new menu lxc

scripts/lxc/jd2.sh

@@ -0,0 +1,135 @@
+#!/bin/bash
+
+# Script para instalar JDownloader en un contenedor LXC desde el host Proxmox
+# Autor: MacRimi
+
+# Mostrar lista de CTs
+CT_LIST=$(pct list | awk 'NR>1 {print $1, $3}')
+if [ -z "$CT_LIST" ]; then
+    whiptail --title "Error" --msgbox "No hay contenedores LXC disponibles en el sistema." 8 50
+    exit 1
+fi
+
+# Seleccionar CT
+CTID=$(whiptail --title "Instalación de JDownloader" --menu "Selecciona el contenedor donde instalar JDownloader:" 20 60 10 $CT_LIST 3>&1 1>&2 2>&3)
+if [ -z "$CTID" ]; then
+    whiptail --title "Cancelado" --msgbox "No se ha seleccionado ningún contenedor." 8 40
+    exit 1
+fi
+
+# Solicitar email
+EMAIL=$(whiptail --title "Cuenta My JDownloader" --inputbox "Introduce tu correo electrónico para vincular JDownloader:" 10 60 3>&1 1>&2 2>&3)
+if [ -z "$EMAIL" ]; then
+    whiptail --title "Error" --msgbox "No se ha introducido ningún correo." 8 40
+    exit 1
+fi
+
+# Solicitar contraseña con confirmación
+while true; do
+    PASSWORD=$(whiptail --title "Cuenta My JDownloader" --passwordbox "Introduce tu contraseña de My JDownloader:" 10 60 3>&1 1>&2 2>&3)
+    [ -z "$PASSWORD" ] && whiptail --title "Error" --msgbox "No se ha introducido ninguna contraseña." 8 40 && exit 1
+
+    CONFIRM=$(whiptail --title "Confirmación de contraseña" --passwordbox "Repite tu contraseña para confirmar:" 10 60 3>&1 1>&2 2>&3)
+    [ "$PASSWORD" = "$CONFIRM" ] && break
+    whiptail --title "Error" --msgbox "Las contraseñas no coinciden. Intenta de nuevo." 8 50
+done
+
+# Confirmación final
+whiptail --title "Confirmar datos" --yesno "¿Deseas continuar con los siguientes datos?\n\nCorreo: $EMAIL\nContraseña: (oculta)\n\nEsta información se usará para vincular el contenedor con tu cuenta de My.JDownloader." 14 60
+[ $? -ne 0 ] && whiptail --title "Cancelado" --msgbox "Instalación cancelada por el usuario." 8 40 && exit 1
+
+clear
+echo "🔍 Detectando sistema operativo dentro del CT $CTID..."
+OS_ID=$(pct exec "$CTID" -- awk -F= '/^ID=/{gsub("\"",""); print $2}' /etc/os-release)
+
+echo "Sistema detectado: $OS_ID"
+echo "🧰 Preparando entorno..."
+
+case "$OS_ID" in
+  debian)
+    # Repositorio adicional para Java 8
+    pct exec "$CTID" -- wget -q http://www.mirbsd.org/~tg/Debs/sources.txt/wtf-bookworm.sources
+    pct exec "$CTID" -- mv wtf-bookworm.sources /etc/apt/sources.list.d/
+    pct exec "$CTID" -- apt update -y
+    pct exec "$CTID" -- apt install -y openjdk-8-jdk wget
+    JAVA_PATH="/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java"
+    ;;
+  ubuntu)
+    pct exec "$CTID" -- apt update -y
+    pct exec "$CTID" -- apt install -y openjdk-8-jdk wget
+    JAVA_PATH="/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java"
+    ;;
+  alpine)
+    pct exec "$CTID" -- apk update
+    pct exec "$CTID" -- apk add openjdk8 wget
+    JAVA_PATH="/usr/lib/jvm/java-1.8-openjdk/bin/java"
+    ;;
+  *)
+    echo "❌ Sistema operativo no soportado: $OS_ID"
+    exit 1
+    ;;
+esac
+
+# Crear carpeta de instalación
+pct exec "$CTID" -- mkdir -p /opt/jdownloader
+pct exec "$CTID" -- bash -c 'cd /opt/jdownloader && curl -O https://installer.jdownloader.org/JDownloader.jar'
+
+
+# Crear archivo de configuración JSON para My JDownloader
+pct exec "$CTID" -- bash -c "mkdir -p /opt/jdownloader/cfg && cat > /opt/jdownloader/cfg/org.jdownloader.api.myjdownloader.MyJDownloaderSettings.json" <<EOF
+{
+  "email" : "$EMAIL",
+  "password" : "$PASSWORD",
+  "enabled" : true
+}
+EOF
+
+
+# Crear servicio según sistema
+if [[ "$OS_ID" == "alpine" ]]; then
+    # Servicio OpenRC para Alpine
+    pct exec "$CTID" -- bash -c 'cat > /etc/init.d/jdownloader <<EOF
+#!/sbin/openrc-run
+
+command="/usr/bin/java"
+command_args="-jar /opt/jdownloader/JDownloader.jar -norestart"
+pidfile="/var/run/jdownloader.pid"
+name="JDownloader"
+
+depend() {
+    need net
+}
+EOF'
+
+    pct exec "$CTID" -- chmod +x /etc/init.d/jdownloader
+    pct exec "$CTID" -- rc-update add jdownloader default
+    pct exec "$CTID" -- rc-service jdownloader start
+
+else
+    # Servicio systemd para Debian/Ubuntu
+    pct exec "$CTID" -- bash -c 'cat > /etc/systemd/system/jdownloader.service <<EOF
+[Unit]
+Description=JDownloader
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/jdownloader
