1.2.7: IT-Tools installable, catalog categories and release notes

- IT-Tools has the template the menu installs from, so it is offered
  like the rest of the catalog.
- Every curated application is listed in categories.json, and OpenTask's
  template matches its recipe.
- The texts of the LXC update jobs read correctly in Spanish, German,
  French, Italian, Portuguese and Swedish.
- The release notes count 514 applications and credit PRs #526, #527,
  #529 and #530.
This commit is contained in:
MacRimi
2026-10-26 17:21:24 +01:00
parent ae809142f6
commit be6ef0069b
16 changed files with 512 additions and 52 deletions
+385
View File
@@ -0,0 +1,385 @@
{
"schema_version": "0.5.0",
"kind": "proxmenux.oci-template",
"id": "image-it-tools",
"status": "generated-unvalidated",
"catalog_ui": {
"title": {
"en_US": "IT Tools"
},
"tagline": {
"en_US": "A collection of useful web tools for developers and IT professionals."
},
"description": {
"en_US": "IT Tools brings common developer and IT utilities together in one self-hosted web interface."
},
"category": "tools",
"category_label": "Tools",
"author": "CorentinTh",
"developer": "CorentinTh",
"icon": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/it-tools.webp",
"thumbnail": null,
"screenshots": [],
"architectures": [
"amd64",
"arm64"
],
"launch": {
"scheme": "http",
"port": 80,
"path": "/"
},
"website": "https://it-tools.tech",
"documentation": "https://github.com/CorentinTh/it-tools#self-host",
"repository": "https://github.com/CorentinTh/it-tools",
"tips": [],
"mini_changelog": [],
"display_version": null,
"updated_at": null
},
"source": {
"provider": "corentinth",
"repository": "https://github.com/CorentinTh/it-tools",
"revision": "8e1d0d11726767a24cd071b365bff4c7c828956a3ebc3f97fc7ff3322bd1d888",
"image_repository_url": "https://hub.docker.com/r/corentinth/it-tools",
"readme_pushed_at": "",
"compose_sha256": "8e1d0d11726767a24cd071b365bff4c7c828956a3ebc3f97fc7ff3322bd1d888",
"generated_at": "2026-10-25T20:15:15+00:00",
"readme_raw_url": "https://github.com/CorentinTh/it-tools/blob/main/README.md"
},
"container_contract": {
"service_name": "it-tools",
"container_name": "it-tools",
"image": {
"reference": "corentinth/it-tools:latest",
"registry": "docker.io",
"repository": "corentinth/it-tools",
"tag": "latest",
"digest": null,
"pull_policy": "resolve-written-reference-to-architecture-digest-at-install"
},
"environment": [],
"volumes": [],
"ports": [
{
"container_port": 80,
"published_example": 8080,
"protocol": "tcp",
"required": true,
"proxmox_behavior": "listener-on-dedicated-lxc-address-no-nat"
}
],
"related_services": [],
"restart": "unless-stopped",
"stop_grace_period": null,
"original_compose": "name: it-tools\nservices:\n it-tools:\n image: corentinth/it-tools:latest\n container_name: it-tools\n restart: unless-stopped\n ports:\n - 8080:80\n"
},
"compose_stack": {
"project_name": "it-tools",
"deployment_model": "one-native-oci-lxc-per-compose-service",
"user_experience": "single-application-install",
"main_service": "it-tools",
"service_count": 1,
"services": [
{
"name": "it-tools",
"image": "corentinth/it-tools:latest",
"is_main": true,
"role": "frontend",
"vmid_offset": 0,
"depends_on": [],
"frontend_network": true,
"private_network": false,
"compose": {
"image": "corentinth/it-tools:latest",
"container_name": "it-tools",
"restart": "unless-stopped",
"ports": [
"8080:80"
]
}
}
],
"top_level": {
"name": "it-tools"
},
"networking": {
"frontend": "selected-proxmox-bridge",
"private_required": false,
"private_creation": "automatic-create-if-missing",
"private_address_allocation": "automatic-static-address-per-service",
"service_discovery": "private-addresses-with-compose-service-host-aliases",
"dependency_external_access": "disabled-unless-service-publishes-ports",
"prompt_user_for_private_network": false
},
"storage": [],
"orchestration": {
