• 26.10-alpha e8c5317660

    26.10-alpha
    Some checks failed
    CI / lint (push) Failing after 50s
    CI / test (push) Successful in 1m6s
    CI / validate-json (push) Successful in 42s
    CI / markdown-links (push) Successful in 22s
    Release / release (push) Successful in 13m27s
    Pre-release

    daniel released this 2026-04-21 11:48:07 +02:00 | 11 commits to main since this release

    Added

    • Remove-USB-stick hint on the installer's post-install screen.
      webinstaller/templates/install/rebooting.html now shows a bold
      "Remove the USB stick now" line before the reboot, plus a muted
      fallback explaining the BIOS boot-menu keys (F11/F12/Esc) if the
      machine boots back into the installer anyway. Caught on the first
      bare-metal test (Medion i5-4gen, 2026-04-21) where the box didn't
      boot the installed system without manual BIOS-order changes.
    • New path setting type for app manifests. Apps can now declare a
      setting with "type": "path" whose value is an absolute filesystem
      path on the host; docker-compose bind-mounts it via the usual .env
      substitution (${MEDIA_PATH}:/media). Unlocks media/data-heavy apps
      (Jellyfin, later Paperless/Nextcloud/Immich) where the user points at
      an existing folder instead of copying everything into a Docker
      volume. The install form renders path settings as a plain text input
      with a /mnt/… placeholder hint.
    • Server-side path validation. Both install_from() and
      update_env() refuse values that aren't absolute, don't exist,
      aren't directories, or resolve (after Path.resolve()) into a
      system-path deny-list (/, /etc, /root, /boot, /proc,
      /sys, /dev, /bin, /sbin, /usr/bin, /usr/sbin,
      /var/lib/furtka). Catches /mnt/../etc-style traversal too. Error
      messages surface in the existing install/edit modal error line.
    Downloads