Huntarr.io",
-      "version": "9.2.4.1",
+      "version": "9.3.7",
      "pinned": false,
-      "date": "2026-02-12T22:17:47Z"
+      "date": "2026-02-19T01:03:53Z"
    },
    {
      "slug": "immich-public-proxy",
@@ -578,16 +585,16 @@
    {
      "slug": "invoiceninja",
      "repo": "invoiceninja/invoiceninja",
-      "version": "v5.12.62",
+      "version": "v5.12.64",
      "pinned": false,
-      "date": "2026-02-17T03:23:48Z"
+      "date": "2026-02-18T07:59:44Z"
    },
    {
      "slug": "jackett",
      "repo": "Jackett/Jackett",
-      "version": "v0.24.1140",
+      "version": "v0.24.1157",
      "pinned": false,
-      "date": "2026-02-17T05:54:25Z"
+      "date": "2026-02-19T05:51:02Z"
    },
    {
      "slug": "jellystat",
@@ -697,9 +704,9 @@
    {
      "slug": "leantime",
      "repo": "Leantime/leantime",
-      "version": "v3.6.2",
+      "version": "v3.7.0",
      "pinned": false,
-      "date": "2026-01-29T16:37:00Z"
+      "date": "2026-02-18T00:02:31Z"
    },
    {
      "slug": "librenms",
@@ -739,9 +746,9 @@
    {
      "slug": "linkstack",
      "repo": "linkstackorg/linkstack",
-      "version": "v4.8.4",
+      "version": "v4.8.6",
      "pinned": false,
-      "date": "2024-12-10T15:14:34Z"
+      "date": "2026-02-17T16:53:47Z"
    },
    {
      "slug": "linkwarden",
@@ -781,9 +788,9 @@
    {
      "slug": "mail-archiver",
      "repo": "s1t5/mail-archiver",
-      "version": "2602.1",
+      "version": "2602.2",
      "pinned": false,
-      "date": "2026-02-11T06:23:11Z"
+      "date": "2026-02-17T09:46:52Z"
    },
    {
      "slug": "managemydamnlife",
@@ -886,9 +893,9 @@
    {
      "slug": "netbox",
      "repo": "netbox-community/netbox",
-      "version": "v4.5.2",
+      "version": "v4.5.3",
      "pinned": false,
-      "date": "2026-02-03T13:54:26Z"
+      "date": "2026-02-17T15:39:18Z"
    },
    {
      "slug": "nextcloud-exporter",
@@ -1054,9 +1061,9 @@
    {
      "slug": "pelican-panel",
      "repo": "pelican-dev/panel",
-      "version": "v1.0.0-beta32",
+      "version": "v1.0.0-beta33",
      "pinned": false,
-      "date": "2026-02-09T22:15:44Z"
+      "date": "2026-02-18T21:37:11Z"
    },
    {
      "slug": "pelican-wings",
@@ -1089,9 +1096,9 @@
    {
      "slug": "planka",
      "repo": "plankanban/planka",
-      "version": "v2.0.0",
+      "version": "v2.0.1",
      "pinned": false,
-      "date": "2026-02-11T13:50:10Z"
+      "date": "2026-02-17T15:26:55Z"
    },
    {
      "slug": "plant-it",
@@ -1103,9 +1110,9 @@
    {
      "slug": "pocketbase",
      "repo": "pocketbase/pocketbase",
-      "version": "v0.36.3",
+      "version": "v0.36.4",
      "pinned": false,
-      "date": "2026-02-13T18:38:58Z"
+      "date": "2026-02-17T08:02:51Z"
    },
    {
      "slug": "pocketid",
@@ -1180,9 +1187,9 @@
    {
      "slug": "pulse",
      "repo": "rcourtman/Pulse",
-      "version": "v5.1.9",
+      "version": "v5.1.10",
      "pinned": false,
-      "date": "2026-02-11T15:34:40Z"
+      "date": "2026-02-18T14:00:51Z"
    },
    {
      "slug": "pve-scripts-local",
@@ -1236,16 +1243,16 @@
    {
      "slug": "rclone",
      "repo": "rclone/rclone",
-      "version": "v1.73.0",
+      "version": "v1.73.1",
      "pinned": false,
-      "date": "2026-01-30T22:12:03Z"
+      "date": "2026-02-17T18:27:21Z"
    },
    {
      "slug": "rdtclient",
      "repo": "rogerfar/rdt-client",
-      "version": "v2.0.120",
+      "version": "v2.0.121",
      "pinned": false,
-      "date": "2026-02-12T02:53:51Z"
+      "date": "2026-02-19T04:48:39Z"
    },
    {
      "slug": "reactive-resume",
@@ -1306,9 +1313,9 @@
    {
      "slug": "scanopy",
      "repo": "scanopy/scanopy",
-      "version": "v0.14.4",
+      "version": "v0.14.6",
      "pinned": false,
-      "date": "2026-02-10T03:57:28Z"
+      "date": "2026-02-18T16:54:14Z"
    },
    {
      "slug": "scraparr",
@@ -1334,9 +1341,9 @@
    {
      "slug": "semaphore",
      "repo": "semaphoreui/semaphore",
-      "version": "v2.17.2",
+      "version": "v2.17.8",
      "pinned": false,
-      "date": "2026-02-16T10:27:40Z"
+      "date": "2026-02-18T19:46:43Z"
    },
    {
      "slug": "shelfmark",
@@ -1411,9 +1418,9 @@
    {
      "slug": "stirling-pdf",
      "repo": "Stirling-Tools/Stirling-PDF",
-      "version": "v2.5.0",
+      "version": "v2.5.1",
      "pinned": false,
-      "date": "2026-02-16T22:58:17Z"
+      "date": "2026-02-18T11:05:34Z"
    },
    {
      "slug": "streamlink-webui",
@@ -1544,9 +1551,9 @@
    {
      "slug": "tunarr",
      "repo": "chrisbenincasa/tunarr",
-      "version": "v1.1.13",
+      "version": "v1.1.14",
      "pinned": false,
-      "date": "2026-02-16T16:16:17Z"
+      "date": "2026-02-17T18:26:17Z"
    },
    {
      "slug": "uhf",
@@ -1586,9 +1593,9 @@
    {
      "slug": "uptimekuma",
      "repo": "louislam/uptime-kuma",
-      "version": "2.1.1",
+      "version": "2.1.3",
      "pinned": false,
-      "date": "2026-02-13T16:07:33Z"
+      "date": "2026-02-19T05:37:30Z"
    },
    {
      "slug": "vaultwarden",
@@ -1600,9 +1607,9 @@
    {
      "slug": "victoriametrics",
      "repo": "VictoriaMetrics/VictoriaMetrics",
-      "version": "v1.135.0",
+      "version": "v1.136.0",
      "pinned": false,
-      "date": "2026-02-02T14:20:15Z"
+      "date": "2026-02-16T13:17:50Z"
    },
    {
      "slug": "vikunja",
@@ -1719,9 +1726,9 @@
    {
      "slug": "yubal",
      "repo": "guillevc/yubal",
-      "version": "v0.6.0",
+      "version": "v0.6.1",
      "pinned": false,
-      "date": "2026-02-15T17:47:56Z"
+      "date": "2026-02-18T23:24:16Z"
    },
    {
      "slug": "zigbee2mqtt",
--- a/install/patchmon-install.sh
+++ b/install/patchmon-install.sh
@@ -47,8 +47,8 @@ sed -i -e "s|DATABASE_URL=.*|DATABASE_URL=\"postgresql://$PG_DB_USER:$PG_DB_PASS
  -e "/JWT_SECRET/s/[=$].*/=$JWT_SECRET/" \
  -e "\|CORS_ORIGIN|s|localhost|$LOCAL_IP|" \
  -e "/PORT=3001/aSERVER_PROTOCOL=http \\
-    SERVER_HOST=$LOCAL_IP \\
-    SERVER_PORT=3000" \
+  SERVER_HOST=$LOCAL_IP \\
+  SERVER_PORT=3000" \
  -e '/_ENV=production/aTRUST_PROXY=1' \
  -e '/REDIS_USER=.*/,+1d' /opt/patchmon/backend/.env