+ExecStart=/usr/bin/java -jar JDownloader.jar -norestart
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF'
+
+    pct exec "$CTID" -- systemctl daemon-reexec
+    pct exec "$CTID" -- systemctl daemon-reload
+    pct exec "$CTID" -- systemctl enable jdownloader
+    pct exec "$CTID" -- systemctl start jdownloader
+fi
+
+pct exec "$CTID" -- reboot
+
+echo -e "\n\033[1;32m✅ JDownloader se ha instalado correctamente en el CT $CTID y está funcionando como servicio.\033[0m"
+echo -e "\n➡️ Accede a \033[1;34mhttps://my.jdownloader.org\033[0m con tu cuenta para gestionarlo.\n"

scripts/lxc/jd2_.sh

@@ -0,0 +1,99 @@
+#!/bin/bash
+
+# Script para instalar JDownloader en un contenedor LXC desde el host Proxmox
+# Autor: MacRimi
+
+# Mostrar lista de CTs
+CT_LIST=$(pct list | awk 'NR>1 {print $1, $3}')
+if [ -z "$CT_LIST" ]; then
+    whiptail --title "Error" --msgbox "No hay contenedores LXC disponibles en el sistema." 8 50
+    exit 1
+fi
+
+# Seleccionar CT
+CTID=$(whiptail --title "Instalación de JDownloader" --menu "Selecciona el contenedor donde instalar JDownloader:" 20 60 10 $CT_LIST 3>&1 1>&2 2>&3)
+if [ -z "$CTID" ]; then
+    whiptail --title "Cancelado" --msgbox "No se ha seleccionado ningún contenedor." 8 40
+    exit 1
+fi
+
+# Solicitar email
+EMAIL=$(whiptail --title "Cuenta My JDownloader" --inputbox "Introduce tu correo electrónico para vincular JDownloader:" 10 60 3>&1 1>&2 2>&3)
+if [ -z "$EMAIL" ]; then
+    whiptail --title "Error" --msgbox "No se ha introducido ningún correo." 8 40
+    exit 1
+fi
+
+# Solicitar contraseña
+while true; do
+    PASSWORD=$(whiptail --title "Cuenta My JDownloader" --passwordbox "Introduce tu contraseña de My JDownloader:" 10 60 3>&1 1>&2 2>&3)
+    if [ -z "$PASSWORD" ]; then
+        whiptail --title "Error" --msgbox "No se ha introducido ninguna contraseña." 8 40
+        exit 1
+    fi
+
+    CONFIRM_PASSWORD=$(whiptail --title "Confirmación de contraseña" --passwordbox "Repite tu contraseña para confirmar:" 10 60 3>&1 1>&2 2>&3)
+
+    if [ "$PASSWORD" = "$CONFIRM_PASSWORD" ]; then
+        break
+    else
+        whiptail --title "Error" --msgbox "Las contraseñas no coinciden. Intenta de nuevo." 8 50
+    fi
+done
+
+# Confirmar datos
+whiptail --title "Confirmar datos" --yesno "¿Deseas continuar con los siguientes datos?\n\nCorreo: $EMAIL\nContraseña: (establecida)\n\nEsta información se usará para vincular el contenedor con tu cuenta de My.JDownloader." 14 60
+if [ $? -ne 0 ]; then
+    whiptail --title "Cancelado" --msgbox "Instalación cancelada por el usuario." 8 40
+    exit 1
+fi
+
+echo
+echo "Instalando JDownloader en CT $CTID..."
+echo
+
+# Añadir repositorio alternativo para Java 8 y actualizar
+pct exec "$CTID" -- wget -q http://www.mirbsd.org/~tg/Debs/sources.txt/wtf-bookworm.sources
+pct exec "$CTID" -- mv wtf-bookworm.sources /etc/apt/sources.list.d/
+pct exec "$CTID" -- apt update -y
+pct exec "$CTID" -- apt install -y openjdk-8-jdk wget
+
+# Crear carpeta y descargar JDownloader
+pct exec "$CTID" -- mkdir -p /root/jdownloader
+pct exec "$CTID" -- bash -c "cd /root/jdownloader && wget -q http://installer.jdownloader.org/JDownloader.jar"
+
+# Crear archivo de configuración JSON para My JDownloader
+pct exec "$CTID" -- bash -c "mkdir -p /root/jdownloader/cfg && cat > /root/jdownloader/cfg/org.jdownloader.api.myjdownloader.MyJDownloaderSettings.json" <<EOF
+
+{
+  "email" : "$EMAIL",
+  "password" : "$PASSWORD",
+  "enabled" : true
+}
+EOF
+
+# Crear servicio systemd
+pct exec "$CTID" -- bash -c "cat > /etc/systemd/system/jdownloader.service <<EOF
+[Unit]
+Description=JDownloader Headless
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/root/jdownloader
+ExecStart=/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java -jar JDownloader.jar -norestart
+Restart=always
+User=root
+
+[Install]
+WantedBy=multi-user.target
+EOF"
+
+# Activar y arrancar servicio
+pct exec "$CTID" -- systemctl daemon-reexec
+pct exec "$CTID" -- systemctl daemon-reload
+pct exec "$CTID" -- systemctl enable jdownloader
+pct exec "$CTID" -- systemctl start jdownloader
+
+echo -e "\n\033[1;32m✅ JDownloader se ha instalado y está funcionando como servicio en el CT $CTID.\033[0m"
+echo -e "\nPuedes acceder a \033[1;34mhttps://my.jdownloader.org\033[0m con tu cuenta para gestionarlo.\n"