"reserve_vmids_atomically": 1,
"start_order": [
"it-tools"
],
"stop_order": [
"it-tools"
],
"dependency_readiness": "compose-healthcheck-then-port-or-process-fallback",
"rollback_on_failure": "remove-new-rootfs-preserve-created-persistent-volumes"
},
"installer_inputs": {
"prompted": [
"stack_name",
"base_vmid",
"rootfs_storage",
"persistent_data_destinations",
"frontend_bridge",
"frontend_ipv4_mode"
],
"automatic": [
"dependent_vmids",
"private_bridge",
"private_subnet",
"private_service_addresses",
"compose_service_aliases",
"generated_secrets",
"dependency_start_and_stop_order"
],
"generated_secrets": []
}
},
"first_run": {
"endpoints": [
{
"label": "Web UI",
"scheme": "http",
"port": 80,
"path": "/",
"source": "compose-metadata"
}
],
"credentials": []
},
"proxmox": {
"runtime": "native-oci-lxc",
"technology_status": "proxmox-technology-preview",
"defaults": {
"unprivileged": true,
"ostype": "auto-from-image",
"cores": 2,
"memory_mb": 1024,
"swap_mb": 512,
"rootfs_size_gb": 8,
"rootfs_storage": "local-lvm",
"volume_storage": "local-lvm",
"template_storage": "local",
"bridge": "vmbr0",
"ipv4": "dhcp",
"firewall": true,
"host_managed_network": true,
"onboot": false,
"features": [
"nesting=1"
],
"shutdown_timeout_seconds": 30
},
"image_metadata_policy": {
"entrypoint": "import-from-oci-image",
"cmd": "import-from-oci-image",
"environment": "import-image-env-then-apply-compose-overrides",
"user": "import-from-oci-image",
"working_dir": "import-from-oci-image",
"stop_signal": "import-from-oci-image"
},
"adaptations": [
{
"id": "imported-compose-source",
"upstream_behavior": "The source definition deploys the complete Docker Compose application model.",
"native_lxc_behavior": "The source model is preserved and remains blocked until every service option has a reviewed native Proxmox mapping.",
"reason": "Catalog import must not imply runtime compatibility.",
"behavioral_impact": "No automatic installation before review.",
"validation": "pending-per-application"
},
{
"id": "rolling-latest-image",
"upstream_behavior": "A discovered Compose may pin a release tag or digest.",
"native_lxc_behavior": "ProxMenux selects the same image repository with the latest tag for catalog installations.",
"reason": "The automatic catalog intentionally offers rolling latest images; pinned versions belong to the future manual installer.",
"behavioral_impact": "The installed release can be newer than the discovered Compose revision.",
"validation": "pending-per-application"
},
{
"id": "dedicated-lxc-network",
"upstream_behavior": "Docker publishes selected container ports on the Docker host.",
"native_lxc_behavior": "A reviewed native application will listen on its original container ports at a dedicated LXC address.",
"reason": "A native LXC has its own address and does not require Docker port NAT.",
"behavioral_impact": "Published ports are metadata; ProxMenux URLs use the matching container target port.",
"validation": "pending-per-application"
},
{
"id": "compose-shm-size",
"upstream_behavior": "Compose sets the size of the container /dev/shm tmpfs.",
"native_lxc_behavior": "ProxMenux mounts a native LXC tmpfs at /dev/shm with the same requested capacity.",
"reason": "The OCI image runs directly as an LXC and therefore needs the equivalent Proxmox mount entry.",
"behavioral_impact": "None expected.",
"validation": "not-requested-by-compose"
},
{
"id": "compose-command",
"upstream_behavior": "Compose replaces the image Cmd while retaining its Entrypoint.",
"native_lxc_behavior": "ProxMenux reads the official OCI Entrypoint and combines it with the Compose command as the native LXC init command.",
"reason": "Proxmox stores the effective OCI process as one entrypoint string.",
"behavioral_impact": "None expected.",
"validation": "not-requested-by-compose"
},
{
"id": "compose-privileged-mode",
