chore(ct): sync semaphore defaults from PocketBase

Update CHANGELOG.md (#15212 )
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-06-19 22:11:21 +02:00 · 2026-06-19 14:15:29 +00:00 · 2026-06-19 11:36:05 +00:00 · 2026-06-19 13:35:44 +02:00 · 2026-06-19 11:35:43 +00:00 · 2026-06-19 13:35:17 +02:00
5 changed files with 25 additions and 3 deletions
@@ -489,6 +489,8 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

  - #### 🐞 Bug Fixes

+    - add avx2 check to influxdb3 [@asylumexp](https://github.com/asylumexp) ([#15208](https://github.com/community-scripts/ProxmoxVE/pull/15208))
+    - Step ca leaf data patch [@heinemannj](https://github.com/heinemannj) ([#15210](https://github.com/community-scripts/ProxmoxVE/pull/15210))
    - Kimai: Add APP_SECRET env var [@tremor021](https://github.com/tremor021) ([#15199](https://github.com/community-scripts/ProxmoxVE/pull/15199))

  - #### ✨ New Features
@@ -10,7 +10,7 @@ var_tags="${var_tags:-dev_ops}"
 var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-4}"
-var_os="${var_os:-ubuntu}"
+var_os="${var_os:-Ubuntu}"
 var_version="${var_version:-24.04}"
 var_arm64="${var_arm64:-no}"
 var_unprivileged="${var_unprivileged:-1}"
@@ -37,6 +37,22 @@ function update_script() {
  rm -f "$STEPBIN"
  cp -f "$(which step-cli)" "$STEPBIN"

+  # Patch for leaf_data.tpl - Issue: #14810
+  sed -i \
+  -e 's/\[//' \
+  -e 's/\]//' \
+  "$STEPPATH/templates/x509/leaf_data.tpl"
+
+  # Patch for provisioners templateData - Issue: #14810
+  step ca provisioner list | jq -c '.[] | select(.options.x509.templateData != null) | .name' > /tmp/provisioner_names.json
+  for i in $(cat /tmp/provisioner_names.json); do
+    prov=`echo $i | tr -d '"'`
+    echo
+    echo "Updating provisioner $prov ..."
+    $STD step ca provisioner update $prov --x509-template-data=$STEPPATH/templates/x509/leaf_data.tpl
+  done
+  rm /tmp/provisioner_names.json
+
  $STD systemctl restart step-ca
  msg_ok "Updated step-ca and step-cli"

@@ -32,6 +32,10 @@ fi

 msg_info "Installing InfluxDB v${INFLUX}"
 if [[ $INFLUX == "3" ]]; then
+  if ! grep -qm1 'avx2' /proc/cpuinfo; then
+    msg_error "InfluxDB v3 requires AVX2 support, which is not available on this system."
+    exit 106
+  fi
  $STD apt install -y influxdb3-core
  systemctl enable -q --now influxdb3-core
 elif [[ $INFLUX == "2" ]]; then
@@ -183,8 +183,8 @@ cat <<EOF >"$X509LeafTemplateData"
 	"country": "${PKICountry}",
 	"organization": "${PKIName}",
 	"organizationalUnit": "${PKIOrganizationalUnit}",
-	"issuingCertificateURL": ["https://${FQDN}${LISTENER}/intermediates.pem"],
-	"crlDistributionPoints": ["https://${FQDN}${LISTENER}/crl"]
+	"issuingCertificateURL": "https://${FQDN}${LISTENER}/intermediates.pem",
+	"crlDistributionPoints": "https://${FQDN}${LISTENER}/crl"
 }
 EOF
Author	SHA1	Message	Date
github-actions[bot]	70a50dad34	chore(ct): sync semaphore defaults from PocketBase	2026-06-19 14:15:29 +00:00
community-scripts-pr-app[bot]	6710cb5210	Update CHANGELOG.md (#15212 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-06-19 11:36:05 +00:00
Sam Heinz	8bcab8b4d9	add avx check to influxdb3 (#15208 ) requires avx2	2026-06-19 13:35:44 +02:00
community-scripts-pr-app[bot]	2f8315eebf	Update CHANGELOG.md (#15211 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-06-19 11:35:43 +00:00
Joerg Heinemann	7e64f1b2d7	Step ca leaf data patch (#15210 ) * Change issuingCertificateURL and crlDistributionPoints format * Patch leaf_data.tpl to fix formatting issue Remove square brackets from leaf_data.tpl template file. * Update provisioners with x509 template data Added a patch for updating provisioners with template data.	2026-06-19 13:35:17 +02:00