scripts/lxc/lxc-manual-guide.sh

@@ -0,0 +1,284 @@
+#!/bin/bash
+
+# ==========================================================
+# ProxMenux - Manual LXC Conversion Guide
+# ==========================================================
+# Author      : MacRimi
+# Copyright   : (c) 2024 MacRimi
+# License     : MIT (https://raw.githubusercontent.com/MacRimi/ProxMenux/main/LICENSE)
+# Version     : 1.0
+# Last Updated: 19/08/2025
+# ==========================================================
+
+# Configuration ============================================
+REPO_URL="https://raw.githubusercontent.com/MacRimi/ProxMenux/main"
+BASE_DIR="/usr/local/share/proxmenux"
+UTILS_FILE="$BASE_DIR/utils.sh"
+VENV_PATH="/opt/googletrans-env"
+
+if [[ -f "$UTILS_FILE" ]]; then
+    source "$UTILS_FILE"
+fi
+load_language
+initialize_cache
+# ==========================================================
+
+show_command() {
+    local step="$1"
+    local description="$2"
+    local command="$3"
+    local note="$4"
+    local command_extra="$5"
+    
+    echo -e "${BGN}${step}.${CL} ${BL}${description}${CL}"
+    echo ""
+    echo -e "${TAB}${command}"
+    echo -e
+    [[ -n "$note" ]] && echo -e "${TAB}${DARK_GRAY}${note}${CL}"
+    [[ -n "$command_extra" ]] && echo -e "${TAB}${YW}${command_extra}${CL}"
+    echo ""
+}
+
+show_privileged_to_unprivileged_guide() {
+    clear
+    show_proxmenux_logo
+    msg_title "$(translate "Manual Guide: Convert LXC Privileged to Unprivileged")"
+        
+    echo -e "${TAB}${BL}------------------------------------------------------------------------${CL}"
+    echo -e 
+    echo -e "${TAB}${BGN}$(translate "Source:")${CL} ${BL}https://forum.proxmox.com/threads/converting-between-privileged-and-unprivileged-containers.97243/${CL}"
+    echo -e
+    echo -e 
+    echo -e "${TAB}${BOLD}$(translate "IMPORTANT PREREQUISITES:")${CL}"
+    echo -e
+    echo -e "${TAB}${BGN}• $(translate "Container must be stopped before conversion")${CL}"
+    echo -e "${TAB}${BGN}• $(translate "Create a backup of your container before proceeding")${CL}"
+    echo -e "${TAB}${BGN}• $(translate "This process changes file ownership inside the container")${CL}"
+    echo -e "${TAB}${BGN}• $(translate "Process may take several minutes depending on container size")${CL}"
+    echo -e "${TAB}${BGN}• $(translate "Works with LVM, ZFS, and BTRFS storage types")${CL}"
+    echo -e 
+    echo -e "${TAB}${BL}------------------------------------------------------------------------${CL}"
+    echo -e 
+
+    show_command "1" \
+        "$(translate "List all containers to identify the privileged one:")" \
+        "pct list" \
+        "$(translate "Look for containers without 'unprivileged: 1' in their config")"
+
+    show_command "2" \
+        "$(translate "Stop the container if it's running:")" \
+        "pct stop <container-id>" \
+        "$(translate "Replace <container-id> with your actual container ID")" \
+        "$(translate "Example: pct stop 114")"
+
+    show_command "3" \
+        "$(translate "Create a backup of the container configuration:")" \
+        "cp /etc/pve/lxc/<container-id>.conf /etc/pve/lxc/<container-id>.conf.bak" \
+        "$(translate "This creates a backup in case you need to revert changes")" \
+        "$(translate "Example: cp /etc/pve/lxc/114.conf /etc/pve/lxc/114.conf.bak")"
+
+    show_command "4" \
+        "$(translate "Get the container's storage information:")" \
+        "grep '^rootfs:' /etc/pve/lxc/<container-id>.conf" \
+        "$(translate "This shows the storage type and disk identifier")" \
+        "$(translate "Example output: rootfs: local-lvm:vm-114-disk-0,size=8G")"
+
+    show_command "5" \
+        "$(translate "Get the actual disk path:")" \
+        "pvesm path <storage-identifier>" \
+        "$(translate "Replace <storage-identifier> with the value from step 4")" \
+        "$(translate "Example: pvesm path local-lvm:vm-114-disk-0")"
+
+    echo -e "${TAB}${BOLD}$(translate "STEP 6: Choose commands based on your storage type")${CL}"
+    echo -e
+    echo -e "${TAB}${BGN}$(translate "If pvesm path returned a DIRECTORY (ZFS/BTRFS):")${CL}"
+    echo -e "${TAB}${YW}$(translate "Example: /rpool/data/subvol-114-disk-0")${CL}"
+    echo -e
+
+    show_command "6a" \
