Fix docs URLs in start-tunnel installer output (#3135)

.github/actions/setup-build/action.yml

@@ -47,18 +47,18 @@ runs:
         sudo rm -rf /usr/share/swift
         sudo rm -rf "$AGENT_TOOLSDIRECTORY"
 
-    # Some runners lack /opt/hostedtoolcache, which setup-python and setup-qemu expect
+    # BuildJet runners lack /opt/hostedtoolcache, which setup-python and setup-qemu expect
     - name: Ensure hostedtoolcache exists
       shell: bash
       run: sudo mkdir -p /opt/hostedtoolcache && sudo chown $USER:$USER /opt/hostedtoolcache
 
     - name: Set up Python
       if: inputs.setup-python == 'true'
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@v5
       with:
         python-version: "3.x"
 
-    - uses: actions/setup-node@v6
+    - uses: actions/setup-node@v4
       with:
         node-version: ${{ inputs.nodejs-version }}
         cache: npm
@@ -66,15 +66,15 @@ runs:
 
     - name: Set up Docker QEMU
       if: inputs.setup-docker == 'true'
-      uses: docker/setup-qemu-action@v4
+      uses: docker/setup-qemu-action@v3
 
     - name: Set up Docker Buildx
       if: inputs.setup-docker == 'true'
-      uses: docker/setup-buildx-action@v4
+      uses: docker/setup-buildx-action@v3
 
     - name: Configure sccache
       if: inputs.setup-sccache == 'true'
-      uses: actions/github-script@v8
+      uses: actions/github-script@v7
       with:
         script: |
           core.exportVariable('ACTIONS_RESULTS_URL', process.env.ACTIONS_RESULTS_URL || '');

.github/workflows/start-cli.yaml

@@ -63,12 +63,12 @@ jobs:
               "ALL": ["x86_64-unknown-linux-musl", "x86_64-apple-darwin", "aarch64-unknown-linux-musl", "aarch64-apple-darwin", "riscv64gc-unknown-linux-musl"]
             }')[github.event.inputs.platform || 'ALL']
           }}
-    runs-on: ${{ fromJson('["ubuntu-latest", "ubuntu-24.04-32-cores"]')[github.event.inputs.runner == 'fast'] }}
+    runs-on: ${{ fromJson('["ubuntu-latest", "buildjet-32vcpu-ubuntu-2204"]')[github.event.inputs.runner == 'fast'] }}
     steps:
       - name: Mount tmpfs
         if: ${{ github.event.inputs.runner == 'fast' }}
         run: sudo mount -t tmpfs tmpfs .
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
         with:
           submodules: recursive
       - uses: ./.github/actions/setup-build
@@ -82,7 +82,7 @@ jobs:
           SCCACHE_GHA_ENABLED: on
           SCCACHE_GHA_VERSION: 0
 
-      - uses: actions/upload-artifact@v7
+      - uses: actions/upload-artifact@v4
         with:
           name: start-cli_${{ matrix.triple }}
           path: core/target/${{ matrix.triple }}/release/start-cli

.github/workflows/start-registry.yaml

@@ -59,12 +59,12 @@ jobs:
               "ALL": ["x86_64", "aarch64", "riscv64"]
             }')[github.event.inputs.platform || 'ALL']
           }}
-    runs-on: ${{ fromJson('["ubuntu-latest", "ubuntu-24.04-32-cores"]')[github.event.inputs.runner == 'fast'] }}
+    runs-on: ${{ fromJson('["ubuntu-latest", "buildjet-32vcpu-ubuntu-2204"]')[github.event.inputs.runner == 'fast'] }}
     steps:
       - name: Mount tmpfs
         if: ${{ github.event.inputs.runner == 'fast' }}
         run: sudo mount -t tmpfs tmpfs .
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
         with:
           submodules: recursive
       - uses: ./.github/actions/setup-build
@@ -78,7 +78,7 @@ jobs:
           SCCACHE_GHA_ENABLED: on
           SCCACHE_GHA_VERSION: 0
 