"upstream_behavior": "Compose selects whether the container runs in privileged mode.",
"native_lxc_behavior": "ProxMenux keeps the LXC unprivileged by default and exposes the broad Compose privilege request only as an explicit compatibility option.",
"reason": "A Compose privilege request is source metadata, not proof that the image technically requires a privileged LXC.",
"behavioral_impact": "A privileged LXC has weaker isolation from the Proxmox host.",
"validation": "native-equivalent"
},
{
"id": "compose-process-runtime",
"upstream_behavior": "Compose can replace Entrypoint, User and WorkingDir and request an init process or interactive terminal.",
"native_lxc_behavior": "ProxMenux applies the process overrides through native LXC init directives; lxc-init provides PID 1 supervision and the CT console provides terminal access.",
"reason": "The OCI process must start with the same identity, command and working directory without Docker.",
"behavioral_impact": "Compose stdin_open and tty become access through the Proxmox LXC console.",
"validation": "not-requested-by-compose"
},
{
"id": "compose-healthcheck",
"upstream_behavior": "Docker periodically executes the declared container healthcheck.",
"native_lxc_behavior": "For a single-service LXC, ProxMenux translates HTTP localhost checks into a mandatory first-start service check.",
"reason": "Proxmox has no persistent Docker health state, while the installer still must detect a failed first boot.",
"behavioral_impact": "The check runs during installation rather than continuously after installation.",
"validation": "not-requested-by-compose"
},
{
"id": "compose-cpu-priority",
"upstream_behavior": "Docker cpu_shares sets a relative scheduling weight with 1024 as its neutral value.",
"native_lxc_behavior": "ProxMenux converts the relative weight to Proxmox cpuunits with 100 as its neutral value and lets the user review it.",
"reason": "Both settings express relative CPU priority on different scales.",
"behavioral_impact": "Rounding and Proxmox minimum limits can slightly change very low weights.",
"validation": "not-requested-by-compose"
},
{
"id": "compose-resource-limits",
"upstream_behavior": "mem_limit sets the memory ceiling; ulimits sets process soft/hard resource limits.",
"native_lxc_behavior": "mem_limit supplies the editable Proxmox memory default, rounded up to MiB; ulimits maps to lxc.prlimit with -1 represented as unlimited.",
"reason": "Use native Proxmox memory and LXC prlimits, without a wrapper or changing the host kernel configuration.",
"behavioral_impact": "User-selected memory overrides Compose. Swap is a separate choice. Kernel restrictions still apply; nproc counts processes by real UID, not by container.",
"validation": "not-requested-by-compose"
},
{
"id": "compose-network-identity",
"upstream_behavior": "Compose can set hostname, MAC address, extra hosts and attach a service to Docker networks.",
"native_lxc_behavior": "ProxMenux applies hostname and MAC to net0, writes additional host aliases into the LXC and uses its dedicated bridge connection for single-service networks.",
"reason": "A dedicated LXC has its own network namespace and does not need a Docker bridge per service.",
"behavioral_impact": "host-gateway resolves to the IPv4 address of the selected Proxmox bridge.",
"validation": "not-requested-by-compose"
},
{
"id": "compose-network-mode",
"upstream_behavior": "Docker host mode removes Docker network isolation; bridge and default use a Docker-managed network.",
"native_lxc_behavior": "The OCI process uses the dedicated LXC network namespace directly, so host, bridge and default all listen on the LXC address without Docker NAT.",
"reason": "The LXC is the application host and already has its own address and port namespace.",
"behavioral_impact": "host means the LXC host, never the Proxmox host; this preserves Proxmox network isolation.",