+        "$(translate "For ZFS/BTRFS - Set the mount path:")" \
+        "MOUNT_PATH=\"/rpool/data/subvol-<container-id>-disk-0\"" \
+        "$(translate "Replace with your actual path from step 5")" \
+        "$(translate "Example: MOUNT_PATH=\"/rpool/data/subvol-114-disk-0\"")"
+
+    echo -e "${TAB}${BGN}$(translate "If pvesm path returned a DEVICE (LVM):")${CL}"
+    echo -e "${TAB}${YW}$(translate "Example: /dev/pve/vm-114-disk-0")${CL}"
+    echo -e
+
+    show_command "6b" \
+        "$(translate "For LVM - Create mount directory and mount:")" \
+        "mkdir -p /tmp/lxc_convert_<container-id>\nmount -o loop /dev/path/to/disk /tmp/lxc_convert_<container-id>\nMOUNT_PATH=\"/tmp/lxc_convert_<container-id>\"" \
+        "$(translate "Replace paths with your actual values from step 5")" \
+        "$(translate "Example: mkdir -p /tmp/lxc_convert_114")"
+
+    show_command "7" \
+        "$(translate "Convert file ownership (this takes time):")" \
+        "find \"\$MOUNT_PATH\" -type f | while read file; do\n  if [ -e \"\$file\" ]; then\n    CURRENT_UID=\$(stat -c '%u' \"\$file\")\n    CURRENT_GID=\$(stat -c '%g' \"\$file\")\n    NEW_UID=\$((100000 + CURRENT_UID))\n    NEW_GID=\$((100000 + CURRENT_GID))\n    chown \"\$NEW_UID:\$NEW_GID\" \"\$file\"\n  fi\ndone" \
+        "$(translate "This converts all file UIDs/GIDs by adding 100000")" \
+        "$(translate "Process may take several minutes for large containers")"
+
+    show_command "8" \
+        "$(translate "Convert directory ownership:")" \
+        "find \"\$MOUNT_PATH\" -type d | while read dir; do\n  if [ -e \"\$dir\" ]; then\n    CURRENT_UID=\$(stat -c '%u' \"\$dir\")\n    CURRENT_GID=\$(stat -c '%g' \"\$dir\")\n    NEW_UID=\$((100000 + CURRENT_UID))\n    NEW_GID=\$((100000 + CURRENT_GID))\n    chown \"\$NEW_UID:\$NEW_GID\" \"\$dir\"\n  fi\ndone" \
+        "$(translate "This converts all directory UIDs/GIDs by adding 100000")"
+
+    echo -e "${TAB}${BOLD}$(translate "STEP 9: Cleanup (LVM only)")${CL}"
+    echo -e "${TAB}${YW}$(translate "Only run this if you used LVM (step 6b):")${CL}"
+    echo -e
+
+    show_command "9" \
+        "$(translate "Unmount and cleanup (LVM only):")" \
+        "umount /tmp/lxc_convert_<container-id>\nrmdir /tmp/lxc_convert_<container-id>" \
+        "$(translate "Only needed if you mounted the filesystem in step 6b")" \
+        "$(translate "Skip this step for ZFS/BTRFS")"
+
+    show_command "10" \
+        "$(translate "Add unprivileged flag to container configuration:")" \
+        "echo 'unprivileged: 1' >> /etc/pve/lxc/<container-id>.conf" \
+        "$(translate "This marks the container as unprivileged")"
+
+    show_command "11" \
+        "$(translate "Start the converted container:")" \
+        "pct start <container-id>" \
+        "$(translate "The container should now start as unprivileged")"
+
+    show_command "12" \
+        "$(translate "Verify the conversion:")" \
+        "pct config <container-id> | grep unprivileged" \
+        "$(translate "Should show 'unprivileged: 1'")"
+    
+    echo -e "${TAB}${BL}------------------------------------------------------------------------${CL}"
+    echo -e 
+    echo -e "${TAB}${BOLD}$(translate "STORAGE TYPE IDENTIFICATION:")${CL}"
+    echo -e
+    echo -e "${TAB}${BGN}• $(translate "LVM:")${CL} ${YW}pvesm path returns /dev/xxx (block device)${CL}"
+    echo -e "${TAB}${BGN}• $(translate "ZFS:")${CL} ${YW}pvesm path returns /rpool/xxx (directory)${CL}"
+    echo -e "${TAB}${BGN}• $(translate "BTRFS:")${CL} ${YW}pvesm path returns directory path${CL}"
+    echo -e
+    echo -e "${TAB}${BOLD}$(translate "TROUBLESHOOTING:")${CL}"
+    echo -e
+    echo -e "${TAB}${BGN}$(translate "If mount fails (LVM):")${CL} ${YW}Check that the container is stopped and disk path is correct${CL}"
+    echo -e "${TAB}${BGN}$(translate "If path not accessible (ZFS/BTRFS):")${CL} ${YW}Verify the dataset/subvolume exists and is mounted${CL}"
+    echo -e "${TAB}${BGN}$(translate "If container won't start:")${CL} ${YW}Check /var/log/pve/tasks/ for detailed error messages${CL}"
+    echo -e "${TAB}${BGN}$(translate "To revert changes:")${CL} ${YW}cp /etc/pve/lxc/<container-id>.conf.bak /etc/pve/lxc/<container-id>.conf${CL}"
+    echo -e
+
+    echo -e 
+    msg_success "$(translate "Press Enter to return to menu...")"