--- a/misc/alpine-install.func
+++ b/misc/alpine-install.func
@@ -11,6 +11,13 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 load_functions
 catch_errors

+# Persist diagnostics setting inside container (exported from build.func)
+# so addon scripts running later can find the user's choice
+if [[ ! -f /usr/local/community-scripts/diagnostics ]]; then
+  mkdir -p /usr/local/community-scripts
+  echo "DIAGNOSTICS=${DIAGNOSTICS:-no}" >/usr/local/community-scripts/diagnostics
+fi
+
 # Get LXC IP address (must be called INSIDE container, after network is up)
 get_lxc_ip

@@ -30,7 +37,7 @@ post_progress_to_api() {

  curl -fsS -m 5 -X POST "https://telemetry.community-scripts.org/telemetry" \
    -H "Content-Type: application/json" \
-    -d "{\"random_id\":\"${RANDOM_UUID}\",\"type\":\"lxc\",\"nsapp\":\"${app:-unknown}\",\"status\":\"configuring\"}" &>/dev/null || true
+    -d "{\"random_id\":\"${RANDOM_UUID}\",\"execution_id\":\"${EXECUTION_ID:-${RANDOM_UUID}}\",\"type\":\"lxc\",\"nsapp\":\"${app:-unknown}\",\"status\":\"configuring\"}" &>/dev/null || true
 }

 # This function enables IPv6 if it's not disabled and sets verbose mode
@@ -141,6 +148,7 @@ motd_ssh() {
    # Start the sshd service
    $STD /etc/init.d/sshd start
  fi
+  post_progress_to_api
 }

 # Validate Timezone for some LXC's
@@ -177,5 +185,5 @@ EOF

  echo "bash -c \"\$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/${app}.sh)\"" >/usr/bin/update
  chmod +x /usr/bin/update
-
+  post_progress_to_api
 }
--- a/misc/api.func
+++ b/misc/api.func
@@ -552,6 +552,7 @@ post_to_api() {
    cat <<EOF
 {
    "random_id": "${RANDOM_UUID}",
+    "execution_id": "${EXECUTION_ID:-${RANDOM_UUID}}",
    "type": "lxc",
    "nsapp": "${NSAPP:-unknown}",
    "status": "installing",
@@ -656,6 +657,7 @@ post_to_api_vm() {
    cat <<EOF
 {
    "random_id": "${RANDOM_UUID}",
+    "execution_id": "${EXECUTION_ID:-${RANDOM_UUID}}",
    "type": "vm",
    "nsapp": "${NSAPP:-unknown}",
    "status": "installing",
@@ -686,6 +688,29 @@ EOF
  POST_TO_API_DONE=true
 }

+# ------------------------------------------------------------------------------
+# post_progress_to_api()
+#
+# - Lightweight progress ping from host or container
+# - Updates the existing telemetry record status to "configuring"
+# - Signals that the installation is actively progressing (not stuck)
+# - Fire-and-forget: never blocks or fails the script
+# - Only executes if DIAGNOSTICS=yes and RANDOM_UUID is set
+# - Can be called multiple times safely
+# ------------------------------------------------------------------------------
+post_progress_to_api() {
+  command -v curl &>/dev/null || return 0
+  [[ "${DIAGNOSTICS:-no}" == "no" ]] && return 0
+  [[ -z "${RANDOM_UUID:-}" ]] && return 0
+
+  local app_name="${NSAPP:-${app:-unknown}}"
+  local telemetry_type="${TELEMETRY_TYPE:-lxc}"
+
+  curl -fsS -m 5 -X POST "${TELEMETRY_URL:-https://telemetry.community-scripts.org/telemetry}" \
+    -H "Content-Type: application/json" \
+    -d "{\"random_id\":\"${RANDOM_UUID}\",\"execution_id\":\"${EXECUTION_ID:-${RANDOM_UUID}}\",\"type\":\"${telemetry_type}\",\"nsapp\":\"${app_name}\",\"status\":\"configuring\"}" &>/dev/null || true
+}
+
 # ------------------------------------------------------------------------------
 # post_update_to_api()
 #
@@ -788,6 +813,7 @@ post_update_to_api() {
    cat <<EOF
 {
    "random_id": "${RANDOM_UUID}",
+    "execution_id": "${EXECUTION_ID:-${RANDOM_UUID}}",
    "type": "${TELEMETRY_TYPE:-lxc}",
    "nsapp": "${NSAPP:-unknown}",
    "status": "${pb_status}",
@@ -830,6 +856,7 @@ EOF
    cat <<EOF
 {
    "random_id": "${RANDOM_UUID}",
+    "execution_id": "${EXECUTION_ID:-${RANDOM_UUID}}",
    "type": "${TELEMETRY_TYPE:-lxc}",
    "nsapp": "${NSAPP:-unknown}",
    "status": "${pb_status}",
@@ -872,6 +899,7 @@ EOF
    cat <<EOF
 {
    "random_id": "${RANDOM_UUID}",
+    "execution_id": "${EXECUTION_ID:-${RANDOM_UUID}}",
    "type": "${TELEMETRY_TYPE:-lxc}",
    "nsapp": "${NSAPP:-unknown}",
    "status": "${pb_status}",
@@ -1001,7 +1029,7 @@ _telemetry_report_exit() {
  # Lazy name resolution: use explicit name, fall back to $APP, then "unknown"
  local name="${TELEMETRY_TOOL_NAME:-${APP:-unknown}}"

-  if [[ "${TELEMETRY_TOOL_TYPE:-tool}" == "addon" ]]; then
+  if [[ "${TELEMETRY_TOOL_TYPE:-pve}" == "addon" ]]; then
    post_addon_to_api "$name" "$status" "$ec"
  else
    post_tool_to_api "$name" "$status" "$ec"
@@ -1013,19 +1041,20 @@ _telemetry_report_exit() {
 #
 # - One-line telemetry setup for tools/addon scripts
 # - Reads DIAGNOSTICS from /usr/local/community-scripts/diagnostics
+#   (persisted on PVE host during first build, and inside containers by install.func)
 # - Starts install timer for duration tracking
 # - Sets EXIT trap to automatically report success/failure on script exit
 # - Arguments:
 #   * $1: tool_name (optional, falls back to $APP at exit time)
-#   * $2: type ("tool" for PVE host scripts, "addon" for container addons)
+#   * $2: type ("pve" for PVE host scripts, "addon" for container addons)
 # - Usage:
 #   source <(curl -fsSL .../misc/api.func) 2>/dev/null || true
-#   init_tool_telemetry "post-pve-install" "tool"
+#   init_tool_telemetry "post-pve-install" "pve"
 #   init_tool_telemetry "" "addon"  # uses $APP at exit time
 # ------------------------------------------------------------------------------
 init_tool_telemetry() {
  local name="${1:-}"
-  local type="${2:-tool}"
+  local type="${2:-pve}"