-      - uses: actions/upload-artifact@v7
+      - uses: actions/upload-artifact@v4
         with:
           name: start-registry_${{ matrix.arch }}.deb
           path: results/start-registry-*_${{ matrix.arch }}.deb
@@ -89,7 +89,7 @@ jobs:
     permissions:
       contents: read
       packages: write
-    runs-on: ${{ fromJson('["ubuntu-latest", "ubuntu-24.04-32-cores"]')[github.event.inputs.runner == 'fast'] }}
+    runs-on: ${{ fromJson('["ubuntu-latest", "buildjet-32vcpu-ubuntu-2204"]')[github.event.inputs.runner == 'fast'] }}
     steps:
       - name: Cleaning up unnecessary files
         run: |
@@ -102,13 +102,13 @@ jobs:
         if: ${{ github.event.inputs.runner == 'fast' }}
 
       - name: Set up docker QEMU
-        uses: docker/setup-qemu-action@v4
+        uses: docker/setup-qemu-action@v3
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@v3
 
       - name: "Login to GitHub Container Registry"
-        uses: docker/login-action@v4
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{github.actor}}
@@ -116,14 +116,14 @@ jobs:
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v6
+        uses: docker/metadata-action@v5
         with:
           images: ghcr.io/Start9Labs/startos-registry
           tags: |
             type=raw,value=${{ github.ref_name }}
 
       - name: Download debian package
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v4
         with:
           pattern: start-registry_*.deb
 
@@ -162,7 +162,7 @@ jobs:
 
           ADD *.deb .
 
-          RUN apt-get update && apt-get install -y ./*_$(uname -m).deb && rm -rf *.deb /var/lib/apt/lists/*
+          RUN apt-get install -y ./*_$(uname -m).deb && rm *.deb
 
           VOLUME /var/lib/startos
 

.github/workflows/start-tunnel.yaml

@@ -59,12 +59,12 @@ jobs:
               "ALL": ["x86_64", "aarch64", "riscv64"]
             }')[github.event.inputs.platform || 'ALL']
           }}
-    runs-on: ${{ fromJson('["ubuntu-latest", "ubuntu-24.04-32-cores"]')[github.event.inputs.runner == 'fast'] }}
+    runs-on: ${{ fromJson('["ubuntu-latest", "buildjet-32vcpu-ubuntu-2204"]')[github.event.inputs.runner == 'fast'] }}
     steps:
       - name: Mount tmpfs
         if: ${{ github.event.inputs.runner == 'fast' }}
         run: sudo mount -t tmpfs tmpfs .
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
         with:
           submodules: recursive
       - uses: ./.github/actions/setup-build
@@ -78,7 +78,7 @@ jobs:
           SCCACHE_GHA_ENABLED: on
           SCCACHE_GHA_VERSION: 0
 
-      - uses: actions/upload-artifact@v7
+      - uses: actions/upload-artifact@v4
         with:
           name: start-tunnel_${{ matrix.arch }}.deb
           path: results/start-tunnel-*_${{ matrix.arch }}.deb

.github/workflows/startos-iso.yaml

@@ -29,7 +29,7 @@ on:
           - aarch64
           - aarch64-nonfree
           - aarch64-nvidia
-          - raspberrypi
+          # - raspberrypi
           - riscv64
           - riscv64-nonfree
       deploy:
@@ -89,9 +89,9 @@ jobs:
               "riscv64": "ubuntu-latest"
             }')[matrix.arch],
             fromJson('{
-              "x86_64": "amd64-fast",
+              "x86_64": "buildjet-32vcpu-ubuntu-2204",
-              "aarch64": "aarch64-fast",
+              "aarch64": "buildjet-32vcpu-ubuntu-2204-arm",
-              "riscv64": "amd64-fast"
+              "riscv64": "buildjet-32vcpu-ubuntu-2204"
             }')[matrix.arch]
           )
         )[github.event.inputs.runner == 'fast']
@@ -100,7 +100,7 @@ jobs:
       - name: Mount tmpfs
         if: ${{ github.event.inputs.runner == 'fast' }}
         run: sudo mount -t tmpfs tmpfs .
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
         with:
           submodules: recursive
       - uses: ./.github/actions/setup-build
@@ -114,7 +114,7 @@ jobs:
           SCCACHE_GHA_ENABLED: on
           SCCACHE_GHA_VERSION: 0
 