+    echo -e 
+    read -r
+}
+
+show_unprivileged_to_privileged_guide() {
+    clear
+    show_proxmenux_logo
+    msg_title "$(translate "Manual Guide: Convert LXC Unprivileged to Privileged")"
+        
+    echo -e "${TAB}${BL}------------------------------------------------------------------------${CL}"
+    echo -e 
+    echo -e "${TAB}${RD}$(translate "SECURITY WARNING:")${CL} ${YW}$(translate "Privileged containers have full root access to the host system!")${CL}"
+    echo -e "${TAB}${YW}$(translate "Only convert to privileged if absolutely necessary for your use case.")${CL}"
+    echo -e
+    echo -e 
+    echo -e "${TAB}${BOLD}$(translate "IMPORTANT PREREQUISITES:")${CL}"
+    echo -e
+    echo -e "${TAB}${BGN}• $(translate "Container must be stopped before conversion")${CL}"
+    echo -e "${TAB}${BGN}• $(translate "Create a backup of your container before proceeding")${CL}"
+    echo -e "${TAB}${BGN}• $(translate "Understand the security implications of privileged containers")${CL}"
+    echo -e "${TAB}${BGN}• $(translate "This is a simple configuration change")${CL}"
+    echo -e 
+    echo -e "${TAB}${BL}------------------------------------------------------------------------${CL}"
+    echo -e 
+    
+
+    show_command "1" \
+        "$(translate "List all containers to identify the unprivileged one:")" \
+        "pct list" \
+        "$(translate "Look for containers with 'unprivileged: 1' in their config")"
+
+    show_command "2" \
+        "$(translate "Check if container is unprivileged:")" \
+        "pct config <container-id> | grep unprivileged" \
+        "$(translate "Should show 'unprivileged: 1' if it's unprivileged")" \
+        "$(translate "Example: pct config 110 | grep unprivileged")"
+
+    show_command "3" \
+        "$(translate "Stop the container if it's running:")" \
+        "pct stop <container-id>" \
+        "$(translate "Replace <container-id> with your actual container ID")" \
+        "$(translate "Example: pct stop 110")"
+
+    show_command "4" \
+        "$(translate "Create a backup of the container configuration:")" \
+        "cp /etc/pve/lxc/<container-id>.conf /etc/pve/lxc/<container-id>.conf.bak" \
+        "$(translate "This creates a backup in case you need to revert changes")" \
+        "$(translate "Example: cp /etc/pve/lxc/110.conf /etc/pve/lxc/110.conf.bak")"
+
+    show_command "5" \
+        "$(translate "Remove the unprivileged flag from configuration:")" \
+        "sed -i '/^unprivileged: 1/d' /etc/pve/lxc/<container-id>.conf" \
+        "$(translate "This removes the 'unprivileged: 1' line from the config")" \
+        "$(translate "Example: sed -i '/^unprivileged: 1/d' /etc/pve/lxc/110.conf")"
+
+    show_command "6" \
+        "$(translate "Add explicit privileged flag (optional but recommended):")" \
+        "echo 'unprivileged: 0' >> /etc/pve/lxc/<container-id>.conf" \
+        "$(translate "This explicitly marks the container as privileged")"
+
+    show_command "7" \
+        "$(translate "Start the converted container:")" \
+        "pct start <container-id>" \
+        "$(translate "The container should now start as privileged")"
+
+    show_command "8" \
+        "$(translate "Verify the conversion:")" \
+        "pct config <container-id> | grep unprivileged" \
+        "$(translate "Should show 'unprivileged: 0' or no unprivileged line")"
+    
+    echo -e "${TAB}${BL}------------------------------------------------------------------------${CL}"
+    echo -e 
+    echo -e 
+    echo -e "${TAB}${BOLD}$(translate "SECURITY CONSIDERATIONS:")${CL}"
+    echo -e
+    echo -e "${TAB}${RD}• $(translate "Privileged containers can access host devices directly")${CL}"
+    echo -e "${TAB}${RD}• $(translate "Root inside container = root on host system")${CL}"
+    echo -e "${TAB}${RD}• $(translate "Use only when unprivileged containers cannot meet your needs")${CL}"
+    echo -e "${TAB}${RD}• $(translate "Consider security implications for production environments")${CL}"
+    echo -e
+    echo -e
+    
+    echo -e "${TAB}${BOLD}$(translate "TROUBLESHOOTING:")${CL}"
+    echo -e
+    echo -e "${TAB}${BGN}$(translate "If container won't start:")${CL} ${YW}Check /var/log/pve/tasks/ for detailed error messages${CL}"
+    echo -e "${TAB}${BGN}$(translate "To revert changes:")${CL} ${YW}cp /etc/pve/lxc/<container-id>.conf.bak /etc/pve/lxc/<container-id>.conf${CL}"
+    echo -e "${TAB}${BGN}$(translate "If config issues occur:")${CL} ${YW}Manually edit /etc/pve/lxc/<container-id>.conf${CL}"
+    echo -e
+    echo -e
+
+    
+    echo -e 
+    msg_success "$(translate "Press Enter to return to menu...")"
+    echo -e 
+    read -r
+}
+
+show_lxc_conversion_manual_menu() {
+    while true; do
+        CHOICE=$(dialog --title "$(translate "LXC Conversion Manual Guides")" \
+            --menu "$(translate "Select conversion guide:")" 18 70 10 \
+            "1" "$(translate "Convert Privileged to Unprivileged")" \
+            "2" "$(translate "Convert Unprivileged to Privileged")" \
+            "3" "$(translate "Return to Main Menu")" \
+            3>&1 1>&2 2>&3)
+        
+        case $CHOICE in
+            1) show_privileged_to_unprivileged_guide ;;
+            2) show_unprivileged_to_privileged_guide ;;
+            3) return ;;
+            *) return ;;
+        esac
+    done
+}
+
+# Main execution
+show_lxc_conversion_manual_menu

scripts/lxc/lxc-privileged-to-unprivileged.sh

@@ -0,0 +1,271 @@
+#!/bin/bash
+
+# ==========================================================
+# ProxMenu - LXC Privileged to Unprivileged Converter
+# ==========================================================
+# Author      : MacRimi
+# Copyright   : (c) 2024 MacRimi
+# License     : MIT (https://raw.githubusercontent.com/MacRimi/ProxMenux/main/LICENSE)
+# Version     : 1.1
+# Last Updated: 19/08/2025
+# ==========================================================
+# Description:
+# This script converts a privileged LXC container to an unprivileged one
+# using the direct conversion method (mount and chown).
