Add external installer warnings and user confirmation

Added explicit warnings and user confirmation prompts to install scripts that run external installers from third-party sources. Updated JSON metadata to remove warning notes about external sources, as the scripts now handle user notification and consent directly. This improves transparency and user safety during installation.
Update CHANGELOG.md (#7536 )
2025-09-13 07:10:51 +02:00 · 2025-09-10 11:19:47 +02:00 · 2025-09-10 07:44:30 +00:00 · 2025-09-10 09:44:09 +02:00 · 2025-09-10 07:15:02 +00:00 · 2025-09-10 09:14:41 +02:00
49 changed files with 260 additions and 110 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,22 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 ## 2025-09-10

+### 🚀 Updated Scripts
+
+  - #### ✨ New Features
+
+    - Booklore: Add Bookdrop location to .env [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#7533](https://github.com/community-scripts/ProxmoxVE/pull/7533))
+
+  - #### 🔧 Refactor
+
+    - Improve npmplus credential retrieval and messaging [@MickLesk](https://github.com/MickLesk) ([#7532](https://github.com/community-scripts/ProxmoxVE/pull/7532))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - set updateable to true for several lxc JSON-configs [@MickLesk](https://github.com/MickLesk) ([#7534](https://github.com/community-scripts/ProxmoxVE/pull/7534))
+
 ## 2025-09-09

