Fix source command syntax in update-apps.sh

Add a new Proxmox LXC Apps Updater: frontend/public/json/update-apps.json registers the app for the UI (install script points to tools/pve/update-apps.sh) and provides documentation/notes for usage and environment variables. Add tools/pve/update-apps.sh (MIT, authors noted) — a full-featured updater for community-scripts managed LXC containers that supports interactive Whiptail selection or environment-driven automation (var_backup, var_backup_storage, var_container, var_unattended, var_skip_confirm, var_auto_reboot). Features include exportable JSON config, optional vzdump backups, detection of service/update script from the community repo, temporary CPU/RAM adjustments for build requirements, unattended update mode, restore-from-backup on failure, and reporting/optional reboot of containers that require it.

CHANGELOG.md

@@ -776,7 +776,14 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ### 🆕 New Scripts
 
-  - writefreely ([#11524](https://github.com/community-scripts/ProxmoxVE/pull/11524))
+  - Wishlist ([#11527](https://github.com/community-scripts/ProxmoxVE/pull/11527))
+- WriteFreely ([#11524](https://github.com/community-scripts/ProxmoxVE/pull/11524))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - core: create vm-core.func from dev [@MickLesk](https://github.com/MickLesk) ([#11528](https://github.com/community-scripts/ProxmoxVE/pull/11528))
 
 ## 2026-02-03
 

ct/headers/wishlist

@@ -1,4 +1,4 @@
- _       ___      __    ___      __ 
+ _       ___      __    ___      __ 
 | |     / (_)____/ /_  / (_)____/ /_
 | | /| / / / ___/ __ \/ / / ___/ __/
 | |/ |/ / (__  ) / / / / (__  ) /_  

frontend/public/json/update-apps.json

@@ -0,0 +1,84 @@
+{
+    "name": "PVE LXC Apps Updater",
+    "slug": "update-apps",
+    "categories": [
+        1
+    ],
+    "date_created": "2025-02-04",
+    "type": "pve",
+    "updateable": true,
+    "privileged": false,
+    "interface_port": null,
+    "documentation": "https://github.com/community-scripts/ProxmoxVE/discussions/11532",
+    "website": null,
+    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/proxmox.webp",
+    "config_path": "",
+    "description": "This script updates community-scripts managed LXC containers on a Proxmox VE node. It detects the installed service, verifies available update scripts, and applies updates interactively or unattended. Optionally, containers can be backed up before the update process. If additional build resources (CPU/RAM) are required, the script adjusts container resources temporarily and restores them after the update. Containers requiring a reboot will be listed at the end of the process.",
+    "install_methods": [
+        {
+            "type": "default",
+            "script": "tools/pve/update-apps.sh",
+            "resources": {
+                "cpu": null,
+                "ram": null,
+                "hdd": null,
+                "os": null,
+                "version": null
+            }
+        }
+    ],
+    "default_credentials": {
+        "username": null,
+        "password": null
+    },
+    "notes": [
+        {
+            "text": "Execute within the Proxmox shell.",
+            "type": "info"
+        },
+        {
+            "text": "Full Guide can be found here: `https://github.com/community-scripts/ProxmoxVE/discussions/11532`",
+            "type": "info"
+        },
+        {
+            "text": "Only containers with `community-script` or `proxmox-helper-scripts` tags are listed for update.",
+            "type": "info"
+        },
+        {
+            "text": "Optionally performs a vzdump backup before updating containers.",
+            "type": "warning"
+        },
+        {
+            "text": "If required, the script will temporarily increase container CPU/RAM resources for the build process and restore them after completion.",
+            "type": "info"
+        },
+        {
+            "text": "At the end of the update, containers requiring a reboot will be listed, and you may choose to reboot them directly.",
+            "type": "info"
+        },
+        {
+            "text": "Use `var_backup=yes|no` to enable/disable backup (skip prompt).",
+            "type": "info"
+        },
+        {
+            "text": "Use `var_backup_storage=<name>` to set backup storage location.",
+            "type": "info"
+        },
+        {
+            "text": "Use `var_container=all|all_running|all_stopped|101,102,...` to select containers.",
+            "type": "info"
+        },
+        {
+            "text": "Use `var_unattended=yes|no` to run updates without interaction.",
+            "type": "info"
+        },
+        {
+            "text": "Use `var_skip_confirm=yes` to skip initial confirmation dialog.",
+            "type": "info"
+        },
+        {
+            "text": "Use `var_auto_reboot=yes|no` to auto-reboot containers after update.",
+            "type": "info"
+        }
+    ]
+}

misc/vm-core.func

@@ -0,0 +1,620 @@
+# Copyright (c) 2021-2026 community-scripts ORG
+# License: MIT | https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/LICENSE
+
+set -euo pipefail
+SPINNER_PID=""
+SPINNER_ACTIVE=0
+SPINNER_MSG=""
+declare -A MSG_INFO_SHOWN
+
+# ------------------------------------------------------------------------------
+# Loads core utility groups once (colors, formatting, icons, defaults).