+# ==========================================================
+
+# Configuration ============================================
+REPO_URL="https://raw.githubusercontent.com/MacRimi/ProxMenux/main"
+BASE_DIR="/usr/local/share/proxmenux"
+UTILS_FILE="$BASE_DIR/utils.sh"
+VENV_PATH="/opt/googletrans-env"
+
+if [[ -f "$UTILS_FILE" ]]; then
+    source "$UTILS_FILE"
+fi
+
+load_language
+initialize_cache
+
+# ==========================================================
+
+select_privileged_container() {
+
+    CONTAINERS=$(pct list | awk 'NR>1 {print $1, $3}' | while read id name; do
+        if pct config "$id" | grep -q "^unprivileged: 0" || ! pct config "$id" | grep -q "^unprivileged:"; then
+            echo "$id" "$name"
+        fi
+    done | xargs -n2)
+    
+    if [ -z "$CONTAINERS" ]; then
+        msg_error "$(translate 'No privileged containers available in Proxmox.')"
+        exit 1
+    fi
+    cleanup
+    CONTAINER_ID=$(whiptail --title "$(translate 'Select Privileged Container')" \
+        --menu "$(translate 'Select the privileged LXC container to convert:')" 20 70 10 $CONTAINERS 3>&1 1>&2 2>&3)
+
+    if [ -z "$CONTAINER_ID" ]; then
+        msg_error "$(translate 'No container selected. Exiting.')"
+        exit 1
+    fi
+
+    msg_ok "$(translate 'Privileged container selected:') $CONTAINER_ID"
+}
+
+validate_container_id() {
+    if [ -z "$CONTAINER_ID" ]; then
+        msg_error "$(translate 'Container ID not defined. Make sure to select a container first.')"
+        exit 1
+    fi
+
+
+    if pct config "$CONTAINER_ID" | grep -q "^unprivileged: 1"; then
+        msg_error "$(translate 'Container') $CONTAINER_ID $(translate 'is already unprivileged.')"
+        exit 1
+    fi
+
+    if pct status "$CONTAINER_ID" | grep -q "running"; then
+        msg_info "$(translate 'Stopping the container before conversion...')"
+        pct stop "$CONTAINER_ID"
+        msg_ok "$(translate 'Container stopped.')"
+    fi
+}
+
+show_backup_warning() {
+    local message="$(translate 'It is strongly recommended to create a backup of your container before proceeding with the conversion.')"
+    message="$message\n\n$(translate 'Do you want to continue with the conversion now, or exit to create a backup first?')"
+    message="$message\n\n$(translate 'Continue: Proceed with conversion')"
+    message="$message\n$(translate 'Exit: Stop to create backup manually')"
+    
+    if whiptail --title "$(translate 'Backup Recommendation')" \
+        --yes-button "$(translate 'Continue')" \
+        --no-button "$(translate 'Exit')" \
+        --yesno "$message" 18 80; then
+        return 0
+    else
+        msg_info2 "$(translate 'User chose to exit for manual backup creation.')"
+        exit 0
+    fi
+}
+
+convert_direct_method() {
+    msg_info2 "$(translate 'Starting direct conversion of container') $CONTAINER_ID..."
+    
+    TEMP_DIR="/tmp/lxc_convert_$CONTAINER_ID"
+    mkdir -p "$TEMP_DIR"
+    
+
+    ROOTFS_CONFIG=$(pct config "$CONTAINER_ID" | grep "^rootfs:")
+    if [ -z "$ROOTFS_CONFIG" ]; then
+        msg_error "$(translate 'Could not find rootfs configuration for container.')"
+        exit 1
+    fi
+    
+
+    STORAGE_DISK=$(echo "$ROOTFS_CONFIG" | awk '{print $2}' | cut -d, -f1)
+    
+    msg_ok "$(translate 'Storage disk identifier:') $STORAGE_DISK"
+    
+
+    DISK_PATH=$(pvesm path "$STORAGE_DISK" 2>/dev/null)
+    
+    if [ -n "$DISK_PATH" ] && [ -e "$DISK_PATH" ]; then
+        msg_ok "$(translate 'Disk path resolved via pvesm:') $DISK_PATH"
+    else
+
+        STORAGE_NAME=$(echo "$STORAGE_DISK" | cut -d: -f1)
+        DISK_NAME=$(echo "$STORAGE_DISK" | cut -d: -f2)
+        
+        msg_info2 "$(translate 'pvesm path failed, trying manual detection...')"