 ### 🚀 Updated Scripts
--- a/frontend/public/json/add-netbird-lxc.json
+++ b/frontend/public/json/add-netbird-lxc.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-19",
  "type": "addon",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": null,
  "documentation": "https://docs.netbird.io/",
--- a/frontend/public/json/add-tailscale-lxc.json
+++ b/frontend/public/json/add-tailscale-lxc.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "addon",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": null,
  "documentation": "https://tailscale.com/kb/1017/install",
--- a/frontend/public/json/apt-cacher-ng.json
+++ b/frontend/public/json/apt-cacher-ng.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 3142,
  "documentation": "https://www.unix-ag.uni-kl.de/~bloch/acng/html/index.html",
--- a/frontend/public/json/beszel.json
+++ b/frontend/public/json/beszel.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2025-01-20",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 8090,
  "documentation": "https://beszel.dev/guide/what-is-beszel",
--- a/frontend/public/json/cloudflare-ddns.json
+++ b/frontend/public/json/cloudflare-ddns.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2025-05-22",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": null,
  "documentation": "https://github.com/favonia/cloudflare-ddns/blob/main/README.markdown",
--- a/frontend/public/json/cloudflared.json
+++ b/frontend/public/json/cloudflared.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": null,
  "documentation": "https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/",
--- a/frontend/public/json/dashy.json
+++ b/frontend/public/json/dashy.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 4000,
  "documentation": "https://dashy.to/docs",
--- a/frontend/public/json/deconz.json
+++ b/frontend/public/json/deconz.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": true,
  "interface_port": 80,
  "documentation": "https://github.com/dresden-elektronik/deconz-rest-plugin/wiki",
--- a/frontend/public/json/deluge.json
+++ b/frontend/public/json/deluge.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 8112,
  "documentation": "https://www.deluge-torrent.org/userguide/",
--- a/frontend/public/json/fhem.json
+++ b/frontend/public/json/fhem.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 8083,
  "documentation": "https://fhem.de/#Documentation",
--- a/frontend/public/json/filebrowser-quantum.json
+++ b/frontend/public/json/filebrowser-quantum.json
@@ -7,7 +7,7 @@
  ],
  "date_created": "2025-06-18",
  "type": "addon",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 8080,
  "documentation": "https://github.com/gtsteffaniak/filebrowser/wiki/Getting-Started",
--- a/frontend/public/json/filebrowser.json
+++ b/frontend/public/json/filebrowser.json
@@ -7,7 +7,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "addon",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 8080,
  "documentation": null,
--- a/frontend/public/json/homebridge.json
+++ b/frontend/public/json/homebridge.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 8581,
  "documentation": "https://github.com/homebridge/homebridge/wiki",
--- a/frontend/public/json/hyperhdr.json
+++ b/frontend/public/json/hyperhdr.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": true,
  "interface_port": 8090,
  "documentation": "https://github.com/awawa-dev/HyperHDR/wiki",
--- a/frontend/public/json/influxdb.json
+++ b/frontend/public/json/influxdb.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 8086,
  "documentation": "https://docs.influxdata.com/",
--- a/frontend/public/json/jeedom.json
+++ b/frontend/public/json/jeedom.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2025-07-29",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 80,
  "documentation": "https://doc.jeedom.com",
--- a/frontend/public/json/jenkins.json
+++ b/frontend/public/json/jenkins.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-12-26",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 8080,
  "documentation": "https://www.jenkins.io/doc/",
--- a/frontend/public/json/lazylibrarian.json
+++ b/frontend/public/json/lazylibrarian.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 5299,
  "documentation": "https://lazylibrarian.gitlab.io/lazylibrarian.gitlab.io/",
--- a/frontend/public/json/lldap.json
+++ b/frontend/public/json/lldap.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-08-06",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 17170,
  "documentation": "https://github.com/lldap/lldap/blob/main/README.md",
--- a/frontend/public/json/mariadb.json
+++ b/frontend/public/json/mariadb.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 3306,
  "documentation": "https://github.com/community-scripts/ProxmoxVE/discussions/192",
--- a/frontend/public/json/mattermost.json
+++ b/frontend/public/json/mattermost.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2025-01-30",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 8065,
  "documentation": "https://docs.mattermost.com/",
--- a/frontend/public/json/mongodb.json
+++ b/frontend/public/json/mongodb.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-18",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 27017,
  "documentation": "https://www.mongodb.com/docs/manual/",
--- a/frontend/public/json/mqtt.json
+++ b/frontend/public/json/mqtt.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": null,
  "documentation": "https://mosquitto.org/documentation/",
--- a/frontend/public/json/npmplus.json
+++ b/frontend/public/json/npmplus.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2025-03-13",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 81,
  "documentation": "https://github.com/ZoeyVid/NPMplus/blob/develop/README.md",
@@ -39,7 +39,7 @@
    }
  ],
  "default_credentials": {
-    "username": "root",
+    "username": "admin@example.org",
    "password": null
  },
  "notes": [
@@ -52,7 +52,7 @@
      "type": "info"
    },
    {
-      "text": "Application credentials: `cat /opt/.npm_pwd`",
+      "text": "Application credentials: `cat /opt/.npm_pwd` - if file not exist in LXC check docker logs for password with `docker logs npmplus`",
      "type": "info"
    }
  ]
--- a/frontend/public/json/ntfy.json
+++ b/frontend/public/json/ntfy.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 80,
  "documentation": "https://docs.ntfy.sh/",
--- a/frontend/public/json/omv.json
+++ b/frontend/public/json/omv.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 80,