+# ------------------------------------------------------------------------------
+
+[[ -n "${_CORE_FUNC_LOADED:-}" ]] && return
+_CORE_FUNC_LOADED=1
+
+load_functions() {
+  [[ -n "${__FUNCTIONS_LOADED:-}" ]] && return
+  __FUNCTIONS_LOADED=1
+  color
+  formatting
+  icons
+  default_vars
+  set_std_mode
+  shell_check
+  get_valid_nextid
+  cleanup_vmid
+  cleanup
+  check_root
+  pve_check
+  arch_check
+}
+
+# Function to download & save header files
+get_header() {
+  local app_name=$(echo "${APP,,}" | tr ' ' '-')
+  local app_type=${APP_TYPE:-vm}
+  local header_url="https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/${app_type}/headers/${app_name}"
+  local local_header_path="/usr/local/community-scripts/headers/${app_type}/${app_name}"
+
+  mkdir -p "$(dirname "$local_header_path")"
+
+  if [ ! -s "$local_header_path" ]; then
+    if ! curl -fsSL "$header_url" -o "$local_header_path"; then
+      return 1
+    fi
+  fi
+
+  cat "$local_header_path" 2>/dev/null || true
+}
+
+header_info() {
+  local app_name=$(echo "${APP,,}" | tr ' ' '-')
+  local header_content
+
+  header_content=$(get_header "$app_name") || header_content=""
+
+  clear
+  local term_width
+  term_width=$(tput cols 2>/dev/null || echo 120)
+
+  if [ -n "$header_content" ]; then
+    echo "$header_content"
+  fi
+}
+
+# ------------------------------------------------------------------------------
+# Sets ANSI color codes used for styled terminal output.
+# ------------------------------------------------------------------------------
+color() {
+  YW=$(echo "\033[33m")
+  YWB=$(echo "\033[93m")
+  BL=$(echo "\033[36m")
+  RD=$(echo "\033[01;31m")
+  BGN=$(echo "\033[4;92m")
+  GN=$(echo "\033[1;92m")
+  DGN=$(echo "\033[32m")
+  CL=$(echo "\033[m")
+}
+
+# ------------------------------------------------------------------------------
+# Defines formatting helpers like tab, bold, and line reset sequences.
+# ------------------------------------------------------------------------------
+formatting() {
+  BFR="\\r\\033[K"
+  BOLD=$(echo "\033[1m")
+  HOLD=" "
+  TAB="  "
+  TAB3="      "
+}
+
+# ------------------------------------------------------------------------------
+# Sets symbolic icons used throughout user feedback and prompts.
+# ------------------------------------------------------------------------------
+icons() {
+  CM="${TAB}✔️${TAB}"
+  CROSS="${TAB}✖️${TAB}"
+  DNSOK="✔️ "
+  DNSFAIL="${TAB}✖️${TAB}"
+  INFO="${TAB}💡${TAB}${CL}"
+  OS="${TAB}🖥️${TAB}${CL}"
+  OSVERSION="${TAB}🌟${TAB}${CL}"
+  CONTAINERTYPE="${TAB}📦${TAB}${CL}"
+  DISKSIZE="${TAB}💾${TAB}${CL}"
+  CPUCORE="${TAB}🧠${TAB}${CL}"
+  RAMSIZE="${TAB}🛠️${TAB}${CL}"
+  SEARCH="${TAB}🔍${TAB}${CL}"
+  VERBOSE_CROPPED="🔍${TAB}"
+  VERIFYPW="${TAB}🔐${TAB}${CL}"
+  CONTAINERID="${TAB}🆔${TAB}${CL}"
+  HOSTNAME="${TAB}🏠${TAB}${CL}"
+  BRIDGE="${TAB}🌉${TAB}${CL}"
+  NETWORK="${TAB}📡${TAB}${CL}"
+  GATEWAY="${TAB}🌐${TAB}${CL}"
+  DISABLEIPV6="${TAB}🚫${TAB}${CL}"
+  ICON_DISABLEIPV6="${TAB}🚫${TAB}${CL}"
+  DEFAULT="${TAB}⚙️${TAB}${CL}"
+  MACADDRESS="${TAB}🔗${TAB}${CL}"
+  VLANTAG="${TAB}🏷️${TAB}${CL}"
+  ROOTSSH="${TAB}🔑${TAB}${CL}"
+  CREATING="${TAB}🚀${TAB}${CL}"
+  ADVANCED="${TAB}🧩${TAB}${CL}"
+  FUSE="${TAB}🗂️${TAB}${CL}"
+  GPU="${TAB}🎮${TAB}${CL}"
+  HOURGLASS="${TAB}⏳${TAB}"
+}
+
+# ------------------------------------------------------------------------------
+# Sets default verbose mode for script and os execution.
+# ------------------------------------------------------------------------------
+set_std_mode() {
+  if [ "${VERBOSE:-no}" = "yes" ]; then
+    STD=""
+  else
+    STD="silent"
+  fi
+}
+
+# ------------------------------------------------------------------------------
+# default_vars()
+#
+# - Sets default retry and wait variables used for system actions
+# - RETRY_NUM: Maximum number of retry attempts (default: 10)
+# - RETRY_EVERY: Seconds to wait between retries (default: 3)
+# ------------------------------------------------------------------------------
+default_vars() {
+  RETRY_NUM=10
+  RETRY_EVERY=3
+  i=$RETRY_NUM
+}
+
+# ------------------------------------------------------------------------------
+# get_active_logfile()
+#
+# - Returns the appropriate log file based on execution context
+# - BUILD_LOG: Host operations (VM creation)
+# - Fallback to /tmp/build-<timestamp>.log if not set
+# ------------------------------------------------------------------------------
+get_active_logfile() {
+  if [[ -n "${BUILD_LOG:-}" ]]; then
+    echo "$BUILD_LOG"
+  else
+    # Fallback for legacy scripts
+    echo "/tmp/build-$(date +%Y%m%d_%H%M%S).log"
+  fi
+}
+
+# ------------------------------------------------------------------------------
+# silent()
+#
+# - Executes command with output redirected to active log file
+# - On error: displays last 10 lines of log and exits with original exit code
+# - Temporarily disables error trap to capture exit code correctly
+# - Sources explain_exit_code() for detailed error messages
+# ------------------------------------------------------------------------------
+silent() {
+  local cmd="$*"
+  local caller_line="${BASH_LINENO[0]:-unknown}"
+  local logfile="$(get_active_logfile)"
+
+  set +Eeuo pipefail
+  trap - ERR
+
+  "$@" >>"$logfile" 2>&1
+  local rc=$?