  [[ -n "$name" ]] && TELEMETRY_TOOL_NAME="$name"
  TELEMETRY_TOOL_TYPE="$type"
@@ -1088,7 +1117,8 @@ post_tool_to_api() {
    cat <<EOF
 {
    "random_id": "${uuid}",
-    "type": "tool",
+    "execution_id": "${EXECUTION_ID:-${uuid}}",
+    "type": "pve",
    "nsapp": "${tool_name}",
    "status": "${status}",
    "exit_code": ${exit_code},
@@ -1155,6 +1185,7 @@ post_addon_to_api() {
    cat <<EOF
 {
    "random_id": "${uuid}",
+    "execution_id": "${EXECUTION_ID:-${uuid}}",
    "type": "addon",
    "nsapp": "${addon_name}",
    "status": "${status}",
@@ -1246,6 +1277,7 @@ post_update_to_api_extended() {
    cat <<EOF
 {
    "random_id": "${RANDOM_UUID}",
+    "execution_id": "${EXECUTION_ID:-${RANDOM_UUID}}",
    "type": "${TELEMETRY_TYPE:-lxc}",
    "nsapp": "${NSAPP:-unknown}",
    "status": "${pb_status}",
--- a/misc/build.func
+++ b/misc/build.func
@@ -42,9 +42,10 @@ variables() {
  var_install="${NSAPP}-install"                         # sets the var_install variable by appending "-install" to the value of NSAPP.
  INTEGER='^[0-9]+([.][0-9]+)?$'                         # it defines the INTEGER regular expression pattern.
  PVEHOST_NAME=$(hostname)                               # gets the Proxmox Hostname and sets it to Uppercase
-  DIAGNOSTICS="yes"                                      # sets the DIAGNOSTICS variable to "yes", used for the API call.
+  DIAGNOSTICS="no"                                       # Safe default: no telemetry until user consents via diagnostics_check()
  METHOD="default"                                       # sets the METHOD variable to "default", used for the API call.
  RANDOM_UUID="$(cat /proc/sys/kernel/random/uuid)"      # generates a random UUID and sets it to the RANDOM_UUID variable.
+  EXECUTION_ID="${RANDOM_UUID}"                          # Unique execution ID for telemetry record identification (unique-indexed in PocketBase)
  SESSION_ID="${RANDOM_UUID:0:8}"                        # Short session ID (first 8 chars of UUID) for log files
  BUILD_LOG="/tmp/create-lxc-${SESSION_ID}.log"          # Host-side container creation log
  combined_log="/tmp/install-${SESSION_ID}-combined.log" # Combined log (build + install) for failed installations
@@ -2787,93 +2788,85 @@ Advanced:
 # diagnostics_check()
 #
 # - Ensures diagnostics config file exists at /usr/local/community-scripts/diagnostics
-# - Asks user whether to send anonymous diagnostic data
+# - Asks user whether to send anonymous diagnostic data (first run only)
 # - Saves DIAGNOSTICS=yes/no in the config file
-# - Creates file if missing with default DIAGNOSTICS=yes
-# - Reads current diagnostics setting from file
+# - Reads current diagnostics setting from existing file
 # - Sets global DIAGNOSTICS variable for API telemetry opt-in/out
 # ------------------------------------------------------------------------------
 diagnostics_check() {
-  if ! [ -d "/usr/local/community-scripts" ]; then
-    mkdir -p /usr/local/community-scripts
+  local config_dir="/usr/local/community-scripts"
+  local config_file="${config_dir}/diagnostics"
+
+  mkdir -p "$config_dir"
+
+  if [[ -f "$config_file" ]]; then
+    DIAGNOSTICS=$(awk -F '=' '/^DIAGNOSTICS/ {print $2}' "$config_file") || true
+    DIAGNOSTICS="${DIAGNOSTICS:-no}"
+    return
  fi

-  if ! [ -f "/usr/local/community-scripts/diagnostics" ]; then
-    if (whiptail --backtitle "Proxmox VE Helper Scripts" --title "DIAGNOSTICS" --yesno "Send Diagnostics of LXC Installation?\n\n(This only transmits data without user data, just RAM, CPU, LXC name, ...)" 10 58); then
-      cat <<EOF >/usr/local/community-scripts/diagnostics
-DIAGNOSTICS=yes
+  local result
+  result=$(whiptail --backtitle "Proxmox VE Helper Scripts" \
+    --title "TELEMETRY & DIAGNOSTICS" \
+    --ok-button "Confirm" --cancel-button "Exit" \
+    --radiolist "\nHelp improve Community-Scripts by sharing anonymous data.\n\nWhat we collect:\n  - Container resources (CPU, RAM, disk), OS & PVE version\n  - Application name, install method and status\n\nWhat we DON'T collect:\n  - No IP addresses, hostnames, or personal data\n\nYou can change this anytime in the Settings menu.\nPrivacy: https://github.com/community-scripts/telemetry-service/blob/main/docs/PRIVACY.md\n\nUse SPACE to select, ENTER to confirm." 22 76 2 \
+    "yes" "Yes, share anonymous data" OFF \
+    "no" "No, opt out" OFF \
+    3>&1 1>&2 2>&3) || result="no"

-#This file is used to store the diagnostics settings for the Community-Scripts API.
-#https://github.com/community-scripts/ProxmoxVE/discussions/1836
-#Your diagnostics will be sent to the Community-Scripts API for troubleshooting/statistical purposes.
-#You can review the data at https://community-scripts.github.io/ProxmoxVE/data
-#If you do not wish to send diagnostics, please set the variable 'DIAGNOSTICS' to "no" in /usr/local/community-scripts/diagnostics, or use the menue.
-#This will disable the diagnostics feature.
-#To send diagnostics, set the variable 'DIAGNOSTICS' to "yes" in /usr/local/community-scripts/diagnostics, or use the menue.
-#This will enable the diagnostics feature.
-#The following information will be sent:
-#"disk_size"
-#"core_count"
-#"ram_size"
-#"os_type"
-#"os_version"
-#"nsapp"
-#"method"
-#"pve_version"
-#"status"
-#If you have any concerns, please review the source code at /misc/build.func
+  DIAGNOSTICS="${result:-no}"
+
+  cat <<EOF >"$config_file"
+DIAGNOSTICS=${DIAGNOSTICS}
+
+# Community-Scripts Telemetry Configuration
+# https://telemetry.community-scripts.org
+#
+# This file stores your telemetry preference.
+# Set DIAGNOSTICS=yes to share anonymous installation data.
+# Set DIAGNOSTICS=no to disable telemetry.
+#
+# You can also change this via the Settings menu during installation.
+#
+# Data collected (when enabled):
+#   disk_size, core_count, ram_size, os_type, os_version,
+#   nsapp, method, pve_version, status, exit_code
+#
+# No personal data (IPs, hostnames, passwords) is ever collected.
+# Privacy: https://github.com/community-scripts/telemetry-service/blob/main/docs/PRIVACY.md
 EOF
-      DIAGNOSTICS="yes"
-    else
-      cat <<EOF >/usr/local/community-scripts/diagnostics
-DIAGNOSTICS=no
-
-#This file is used to store the diagnostics settings for the Community-Scripts API.
-#https://github.com/community-scripts/ProxmoxVE/discussions/1836
-#Your diagnostics will be sent to the Community-Scripts API for troubleshooting/statistical purposes.
-#You can review the data at https://community-scripts.github.io/ProxmoxVE/data
-#If you do not wish to send diagnostics, please set the variable 'DIAGNOSTICS' to "no" in /usr/local/community-scripts/diagnostics, or use the menue.
-#This will disable the diagnostics feature.
-#To send diagnostics, set the variable 'DIAGNOSTICS' to "yes" in /usr/local/community-scripts/diagnostics, or use the menue.
-#This will enable the diagnostics feature.
-#The following information will be sent:
-#"disk_size"
-#"core_count"
-#"ram_size"
-#"os_type"
-#"os_version"
-#"nsapp"
-#"method"
-#"pve_version"
-#"status"
-#If you have any concerns, please review the source code at /misc/build.func
-EOF
-      DIAGNOSTICS="no"
-    fi
-  else
-    DIAGNOSTICS=$(awk -F '=' '/^DIAGNOSTICS/ {print $2}' /usr/local/community-scripts/diagnostics)
-
-  fi
 }