  "documentation": "https://docs.openmediavault.org/en/stable/",
--- a/frontend/public/json/openhab.json
+++ b/frontend/public/json/openhab.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 8443,
  "documentation": "https://www.openhab.org/docs/",
--- a/frontend/public/json/pialert.json
+++ b/frontend/public/json/pialert.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": null,
  "documentation": "https://github.com/leiweibau/Pi.Alert/blob/main/README.md",
@@ -31,10 +31,5 @@
    "username": null,
    "password": null
  },
-  "notes": [
-    {
-      "text": "WARNING: Installation sources scripts outside of Community Scripts repo. Please check the source before installing.",
-      "type": "warning"
-    }
-  ]
+  "notes": []
 }
--- a/frontend/public/json/plex.json
+++ b/frontend/public/json/plex.json
@@ -35,10 +35,6 @@
    {
      "text": "With Privileged/Unprivileged Hardware Acceleration Support",
      "type": "info"
-    },
-    {
-      "text": "WARNING: Installation sources scripts outside of Community Scripts repo. Please check the source before installing.",
-      "type": "warning"
    }
  ]
 }
--- a/frontend/public/json/podman-homeassistant.json
+++ b/frontend/public/json/podman-homeassistant.json
@@ -1,52 +1,48 @@
 {
-    "name": "Podman Home Assistant Container",
-    "slug": "podman-homeassistant",
-    "categories": [
-        16
-    ],
-    "date_created": "2024-04-29",
-    "type": "ct",
-    "updateable": true,
-    "privileged": false,
-    "interface_port": 8123,
-    "documentation": "https://www.home-assistant.io/docs/",
-    "website": "https://www.home-assistant.io/",
-    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/home-assistant.webp",
-    "config_path": "/var/lib/containers/storage/volumes/hass_config/_data",
-    "description": "A standalone Podman container-based installation of Home Assistant Core means that the Home Assistant Core software is installed inside a container managed by Podman, separate from the host operating system. This provides a flexible and scalable solution for running the software, as the container can be easily moved between host systems or isolated from other processes for security. Podman is a popular open-source tool for managing containers that is similar to Docker, but designed for use on Linux systems without a daemon.\r\n\r\n\ud83d\udec8 If the LXC is created Privileged, the script will automatically set up USB passthrough.",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "ct/podman-homeassistant.sh",
-            "resources": {
-                "cpu": 2,
-                "ram": 2048,
-                "hdd": 16,
-                "os": "debian",
-                "version": "12"
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": null,
-        "password": null
+  "name": "Podman Home Assistant Container",
+  "slug": "podman-homeassistant",
+  "categories": [
+    16
+  ],
+  "date_created": "2024-04-29",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8123,
+  "documentation": "https://www.home-assistant.io/docs/",
+  "website": "https://www.home-assistant.io/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/home-assistant.webp",
+  "config_path": "/var/lib/containers/storage/volumes/hass_config/_data",
+  "description": "A standalone Podman container-based installation of Home Assistant Core means that the Home Assistant Core software is installed inside a container managed by Podman, separate from the host operating system. This provides a flexible and scalable solution for running the software, as the container can be easily moved between host systems or isolated from other processes for security. Podman is a popular open-source tool for managing containers that is similar to Docker, but designed for use on Linux systems without a daemon.\r\n\r\n\ud83d\udec8 If the LXC is created Privileged, the script will automatically set up USB passthrough.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/podman-homeassistant.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 16,
+        "os": "debian",
+        "version": "12"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "If the LXC is created Privileged, the script will automatically set up USB passthrough.",
+      "type": "warning"
    },
-    "notes": [
-        {
-            "text": "If the LXC is created Privileged, the script will automatically set up USB passthrough.",
-            "type": "warning"
-        },
-        {
-            "text": "config path: `/var/lib/containers/storage/volumes/hass_config/_data`",
-            "type": "info"
-        },
-        {
-            "text": "Options to Install Portainer or Portainer Agent",
-            "type": "warning"
-        },
-        {
-            "text": "WARNING: Installation sources scripts outside of Community Scripts repo. Please check the source before installing.",
-            "type": "warning"
-        }
-    ]
+    {
+      "text": "config path: `/var/lib/containers/storage/volumes/hass_config/_data`",
+      "type": "info"
+    },
+    {
+      "text": "Options to Install Portainer or Portainer Agent",
+      "type": "warning"
+    }
+  ]
 }
--- a/frontend/public/json/radicale.json
+++ b/frontend/public/json/radicale.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2025-02-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 5232,
  "documentation": "https://radicale.org/master.html#documentation-1",
--- a/frontend/public/json/smokeping.json
+++ b/frontend/public/json/smokeping.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": null,
  "documentation": "https://oss.oetiker.ch/smokeping/doc/index.en.html",
--- a/frontend/public/json/syncthing.json
+++ b/frontend/public/json/syncthing.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 8384,
  "documentation": "https://docs.syncthing.net/",
--- a/frontend/public/json/tautulli.json
+++ b/frontend/public/json/tautulli.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 8181,
  "documentation": "https://github.com/Tautulli/Tautulli/wiki",
--- a/frontend/public/json/unifi.json
+++ b/frontend/public/json/unifi.json
@@ -6,7 +6,7 @@
  ],
  "date_created": "2024-05-02",
  "type": "ct",
-  "updateable": false,
+  "updateable": true,
  "privileged": false,
  "interface_port": 8443,
  "documentation": null,
--- a/install/bunkerweb-install.sh
+++ b/install/bunkerweb-install.sh
@@ -19,7 +19,17 @@ $STD apt-get install -y lsb-release
 msg_ok "Installed Dependencies"