+
+  set -Eeuo pipefail
+  trap 'error_handler' ERR
+
+  if [[ $rc -ne 0 ]]; then
+    # Source explain_exit_code if needed
+    if ! declare -f explain_exit_code >/dev/null 2>&1; then
+      source <(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/misc/error_handler.func) 2>/dev/null || true
+    fi
+
+    local explanation=""
+    if declare -f explain_exit_code >/dev/null 2>&1; then
+      explanation="$(explain_exit_code "$rc")"
+    fi
+
+    printf "\e[?25h"
+    if [[ -n "$explanation" ]]; then
+      msg_error "in line ${caller_line}: exit code ${rc} (${explanation})"
+    else
+      msg_error "in line ${caller_line}: exit code ${rc}"
+    fi
+    msg_custom "→" "${YWB}" "${cmd}"
+
+    if [[ -s "$logfile" ]]; then
+      local log_lines=$(wc -l <"$logfile")
+      echo "--- Last 10 lines of log ---"
+      tail -n 10 "$logfile"
+      echo "----------------------------"
+
+      # Show how to view full log if there are more lines
+      if [[ $log_lines -gt 10 ]]; then
+        msg_custom "📋" "${YW}" "View full log (${log_lines} lines): ${logfile}"
+      fi
+    fi
+
+    exit "$rc"
+  fi
+}
+
+# ------------------------------------------------------------------------------
+# Performs a curl request with retry logic and inline feedback.
+# ------------------------------------------------------------------------------
+
+run_curl() {
+  if [ "$VERB" = "no" ]; then
+    curl "$@" >/dev/null 2>>/tmp/curl_error.log
+  else
+    curl "$@" 2>>/tmp/curl_error.log
+  fi
+}
+
+curl_handler() {
+  local args=()
+  local url=""
+  local max_retries=0 delay=2 attempt=1
+  local exit_code has_output_file=false
+
+  for arg in "$@"; do
+    if [[ "$arg" != -* && -z "$url" ]]; then
+      url="$arg"
+    fi
+    [[ "$arg" == "-o" || "$arg" == --output ]] && has_output_file=true
+    args+=("$arg")
+  done
+
+  if [[ -z "$url" ]]; then
+    msg_error "no valid url or option entered for curl_handler"
+    exit 1
+  fi
+
+  $STD msg_info "Fetching: $url"
+
+  while :; do
+    if $has_output_file; then
+      $STD run_curl "${args[@]}"
+      exit_code=$?
+    else
+      $STD result=$(run_curl "${args[@]}")
+      exit_code=$?
+    fi
+
+    if [[ $exit_code -eq 0 ]]; then
+      stop_spinner
+      msg_ok "Fetched: $url"
+      $has_output_file || printf '%s' "$result"
+      return 0
+    fi
+
+    if ((attempt >= max_retries)); then
+      stop_spinner
+      if [ -s /tmp/curl_error.log ]; then
+        local curl_stderr
+        curl_stderr=$(</tmp/curl_error.log)
+        rm -f /tmp/curl_error.log
+      fi
+      __curl_err_handler "$exit_code" "$url" "$curl_stderr"
+      exit 1 # hard exit if exit_code is not 0
+    fi
+
+    $STD printf "\r\033[K${INFO}${YW}Retry $attempt/$max_retries in ${delay}s...${CL}" >&2
+    sleep "$delay"
+    ((attempt++))
+  done
+}
+
+# ------------------------------------------------------------------------------
+# Handles specific curl error codes and displays descriptive messages.
+# ------------------------------------------------------------------------------
+__curl_err_handler() {
+  local exit_code="$1"
+  local target="$2"
+  local curl_msg="$3"
+
+  case $exit_code in
+  1) msg_error "Unsupported protocol: $target" ;;
+  2) msg_error "Curl init failed: $target" ;;
+  3) msg_error "Malformed URL: $target" ;;
+  5) msg_error "Proxy resolution failed: $target" ;;
+  6) msg_error "Host resolution failed: $target" ;;
+  7) msg_error "Connection failed: $target" ;;
+  9) msg_error "Access denied: $target" ;;
+  18) msg_error "Partial file transfer: $target" ;;
+  22) msg_error "HTTP error (e.g. 400/404): $target" ;;
+  23) msg_error "Write error on local system: $target" ;;
+  26) msg_error "Read error from local file: $target" ;;
+  28) msg_error "Timeout: $target" ;;
+  35) msg_error "SSL connect error: $target" ;;
+  47) msg_error "Too many redirects: $target" ;;
+  51) msg_error "SSL cert verify failed: $target" ;;
+  52) msg_error "Empty server response: $target" ;;
+  55) msg_error "Send error: $target" ;;
+  56) msg_error "Receive error: $target" ;;
+  60) msg_error "SSL CA not trusted: $target" ;;
+  67) msg_error "Login denied by server: $target" ;;
+  78) msg_error "Remote file not found (404): $target" ;;
+  *) msg_error "Curl failed with code $exit_code: $target" ;;
+  esac
+
+  [[ -n "$curl_msg" ]] && printf "%s\n" "$curl_msg" >&2
+  exit 1
+}
+
+# ------------------------------------------------------------------------------
+# shell_check()
+#
+# - Verifies that the script is running under Bash shell
+# - Exits with error message if different shell is detected
+# ------------------------------------------------------------------------------
+shell_check() {
+  if [[ "$(ps -p $$ -o comm=)" != "bash" ]]; then
+    clear
+    msg_error "Your default shell is currently not set to Bash. To use these scripts, please switch to the Bash shell."
+    echo -e "\nExiting..."