"validation": "not-requested-by-compose"
},
{
"id": "compose-capabilities-and-sysctls",
"upstream_behavior": "Compose can add Linux capabilities and set kernel parameters in the container network namespace.",
"native_lxc_behavior": "ProxMenux validates requested capabilities against the native LXC capability set and writes namespaced network settings as lxc.sysctl directives.",
"reason": "A native OCI-LXC already starts with the namespaced capability set; lxc.cap.keep would incorrectly discard unrelated required capabilities.",
"behavioral_impact": "Host-global capabilities such as SYS_MODULE remain blocked until their host prerequisite is explicitly adapted.",
"validation": "not-requested-by-compose"
},
{
"id": "docker-engine-metadata",
"upstream_behavior": "Compose labels annotate Docker objects and the json-file logging driver rotates Docker-managed logs.",
"native_lxc_behavior": "Labels remain source metadata; Docker json-file settings are not applied because the OCI process runs directly under LXC.",
"reason": "There is no Docker object or Docker json-file log behind a native OCI-LXC application.",
"behavioral_impact": "Docker-only label consumers and Docker log-driver rotation do not exist in the native deployment.",
"validation": "not-requested-by-compose"
},
{
"id": "compose-device-passthrough",
"upstream_behavior": "Compose passes host character devices or requests an NVIDIA runtime GPU.",
"native_lxc_behavior": "ProxMenux converts recognized device declarations to native Proxmox dev resources; NVIDIA profiles also inject compatible host driver libraries read-only.",
"reason": "Native OCI-LXC does not execute Docker device or NVIDIA runtime hooks.",
"behavioral_impact": "Hardware is exposed only after explicit user confirmation and host-path validation.",
"validation": "not-requested-by-compose"
},
{
"id": "compose-host-ipc",
"upstream_behavior": "ipc: host shares the Docker host IPC namespace, commonly to avoid Docker's small default shared-memory allocation.",
"native_lxc_behavior": "The application keeps the LXC IPC namespace and receives a configurable 1 GiB /dev/shm instead of sharing Proxmox host IPC.",
"reason": "Processes in a single native LXC already share one IPC namespace; retaining isolation is safer than exposing host IPC.",
"behavioral_impact": "The application cannot exchange IPC objects with processes on the Proxmox host.",
"validation": "not-requested-by-compose"
}
],
"installer_profile": {}
},
"compatibility": {
"automatic_install_candidate": true,
"validated": false,
"supported_compose_keys": [
"cap_add",
"command",
"container_name",
"cpu_shares",
"deploy",
"devices",
"entrypoint",
"environment",
"extra_hosts",
"group_add",
"healthcheck",
"hostname",
"image",
"init",
"ipc",
"labels",
"logging",
"mac_address",
"mem_limit",
"network_mode",
"networks",
"ports",
"privileged",
"restart",
"runtime",
"security_opt",
"shm_size",
"stdin_open",
"stop_grace_period",
"sysctls",
"tty",
"ulimits",
"user",
"volumes",
"working_dir"
],
"untranslated_blockers": [],
"policy": "Single-image definitions are installable when every declared Compose option has a native Proxmox translation. Multi-image and unsupported runtime features remain blocked until their orchestrator or mapping is available."
},
"validation": {
"schema": "passed-at-generation",
"clean_install": "pending",
"service_health": "pending",
"restart_persistence": "pending",
"backup_restore": "pending",
"update_preserves_data": "pending"
},
"lifecycle": {
"update_strategy": "resolve-latest-image-then-apply-reviewed-native-lxc-update",
"registry_state": {
"resolved_architecture": null,
"resolved_digest": null,
"image_version_label": null,
"image_created": null
},
"change_detection": "compare-compose-sha256-and-resolved-latest-image-digest",
"automatic_unattended_updates": false
}
}
+4
View File