-      - uses: actions/upload-artifact@v7
+      - uses: actions/upload-artifact@v4
         with:
           name: compiled-${{ matrix.arch }}.tar
           path: compiled-${{ matrix.arch }}.tar
@@ -124,13 +124,14 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
+        # TODO: re-add "raspberrypi" to the platform list below
         platform: >-
           ${{
             fromJson(
               format(
                 '[
                   ["{0}"],
-                  ["x86_64", "x86_64-nonfree", "x86_64-nvidia", "aarch64", "aarch64-nonfree", "aarch64-nvidia", "raspberrypi", "riscv64", "riscv64-nonfree"]
+                  ["x86_64", "x86_64-nonfree", "x86_64-nvidia", "aarch64", "aarch64-nonfree", "aarch64-nvidia", "riscv64", "riscv64-nonfree"]
                 ]',
                 github.event.inputs.platform || 'ALL'
               )
@@ -153,15 +154,15 @@ jobs:
               "riscv64-nonfree": "ubuntu-24.04-arm",
             }')[matrix.platform],
             fromJson('{
-              "x86_64": "amd64-fast",
+              "x86_64": "buildjet-8vcpu-ubuntu-2204",
-              "x86_64-nonfree": "amd64-fast",
+              "x86_64-nonfree": "buildjet-8vcpu-ubuntu-2204",
-              "x86_64-nvidia": "amd64-fast",
+              "x86_64-nvidia": "buildjet-8vcpu-ubuntu-2204",
-              "aarch64": "aarch64-fast",
+              "aarch64": "buildjet-8vcpu-ubuntu-2204-arm",
-              "aarch64-nonfree": "aarch64-fast",
+              "aarch64-nonfree": "buildjet-8vcpu-ubuntu-2204-arm",
-              "aarch64-nvidia": "aarch64-fast",
+              "aarch64-nvidia": "buildjet-8vcpu-ubuntu-2204-arm",
-              "raspberrypi": "aarch64-fast",
+              "raspberrypi": "buildjet-8vcpu-ubuntu-2204-arm",
-              "riscv64": "amd64-fast",
+              "riscv64": "buildjet-8vcpu-ubuntu-2204",
-              "riscv64-nonfree": "amd64-fast",
+              "riscv64-nonfree": "buildjet-8vcpu-ubuntu-2204",
             }')[matrix.platform]
           )
         )[github.event.inputs.runner == 'fast']
@@ -203,19 +204,19 @@ jobs:
           sudo rm -rf "$AGENT_TOOLSDIRECTORY"    # Pre-cached tool cache (Go, Node, etc.)
         if: ${{ github.event.inputs.runner != 'fast' }}
 
-      # Some runners lack /opt/hostedtoolcache, which setup-qemu expects
+      # BuildJet runners lack /opt/hostedtoolcache, which setup-qemu expects
       - name: Ensure hostedtoolcache exists
         run: sudo mkdir -p /opt/hostedtoolcache && sudo chown $USER:$USER /opt/hostedtoolcache
 
       - name: Set up docker QEMU
-        uses: docker/setup-qemu-action@v4
+        uses: docker/setup-qemu-action@v3
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
         with:
           submodules: recursive
 
       - name: Download compiled artifacts
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v4
         with:
           name: compiled-${{ env.ARCH }}.tar
 