+    sleep 2
+    exit
+  fi
+}
+
+# ------------------------------------------------------------------------------
+# clear_line()
+#
+# - Clears current terminal line using tput or ANSI escape codes
+# - Moves cursor to beginning of line (carriage return)
+# - Fallback to ANSI codes if tput not available
+# ------------------------------------------------------------------------------
+clear_line() {
+  tput cr 2>/dev/null || echo -en "\r"
+  tput el 2>/dev/null || echo -en "\033[K"
+}
+
+# ------------------------------------------------------------------------------
+# is_verbose_mode()
+#
+# - Determines if script should run in verbose mode
+# - Checks VERBOSE and var_verbose variables
+# - Also returns true if not running in TTY (pipe/redirect scenario)
+# ------------------------------------------------------------------------------
+is_verbose_mode() {
+  local verbose="${VERBOSE:-${var_verbose:-no}}"
+  [[ "$verbose" != "no" || ! -t 2 ]]
+}
+
+### dev spinner ###
+SPINNER_ACTIVE=0
+SPINNER_PID=""
+SPINNER_MSG=""
+declare -A MSG_INFO_SHOWN=()
+
+# Trap cleanup on various signals
+trap 'cleanup_spinner' EXIT INT TERM HUP
+
+# Cleans up spinner process on exit
+cleanup_spinner() {
+  stop_spinner
+  # Additional cleanup if needed
+}
+
+start_spinner() {
+  local msg="${1:-Processing...}"
+  local frames=(⠋ ⠙ ⠹ ⠸ ⠼ ⠴ ⠦ ⠧ ⠇ ⠏)
+  local spin_i=0
+  local interval=0.1
+
+  # Set message and clear current line
+  SPINNER_MSG="$msg"
+  printf "\r\e[2K" >&2
+
+  # Stop any existing spinner
+  stop_spinner
+
+  # Set active flag
+  SPINNER_ACTIVE=1
+
+  # Start spinner in background
+  {
+    while [[ "$SPINNER_ACTIVE" -eq 1 ]]; do
+      printf "\r\e[2K%s %b" "${TAB}${frames[spin_i]}${TAB}" "${YW}${SPINNER_MSG}${CL}" >&2
+      spin_i=$(((spin_i + 1) % ${#frames[@]}))
+      sleep "$interval"
+    done
+  } &
+
+  SPINNER_PID=$!
+
+  # Disown to prevent getting "Terminated" messages
+  disown "$SPINNER_PID" 2>/dev/null || true
+}
+
+stop_spinner() {
+  # Check if spinner is active and PID exists
+  if [[ "$SPINNER_ACTIVE" -eq 1 ]] && [[ -n "${SPINNER_PID}" ]]; then
+    SPINNER_ACTIVE=0
+
+    if kill -0 "$SPINNER_PID" 2>/dev/null; then
+      kill "$SPINNER_PID" 2>/dev/null
+      # Give it a moment to terminate
+      sleep 0.1
+      # Force kill if still running
+      if kill -0 "$SPINNER_PID" 2>/dev/null; then
+        kill -9 "$SPINNER_PID" 2>/dev/null
+      fi
+      # Wait for process but ignore errors
+      wait "$SPINNER_PID" 2>/dev/null || true
+    fi
+
+    # Clear spinner line
+    printf "\r\e[2K" >&2
+    SPINNER_PID=""
+  fi
+}
+
+spinner_guard() {
+  # Safely stop spinner if it's running
+  if [[ "$SPINNER_ACTIVE" -eq 1 ]] && [[ -n "${SPINNER_PID}" ]]; then
+    stop_spinner
+  fi
+}
+
+msg_info() {
+  local msg="${1:-Information message}"
+
+  # Only show each message once unless reset
+  if [[ -n "${MSG_INFO_SHOWN["$msg"]+x}" ]]; then
+    return
+  fi
+  MSG_INFO_SHOWN["$msg"]=1
+
+  spinner_guard
+  start_spinner "$msg"
+}
+
+msg_ok() {
+  local msg="${1:-Operation completed successfully}"
+  stop_spinner
+  printf "\r\e[2K%s %b\n" "${CM}" "${GN}${msg}${CL}" >&2
+
+  # Remove from shown messages to allow it to be shown again
+  local sanitized_msg
+  sanitized_msg=$(printf '%s' "$msg" | sed 's/\x1b\[[0-9;]*m//g; s/[^a-zA-Z0-9_]/_/g')
+  unset 'MSG_INFO_SHOWN['"$sanitized_msg"']' 2>/dev/null || true
+}
+
+msg_error() {
+  local msg="${1:-An error occurred}"
+  stop_spinner
+  printf "\r\e[2K%s %b\n" "${CROSS}" "${RD}${msg}${CL}" >&2
+}
+
+msg_warn() {
+  stop_spinner
+  local msg="$1"
+  echo -e "${BFR:-}${INFO:-ℹ️} ${YWB}${msg}${CL}" >&2
+}
+
+# Helper function to display a message with custom symbol and color
+msg_custom() {
+  local symbol="${1:-*}"
+  local color="${2:-$CL}"
+  local msg="${3:-Custom message}"
+  [[ -z "$msg" ]] && return
+  stop_spinner
+  printf "\r\e[2K%s %b\n" "$symbol" "${color}${msg}${CL}" >&2
+}
+
+# ------------------------------------------------------------------------------
+# msg_debug()
+#
+# - Displays debug message with timestamp when var_full_verbose=1
+# - Automatically enables var_verbose if not already set
+# - Uses bright yellow color for debug output
+# ------------------------------------------------------------------------------
+msg_debug() {
+  if [[ "${var_full_verbose:-0}" == "1" ]]; then
+    [[ "${var_verbose:-0}" != "1" ]] && var_verbose=1
+    echo -e "${YWB}[$(date '+%F %T')] [DEBUG]${CL} $*"
+  fi
+}
+
+# Displays error message and immediately terminates script
+fatal() {
+  msg_error "$1"
+  kill -INT $$
+}
+
+get_valid_nextid() {
+  local try_id
+  try_id=$(pvesh get /cluster/nextid)
+  while true; do
+    if [ -f "/etc/pve/qemu-server/${try_id}.conf" ] || [ -f "/etc/pve/lxc/${try_id}.conf" ]; then
+      try_id=$((try_id + 1))
+      continue
+    fi
+    if lvs --noheadings -o lv_name | grep -qE "(^|[-_])${try_id}($|[-_])"; then
+      try_id=$((try_id + 1))
+      continue
+    fi
+    break
+  done
+  echo "$try_id"
+}
+
+cleanup_vmid() {
+  if [[ -z "${VMID:-}" ]]; then
+    return
+  fi
+  if qm status "$VMID" &>/dev/null; then
+    qm stop "$VMID" &>/dev/null
+    qm destroy "$VMID" &>/dev/null
+  fi
+}
+
+cleanup() {
+  if [[ "$(dirs -p | wc -l)" -gt 1 ]]; then
+    popd >/dev/null || true
+  fi
+}
+
+check_root() {
+  if [[ "$(id -u)" -ne 0 || $(ps -o comm= -p $PPID) == "sudo" ]]; then
+    clear
+    msg_error "Please run this script as root."