 diagnostics_menu() {
-  if [ "${DIAGNOSTICS:-no}" = "yes" ]; then
+  local current="${DIAGNOSTICS:-no}"
+  local status_text="DISABLED"
+  [[ "$current" == "yes" ]] && status_text="ENABLED"
+
+  local dialog_text=(
+    "Telemetry is currently: ${status_text}\n\n"
+    "Anonymous data helps us improve scripts and track issues.\n"
+    "No personal data is ever collected.\n\n"
+    "More info: https://telemetry.community-scripts.org\n\n"
+    "Do you want to ${current:+change this setting}?"
+  )
+
+  if [[ "$current" == "yes" ]]; then
    if whiptail --backtitle "Proxmox VE Helper Scripts" \
-      --title "DIAGNOSTIC SETTINGS" \
-      --yesno "Send Diagnostics?\n\nCurrent: ${DIAGNOSTICS}" 10 58 \
-      --yes-button "No" --no-button "Back"; then
+      --title "TELEMETRY SETTINGS" \
+      --yesno "${dialog_text[*]}" 14 64 \
+      --yes-button "Disable" --no-button "Keep enabled"; then
      DIAGNOSTICS="no"
      sed -i 's/^DIAGNOSTICS=.*/DIAGNOSTICS=no/' /usr/local/community-scripts/diagnostics
-      whiptail --msgbox "Diagnostics set to ${DIAGNOSTICS}." 8 58
+      whiptail --msgbox "Telemetry disabled.\n\nNote: Existing containers keep their current setting.\nNew containers will inherit this choice." 10 58
    fi
  else
    if whiptail --backtitle "Proxmox VE Helper Scripts" \
-      --title "DIAGNOSTIC SETTINGS" \
-      --yesno "Send Diagnostics?\n\nCurrent: ${DIAGNOSTICS}" 10 58 \
-      --yes-button "Yes" --no-button "Back"; then
+      --title "TELEMETRY SETTINGS" \
+      --yesno "${dialog_text[*]}" 14 64 \
+      --yes-button "Enable" --no-button "Keep disabled"; then
      DIAGNOSTICS="yes"
      sed -i 's/^DIAGNOSTICS=.*/DIAGNOSTICS=yes/' /usr/local/community-scripts/diagnostics
-      whiptail --msgbox "Diagnostics set to ${DIAGNOSTICS}." 8 58
+      whiptail --msgbox "Telemetry enabled.\n\nNote: Existing containers keep their current setting.\nNew containers will inherit this choice." 10 58
    fi
  fi
 }
@@ -3561,6 +3554,7 @@ build_container() {
  # Core exports for install.func
  export DIAGNOSTICS="$DIAGNOSTICS"
  export RANDOM_UUID="$RANDOM_UUID"
+  export EXECUTION_ID="$EXECUTION_ID"
  export SESSION_ID="$SESSION_ID"
  export CACHER="$APT_CACHER"
  export CACHER_IP="$APT_CACHER_IP"
@@ -3666,9 +3660,6 @@ $PCT_OPTIONS_STRING"
      exit 214
    fi
    msg_ok "Storage space validated"
-
-    # Report installation start to API (early - captures failed installs too)
-    post_to_api
  fi

  create_lxc_container || exit $?
@@ -3914,6 +3905,7 @@ EOF
  for i in {1..10}; do
    if pct status "$CTID" | grep -q "status: running"; then
      msg_ok "Started LXC Container"
+      post_progress_to_api # Signal container is running
      break
    fi
    sleep 1
@@ -3968,6 +3960,7 @@ EOF
      echo -e "${YW}Container may have limited internet access. Installation will continue...${CL}"
    else
      msg_ok "Network in LXC is reachable (ping)"
+      post_progress_to_api # Signal network is ready
    fi
  fi
  # Function to get correct GID inside container
@@ -4039,6 +4032,7 @@ EOF'
  fi

  msg_ok "Customized LXC Container"
+  post_progress_to_api # Signal ready for app installation

  # Optional DNS override for retry scenarios (inside LXC, never on host)
  if [[ "${DNS_RETRY_OVERRIDE:-false}" == "true" ]]; then
@@ -4112,9 +4106,9 @@ EOF'
        build_log_copied=true
      fi

-      # Copy and append INSTALL_LOG from container
+      # Copy and append INSTALL_LOG from container (with timeout to prevent hangs)
      local temp_install_log="/tmp/.install-temp-${SESSION_ID}.log"
-      if pct pull "$CTID" "/root/.install-${SESSION_ID}.log" "$temp_install_log" 2>/dev/null; then
+      if timeout 8 pct pull "$CTID" "/root/.install-${SESSION_ID}.log" "$temp_install_log" 2>/dev/null; then
        {
          echo "================================================================================"
          echo "PHASE 2: APPLICATION INSTALLATION (Container)"
@@ -4894,6 +4888,9 @@ create_lxc_container() {
    exit 206
  fi

+  # Report installation start to API early - captures failures in storage/template/create
+  post_to_api
+
  # Storage capability check
  check_storage_support "rootdir" || {
    msg_error "No valid storage found for 'rootdir' [Container]"
@@ -5423,9 +5420,7 @@ create_lxc_container() {
  }

  msg_ok "LXC Container ${BL}$CTID${CL} ${GN}was successfully created."
-
-  # Report container creation to API
-  post_to_api
+  post_progress_to_api # Signal container creation complete
 }

 # ==============================================================================
@@ -5498,6 +5493,7 @@ EOF
 # - If INSTALL_LOG points to a container path (e.g. /root/.install-*),
 #   tries to pull it from the container and create a combined log
 # - This allows get_error_text() to find actual error output for telemetry
+# - Uses timeout on pct pull to prevent hangs on dead/unresponsive containers
 # ------------------------------------------------------------------------------
 ensure_log_on_host() {
  # Already readable on host? Nothing to do.
@@ -5527,9 +5523,9 @@ ensure_log_on_host() {
          echo ""
        } >>"$combined_log"
      fi
-      # Pull INSTALL_LOG from container
+      # Pull INSTALL_LOG from container (with timeout to prevent hangs on dead containers)
      local temp_log="/tmp/.install-temp-${SESSION_ID}.log"
-      if pct pull "$CTID" "/root/.install-${SESSION_ID}.log" "$temp_log" 2>/dev/null; then
+      if timeout 8 pct pull "$CTID" "/root/.install-${SESSION_ID}.log" "$temp_log" 2>/dev/null; then
        {
          echo "================================================================================"
          echo "PHASE 2: APPLICATION INSTALLATION (Container)"
@@ -5552,6 +5548,8 @@ ensure_log_on_host() {
 # - Exit trap handler for reporting to API telemetry
 # - Captures exit code and reports to PocketBase using centralized error descriptions
 # - Uses explain_exit_code() from api.func for consistent error messages
+# - ALWAYS sends telemetry FIRST before log collection to prevent pct pull
+#   hangs from blocking status updates (container may be dead/unresponsive)
 # - For non-zero exit codes: posts "failed" status
 # - For zero exit codes where post_update_to_api was never called:
 #   catches orphaned "installing" records (e.g., script exited cleanly
@@ -5560,8 +5558,13 @@ ensure_log_on_host() {
 api_exit_script() {
  local exit_code=$?
  if [ $exit_code -ne 0 ]; then
-    ensure_log_on_host
-    post_update_to_api "failed" "$exit_code"
+    # ALWAYS send telemetry FIRST - ensure status is reported even if
+    # ensure_log_on_host hangs (e.g. pct pull on dead container)
+    post_update_to_api "failed" "$exit_code" 2>/dev/null || true
+    # Best-effort log collection with timeout (non-critical after telemetry is sent)
+    if declare -f ensure_log_on_host >/dev/null 2>&1; then
+      timeout 10 bash -c 'ensure_log_on_host' 2>/dev/null || true
+    fi
  elif [[ "${POST_TO_API_DONE:-}" == "true" && "${POST_UPDATE_DONE:-}" != "true" ]]; then
    # Script exited with 0 but never sent a completion status
    # exit_code=0 is never an error — report as success
@@ -5572,7 +5575,7 @@ api_exit_script() {
 if command -v pveversion >/dev/null 2>&1; then
  trap 'api_exit_script' EXIT
 fi
-trap 'local _ec=$?; if [[ $_ec -ne 0 ]]; then ensure_log_on_host; post_update_to_api "failed" "$_ec"; fi' ERR
-trap 'ensure_log_on_host; post_update_to_api "failed" "129"; exit 129' SIGHUP
-trap 'ensure_log_on_host; post_update_to_api "failed" "130"; exit 130' SIGINT
-trap 'ensure_log_on_host; post_update_to_api "failed" "143"; exit 143' SIGTERM
+trap 'local _ec=$?; if [[ $_ec -ne 0 ]]; then post_update_to_api "failed" "$_ec" 2>/dev/null || true; timeout 10 bash -c "ensure_log_on_host" 2>/dev/null || true; fi' ERR
+trap 'post_update_to_api "failed" "129" 2>/dev/null || true; timeout 10 bash -c "ensure_log_on_host" 2>/dev/null || true; exit 129' SIGHUP
+trap 'post_update_to_api "failed" "130" 2>/dev/null || true; timeout 10 bash -c "ensure_log_on_host" 2>/dev/null || true; exit 130' SIGINT
+trap 'post_update_to_api "failed" "143" 2>/dev/null || true; timeout 10 bash -c "ensure_log_on_host" 2>/dev/null || true; exit 143' SIGTERM
--- a/misc/core.func
+++ b/misc/core.func
@@ -1496,6 +1496,11 @@ cleanup_lxc() {
  fi

  msg_ok "Cleaned"
+  
+  # Send progress ping if available (defined in install.func)
+  if declare -f post_progress_to_api &>/dev/null; then
+    post_progress_to_api
+  fi
 }