@@ -252,139 +253,19 @@ jobs:
         run: PLATFORM=${{ matrix.platform }} make img
         if: ${{ matrix.platform == 'raspberrypi' }}
 
-      - uses: actions/upload-artifact@v7
+      - uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.platform }}.squashfs
           path: results/*.squashfs
 
-      - uses: actions/upload-artifact@v7
+      - uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.platform }}.iso
           path: results/*.iso
         if: ${{ matrix.platform != 'raspberrypi' }}
 
-      - uses: actions/upload-artifact@v7
+      - uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.platform }}.img
           path: results/*.img
         if: ${{ matrix.platform == 'raspberrypi' }}
-
-  deploy:
-    name: Deploy
-    needs: [image]
-    if: github.event_name == 'workflow_dispatch' && github.event.inputs.deploy != 'NONE'
-    runs-on: ubuntu-latest
-    env:
-      REGISTRY: >-
-        ${{
-          fromJson('{
-            "alpha": "https://alpha-registry-x.start9.com",
-            "beta": "https://beta-registry.start9.com"
-          }')[github.event.inputs.deploy]
-        }}
-      S3_BUCKET: s3://startos-images
-      S3_CDN: https://startos-images.nyc3.cdn.digitaloceanspaces.com
-    steps:
-      - uses: actions/checkout@v6
-        with:
-          sparse-checkout: web/package.json
-
-      - name: Determine version
-        id: version
-        run: |
-          VERSION=$(sed -n 's/.*"version": *"\([^"]*\)".*/\1/p' web/package.json | head -1)
-          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
-          echo "Version: $VERSION"
-
-      - name: Determine platforms
-        id: platforms
-        run: |
-          INPUT="${{ github.event.inputs.platform }}"
-          if [ "$INPUT" = "ALL" ]; then
-            PLATFORMS="x86_64 x86_64-nonfree x86_64-nvidia aarch64 aarch64-nonfree aarch64-nvidia riscv64 riscv64-nonfree"
-          else
-            PLATFORMS="$INPUT"
-          fi
-          echo "list=$PLATFORMS" >> "$GITHUB_OUTPUT"
-          echo "Platforms: $PLATFORMS"
-
-      - name: Download squashfs artifacts
-        uses: actions/download-artifact@v8
-        with:
-          pattern: "*.squashfs"
-          path: artifacts/
-          merge-multiple: true
-
-      - name: Download ISO artifacts
-        uses: actions/download-artifact@v8
-        with:
-          pattern: "*.iso"
-          path: artifacts/
-          merge-multiple: true
-
-      - name: Install start-cli
-        run: |
-          ARCH=$(uname -m)
-          OS=$(uname -s | tr '[:upper:]' '[:lower:]')
-          ASSET_NAME="start-cli_${ARCH}-${OS}"
-          DOWNLOAD_URL=$(curl -fsS \
-            -H "Authorization: token ${{ github.token }}" \
-            https://api.github.com/repos/Start9Labs/start-os/releases \
-            | jq -r '[.[].assets[] | select(.name=="'"$ASSET_NAME"'")] | first | .browser_download_url')
-          curl -fsSL \
-            -H "Authorization: token ${{ github.token }}" \
-            -H "Accept: application/octet-stream" \
-            "$DOWNLOAD_URL" -o /tmp/start-cli
-          sudo install -m 755 /tmp/start-cli /usr/local/bin/start-cli
-          echo "start-cli: $(start-cli --version)"
-
-      - name: Configure S3
-        run: |
-          sudo apt-get install -y -qq s3cmd > /dev/null
-          cat > ~/.s3cfg <<EOF
-          [default]
-          access_key = ${{ secrets.S3_ACCESS_KEY }}
-          secret_key = ${{ secrets.S3_SECRET_KEY }}
-          host_base = nyc3.digitaloceanspaces.com
-          host_bucket = %(bucket)s.nyc3.digitaloceanspaces.com
-          use_https = True
-          EOF
-
-      - name: Set up developer key
-        run: |
-          mkdir -p ~/.startos
-          printf '%s' "${{ secrets.DEV_KEY }}" > ~/.startos/developer.key.pem
-
-      - name: Upload to S3
-        run: |
-          VERSION="${{ steps.version.outputs.version }}"
-          cd artifacts
-          for PLATFORM in ${{ steps.platforms.outputs.list }}; do
-            for file in *_${PLATFORM}.squashfs *_${PLATFORM}.iso; do
-              [ -f "$file" ] || continue
-              echo "Uploading $file..."
-              s3cmd put -P "$file" "${{ env.S3_BUCKET }}/v${VERSION}/$file"
-            done
-          done
-
-      - name: Register OS version
-        run: |
-          VERSION="${{ steps.version.outputs.version }}"
-          start-cli --registry="${{ env.REGISTRY }}" registry os version add \
-            "$VERSION" "v${VERSION}" '' ">=0.3.5 <=${VERSION}"
-
-      - name: Index assets in registry
-        run: |
-          VERSION="${{ steps.version.outputs.version }}"
-          cd artifacts
-          for PLATFORM in ${{ steps.platforms.outputs.list }}; do
-            for file in *_${PLATFORM}.squashfs *_${PLATFORM}.iso; do
-              [ -f "$file" ] || continue
-              echo "Indexing $file for platform $PLATFORM..."
-              start-cli --registry="${{ env.REGISTRY }}" registry os asset add \
-                --platform="$PLATFORM" \
-                --version="$VERSION" \
-                "$file" \
-                "${{ env.S3_CDN }}/v${VERSION}/$file"
-            done
-          done

