mirror of
https://github.com/community-scripts/ProxmoxVE.git
synced 2026-03-02 17:05:55 +01:00
dbdd891a99
* fix(error-handler): prevent silent() from re-enabling error handling during recovery Root cause: silent() (core.func) unconditionally calls set -Eeuo pipefail and trap 'error_handler' ERR after every command. When build_container() intentionally disables error handling for its recovery section, any intermediate call through silent()/ re-enables it. This causes the grep/sed pipeline for missing_cmd extraction to trigger error_handler (grep returns exit code 1 on no match + pipefail = fatal). Fixes: 1. silent(): Save errexit state before disabling, only restore if it was active. Callers that intentionally disabled error handling (e.g. build_container recovery) are no longer silently re-enabled. 2. build.func: Add || true to missing_cmd grep pipeline as defense-in-depth against pipeline failure propagation. 3. build.func: Add explicit set +Eeuo pipefail / trap - ERR after post_update_to_api() call, before error classification grep/sed section. 4. build.func: Remove stale global combined_log variable from variables() that used a different path format (/tmp/install-SESSION-combined.log) than the actual local variable (/tmp/NSAPP-CTID-SESSION.log). The global was never written to and caused confusion when error_handler displayed it. * Update build.func * chore(install): add Github source links to all setup_nodejs scripts 52 install scripts had a project website in '# Source:' but no GitHub link. Merged the GitHub repo URL into the Source header as: # Source: https://website.com/ | Github: https://github.com/OWNER/REPO Repos sourced from fetch_and_deploy_gh_release calls, get_latest_github_release calls, or known project repos for npm/pip installed apps. Two scripts (fumadocs, pve-scripts-local) had no Source line at all — added one. Shinobi skipped (GitLab-only, no GitHub repo). * chore(install): add Github source links to all fetch_and_deploy scripts 77 additional install scripts had fetch_and_deploy_gh_release calls but no GitHub link in the Source header. Merged the primary app repo into the Source header as: # Source: https://website.com/ | Github: https://github.com/OWNER/REPO Where multiple fetch_and_deploy calls existed (app + dependency), the primary app repo was selected: - ersatztv: ErsatzTV/ErsatzTV (not ffmpeg) - firefly: firefly-iii/firefly-iii (not data-importer) - komga: gotson/komga (not kepubify dep) - sabnzbd: sabnzbd/sabnzbd (not par2cmdline-turbo dep) - signoz: SigNoz/signoz (not otel-collector) - tunarr: chrisbenincasa/tunarr (not ffmpeg dep) Also fixed cosmos-install.sh double https:// in Source URL. Skipped: autocaliweb (source already on codeberg, GitHub repos are deps only) * revert: restore misc/build.func and misc/core.func to main state These error-handler fixes belong to fix/error-handler-recovery, not to this sources-only branch. * chore(ct,tools): sync Source headers with install/ and add Github links to addon scripts
111 lines
3.0 KiB
Bash
111 lines
3.0 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Copyright (c) 2021-2026 community-scripts ORG
|
|
# Author: vhsdream
|
|
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
|
# Source: https://sure.am | Github: https://github.com/we-promise/sure
|
|
|
|
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
|
color
|
|
verb_ip6
|
|
catch_errors
|
|
setting_up_container
|
|
network_check
|
|
update_os
|
|
|
|
msg_info "Installing Dependencies"
|
|
$STD apt install -y \
|
|
build-essential \
|
|
redis-server \
|
|
pkg-config \
|
|
libpq-dev \
|
|
libvips
|
|
msg_ok "Installed Dependencies"
|
|
|
|
fetch_and_deploy_gh_release "Sure" "we-promise/sure" "tarball" "latest" "/opt/sure"
|
|
|
|
PG_VERSION="$(sed -n '/postgres:/s/[^[:digit:]]*//p' /opt/sure/compose.example.yml)" setup_postgresql
|
|
PG_DB_NAME=sure_production PG_DB_USER=sure_user setup_postgresql_db
|
|
RUBY_VERSION="$(cat /opt/sure/.ruby-version)" RUBY_INSTALL_RAILS=false setup_ruby
|
|
|
|
msg_info "Building Sure"
|
|
cd /opt/sure
|
|
export RAILS_ENV=production
|
|
export BUNDLE_DEPLOYMENT=1
|
|
export BUNDLE_WITHOUT=development
|
|
$STD ./bin/bundle install
|
|
$STD ./bin/bundle exec bootsnap precompile --gemfile -j 0
|
|
$STD ./bin/bundle exec bootsnap precompile -j 0 app/ lib/
|
|
export SECRET_KEY_BASE_DUMMY=1 && $STD ./bin/rails assets:precompile
|
|
unset SECRET_KEY_BASE_DUMMY
|
|
msg_ok "Built Sure"
|
|
|
|
msg_info "Configuring Sure"
|
|
KEY="$(openssl rand -hex 64)"
|
|
mkdir -p /etc/sure
|
|
mv /opt/sure/.env.example /etc/sure/.env
|
|
sed -i -e "/^SECRET_KEY_BASE=/s/secret-value/${KEY}/" \
|
|
-e 's/_KEY_BASE=.*$/&\n\nRAILS_FORCE_SSL=false \
|
|
\
|
|
# Change to true when using a reverse proxy \
|
|
RAILS_ASSUME_SSL=false/' \
|
|
-e "/POSTGRES_PASSWORD=/s/postgres/${PG_DB_PASS}/" \
|
|
-e "/POSTGRES_USER=/s/postgres/${PG_DB_USER}\\
|
|
POSTGRES_DB=${PG_DB_NAME}/" \
|
|
-e "s|^APP_DOMAIN=|&${LOCAL_IP}|" /etc/sure/.env
|
|
msg_ok "Configured Sure"
|
|
|
|
msg_info "Creating Services"
|
|
cat <<EOF >/etc/systemd/system/sure.service
|
|
[Unit]
|
|
Description=Sure Service
|
|
After=network.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
WorkingDirectory=/opt/sure
|
|
Environment=RAILS_ENV=production
|
|
Environment=BUNDLE_DEPLOYMENT=1
|
|
Environment=BUNDLE_WITHOUT=development
|
|
Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/bin:\$PATH
|
|
EnvironmentFile=/etc/sure/.env
|
|
ExecStartPre=/opt/sure/bin/rails db:prepare
|
|
ExecStart=/opt/sure/bin/rails server
|
|
Restart=always
|
|
RestartSec=5
|
|
StandardOutput=journal
|
|
StandardError=journal
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
|
|
cat <<EOF >/etc/systemd/system/sure-worker.service
|
|
[Unit]
|
|
Description=Sure Background Worker (Sidekiq)
|
|
After=network.target redis-server.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
WorkingDirectory=/opt/sure
|
|
Environment=RAILS_ENV=production
|
|
Environment=BUNDLE_DEPLOYMENT=1
|
|
Environment=BUNDLE_WITHOUT=development
|
|
Environment=PATH=/root/.rbenv/shims:/root/.rbenv/bin:/usr/bin:/usr/local/bin:/sbin:/bin
|
|
EnvironmentFile=/etc/sure/.env
|
|
ExecStart=/opt/sure/bin/bundle exec sidekiq -e production
|
|
Restart=always
|
|
RestartSec=5
|
|
StandardOutput=journal
|
|
StandardError=journal
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
$STD systemctl enable -q --now sure sure-worker
|
|
msg_ok "Created Services"
|
|
|
|
motd_ssh
|
|
customize
|
|
cleanup_lxc
|