 RELEASE=$(curl -fsSL https://api.github.com/repos/bunkerity/bunkerweb/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-msg_info "Installing BunkerWeb v${RELEASE} (Patience)"
+msg_warn "WARNING: This script will run an external installer from a third-party source (install-bunkerweb.sh)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://github.com/bunkerity/bunkerweb/raw/v${RELEASE}/misc/install-bunkerweb.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+msg_info "Installing BunkerWeb (Patience)"
 curl -fsSL -o install-bunkerweb.sh https://github.com/bunkerity/bunkerweb/raw/v${RELEASE}/misc/install-bunkerweb.sh
 chmod +x install-bunkerweb.sh
 $STD ./install-bunkerweb.sh --yes
--- a/install/casaos-install.sh
+++ b/install/casaos-install.sh
@@ -13,6 +13,16 @@ setting_up_container
 network_check
 update_os

+msg_warn "WARNING: This script will run an external installer from a third-party source (https://casaos.zimaspace.com/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://get.casaos.io/"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
 msg_info "Installing CasaOS (Patience)"
 DOCKER_CONFIG_PATH='/etc/docker/daemon.json'
 mkdir -p $(dirname $DOCKER_CONFIG_PATH)
--- a/install/channels-install.sh
+++ b/install/channels-install.sh
@@ -18,6 +18,17 @@ $STD apt-get install -y chromium
 $STD apt-get install -y xvfb
 msg_ok "Installed Dependencies"

+msg_warn "WARNING: This script will run an external installer from a third-party source (https://getchannels.com)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://getchannels.com/dvr/setup.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 if [[ "$CTTYPE" == "0" ]]; then
  msg_info "Setting Up Hardware Acceleration"
  $STD apt-get -y install \
--- a/install/iobroker-install.sh
+++ b/install/iobroker-install.sh
@@ -17,6 +17,17 @@ msg_info "Installing Dependencies"
 $STD apt-get install -y ca-certificates
 msg_ok "Installed Dependencies"

+msg_warn "WARNING: This script will run an external installer from a third-party source (https://iobroker.net/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://iobroker.net/install.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 NODE_VERSION="22" setup_nodejs

 msg_info "Installing ioBroker (Patience)"
--- a/install/jeedom-install.sh
+++ b/install/jeedom-install.sh
@@ -19,6 +19,17 @@ $STD apt-get install -y \
  git
 msg_ok "Dependencies installed"

+msg_warn "WARNING: This script will run an external installer from a third-party source (https://github.com/jeedom/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://raw.githubusercontent.com/jeedom/core/master/install/install.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 DEFAULT_BRANCH="master"
 REPO_URL="https://github.com/jeedom/core.git"

--- a/install/kasm-install.sh
+++ b/install/kasm-install.sh
@@ -13,20 +13,32 @@ setting_up_container
 network_check
 update_os

-msg_info "Installing Kasm Workspaces"
 KASM_VERSION=$(curl -fsSL 'https://www.kasmweb.com/downloads' | grep -o 'https://kasm-static-content.s3.amazonaws.com/kasm_release_[^"]*\.tar\.gz' | head -n 1 | sed -E 's/.*release_(.*)\.tar\.gz/\1/')
+
+msg_warn "WARNING: This script will run an external installer from a third-party source (https://www.kasmweb.com/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  install.sh inside tar.gz https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
+msg_info "Installing Kasm Workspaces"
 curl -fsSL -o "/opt/kasm_release_${KASM_VERSION}.tar.gz" "https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
 cd /opt
 tar -xf "kasm_release_${KASM_VERSION}.tar.gz"
 chmod +x /opt/kasm_release/install.sh
-printf 'y\ny\ny\n4\n' | bash /opt/kasm_release/install.sh > ~/kasm-install.output 2>&1
+printf 'y\ny\ny\n4\n' | bash /opt/kasm_release/install.sh >~/kasm-install.output 2>&1
 awk '
  /^Kasm UI Login Credentials$/ {capture=1}
  capture {print}
  /^Service Registration Token$/ {in_token=1}
  in_token && /^-+$/ {dash_count++}
  in_token && dash_count==2 {exit}
-' ~/kasm-install.output > ~/kasm.creds
+' ~/kasm-install.output >~/kasm.creds
 msg_ok "Installed Kasm Workspaces"