+    echo -e "\nExiting..."
+    sleep 2
+    exit
+  fi
+}
+
+pve_check() {
+  if ! pveversion | grep -Eq "pve-manager/(8\.[1-4]|9\.[0-1])(\.[0-9]+)*"; then
+    msg_error "This version of Proxmox Virtual Environment is not supported"
+    echo -e "Requires Proxmox Virtual Environment Version 8.1 - 8.4 or 9.0 - 9.1."
+    echo -e "Exiting..."
+    sleep 2
+    exit
+  fi
+}
+
+arch_check() {
+  if [ "$(dpkg --print-architecture)" != "amd64" ]; then
+    echo -e "\n ${INFO}${YWB}This script will not work with PiMox! \n"
+    echo -e "\n ${YWB}Visit https://github.com/asylumexp/Proxmox for ARM64 support. \n"
+    echo -e "Exiting..."
+    sleep 2
+    exit
+  fi
+}
+
+exit_script() {
+  clear
+  echo -e "\n${CROSS}${RD}User exited script${CL}\n"
+  exit
+}
+
+check_hostname_conflict() {
+  local hostname="$1"
+  if qm list | awk '{print $2}' | grep -qx "$hostname"; then
+    msg_error "Hostname $hostname already in use by another VM."
+    exit 1
+  fi
+}
+
+set_description() {
+  DESCRIPTION=$(
+    cat <<EOF
+<div align='center'>
+  <a href='https://Helper-Scripts.com' target='_blank' rel='noopener noreferrer'>
+    <img src='https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/images/logo-81x112.png' alt='Logo' style='width:81px;height:112px;'/>
+  </a>
+
+  <h2 style='font-size: 24px; margin: 20px 0;'>${NSAPP} VM</h2>
+
+  <p style='margin: 16px 0;'>
+    <a href='https://ko-fi.com/community_scripts' target='_blank' rel='noopener noreferrer'>
+      <img src='https://img.shields.io/badge/&#x2615;-Buy us a coffee-blue' alt='spend Coffee' />
+    </a>
+  </p>
+
+  <span style='margin: 0 10px;'>
+    <i class="fa fa-github fa-fw" style="color: #f5f5f5;"></i>
+    <a href='https://github.com/community-scripts/ProxmoxVE' target='_blank' rel='noopener noreferrer' style='text-decoration: none; color: #00617f;'>GitHub</a>
+  </span>
+  <span style='margin: 0 10px;'>
+    <i class="fa fa-comments fa-fw" style="color: #f5f5f5;"></i>
+    <a href='https://github.com/community-scripts/ProxmoxVE/discussions' target='_blank' rel='noopener noreferrer' style='text-decoration: none; color: #00617f;'>Discussions</a>
+  </span>
+  <span style='margin: 0 10px;'>
+    <i class="fa fa-exclamation-circle fa-fw" style="color: #f5f5f5;"></i>
+    <a href='https://github.com/community-scripts/ProxmoxVE/issues' target='_blank' rel='noopener noreferrer' style='text-decoration: none; color: #00617f;'>Issues</a>
+  </span>
+</div>
+EOF
+  )
+  qm set "$VMID" -description "$DESCRIPTION" >/dev/null
+
+}

tools/pve/update-apps.sh

@@ -0,0 +1,465 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: BvdBerg01 | Co-Author: remz1337
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/refs/heads/main/misc/core.func)
+
+# =============================================================================
+# CONFIGURATION VARIABLES
+# Set these variables to skip interactive prompts (Whiptail dialogs)
+# =============================================================================
+# var_backup: Enable/disable backup before update
+#   Options: "yes" | "no" | "" (empty = interactive prompt)
+var_backup="${var_backup:-}"
+
+# var_backup_storage: Storage location for backups (only used if var_backup=yes)
+#   Options: Storage name from /etc/pve/storage.cfg (e.g., "local", "nas-backup")
+#   Leave empty for interactive selection
+var_backup_storage="${var_backup_storage:-}"
+
+# var_container: Which containers to update
+#   Options:
+#     - "all"         : All containers with community-scripts tags
+#     - "all_running" : Only running containers with community-scripts tags
+#     - "all_stopped" : Only stopped containers with community-scripts tags
+#     - "101,102,109" : Comma-separated list of specific container IDs
+#     - ""            : Interactive selection via Whiptail
+var_container="${var_container:-}"
+
+# var_unattended: Run updates without user interaction inside containers
+#   Options: "yes" | "no" | "" (empty = interactive prompt)
+var_unattended="${var_unattended:-}"
+
+# var_skip_confirm: Skip initial confirmation dialog
+#   Options: "yes" | "no" (default: no)
+var_skip_confirm="${var_skip_confirm:-no}"
+
+# var_auto_reboot: Automatically reboot containers that require it after update
+#   Options: "yes" | "no" | "" (empty = interactive prompt)
+var_auto_reboot="${var_auto_reboot:-}"
+
+# =============================================================================
+# JSON CONFIG EXPORT
+# Run with --export-config to output current configuration as JSON
+# =============================================================================
+
+function export_config_json() {
+  cat <<EOF
+{
+  "var_backup": "${var_backup}",
+  "var_backup_storage": "${var_backup_storage}",
+  "var_container": "${var_container}",
+  "var_unattended": "${var_unattended}",
+  "var_skip_confirm": "${var_skip_confirm}",
+  "var_auto_reboot": "${var_auto_reboot}"
+}
+EOF
+}
+
+function print_usage() {
+  cat <<EOF
+Usage: $(basename "$0") [OPTIONS]
+
+Update LXC containers created with community-scripts.