@@ -220,6 +220,10 @@
},
"installer_profile": {
"generated_sensitive_environment": {},
"volume_owner": {
"uid": 1000,
"gid": 1000
},
"volume_preparations": [
{
"container_path": "/data",
+55
View File
@@ -38,14 +38,17 @@
"alist": "sharing",
"alist-sync": "sharing",
"altus": "communication",
"amule": "downloads",
"apache-answer": "communication",
"ardour": "creative",
"artalk": "documents",
"audacity": "creative",
"azahar": "gaming",
"backrest": "backup",
"bambustudio": "creative",
"beets": "media",
"beszel": "monitoring",
"bichon": "communication",
"bind9": "adblock",
"bitcoin-knots": "finance",
"blade-of-agony": "gaming",
@@ -57,6 +60,7 @@
"caddy": "web",
"calibre": "media",
"calligra": "documents",
"calnode": "productivity",
"changedetection.io": "monitoring",
"chartdb": "tools",
"chrome": "desktop",
@@ -66,7 +70,9 @@
"cloudbeaver": "databases",
"cloudreve": "sharing",
"code-server": "ai",
"codeproject-ai": "ai",
"commafeed": "productivity",
"cooktrace": "productivity",
"cops": "media",
"copyparty": "sharing",
"couchdb": "databases",
@@ -81,10 +87,12 @@
"ddclient": "adblock",
"ddns-go": "adblock",
"ddns-updater": "adblock",
"degubase": "databases",
"dgraph": "databases",
"digikam": "creative",
"directus": "databases",
"dnsmasq": "adblock",
"docker-volume-backup": "tools",
"docuseal": "documents",
"dogwalk": "gaming",
"dokuwiki": "documents",
@@ -100,8 +108,10 @@
"duckdns": "adblock",
"duckstation": "gaming",
"dufs": "sharing",
"duplicati-official": "backup",
"eden": "gaming",
"ejabberd": "communication",
"emby-official": "media",
"emqx": "network",
"emulatorjs": "gaming",
"ersatztv": "media",
@@ -112,10 +122,12 @@
"fhem": "smarthome",
"filebrowser-quantum": "sharing",
"filedrop": "sharing",
"fileflows": "media",
"filegator": "sharing",
"filestash": "sharing",
"filezilla": "downloads",
"firefox": "desktop",
"flagr": "ai",
"flame": "tools",
"flatnotes": "documents",
"flexget": "arr",
@@ -123,6 +135,7 @@
"forgejo": "ai",
"free-games-claimer-remaster": "gaming",
"freecad": "creative",
"frigate": "nvr",
"gameyfin": "gaming",
"gateway-go": "web",
"gatus": "monitoring",
@@ -139,9 +152,11 @@
"greptimedb": "databases",
"grist": "productivity",
"grocy": "productivity",
"guestroll": "sharing",
"gzdoom": "gaming",
"habridge": "smarthome",
"handbrake": "media",
"haos-one": "smarthome",
"hedgedoc": "documents",
"heimdall": "productivity",
"helium": "desktop",
@@ -155,12 +170,19 @@
"huginn": "automation",
"hugo": "web",
"icecast": "media",
"ihatemoney": "finance",
"imagesilo": "sharing",
"immich": "media",
"influxdb": "databases",
"inkscape": "creative",
"instatic": "web",
"intellij-idea": "ai",
"invoiceshelf": "business",
"iobroker": "smarthome",
"it-tools": "tools",
"jaeger": "monitoring",
"jdownloader": "downloads",
"jellyfin-official": "media",
"jelu": "media",
"joplin": "documents",
"juice-shop": "security",
@@ -172,15 +194,19 @@
"kicad": "creative",
"kiwix-serve": "media",
"krita": "creative",
"kroma": "media",
"ldap-auth": "security",
"libre-closet": "productivity",
"libreoffice": "documents",
"librespeed": "monitoring",
"libretranslate": "tools",
"librewolf": "desktop",
"lifttrace": "productivity",
"limnoria": "communication",
"linkding": "documents",
"linkstack": "web",
"livebook": "ai",
"llamacpp": "ai",
"lldap": "security",
"lm-studio": "ai",
"loki": "monitoring",
@@ -189,6 +215,8 @@
"lubelogger": "finance",
"lucky": "web",
"mailpit": "communication",
"maintainerr": "media",
"makemkv": "media",
"maloja": "media",
"mame": "gaming",
"manticore": "databases",
@@ -203,6 +231,7 @@
"mineos-node": "gaming",
"miniflux": "documents",
"minisatip": "media",
"mkvtoolnix": "media",
"mockserver": "tools",
"mongodb4": "databases",
"msedge": "desktop",
@@ -215,20 +244,30 @@
"nats": "messaging",
"netronome": "monitoring",
"nextcloud": "productivity",
"nextcloud-stack": "productivity",
"nginx": "web",