 motd_ssh
--- a/install/mattermost-install.sh
+++ b/install/mattermost-install.sh
@@ -13,6 +13,17 @@ setting_up_container
 network_check
 update_os

+msg_warn "WARNING: This script will run an external installer from a third-party source (https://mattermost.com/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://deb.packages.mattermost.com/repo-setup.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 PG_VERSION="16" setup_postgresql

 msg_info "Setting up PostgreSQL"
--- a/install/nextcloudpi-install.sh
+++ b/install/nextcloudpi-install.sh
@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2025 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.turnkeylinux.org/nextcloud
+# Source: https://nextcloudpi.com/

 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
@@ -13,8 +13,19 @@ setting_up_container
 network_check
 update_os

+msg_warn "WARNING: This script will run an external installer from a third-party source (https://nextcloudpi.com/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://raw.githubusercontent.com/nextcloud/nextcloudpi/master/install.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 msg_info "Installing NextCloudPi (Patience)"
-bash <(curl -fsSL https://raw.githubusercontent.com/nextcloud/nextcloudpi/master/install.sh) >/dev/null 2>&1
+$STD bash <(curl -fsSL https://raw.githubusercontent.com/nextcloud/nextcloudpi/master/install.sh)
 msg_ok "Installed NextCloudPi"

 motd_ssh
--- a/install/npmplus-install.sh
+++ b/install/npmplus-install.sh
@@ -89,19 +89,36 @@ customize

 msg_info "Retrieving Default Login (Patience)"
 PASSWORD_FOUND=0
+
 for i in {1..60}; do
-  PASSWORD_LINE=$(docker logs "$CONTAINER_ID" 2>&1 | awk '/Creating a new user:/ { print; exit }')
-  if [[ -n "$PASSWORD_LINE" ]]; then
-    PASSWORD=$(echo "$PASSWORD_LINE" | awk -F 'password: ' '{print $2}')
-    echo -e "username: admin@example.org\npassword: $PASSWORD" >/opt/.npm_pwd
+  PASSWORD_LINE=$(
+    { awk '/Creating a new user:/{print; exit}' < <(docker logs "$CONTAINER_ID" 2>&1); } || true
+  )
+
+  if [[ -n "${PASSWORD_LINE:-}" ]]; then
+    PASSWORD="${PASSWORD_LINE#*password: }"
+    printf 'username: admin@example.org\npassword: %s\n' "$PASSWORD" >/opt/.npm_pwd
    msg_ok "Saved default login to /opt/.npm_pwd"
    PASSWORD_FOUND=1
    break
  fi
  sleep 2
 done
+if [[ $PASSWORD_FOUND -eq 0 ]]; then
+  PASSWORD_LINE=$(
+    timeout 30s bash -c '
+      docker logs -f --since=0s --tail=0 "$1" 2>&1 | awk "/Creating a new user:/{print; exit}"
+    ' _ "$CONTAINER_ID" || true
+  )
+  if [[ -n "${PASSWORD_LINE:-}" ]]; then
+    PASSWORD="${PASSWORD_LINE#*password: }"
+    printf 'username: admin@example.org\npassword: %s\n' "$PASSWORD" >/opt/.npm_pwd
+    msg_ok "Saved default login to /opt/.npm_pwd (live)"
+    PASSWORD_FOUND=1
+  fi
+fi

 if [[ $PASSWORD_FOUND -eq 0 ]]; then
-  msg_error "Could not retrieve default login after 60 seconds."
+  msg_error "Could not retrieve default login after 120s."
  echo -e "\nYou can manually check the container logs with:\n  docker logs $CONTAINER_ID | grep 'Creating a new user:'\n"
 fi
--- a/install/pihole-install.sh
+++ b/install/pihole-install.sh
@@ -13,6 +13,17 @@ setting_up_container
 network_check
 update_os