 # ------------------------------------------------------------------------------
--- a/misc/error_handler.func
+++ b/misc/error_handler.func
@@ -204,6 +204,12 @@ error_handler() {

  printf "\e[?25h"

+  # ALWAYS report failure to API immediately - don't wait for container checks
+  # This ensures we capture failures that occur before/after container exists
+  if declare -f post_update_to_api &>/dev/null; then
+    post_update_to_api "failed" "$exit_code" 2>/dev/null || true
+  fi
+
  # Use msg_error if available, fallback to echo
  if declare -f msg_error >/dev/null 2>&1; then
    msg_error "in line ${line_number}: exit code ${exit_code} (${explanation}): while executing command ${command}"
@@ -254,11 +260,6 @@ error_handler() {

      # Offer to remove container if it exists (build errors after container creation)
      if [[ -n "${CTID:-}" ]] && command -v pct &>/dev/null && pct status "$CTID" &>/dev/null; then
-        # Report failure to API before container cleanup
-        if declare -f post_update_to_api &>/dev/null; then
-          post_update_to_api "failed" "$exit_code"
-        fi
-
        echo ""
        if declare -f msg_custom >/dev/null 2>&1; then
          echo -en "${TAB}❓${TAB}${YW}Remove broken container ${CTID}? (Y/n) [auto-remove in 60s]: ${CL}"
@@ -329,6 +330,8 @@ error_handler() {
 # - Cleans up lock files if lockfile variable is set
 # - Exits with captured exit code
 # - Always runs on script termination (success or failure)
+# - For signal exits (>128): sends telemetry FIRST before log collection
+#   to prevent pct pull hangs from blocking status updates
 # ------------------------------------------------------------------------------
 on_exit() {
  local exit_code=$?
@@ -337,14 +340,17 @@ on_exit() {
  # post_to_api was called ("installing" sent) but post_update_to_api was never called
  if [[ "${POST_TO_API_DONE:-}" == "true" && "${POST_UPDATE_DONE:-}" != "true" ]]; then
    if declare -f post_update_to_api >/dev/null 2>&1; then
-      # Ensure log is accessible on host before reporting
-      if declare -f ensure_log_on_host >/dev/null 2>&1; then
-        ensure_log_on_host
-      fi
+      # ALWAYS send telemetry FIRST - ensure status is reported even if
+      # ensure_log_on_host hangs (e.g. pct pull on dead/unresponsive container)
      if [[ $exit_code -ne 0 ]]; then
-        post_update_to_api "failed" "$exit_code"
+        post_update_to_api "failed" "$exit_code" 2>/dev/null || true
      else
-        post_update_to_api "failed" "1"
+        # exit_code=0 is never an error — report as success
+        post_update_to_api "done" "0" 2>/dev/null || true
+      fi
+      # Best-effort log collection with timeout (non-critical after telemetry is sent)
+      if declare -f ensure_log_on_host >/dev/null 2>&1; then
+        timeout 10 bash -c 'ensure_log_on_host' 2>/dev/null || true
      fi
    fi
  fi
@@ -356,22 +362,26 @@ on_exit() {
 # on_interrupt()
 #
 # - SIGINT (Ctrl+C) trap handler
+# - Reports to telemetry FIRST (time-critical: container may be dying)
 # - Displays "Interrupted by user" message
 # - Exits with code 130 (128 + SIGINT=2)
+# - Output redirected to /dev/null fallback to prevent SIGPIPE on closed terminals
 # ------------------------------------------------------------------------------
 on_interrupt() {
-  # Ensure log is accessible on host before reporting
-  if declare -f ensure_log_on_host >/dev/null 2>&1; then
-    ensure_log_on_host
-  fi
-  # Report interruption to telemetry API (prevents stuck "installing" records)
+  # CRITICAL: Send telemetry FIRST before any cleanup or output
+  # If ensure_log_on_host hangs (e.g. pct pull on dying container),
+  # the status update would never be sent, leaving records stuck in "installing"
  if declare -f post_update_to_api >/dev/null 2>&1; then
-    post_update_to_api "failed" "130"
+    post_update_to_api "failed" "130" 2>/dev/null || true
+  fi
+  # Best-effort log collection with timeout (non-critical after telemetry is sent)
+  if declare -f ensure_log_on_host >/dev/null 2>&1; then
+    timeout 10 bash -c 'ensure_log_on_host' 2>/dev/null || true
  fi
  if declare -f msg_error >/dev/null 2>&1; then
-    msg_error "Interrupted by user (SIGINT)"
+    msg_error "Interrupted by user (SIGINT)" 2>/dev/null || true
  else
-    echo -e "\n${RD}Interrupted by user (SIGINT)${CL}"
+    echo -e "\n${RD}Interrupted by user (SIGINT)${CL}" 2>/dev/null || true
  fi
  exit 130
 }
@@ -380,23 +390,27 @@ on_interrupt() {
 # on_terminate()
 #
 # - SIGTERM trap handler
+# - Reports to telemetry FIRST (time-critical: process being killed)
 # - Displays "Terminated by signal" message
 # - Exits with code 143 (128 + SIGTERM=15)
 # - Triggered by external process termination
+# - Output redirected to /dev/null fallback to prevent SIGPIPE on closed terminals
 # ------------------------------------------------------------------------------
 on_terminate() {
-  # Ensure log is accessible on host before reporting
-  if declare -f ensure_log_on_host >/dev/null 2>&1; then
-    ensure_log_on_host
-  fi
-  # Report termination to telemetry API (prevents stuck "installing" records)
+  # CRITICAL: Send telemetry FIRST before any cleanup or output
+  # Same rationale as on_interrupt: ensure status gets reported even if
+  # ensure_log_on_host hangs or terminal is already closed
  if declare -f post_update_to_api >/dev/null 2>&1; then
-    post_update_to_api "failed" "143"
+    post_update_to_api "failed" "143" 2>/dev/null || true
+  fi
+  # Best-effort log collection with timeout (non-critical after telemetry is sent)
+  if declare -f ensure_log_on_host >/dev/null 2>&1; then
+    timeout 10 bash -c 'ensure_log_on_host' 2>/dev/null || true
  fi
  if declare -f msg_error >/dev/null 2>&1; then
-    msg_error "Terminated by signal (SIGTERM)"
+    msg_error "Terminated by signal (SIGTERM)" 2>/dev/null || true
  else
-    echo -e "\n${RD}Terminated by signal (SIGTERM)${CL}"
+    echo -e "\n${RD}Terminated by signal (SIGTERM)${CL}" 2>/dev/null || true
  fi
  exit 143
 }
--- a/misc/install.func
+++ b/misc/install.func
@@ -37,6 +37,13 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 load_functions
 catch_errors

+# Persist diagnostics setting inside container (exported from build.func)
+# so addon scripts running later can find the user's choice
+if [[ ! -f /usr/local/community-scripts/diagnostics ]]; then
+  mkdir -p /usr/local/community-scripts
+  echo "DIAGNOSTICS=${DIAGNOSTICS:-no}" >/usr/local/community-scripts/diagnostics
+fi
+
 # Get LXC IP address (must be called INSIDE container, after network is up)
 get_lxc_ip

@@ -56,7 +63,7 @@ post_progress_to_api() {

  curl -fsS -m 5 -X POST "https://telemetry.community-scripts.org/telemetry" \
    -H "Content-Type: application/json" \
-    -d "{\"random_id\":\"${RANDOM_UUID}\",\"type\":\"lxc\",\"nsapp\":\"${app:-unknown}\",\"status\":\"configuring\"}" &>/dev/null || true
+    -d "{\"random_id\":\"${RANDOM_UUID}\",\"execution_id\":\"${EXECUTION_ID:-${RANDOM_UUID}}\",\"type\":\"lxc\",\"nsapp\":\"${app:-unknown}\",\"status\":\"configuring\"}" &>/dev/null || true
 }