"ngircd": "communication",
"nocodb": "databases",
"notara": "documents",
"notetrace": "documents",
"ntfy": "messaging",
"nut-server": "monitoring",
"nutritrace": "productivity",
"nzbhydra2": "arr",
"obsidian": "documents",
"ocis": "sharing",
"octoprint": "tools",
"onedev": "ai",
"open-webui": "ai",
"open-webui-cuda": "ai",
"open-webui-ollama": "ai",
"opengist": "documents",
"openlist": "sharing",
"openobserve": "monitoring",
"openshot": "creative",
"openspeedtest": "monitoring",
"openssh-server": "remote",
"opentask": "productivity",
"openvscode-server": "ai",
"opera": "desktop",
"orcaslicer": "creative",
@@ -236,18 +275,23 @@
"oscam": "media",
"owncast": "communication",
"pairdrop": "sharing",
"paperless-ngx": "productivity",
"papra": "documents",
"pcsx2": "gaming",
"pdns-recursor": "adblock",
"pelorus": "ai",
"pgadmin": "databases",
"photofield": "media",
"picoshare": "sharing",
"pidgin": "communication",
"pingvin-share": "sharing",
"pinry": "creative",
"piper": "ai",
"piwigo": "media",
"plants": "productivity",
"plantuml-server": "tools",
"playit-agent": "web",
"plex-official": "media",
"pocket-id": "security",
"poznote": "documents",
"ppsspp": "gaming",
@@ -263,6 +307,7 @@
"rabbitmq": "messaging",
"raneto": "documents",
"rawtherapee": "creative",
"rclone": "backup",
"readeck": "documents",
"redisinsight": "databases",
"redmine": "productivity",
@@ -270,6 +315,7 @@
"resilio-sync": "sharing",
"retroarch": "gaming",
"retroarch-inglebard": "gaming",
"roonserver": "media",
"rpcs3": "gaming",
"rqlite": "databases",
"rsnapshot": "backup",
@@ -280,6 +326,7 @@
"scummvm": "gaming",
"sealskin": "desktop",
"searxng": "tools",
"seerr": "arr",
"sftpgo": "sharing",
"shaarli": "documents",
"shadps4": "gaming",
@@ -292,6 +339,7 @@
"slskd": "downloads",
"smokeping": "monitoring",
"snapdrop": "sharing",
"sofa": "media",
"speedtest-tracker": "monitoring",
"spotube": "media",
"sqlitebrowser": "databases",
@@ -301,8 +349,10 @@
"statping": "monitoring",
"steam": "gaming",
"stirling-pdf": "documents",
"stremio": "media",
"strfry": "communication",
"stunnel": "security",
"suite-arr": "arr",
"super-productivity": "productivity",
"suwayomi-server": "media",
"swag": "web",
@@ -311,7 +361,10 @@
"syncthing": "sharing",
"syslog-ng": "monitoring",
"tailscale": "remote",
"tandoor": "productivity",
"tasks-md": "productivity",
"tasmoadmin": "smarthome",
"tdarr": "media",
"tdengine": "databases",
"technitium": "adblock",
"telegram": "communication",
@@ -329,6 +382,7 @@
"ubooquity": "media",
"ungoogled-chromium": "desktop",
"unifi-network-application": "network",
"unpackerr": "arr",
"urbackup": "backup",
"v2raya": "remote",
"valkey": "databases",
@@ -344,6 +398,7 @@
"wakapi": "productivity",
"wallos": "finance",
"wbo": "creative",
"web-check": "tools",
"webcord": "communication",
"webgoat": "security",
"webgrabplus": "media",
+11 -2
View File
@@ -6793,8 +6793,17 @@
"replaces_discovered_ids": [],
"curated_path": "catalog/curated/it-tools.json",
"template_id": "image-it-tools",
"template": null,
"template_status": null
"template": "apps/it-tools.json",
"template_status": "generated-unvalidated",
"automatic_install_candidate": true,
"untranslated_blockers": [],
"requires_privileged_lxc": false,
"optional_privileged_lxc": false,
"requires_host_pid_namespace": false,
"requires_relaxed_confinement": false,
"optional_relaxed_confinement": false,
"requires_security_confirmation": false,
"hidden": false
},
{
"id": "jackett",
-1
View File
@@ -51,7 +51,6 @@ class RecreationCatalogTests(unittest.TestCase):
def test_curated_only_index_entry_has_internal_template_id(self):
catalog = Catalog(ROOT)
self.assertFalse((ROOT / 'catalog' / 'apps' / 'it-tools.json').exists())
item = next(item for item in catalog._curated_items({}) if item['id'] == 'it-tools')
self.assertEqual(item['template_id'], 'image-it-tools')
self.assertIsNone(item['template'])