.github/workflows/test.yaml

@@ -24,7 +24,7 @@ jobs:
     if: github.event.pull_request.draft != true
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
         with:
           submodules: recursive
       - uses: ./.github/actions/setup-build

.gitignore

@@ -22,5 +22,3 @@ secrets.db
 tmp
 web/.i18n-checked
 docs/USER.md
-*.s9pk
-/build/lib/migration-images

ARCHITECTURE.md

@@ -5,7 +5,7 @@ StartOS is an open-source Linux distribution for running personal servers. It ma
 ## Tech Stack
 
 - Backend: Rust (async/Tokio, Axum web framework)
-- Frontend: Angular 21 + TypeScript + Taiga UI 5
+- Frontend: Angular 20 + TypeScript + TaigaUI
 - Container runtime: Node.js/TypeScript with LXC
 - Database/State: Patch-DB (git submodule) - storage layer with reactive frontend sync
 - API: JSON-RPC via rpc-toolkit (see `core/rpc-toolkit.md`)
@@ -30,7 +30,7 @@ StartOS is an open-source Linux distribution for running personal servers. It ma
 
 - **`core/`** — Rust backend daemon. Produces a single binary `startbox` that is symlinked as `startd` (main daemon), `start-cli` (CLI), `start-container` (runs inside LXC containers), `registrybox` (package registry), and `tunnelbox` (VPN/tunnel). Handles all backend logic: RPC API, service lifecycle, networking (DNS, ACME, WiFi, Tor, WireGuard), backups, and database state management. See [core/ARCHITECTURE.md](core/ARCHITECTURE.md).
 
-- **`web/`** — Angular 21 + TypeScript workspace using Taiga UI 5. Contains three applications (admin UI, setup wizard, VPN management) and two shared libraries (common components/services, marketplace). Communicates with the backend exclusively via JSON-RPC. See [web/ARCHITECTURE.md](web/ARCHITECTURE.md).
+- **`web/`** — Angular 20 + TypeScript workspace using Taiga UI. Contains three applications (admin UI, setup wizard, VPN management) and two shared libraries (common components/services, marketplace). Communicates with the backend exclusively via JSON-RPC. See [web/ARCHITECTURE.md](web/ARCHITECTURE.md).
 