+
+Options:
+  --help              Show this help message
+  --export-config     Export current configuration as JSON
+
+Environment Variables:
+  var_backup          Enable backup before update (yes/no)
+  var_backup_storage  Storage location for backups
+  var_container       Container selection (all/all_running/all_stopped/101,102,...)
+  var_unattended      Run updates unattended (yes/no)
+  var_skip_confirm    Skip initial confirmation (yes/no)
+  var_auto_reboot     Auto-reboot containers if required (yes/no)
+
+Examples:
+  # Run interactively
+  $(basename "$0")
+
+  # Update all running containers unattended with backup
+  var_backup=yes var_backup_storage=local var_container=all_running var_unattended=yes var_skip_confirm=yes $(basename "$0")
+
+  # Update specific containers without backup
+  var_backup=no var_container=101,102,105 var_unattended=yes var_skip_confirm=yes $(basename "$0")
+
+  # Export current configuration
+  $(basename "$0") --export-config
+EOF
+}
+
+# Handle command line arguments
+case "${1:-}" in
+  --help|-h)
+    print_usage
+    exit 0
+    ;;
+  --export-config)
+    export_config_json
+    exit 0
+    ;;
+esac
+
+# =============================================================================
+
+function header_info {
+  clear
+  cat <<"EOF"
+    __   _  ________   __  __          __      __
+   / /  | |/ / ____/  / / / /___  ____/ /___ _/ /____
+  / /   |   / /      / / / / __ \/ __  / __ `/ __/ _ \
+ / /___/   / /___   / /_/ / /_/ / /_/ / /_/ / /_/  __/
+/_____/_/|_\____/   \____/ .___/\__,_/\__,_/\__/\___/
+                        /_/
+EOF
+}
+
+function detect_service() {
+  pushd $(mktemp -d) >/dev/null
+  pct pull "$1" /usr/bin/update update 2>/dev/null
+  service=$(cat update | sed 's|.*/ct/||g' | sed 's|\.sh).*||g')
+  popd >/dev/null
+}
+
+function backup_container() {
+  msg_info "Creating backup for container $1"
+  vzdump $1 --compress zstd --storage $STORAGE_CHOICE -notes-template "community-scripts backup updater" >/dev/null 2>&1
+  status=$?
+
+  if [ $status -eq 0 ]; then
+    msg_ok "Backup created"
+  else
+    msg_error "Backup failed for container $1"
+    exit 1
+  fi
+}
+
+function get_backup_storages() {
+  STORAGES=$(awk '
+/^[a-z]+:/ {
+    if (name != "") {
+        if (has_backup || (!has_content && type == "dir")) print name
+    }
+    split($0, a, ":")
+    type = a[1]
+    name = a[2]
+    sub(/^ +/, "", name)
+    has_content = 0
+    has_backup = 0
+}
+/^ +content/ {
+    has_content = 1
+    if ($0 ~ /backup/) has_backup = 1
+}
+END {
+    if (name != "") {
+        if (has_backup || (!has_content && type == "dir")) print name
+    }
+}
+' /etc/pve/storage.cfg)
+}
+
+header_info
+
+# Skip confirmation if var_skip_confirm is set to yes
+if [[ "$var_skip_confirm" != "yes" ]]; then
+  whiptail --backtitle "Proxmox VE Helper Scripts" --title "LXC Container Update" --yesno "This will update LXC container. Proceed?" 10 58 || exit
+fi
+
+msg_info "Loading all possible LXC containers from Proxmox VE. This may take a few seconds..."