+        msg_info2 "$(translate 'Storage:') $STORAGE_NAME, $(translate 'Disk:') $DISK_NAME"
+        
+
+        for vg in pve $(vgs --noheadings -o vg_name 2>/dev/null | tr -d ' '); do
+            if [ -e "/dev/$vg/$DISK_NAME" ]; then
+                DISK_PATH="/dev/$vg/$DISK_NAME"
+                break
+            fi
+        done
+        
+
+        if [ -z "$DISK_PATH" ] || [ ! -e "$DISK_PATH" ]; then
+            ZFS_PATH="/dev/zvol/$STORAGE_NAME/$DISK_NAME"
+            if [ -e "$ZFS_PATH" ]; then
+                DISK_PATH="$ZFS_PATH"
+            fi
+        fi
+    fi
+    
+
+    if [ -z "$DISK_PATH" ] || [ ! -e "$DISK_PATH" ]; then
+        msg_error "$(translate 'Could not determine disk path for:') $STORAGE_DISK"
+        msg_error "$(translate 'Tried pvesm path and manual detection methods')"
+        msg_info2 "$(translate 'Available storage information:')"
+        pvesm status 2>/dev/null || msg_error "$(translate 'pvesm status failed')"
+        rmdir "$TEMP_DIR"
+        exit 1
+    fi
+    
+    
+    msg_ok "$(translate 'Mounting container filesystem')"
+    if ! mount "$DISK_PATH" "$TEMP_DIR" 2>/dev/null; then
+
+        if ! mount -o loop "$DISK_PATH" "$TEMP_DIR" 2>/dev/null; then
+            msg_error "$(translate 'Failed to mount container filesystem.')"
+            msg_error "$(translate 'Disk path:') $DISK_PATH"
+            msg_success "$(translate "Press Enter to return")"
+            read -r
+            rmdir "$TEMP_DIR"
+            exit 1
+        fi
+    fi
+    
+    msg_info "$(translate 'Converting file ownership (this may take several minutes)...')"
+    
+
+    find "$TEMP_DIR" -type f -print0 | while IFS= read -r -d '' S; do 
+
+        if [ ! -e "$S" ] || [ ! -r "$S" ]; then
+            continue
+        fi
+        
+
+        if STAT_OUTPUT=$(stat -c "%u %g" "$S" 2>/dev/null); then
+            U=$(echo "$STAT_OUTPUT" | awk '{print $1}')
+            G=$(echo "$STAT_OUTPUT" | awk '{print $2}')
+            F=100000
+            
+
+            NEW_UID=$((F + U))
+            NEW_GID=$((F + G))
+            
+
+            if ! chown "$NEW_UID:$NEW_GID" "$S" 2>/dev/null; then
+
+                continue
+            fi
+        fi
+    done
+    
+
+    find "$TEMP_DIR" -type d -print0 | while IFS= read -r -d '' S; do 
+
+        if [ ! -e "$S" ] || [ ! -r "$S" ]; then
+            continue
+        fi
+        
+
+        if STAT_OUTPUT=$(stat -c "%u %g" "$S" 2>/dev/null); then
+            U=$(echo "$STAT_OUTPUT" | awk '{print $1}')
+            G=$(echo "$STAT_OUTPUT" | awk '{print $2}')
+            F=100000
+            
+
+            NEW_UID=$((F + U))
+            NEW_GID=$((F + G))
+            
+
+            if ! chown "$NEW_UID:$NEW_GID" "$S" 2>/dev/null; then
+
+                continue
+            fi
+        fi
+    done
+    
+
+    [ -e "$TEMP_DIR/var/spool/postfix/dev/-random" ] && rm -f "$TEMP_DIR/var/spool/postfix/dev/-random"
+    [ -e "$TEMP_DIR/var/spool/postfix/dev/-urandom" ] && rm -f "$TEMP_DIR/var/spool/postfix/dev/-urandom"
+    
+
+    [ -e "$TEMP_DIR/usr/bin/sudo" ] && chmod u+s "$TEMP_DIR/usr/bin/sudo"
+    
+    umount "$TEMP_DIR"
+    rmdir "$TEMP_DIR"
+    
+
+    CONFIG_FILE="/etc/pve/lxc/$CONTAINER_ID.conf"
+    if ! grep -q "^unprivileged:" "$CONFIG_FILE"; then
+        echo "unprivileged: 1" >> "$CONFIG_FILE"
+    else
+        sed -i 's/^unprivileged:.*/unprivileged: 1/' "$CONFIG_FILE"
+    fi
+    
+    msg_ok "$(translate 'Direct conversion completed for container') $CONTAINER_ID"
+
+    echo -e
+    msg_success "Press Enter to continue..."
+    read -r
+}
+
+cleanup_and_finalize() {
+
+    if whiptail --yesno "$(translate 'Do you want to start the converted unprivileged container') $CONTAINER_ID $(translate 'now?')" 10 60; then
+        msg_info2 "$(translate 'Starting unprivileged container...')"
+        pct start "$CONTAINER_ID"
+        msg_ok "$(translate 'Unprivileged container') $CONTAINER_ID $(translate 'started successfully.')"
+    fi
+}
+
+main() {
+    show_proxmenux_logo
+    msg_title "$(translate "LXC Privileged to Unprivileged conversion")"
+    msg_info "$(translate 'Starting LXC Privileged to Unprivileged conversion process...')"
+    
+    select_privileged_container
+    validate_container_id
+    show_backup_warning
+    
+    convert_direct_method
+    cleanup_and_finalize
+    
+    msg_ok "$(translate 'Converted container ID:') $CONTAINER_ID"
+    msg_ok "$(translate 'LXC conversion from privileged to unprivileged completed successfully!')"
+    echo -e
+    msg_success "$(translate "Press Enter to return to menu...")"