 # ==============================================================================
@@ -278,6 +285,7 @@ motd_ssh() {
    sed -i "s/#PermitRootLogin prohibit-password/PermitRootLogin yes/g" /etc/ssh/sshd_config
    systemctl restart sshd
  fi
+  post_progress_to_api
 }

 # ==============================================================================
@@ -316,4 +324,5 @@ EOF
    chmod 700 /root/.ssh
    chmod 600 /root/.ssh/authorized_keys
  fi
+  post_progress_to_api
 }
--- a/tools/addon/add-netbird-lxc.sh
+++ b/tools/addon/add-netbird-lxc.sh
@@ -22,7 +22,7 @@ set -e

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "add-netbird-lxc" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "add-netbird-lxc" "addon"

 while true; do
  read -p "This will add NetBird to an existing LXC Container ONLY. Proceed(y/n)?" yn
--- a/tools/addon/add-tailscale-lxc.sh
+++ b/tools/addon/add-tailscale-lxc.sh
@@ -25,7 +25,7 @@ function msg_error() { echo -e " \e[1;31m✖\e[0m $1"; }

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "add-tailscale-lxc" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "add-tailscale-lxc" "addon"

 header_info

--- a/tools/addon/all-templates.sh
+++ b/tools/addon/all-templates.sh
@@ -45,7 +45,7 @@ function msg() {

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "all-templates" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "all-templates" "addon"

 function validate_container_id() {
  local ctid="$1"
--- a/tools/addon/netdata.sh
+++ b/tools/addon/netdata.sh
@@ -29,7 +29,7 @@ silent() { "$@" >/dev/null 2>&1; }

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "netdata" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "netdata" "addon"

 set -e
 header_info
--- a/tools/pve/add-iptag.sh
+++ b/tools/pve/add-iptag.sh
@@ -33,7 +33,7 @@ CROSS="${RD}✗${CL} "

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "add-iptag" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "add-iptag" "pve"

 # Stop any running spinner
 stop_spinner() {
--- a/tools/pve/clean-lxcs.sh
+++ b/tools/pve/clean-lxcs.sh
@@ -24,7 +24,7 @@ CL="\033[m"

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "clean-lxcs" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "clean-lxcs" "pve"

 header_info
 echo "Loading..."
--- a/tools/pve/clean-orphaned-lvm.sh
+++ b/tools/pve/clean-orphaned-lvm.sh
@@ -18,7 +18,7 @@ EOF

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "clean-orphaned-lvm" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "clean-orphaned-lvm" "pve"

 # Function to check for orphaned LVM volumes
 function find_orphaned_lvm {
--- a/tools/pve/container-restore-from-backup.sh
+++ b/tools/pve/container-restore-from-backup.sh
@@ -46,7 +46,7 @@ header_info

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "container-restore" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "container-restore" "pve"

 function msg_info() {
  local msg="$1"
--- a/tools/pve/core-restore-from-backup.sh
+++ b/tools/pve/core-restore-from-backup.sh
@@ -46,7 +46,7 @@ header_info

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "core-restore" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "core-restore" "pve"

 function msg_info() {
  local msg="$1"
--- a/tools/pve/execute.sh
+++ b/tools/pve/execute.sh
@@ -25,7 +25,7 @@ CL=$(echo "\033[m")

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "execute-lxcs" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "execute-lxcs" "pve"

 header_info
 echo "Loading..."
--- a/tools/pve/frigate-support.sh
+++ b/tools/pve/frigate-support.sh
@@ -18,7 +18,7 @@ EOF

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "frigate-support" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "frigate-support" "pve"

 header_info
 while true; do
--- a/tools/pve/fstrim.sh
+++ b/tools/pve/fstrim.sh
@@ -21,7 +21,7 @@ CL="\033[m"

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "fstrim" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "fstrim" "pve"

 LOGFILE="/var/log/fstrim.log"
 touch "$LOGFILE"
--- a/tools/pve/host-backup.sh
+++ b/tools/pve/host-backup.sh
@@ -18,7 +18,7 @@ EOF

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "host-backup" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "host-backup" "pve"

 # Function to perform backup
 function perform_backup {
--- a/tools/pve/hw-acceleration.sh
+++ b/tools/pve/hw-acceleration.sh
@@ -32,7 +32,7 @@ set -e

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "hw-acceleration" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "hw-acceleration" "pve"

 header_info
 echo "Loading..."
--- a/tools/pve/kernel-clean.sh
+++ b/tools/pve/kernel-clean.sh
@@ -24,7 +24,7 @@ CL="\033[m"

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "kernel-clean" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "kernel-clean" "pve"

 # Detect current kernel
 current_kernel=$(uname -r)
--- a/tools/pve/kernel-pin.sh
+++ b/tools/pve/kernel-pin.sh
@@ -28,7 +28,7 @@ available_kernels=$(dpkg --list | grep 'kernel-.*-pve' | awk '{print substr($2,

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "kernel-pin" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "kernel-pin" "pve"

 header_info

--- a/tools/pve/lxc-delete.sh
+++ b/tools/pve/lxc-delete.sh
@@ -40,7 +40,7 @@ CM="${TAB}✔️${TAB}${CL}"

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "lxc-delete" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "lxc-delete" "pve"

 header_info
 echo "Loading..."
--- a/tools/pve/microcode.sh
+++ b/tools/pve/microcode.sh
@@ -31,7 +31,7 @@ msg_error() { echo -e "${BFR} ${CROSS} ${RD}$1${CL}"; }

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "microcode" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "microcode" "pve"

 header_info
 current_microcode=$(journalctl -k | grep -i 'microcode: Current revision:' | grep -oP 'Current revision: \K0x[0-9a-f]+')
--- a/tools/pve/monitor-all.sh
+++ b/tools/pve/monitor-all.sh
@@ -17,7 +17,7 @@ EOF

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "monitor-all" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "monitor-all" "pve"

 add() {
  echo -e "\n IMPORTANT: Tag-Based Monitoring Enabled"
--- a/tools/pve/nic-offloading-fix.sh
+++ b/tools/pve/nic-offloading-fix.sh
@@ -35,7 +35,7 @@ EOF

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "nic-offloading-fix" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "nic-offloading-fix" "pve"

 header_info

--- a/tools/pve/pbs3-upgrade.sh
+++ b/tools/pve/pbs3-upgrade.sh
@@ -46,7 +46,7 @@ msg_error() {

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "pbs3-upgrade" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "pbs3-upgrade" "pve"

 start_routines() {
  header_info
--- a/tools/pve/pbs4-upgrade.sh
+++ b/tools/pve/pbs4-upgrade.sh
@@ -34,7 +34,7 @@ msg_error() { echo -e "${BFR} ${CROSS} ${RD}$1${CL}"; }

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "pbs4-upgrade" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "pbs4-upgrade" "pve"

 start_routines() {
  header_info
--- a/tools/pve/pbs_microcode.sh
+++ b/tools/pve/pbs_microcode.sh
@@ -31,7 +31,7 @@ msg_info() { echo -ne " ${HOLD} ${YW}$1..."; }

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "pbs-microcode" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "pbs-microcode" "pve"
 msg_ok() { echo -e "${BFR} ${CM} ${GN}$1${CL}"; }
 msg_error() { echo -e "${BFR} ${CROSS} ${RD}$1${CL}"; }

--- a/tools/pve/post-pbs-install.sh
+++ b/tools/pve/post-pbs-install.sh
@@ -34,7 +34,7 @@ msg_error() { echo -e "${BFR} ${CROSS} ${RD}$1${CL}"; }

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "post-pbs-install" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "post-pbs-install" "pve"

 # ---- helpers ----
 get_pbs_codename() {
--- a/tools/pve/post-pmg-install.sh
+++ b/tools/pve/post-pmg-install.sh
@@ -45,7 +45,7 @@ msg_error() {

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "post-pmg-install" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "post-pmg-install" "pve"

 if ! grep -q "Proxmox Mail Gateway" /etc/issue 2>/dev/null; then
  msg_error "This script is only intended for Proxmox Mail Gateway"
--- a/tools/pve/post-pve-install.sh
+++ b/tools/pve/post-pve-install.sh
@@ -46,7 +46,7 @@ msg_error() {