+NODE=$(hostname)
+containers=$(pct list | tail -n +2 | awk '{print $0 " " $4}')
+
+if [ -z "$containers" ]; then
+  whiptail --title "LXC Container Update" --msgbox "No LXC containers available!" 10 60
+  exit 1
+fi
+
+menu_items=()
+FORMAT="%-10s %-15s %-10s"
+TAGS="community-script|proxmox-helper-scripts"
+
+while read -r container; do
+  container_id=$(echo $container | awk '{print $1}')
+  container_name=$(echo $container | awk '{print $2}')
+  container_status=$(echo $container | awk '{print $3}')
+  formatted_line=$(printf "$FORMAT" "$container_name" "$container_status")
+  if pct config "$container_id" | grep -qE "^tags:.*(${TAGS}).*"; then
+    menu_items+=("$container_id" "$formatted_line" "OFF")
+  fi
+done <<<"$containers"
+msg_ok "Loaded ${#menu_items[@]} containers"
+
+# Determine container selection based on var_container
+if [[ -n "$var_container" ]]; then
+  case "$var_container" in
+    all)
+      # Select all containers with matching tags
+      CHOICE=""
+      for ((i=0; i<${#menu_items[@]}; i+=3)); do
+        CHOICE="$CHOICE ${menu_items[$i]}"
+      done
+      CHOICE=$(echo "$CHOICE" | xargs)
+      ;;
+    all_running)
+      # Select only running containers with matching tags
+      CHOICE=""
+      for ((i=0; i<${#menu_items[@]}; i+=3)); do
+        cid="${menu_items[$i]}"
+        if pct status "$cid" 2>/dev/null | grep -q "running"; then
+          CHOICE="$CHOICE $cid"
+        fi
+      done
+      CHOICE=$(echo "$CHOICE" | xargs)
+      ;;
+    all_stopped)
+      # Select only stopped containers with matching tags
+      CHOICE=""
+      for ((i=0; i<${#menu_items[@]}; i+=3)); do
+        cid="${menu_items[$i]}"
+        if pct status "$cid" 2>/dev/null | grep -q "stopped"; then
+          CHOICE="$CHOICE $cid"
+        fi
+      done
+      CHOICE=$(echo "$CHOICE" | xargs)
+      ;;
+    *)
+      # Assume comma-separated list of container IDs
+      CHOICE=$(echo "$var_container" | tr ',' ' ')
+      ;;
+  esac
+
+  if [[ -z "$CHOICE" ]]; then
+    msg_error "No containers matched the selection criteria: $var_container"
+    exit 1
+  fi
+  msg_ok "Selected containers: $CHOICE"
+else
+  CHOICE=$(whiptail --title "LXC Container Update" \
+    --checklist "Select LXC containers to update:" 25 60 13 \
+    "${menu_items[@]}" 3>&2 2>&1 1>&3 | tr -d '"')
+
+  if [ -z "$CHOICE" ]; then
+    whiptail --title "LXC Container Update" \
+      --msgbox "No containers selected!" 10 60
+    exit 1
+  fi
+fi
+
+header_info
+
+# Determine backup choice based on var_backup
+if [[ -n "$var_backup" ]]; then
+  BACKUP_CHOICE="$var_backup"
+else
+  BACKUP_CHOICE="no"
+  if (whiptail --backtitle "Proxmox VE Helper Scripts" --title "LXC Container Update" --yesno "Do you want to backup your containers before update?" 10 58); then
+    BACKUP_CHOICE="yes"
+  fi
+fi
+
+# Determine unattended update based on var_unattended
+if [[ -n "$var_unattended" ]]; then
+  UNATTENDED_UPDATE="$var_unattended"
+else
+  UNATTENDED_UPDATE="no"
+  if (whiptail --backtitle "Proxmox VE Helper Scripts" --title "LXC Container Update" --yesno "Run updates unattended?" 10 58); then
+    UNATTENDED_UPDATE="yes"
+  fi
+fi
+
+if [ "$BACKUP_CHOICE" == "yes" ]; then
+  get_backup_storages
+
+  if [ -z "$STORAGES" ]; then
+    msg_error "No storage with 'backup' support found!"
+    exit 1
+  fi
+
+  # Determine storage based on var_backup_storage
+  if [[ -n "$var_backup_storage" ]]; then
+    # Validate that the specified storage exists and supports backups
+    if echo "$STORAGES" | grep -qw "$var_backup_storage"; then
+      STORAGE_CHOICE="$var_backup_storage"
+      msg_ok "Using backup storage: $STORAGE_CHOICE"
+    else
+      msg_error "Specified backup storage '$var_backup_storage' not found or doesn't support backups!"
+      msg_info "Available storages: $(echo $STORAGES | tr '\n' ' ')"
+      exit 1
+    fi
+  else
+    MENU_ITEMS=()
+    for STORAGE in $STORAGES; do
+      MENU_ITEMS+=("$STORAGE" "")
+    done
+
+    STORAGE_CHOICE=$(whiptail --title "Select storage device" --menu "Select a storage device (Only storage devices with 'backup' support are listed):" 15 50 5 "${MENU_ITEMS[@]}" 3>&1 1>&2 2>&3)
+
+    if [ -z "$STORAGE_CHOICE" ]; then
+      msg_error "No storage selected!"
+      exit 1
+    fi
+  fi
+fi
+
+UPDATE_CMD="update;"
+if [ "$UNATTENDED_UPDATE" == "yes" ]; then
+  UPDATE_CMD="export PHS_SILENT=1;update;"
+fi
+
+containers_needing_reboot=()
+for container in $CHOICE; do
+  echo -e "${BL}[INFO]${CL} Updating container $container"
+
+  if [ "$BACKUP_CHOICE" == "yes" ]; then
+    backup_container $container
+  fi
+
+  os=$(pct config "$container" | awk '/^ostype/ {print $2}')
+  status=$(pct status $container)
+  template=$(pct config $container | grep -q "template:" && echo "true" || echo "false")
+  if [ "$template" == "false" ] && [ "$status" == "status: stopped" ]; then
+    echo -e "${BL}[Info]${GN} Starting${BL} $container ${CL} \n"
+    pct start $container
+    echo -e "${BL}[Info]${GN} Waiting For${BL} $container${CL}${GN} To Start ${CL} \n"
+    sleep 5
+  fi
+
+  #1) Detect service using the service name in the update command
+  detect_service $container
+
+  #1.1) If update script not detected, return
+  if [ -z "${service}" ]; then
+    echo -e "${YW}[WARN]${CL} Update script not found. Skipping to next container"
+    continue
+  else
+    echo -e "${BL}[INFO]${CL} Detected service: ${GN}${service}${CL}"
+  fi
+
+  #2) Extract service build/update resource requirements from config/installation file
+  script=$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/${service}.sh)
+
+  #2.1) Check if the script downloaded successfully
+  if [ $? -ne 0 ]; then
+    echo -e "${RD}[ERROR]${CL} Issue while downloading install script."
+    echo -e "${YW}[WARN]${CL} Unable to assess build resource requirements. Proceeding with current resources."