+    read -r
+    exit 0
+}
+
+
+main

scripts/lxc/lxc-unprivileged-to-privileged.sh

@@ -0,0 +1,144 @@
+#!/bin/bash
+
+# ==========================================================
+# ProxMenu - LXC Unprivileged to Privileged Converter
+# ==========================================================
+# Author      : MacRimi
+# Copyright   : (c) 2024 MacRimi
+# License     : MIT (https://raw.githubusercontent.com/MacRimi/ProxMenux/main/LICENSE)
+# Version     : 2.0
+# Last Updated: 19/08/2025
+# ==========================================================
+# Description:
+# This script converts an unprivileged LXC container to a privileged one
+# by directly modifying the configuration file.
+# WARNING: This reduces security. Use only when necessary.
+# ==========================================================
+
+# Configuration ============================================
+REPO_URL="https://raw.githubusercontent.com/MacRimi/ProxMenux/main"
+BASE_DIR="/usr/local/share/proxmenux"
+UTILS_FILE="$BASE_DIR/utils.sh"
+VENV_PATH="/opt/googletrans-env"
+
+if [[ -f "$UTILS_FILE" ]]; then
+    source "$UTILS_FILE"
+fi
+
+load_language
+initialize_cache
+
+# ==========================================================
+
+
+
+select_unprivileged_container() {
+
+    CONTAINERS=$(pct list | awk 'NR>1 {print $1, $3}' | while read id name; do
+        if pct config "$id" | grep -q "^unprivileged: 1"; then
+            echo "$id" "$name"
+        fi
+    done | xargs -n2)
+    
+    if [ -z "$CONTAINERS" ]; then
+        msg_error "$(translate 'No unprivileged containers available in Proxmox.')"
+        exit 1
+    fi
+    cleanup
+    CONTAINER_ID=$(whiptail --title "$(translate 'Select Unprivileged Container')" \
+        --menu "$(translate 'Select the unprivileged LXC container to convert:')" 20 70 10 $CONTAINERS 3>&1 1>&2 2>&3)
+
+    if [ -z "$CONTAINER_ID" ]; then
+        msg_error "$(translate 'No container selected. Exiting.')"
+        exit 1
+    fi
+
+    msg_ok "$(translate 'Unprivileged container selected:') $CONTAINER_ID"
+}
+
+show_backup_warning() {
+    if ! whiptail --title "$(translate 'Backup Recommendation')" \
+        --yes-button "$(translate 'Continue')" \
+        --no-button "$(translate 'Exit')" \
+        --yesno "$(translate 'It is recommended to create a backup before continuing.')" \
+        12 70; then
+        msg_info "$(translate 'Operation cancelled by user to create backup.')"
+        exit 0
+    fi
+    
+}
+
+convert_to_privileged() {
+    CONF_FILE="/etc/pve/lxc/$CONTAINER_ID.conf"
+    
+    CONTAINER_STATUS=$(pct status "$CONTAINER_ID" | awk '{print $2}')
+    
+    if [ "$CONTAINER_STATUS" == "running" ]; then
+        msg_info "$(translate 'Stopping container') $CONTAINER_ID..."
+        pct shutdown "$CONTAINER_ID"
+        
+        # Wait for container to stop
+        for i in {1..10}; do
+            sleep 1
+            if [ "$(pct status "$CONTAINER_ID" | awk '{print $2}')" != "running" ]; then
+                break
+            fi
+        done
+
+        # Verify container stopped
+        if [ "$(pct status "$CONTAINER_ID" | awk '{print $2}')" == "running" ]; then
+            msg_error "$(translate 'Failed to stop the container.')"
+            exit 1
+        fi
+
+        msg_ok "$(translate 'Container stopped.')"
+    else
+        msg_ok "$(translate 'Container is already stopped.')"
+    fi
+    
+    msg_info "$(translate 'Creating backup of configuration file...')"
+    cp "$CONF_FILE" "$CONF_FILE.bak"
+    msg_ok "$(translate 'Configuration backup created:') $CONF_FILE.bak"
+    
+    msg_info "$(translate 'Converting container to privileged...')"
+    sed -i '/^unprivileged: 1/d' "$CONF_FILE"
+    echo "unprivileged: 0" >> "$CONF_FILE"
+    
+    msg_ok "$(translate 'Container successfully converted to privileged.')"
+
+    echo -e
+    msg_success "Press Enter to continue..."
+    read -r
+}
+
+finalize_conversion() {
+
+    if whiptail --yesno "$(translate 'Do you want to start the privileged container') $CONTAINER_ID $(translate 'now?')" 10 60; then
+        msg_info "$(translate 'Starting privileged container...')"
+        pct start "$CONTAINER_ID"
+        msg_ok "$(translate 'Privileged container') $CONTAINER_ID $(translate 'started successfully.')"
+    fi
+}
+
+main() {
+
+    show_proxmenux_logo
+    msg_title "$(translate "LXC Unprivileged to Privileged conversion")"
+    msg_info "$(translate 'Starting LXC Unprivileged to Privileged conversion process...')"
+    
+
+    select_unprivileged_container
+    show_backup_warning
+    convert_to_privileged
+    finalize_conversion
+    
+    msg_ok "$(translate 'LXC conversion from unprivileged to privileged completed successfully!')"
+    msg_ "$(translate 'Converted container ID:') $CONTAINER_ID"
+    echo -e
+    msg_success "$(translate "Press Enter to return to menu...")"
+    read -r
+    exit 0
+}
+
+# Execute main function
+main