 - **`container-runtime/`** — Node.js runtime that runs inside each service's LXC container. Loads the service's JavaScript from its S9PK package and manages subcontainers. Communicates with the host daemon via JSON-RPC over Unix socket. See [container-runtime/CLAUDE.md](container-runtime/CLAUDE.md).
 

CLAUDE.md

@@ -31,7 +31,6 @@ make test-core                            # Run Rust tests
 - Check component-level CLAUDE.md files for component-specific conventions. ALWAYS read it before operating on that component.
 - Follow existing patterns before inventing new ones
 - Always use `make` recipes when they exist for testing builds rather than manually invoking build commands
-- **Commit signing:** Never push unsigned commits. Before pushing, check all unpushed commits for signatures with `git log --show-signature @{upstream}..HEAD`. If any are unsigned, prompt the user to sign them with `git rebase --exec 'git commit --amend -S --no-edit' @{upstream}`.
 
 ## Supplementary Documentation
 
@@ -51,6 +50,7 @@ On startup:
 1. **Check for `docs/USER.md`** - If it doesn't exist, prompt the user for their name/identifier and create it. This file is gitignored since it varies per developer.
 
 2. **Check `docs/TODO.md` for relevant tasks** - Show TODOs that either:
+
    - Have no `@username` tag (relevant to everyone)
    - Are tagged with the current user's identifier
 

Makefile

@@ -15,7 +15,7 @@ IMAGE_TYPE=$(shell if [ "$(PLATFORM)" = raspberrypi ]; then echo img; else echo
 WEB_UIS := web/dist/raw/ui/index.html web/dist/raw/setup-wizard/index.html
 COMPRESSED_WEB_UIS := web/dist/static/ui/index.html web/dist/static/setup-wizard/index.html
 FIRMWARE_ROMS := build/lib/firmware/$(PLATFORM) $(shell jq --raw-output '.[] | select(.platform[] | contains("$(PLATFORM)")) | "./build/lib/firmware/$(PLATFORM)/" + .id + ".rom.gz"' build/lib/firmware.json)
-BUILD_SRC := $(call ls-files, build/lib) build/lib/depends build/lib/conflicts $(FIRMWARE_ROMS) build/lib/migration-images/.done
+BUILD_SRC := $(call ls-files, build/lib) build/lib/depends build/lib/conflicts $(FIRMWARE_ROMS)
 IMAGE_RECIPE_SRC := $(call ls-files, build/image-recipe/)
 STARTD_SRC := core/startd.service $(BUILD_SRC)
 CORE_SRC := $(call ls-files, core) $(shell git ls-files --recurse-submodules patch-db) $(GIT_HASH_FILE)
@@ -89,7 +89,6 @@ clean:
 	rm -rf container-runtime/node_modules
 	rm -f container-runtime/*.squashfs
 	(cd sdk && make clean)
-	rm -rf build/lib/migration-images
 	rm -f env/*.txt
 
 format:
@@ -106,10 +105,6 @@ test-sdk: $(call ls-files, sdk) sdk/base/lib/osBindings/index.ts
 test-container-runtime: container-runtime/node_modules/.package-lock.json $(call ls-files, container-runtime/src) container-runtime/package.json container-runtime/tsconfig.json 
 	cd container-runtime && npm test
 
-build/lib/migration-images/.done: build/save-migration-images.sh
-	ARCH=$(ARCH) ./build/save-migration-images.sh build/lib/migration-images
-	touch $@
-
 install-cli: $(GIT_HASH_FILE)
 	./core/build/build-cli.sh --install
 