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "post-pve-install" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "post-pve-install" "pve"

 get_pve_version() {
  local pve_ver
--- a/tools/pve/pve-privilege-converter.sh
+++ b/tools/pve/pve-privilege-converter.sh
@@ -13,7 +13,7 @@ fi
 source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/core.func)
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
 load_functions
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "pve-privilege-converter" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "pve-privilege-converter" "pve"

 set -euo pipefail
 shopt -s inherit_errexit nullglob
--- a/tools/pve/pve8-upgrade.sh
+++ b/tools/pve/pve8-upgrade.sh
@@ -46,7 +46,7 @@ msg_error() {

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "pve8-upgrade" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "pve8-upgrade" "pve"

 start_routines() {
  header_info
--- a/tools/pve/scaling-governor.sh
+++ b/tools/pve/scaling-governor.sh
@@ -8,7 +8,7 @@ set -e

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "scaling-governor" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "scaling-governor" "pve"

 header_info() {
  clear
--- a/tools/pve/update-apps.sh
+++ b/tools/pve/update-apps.sh
@@ -6,7 +6,7 @@

 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/refs/heads/main/misc/core.func)
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "update-apps" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "update-apps" "pve"

 # =============================================================================
 # CONFIGURATION VARIABLES
--- a/tools/pve/update-lxcs.sh
+++ b/tools/pve/update-lxcs.sh
@@ -27,7 +27,7 @@ CL=$(echo "\033[m")

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "update-lxcs" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "update-lxcs" "pve"

 header_info
 echo "Loading..."
--- a/tools/pve/update-repo.sh
+++ b/tools/pve/update-repo.sh
@@ -25,7 +25,7 @@ CL=$(echo "\033[m")

 # Telemetry
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func) 2>/dev/null || true
-declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "update-repo" "tool"
+declare -f init_tool_telemetry &>/dev/null && init_tool_telemetry "update-repo" "pve"

 header_info
 echo "Loading..."
--- a/vm/opnsense-vm.sh
+++ b/vm/opnsense-vm.sh
@@ -91,6 +91,17 @@ function cleanup() {
  rm -rf $TEMP_DIR
 }

+function check_disk_space() {
+  local path="$1"
+  local required_gb="$2"
+  local available_kb=$(df -k "$path" | awk 'NR==2 {print $4}')
+  local available_gb=$((available_kb / 1024 / 1024))
+  if [ $available_gb -lt $required_gb ]; then
+    return 1
+  fi
+  return 0
+}
+
 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
 function send_line_to_vm() {
@@ -605,11 +616,41 @@ if [ -z "$URL" ]; then
  exit 1
 fi
 msg_ok "Download URL: ${CL}${BL}${URL}${CL}"
+
+# Check available disk space (require at least 20GB for safety)
+if ! check_disk_space "$TEMP_DIR" 20; then
+  AVAILABLE_GB=$(df -h "$TEMP_DIR" | awk 'NR==2 {print $4}')
+  msg_error "Insufficient disk space in temporary directory ($TEMP_DIR)."
+  msg_error "Available: ${AVAILABLE_GB}, Required: ~20GB for FreeBSD image decompression."
+  msg_error "Please free up space or ensure /tmp has sufficient storage."
+  exit 1
+fi
+
+msg_info "Downloading FreeBSD Image"
 curl -f#SL -o "$(basename "$URL")" "$URL"
 echo -en "\e[1A\e[0K"
+msg_ok "Downloaded ${CL}${BL}$(basename "$URL")${CL}"
+
+# Check disk space again before decompression
+if ! check_disk_space "$TEMP_DIR" 15; then
+  AVAILABLE_GB=$(df -h "$TEMP_DIR" | awk 'NR==2 {print $4}')
+  msg_error "Insufficient disk space for decompression."
+  msg_error "Available: ${AVAILABLE_GB}, Required: ~15GB for decompressed image."
+  exit 1
+fi
+
+msg_info "Decompressing FreeBSD Image (this may take a few minutes)"
 FILE=FreeBSD.qcow2
-unxz -cv $(basename $URL) >${FILE}
-msg_ok "Downloaded ${CL}${BL}${FILE}${CL}"
+if ! unxz -cv $(basename $URL) >${FILE}; then
+  msg_error "Failed to decompress FreeBSD image."
+  msg_error "This is usually caused by insufficient disk space."
+  df -h "$TEMP_DIR"
+  exit 1
+fi
+
+# Remove the compressed file to save space
+rm -f "$(basename "$URL")"
+msg_ok "Decompressed ${CL}${BL}${FILE}${CL}"