+  fi
+
+  config=$(pct config "$container")
+  build_cpu=$(echo "$script" | { grep -m 1 "var_cpu" || test $? = 1; } | sed 's|.*=||g' | sed 's|"||g' | sed 's|.*var_cpu:-||g' | sed 's|}||g')
+  build_ram=$(echo "$script" | { grep -m 1 "var_ram" || test $? = 1; } | sed 's|.*=||g' | sed 's|"||g' | sed 's|.*var_ram:-||g' | sed 's|}||g')
+  run_cpu=$(echo "$script" | { grep -m 1 "pct set \$CTID -cores" || test $? = 1; } | sed 's|.*cores ||g')
+  run_ram=$(echo "$script" | { grep -m 1 "pct set \$CTID -memory" || test $? = 1; } | sed 's|.*memory ||g')
+  current_cpu=$(echo "$config" | grep -m 1 "cores:" | sed 's|cores: ||g')
+  current_ram=$(echo "$config" | grep -m 1 "memory:" | sed 's|memory: ||g')
+
+  #Test if all values are valid (>0)
+  if [ -z "${run_cpu}" ] || [ "$run_cpu" -le 0 ]; then
+    #echo "No valid value found for run_cpu. Assuming same as current configuration."
+    run_cpu=$current_cpu
+  fi
+
+  if [ -z "${run_ram}" ] || [ "$run_ram" -le 0 ]; then
+    #echo "No valid value found for run_ram. Assuming same as current configuration."
+    run_ram=$current_ram
+  fi
+
+  if [ -z "${build_cpu}" ] || [ "$build_cpu" -le 0 ]; then
+    #echo "No valid value found for build_cpu. Assuming same as current configuration."
+    build_cpu=$current_cpu
+  fi
+
+  if [ -z "${build_ram}" ] || [ "$build_ram" -le 0 ]; then
+    #echo "No valid value found for build_ram. Assuming same as current configuration."
+    build_ram=$current_ram
+  fi
+
+  UPDATE_BUILD_RESOURCES=0
+  if [ "$build_cpu" -gt "$run_cpu" ] || [ "$build_ram" -gt "$run_ram" ]; then
+    UPDATE_BUILD_RESOURCES=1
+  fi
+
+  #3) if build resources are different than run resources, then:
+  if [ "$UPDATE_BUILD_RESOURCES" -eq "1" ]; then
+    pct set "$container" --cores "$build_cpu" --memory "$build_ram"
+  fi
+
+  #4) Update service, using the update command
+  case "$os" in
+  alpine) pct exec "$container" -- ash -c "$UPDATE_CMD" ;;
+  archlinux) pct exec "$container" -- bash -c "$UPDATE_CMD" ;;
+  fedora | rocky | centos | alma) pct exec "$container" -- bash -c "$UPDATE_CMD" ;;
+  ubuntu | debian | devuan) pct exec "$container" -- bash -c "$UPDATE_CMD" ;;
+  opensuse) pct exec "$container" -- bash -c "$UPDATE_CMD" ;;
+  esac
+  exit_code=$?
+
+  if [ "$template" == "false" ] && [ "$status" == "status: stopped" ]; then
+    echo -e "${BL}[Info]${GN} Shutting down${BL} $container ${CL} \n"
+    pct shutdown $container &
+  fi
+
+  #5) if build resources are different than run resources, then:
+  if [ "$UPDATE_BUILD_RESOURCES" -eq "1" ]; then
+    pct set "$container" --cores "$run_cpu" --memory "$run_ram"
+  fi
+
+  if pct exec "$container" -- [ -e "/var/run/reboot-required" ]; then
+    # Get the container's hostname and add it to the list
+    container_hostname=$(pct exec "$container" hostname)
+    containers_needing_reboot+=("$container ($container_hostname)")
+  fi
+
+  if [ $exit_code -eq 0 ]; then
+    msg_ok "Updated container $container"
+  elif [ "$BACKUP_CHOICE" == "yes" ]; then
+    msg_info "Restoring LXC from backup"
+    pct stop $container
+    LXC_STORAGE=$(pct config $container | awk -F '[:,]' '/rootfs/ {print $2}')
+    pct restore $container /var/lib/vz/dump/vzdump-lxc-${container}-*.tar.zst --storage $LXC_STORAGE --force >/dev/null 2>&1
+    pct start $container
+    restorestatus=$?
+    if [ $restorestatus -eq 0 ]; then
+      msg_ok "Restored LXC from backup"
+    else
+      msg_error "Restored LXC from backup failed"
+      exit 1
+    fi
+  else
+    msg_error "Update failed for container $container. Exiting"
+    exit 1
+  fi
+done
+
+wait
+header_info
+echo -e "${GN}The process is complete, and the containers have been successfully updated.${CL}\n"
+if [ "${#containers_needing_reboot[@]}" -gt 0 ]; then
+  echo -e "${RD}The following containers require a reboot:${CL}"
+  for container_name in "${containers_needing_reboot[@]}"; do
+    echo "$container_name"
+  done
+
+  # Determine reboot choice based on var_auto_reboot
+  REBOOT_CHOICE="no"
+  if [[ -n "$var_auto_reboot" ]]; then
+    REBOOT_CHOICE="$var_auto_reboot"
+  else
+    echo -ne "${INFO} Do you wish to reboot these containers? <yes/No>  "
+    read -r prompt
+    if [[ ${prompt,,} =~ ^(yes)$ ]]; then
+      REBOOT_CHOICE="yes"
+    fi
+  fi
+
+  if [[ "$REBOOT_CHOICE" == "yes" ]]; then
+    echo -e "${CROSS}${HOLD} ${YWB}Rebooting containers.${CL}"
+    for container_name in "${containers_needing_reboot[@]}"; do
+      container=$(echo $container_name | cut -d " " -f 1)
+      pct reboot ${container}
+    done
+  fi
+fi