+msg_warn "WARNING: This script will run an external installer from a third-party source (https://pi-hole.net/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://install.pi-hole.net"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 msg_info "Installing Dependencies"
 $STD apt-get install -y ufw
 msg_ok "Installed Dependencies"
--- a/install/runtipi-install.sh
+++ b/install/runtipi-install.sh
@@ -13,6 +13,17 @@ setting_up_container
 network_check
 update_os

+msg_warn "WARNING: This script will run an external installer from a third-party source (https://runtipi.io/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://raw.githubusercontent.com/runtipi/runtipi/master/scripts/install.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 msg_info "Installing Runtipi (Patience)"
 DOCKER_CONFIG_PATH='/etc/docker/daemon.json'
 mkdir -p "$(dirname "$DOCKER_CONFIG_PATH")"
--- a/install/wazuh-install.sh
+++ b/install/wazuh-install.sh
@@ -13,9 +13,18 @@ setting_up_container
 network_check
 update_os

-msg_info "Fetching Latest Wazuh Version"
 RELEASE=$(curl -fsSL https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '"tag_name"' | awk -F '"' '{print substr($4, 2, length($2)-4)}')
-msg_ok "Latest Wazuh Version: $RELEASE"
+
+msg_warn "WARNING: This script will run an external installer from a third-party source (https://wazuh.com/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://packages.wazuh.com/$RELEASE/wazuh-install.sh "
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi

 msg_info "Setup Wazuh"
 curl -fsSL https://packages.wazuh.com/$RELEASE/wazuh-install.sh -o wazuh-install.sh
--- a/install/yunohost-install.sh
+++ b/install/yunohost-install.sh
@@ -14,11 +14,23 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-$STD apt-get install -y apt-transport-https
-$STD apt-get install -y lsb-release
-$STD apt-get install -y ca-certificates
+$STD apt-get install -y \
+  apt-transport-https \
+  lsb-release \
+  ca-certificates
 msg_ok "Installed Dependencies"

+msg_warn "WARNING: This script will run an external installer from a third-party source (https://yunohost.org/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://install.yunohost.org"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 msg_info "Installing YunoHost (Patience)"
 touch /etc/.pve-ignore.resolv.conf
 curl -fsSLo /usr/share/keyrings/deb.sury.org-php.gpg https://packages.sury.org/php/apt.gpg
Author	SHA1	Message	Date
CanbiZ	1d703f2f2f	Add external installer warnings and user confirmation Added explicit warnings and user confirmation prompts to install scripts that run external installers from third-party sources. Updated JSON metadata to remove warning notes about external sources, as the scripts now handle user notification and consent directly. This improves transparency and user safety during installation.	2025-09-10 11:19:47 +02:00
community-scripts-pr-app[bot]	63f6d772ea	Update CHANGELOG.md (#7536 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-09-10 07:44:30 +00:00
CanbiZ	652df1f370	Set updateable to true for all JSON app configs (#7534 )	2025-09-10 09:44:09 +02:00
community-scripts-pr-app[bot]	f4b5baf308	Update CHANGELOG.md (#7535 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-09-10 07:15:02 +00:00
Michel Roegl-Brunner	cc36fd5434	Booklore: Add Bookdrop location to .env (#7533 )	2025-09-10 09:14:41 +02:00
CanbiZ	3e182978ad	Improve npmplus credential retrieval and messaging (#7532 ) * Improve npmplus credential retrieval and messaging Enhanced the install script to attempt live log monitoring for credentials if not found initially, and updated the info message in npmplus.json to guide users to check docker logs if the credentials file is missing. * Update npmplus.json * Change updateable status to true in npmplus.json	2025-09-10 09:14:15 +02:00