 STORAGE_TYPE=$(pvesm status -storage $STORAGE | awk 'NR>1 {print $2}')
 case $STORAGE_TYPE in
@@ -649,7 +690,7 @@ qm set $VMID \
  -boot order=scsi0 \
  -serial0 socket \
  -tags community-script >/dev/null
-qm resize $VMID scsi0 10G >/dev/null
+qm resize $VMID scsi0 20G >/dev/null
 DESCRIPTION=$(
  cat <<EOF
 <div align='center'>
Author	SHA1	Message	Date
Chris	6c3ed1b691	Fix protocol variable usage in patchmon.sh	2026-02-19 10:06:43 -05:00
Chris	e9629098d1	Fix sed command for environment variable updates	2026-02-19 09:38:42 -05:00
Chris	1bc48a35b7	Update ct/patchmon.sh	2026-02-19 08:21:57 -05:00
Tobias	02a487da11	add: patchmon breaking change msg	2026-02-19 08:34:21 +01:00
community-scripts-pr-app[bot]	31482e7489	chore: update github-versions.json (#12074 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-19 06:23:51 +00:00
community-scripts-pr-app[bot]	d97f9a0bce	Update CHANGELOG.md (#12070 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-19 00:23:09 +00:00
community-scripts-pr-app[bot]	9b2275c980	chore: update github-versions.json (#12069 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-19 00:22:45 +00:00
CanbiZ (MickLesk)	b6a4e6a2a6	OPNSense: add disk space check \| increase disk space (#12058 ) * Fix: Add disk space checking for OPNsense VM FreeBSD image decompression - Add check_disk_space() function to verify available storage - Check for 20GB before download and 15GB before decompression - Provide clear error messages showing available vs required space - Add proper error handling for unxz decompression failures - Clean up compressed .xz file after decompression to save space - Add progress messages for download and decompression steps Fixes issue where script fails at line 611 with 'No space left on device' when /tmp directory lacks sufficient space for ~10-15GB decompressed image. * Increase OPNsense VM disk size from 10GB to 20GB - Provides more space for system updates, logs, and package installations - 20GB is a more appropriate size for OPNsense production use	2026-02-18 22:06:04 +01:00
community-scripts-pr-app[bot]	96c056ea4e	chore: update github-versions.json (#12067 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-18 18:17:12 +00:00
CanbiZ (MickLesk)	491081ffbf	Add post_progress_to_api lightweight telemetry ping Introduce post_progress_to_api() in misc/api.func — a non-blocking, fire-and-forget curl ping (gated by DIAGNOSTICS and RANDOM_UUID) that updates telemetry status to "configuring". Wire this progress ping into multiple scripts (alpine-install.func, install.func, build.func, core.func) at key milestones (container start, network ready, customization, creation, cleanup) and replace/deduplicate some earlier post_to_api calls. Also update error_handler.func to always report failures immediately via post_update_to_api to ensure failures are captured even before/after container lifecycle.	2026-02-18 16:19:19 +01:00
community-scripts-pr-app[bot]	1123fdca14	Update CHANGELOG.md (#12064 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-18 12:53:37 +00:00
Chris	a3a383361d	[Fix] PatchMon: use `SERVER_PORT` in Nginx config if set in env (#12053 ) - This PR will add the ability to change the PatchMon listen port in the Nginx config during update, if the `SERVER_PORT` env var is set in `/opt/patchmon/backend.env` and if the port is not 443 - If not set, or if set and the port is 443, then no changes are made to the listen port in the Nginx config	2026-02-18 13:53:08 +01:00
CanbiZ (MickLesk)	6cc8877852	Add timeouts and prioritize telemetry on exit Prevent hangs when pulling logs from containers by wrapping pct pull calls with timeout (8s) and running ensure_log_on_host under timeout (10s). Always send telemetry (post_update_to_api) before attempting best-effort log collection so status is reported even if log retrieval blocks. Update EXIT/ERR/SIGHUP/SIGINT/SIGTERM traps and consolidate error/interrupt handlers to use the new timeouted log collection. Changes in misc/build.func and misc/error_handler.func.	2026-02-18 13:14:59 +01:00
community-scripts-pr-app[bot]	845b89f975	chore: update github-versions.json (#12061 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-18 12:13:39 +00:00
community-scripts-pr-app[bot]	be26dc33dd	Update CHANGELOG.md (#12057 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-18 09:24:29 +00:00
CanbiZ (MickLesk)	b439960222	core: Execution ID & Telemetry Improvements (#12041 ) * fix: send telemetry BEFORE log collection in signal handlers - Swap ensure_log_on_host/post_update_to_api order in on_interrupt, on_terminate, api_exit_script, and inline SIGHUP/SIGINT/SIGTERM traps - For signal exits (>128): send telemetry immediately, then best-effort log collection - Add 2>/dev/null \|\| true to all I/O in signal handlers to prevent SIGPIPE - Fix on_exit: exit_code=0 now reports 'done' instead of 'failed 1' - Root cause: pct pull hangs on dying containers blocked telemetry updates, leaving 595+ records stuck in 'installing' daily * feat: add execution_id to all telemetry payloads - Generate EXECUTION_ID from RANDOM_UUID in variables() - Export EXECUTION_ID to container environment - Add execution_id field to all 8 API payloads in api.func - Add execution_id to post_progress_to_api in install.func and alpine-install.func - Fallback to RANDOM_UUID when EXECUTION_ID not set (backward compat) * fix: correct telemetry type values for PVE and addon scripts - PVE scripts (tools/pve/): change type 'tool' -> 'pve' - Addon scripts (tools/addon/): fix 4 scripts that wrongly used 'tool' -> 'addon' (netdata, add-tailscale-lxc, add-netbird-lxc, all-templates) - api.func: post_tool_to_api sends type='pve', default fallback 'pve' - Aligns with PocketBase categories: lxc, vm, pve, addon * fix: persist diagnostics opt-in inside containers for addon telemetry - install.func + alpine-install.func: create /usr/local/community-scripts/diagnostics inside the container when DIAGNOSTICS=yes (from build.func export) - Enables addon scripts running later inside containers to find the opt-in - Update init_tool_telemetry default type from 'tool' to 'pve' * refactor: clean up diagnostics/telemetry opt-in system - diagnostics_check(): deduplicate heredoc (was 2x 22 lines), improve whiptail text with clear what/what-not collected, add telemetry + privacy links - diagnostics_menu(): better UX with current status, clear enable/disable buttons, note about existing containers - variables(): change DIAGNOSTICS default from 'yes' to 'no' (safe: no telemetry before user consents via diagnostics_check) - install.func + alpine-install.func: persist BOTH yes AND no in container so opt-out is explicit (not just missing file = no) - Fix typo 'menue' -> 'menu' in config file comments * fix: no pre-selection in telemetry dialog, link to telemetry-service README - Add --defaultno so 'No, opt out' is focused by default (user must Tab to Yes) - Change privacy link from discussions/1836 to telemetry-service#privacy--compliance * fix: use radiolist for telemetry dialog (no pre-selection) - Replace --yesno with --radiolist: user must actively SPACE-select an option - Both options start as OFF (no pre-selection) - Cancel/Exit defaults to 'no' (opt-out) * simplify: inline telemetry dialog text like other whiptail dialogs * improve: telemetry dialog with more detail, link to PRIVACY.md - Add what we collect / don't collect sections back to dialog - Link to telemetry-service/docs/PRIVACY.md instead of README anchor - Update config file comment with same link	2026-02-18 10:24:06 +01:00
community-scripts-pr-app[bot]	b4a5d28957	chore: update github-versions.json (#12054 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-18 06:25:12 +00:00
community-scripts-pr-app[bot]	eaa69d58be	Update CHANGELOG.md (#12052 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-18 00:22:33 +00:00
community-scripts-pr-app[bot]	3ffff334a0	chore: update github-versions.json (#12051 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-18 00:22:12 +00:00
community-scripts-pr-app[bot]	38f04f4dcc	Update CHANGELOG.md (#12048 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-17 20:14:36 +00:00
Andreas Abeck	fdbcee3a93	fix according to issue #12045 (#12047 )	2026-02-17 21:14:12 +01:00
community-scripts-pr-app[bot]	ce11ba8f27	Update CHANGELOG.md (#12046 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-17 19:18:03 +00:00
Chris	43a0a078f5	[Hotfix] Cleanuparr: backup config before update (#12039 )	2026-02-17 20:17:22 +01:00
community-scripts-pr-app[bot]	646dabf0f0	chore: update github-versions.json (#12043 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-17 18:20:21 +00:00
community-scripts-pr-app[bot]	2582c1f63b	Update CHANGELOG.md (#12040 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-17 15:36:48 +00:00
CanbiZ (MickLesk)	3ce3c6f613	tools/pve: add data analytics / formatting / linting (#12034 ) * core: add progress; fix exit status Introduce post_progress_to_api() in alpine-install.func and install.func to send a lightweight, fire-and-forget telemetry ping (HTTP POST) that updates an existing telemetry record to "configuring" when DIAGNOSTICS=yes and RANDOM_UUID is set. The function is non-blocking (curl -m 5, errors ignored) and is invoked during container setup and after OS updates to signal active progress. Also adjust api_exit_script() in build.func to report success (post_update_to_api "done" "0") for cases where the script exited normally but a completion status wasn't posted, instead of reporting failure. * Safer tools.func load and improved error handling Replace process-substitution sourcing of tools.func with an explicit curl -> variable -> source via /dev/stdin, adding failure messages and a check that expected functions (e.g. fetch_and_deploy_gh_release) are present (misc/alpine-install.func, misc/install.func). Add categorize_error mapping for exit code 10 -> "config" (misc/api.func). Tweak build.func: minor pipeline formatting and change the ERR trap to capture the actual exit code and only call ensure_log_on_host/post_update on non-zero exits, preventing erroneous failure reporting. * tools: add data init and auto-reporting to tools and pve section Introduce telemetry helpers in misc/api.func: _telemetry_report_exit (reports success/failure via post_tool_to_api/post_addon_to_api) and init_tool_telemetry (reads DIAGNOSTICS, starts install timer and installs an EXIT trap to auto-report). Integrate telemetry into many tools/addon and tools/pve scripts by sourcing the remote api.func and calling init_tool_telemetry (guarded with declare -f). Also apply a minor arithmetic formatting tweak in misc/build.func for RECOVERY_ATTEMPT.	2026-02-17 16:36:20 +01:00
community-scripts-pr-app[bot]	97652792be	Update CHANGELOG.md (#12031 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-17 12:25:42 +00:00
CanbiZ (MickLesk)	f07f2cb04e	core: error-handler improvements \| better exit_code handling \| better tools.func source check (#12019 ) * core: add progress; fix exit status Introduce post_progress_to_api() in alpine-install.func and install.func to send a lightweight, fire-and-forget telemetry ping (HTTP POST) that updates an existing telemetry record to "configuring" when DIAGNOSTICS=yes and RANDOM_UUID is set. The function is non-blocking (curl -m 5, errors ignored) and is invoked during container setup and after OS updates to signal active progress. Also adjust api_exit_script() in build.func to report success (post_update_to_api "done" "0") for cases where the script exited normally but a completion status wasn't posted, instead of reporting failure. * Safer tools.func load and improved error handling Replace process-substitution sourcing of tools.func with an explicit curl -> variable -> source via /dev/stdin, adding failure messages and a check that expected functions (e.g. fetch_and_deploy_gh_release) are present (misc/alpine-install.func, misc/install.func). Add categorize_error mapping for exit code 10 -> "config" (misc/api.func). Tweak build.func: minor pipeline formatting and change the ERR trap to capture the actual exit code and only call ensure_log_on_host/post_update on non-zero exits, preventing erroneous failure reporting.	2026-02-17 13:25:17 +01:00
community-scripts-pr-app[bot]	5f73f9d5e6	chore: update github-versions.json (#12030 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-02-17 12:14:28 +00:00