@@ -160,7 +155,7 @@ results/$(BASENAME).deb: debian/dpkg-build.sh $(call ls-files,debian/startos) $(
 registry-deb: results/$(REGISTRY_BASENAME).deb
 
 results/$(REGISTRY_BASENAME).deb: debian/dpkg-build.sh $(call ls-files,debian/start-registry) $(REGISTRY_TARGETS)
-	PROJECT=start-registry PLATFORM=$(ARCH) REQUIRES=debian DEPENDS=ca-certificates ./build/os-compat/run-compat.sh ./debian/dpkg-build.sh
+	PROJECT=start-registry PLATFORM=$(ARCH) REQUIRES=debian ./build/os-compat/run-compat.sh ./debian/dpkg-build.sh
 
 tunnel-deb: results/$(TUNNEL_BASENAME).deb
 
@@ -193,9 +188,6 @@ install: $(STARTOS_TARGETS)
 	
 	$(call mkdir,$(DESTDIR)/lib/systemd/system)
 	$(call cp,core/startd.service,$(DESTDIR)/lib/systemd/system/startd.service)
-	if /bin/bash -c '[[ "${ENVIRONMENT}" =~ (^|-)unstable($$|-) ]]'; then \
-		sed -i '/^Environment=/a Environment=RUST_BACKTRACE=full' $(DESTDIR)/lib/systemd/system/startd.service; \
-	fi
 
 	$(call mkdir,$(DESTDIR)/usr/lib)
 	$(call rm,$(DESTDIR)/usr/lib/startos)
@@ -255,10 +247,10 @@ update-deb: results/$(BASENAME).deb # better than update, but only available fro
 
 update-squashfs: results/$(BASENAME).squashfs
 	@if [ -z "$(REMOTE)" ]; then >&2 echo "Must specify REMOTE" && false; fi
-	$(eval SQFS_SUM := $(shell b3sum results/$(BASENAME).squashfs | head -c 32))
+	$(eval SQFS_SUM := $(shell b3sum results/$(BASENAME).squashfs))
 	$(eval SQFS_SIZE := $(shell du -s --bytes results/$(BASENAME).squashfs | awk '{print $$1}'))
-	$(call ssh,'sudo /usr/lib/startos/scripts/prune-images $(SQFS_SIZE)')
+	$(call ssh,'/usr/lib/startos/scripts/prune-images $(SQFS_SIZE)')
-	$(call ssh,'sudo /usr/lib/startos/scripts/prune-boot')
+	$(call ssh,'/usr/lib/startos/scripts/prune-boot')
 	$(call cp,results/$(BASENAME).squashfs,/media/startos/images/next.rootfs)
 	$(call ssh,'sudo CHECKSUM=$(SQFS_SUM) /usr/lib/startos/scripts/upgrade /media/startos/images/next.rootfs')
 
@@ -291,10 +283,6 @@ core/bindings/index.ts: $(call ls-files, core) $(ENVIRONMENT_FILE)
 	rm -rf core/bindings
 	./core/build/build-ts.sh
 	ls core/bindings/*.ts | sed 's/core\/bindings\/\([^.]*\)\.ts/export { \1 } from ".\/\1";/g' | grep -v '"./index"' | tee core/bindings/index.ts
-	if [ -d core/bindings/tunnel ]; then \
-		ls core/bindings/tunnel/*.ts | sed 's/core\/bindings\/tunnel\/\([^.]*\)\.ts/export { \1 } from ".\/\1";/g' | grep -v '"./index"' > core/bindings/tunnel/index.ts; \
-		echo 'export * as Tunnel from "./tunnel";' >> core/bindings/index.ts; \
-	fi
 	npm --prefix sdk/base exec -- prettier --config=./sdk/base/package.json -w './core/bindings/**/*.ts'
 	touch core/bindings/index.ts
 

build/apt/publish-deb.sh

@@ -23,7 +23,6 @@ fi
 
 BUCKET="${S3_BUCKET:-start9-debs}"
 ENDPOINT="${S3_ENDPOINT:-https://nyc3.digitaloceanspaces.com}"
-GPG_KEY_ID="${GPG_KEY_ID:-5259ADFC2D63C217}"
 SUITE="${SUITE:-stable}"
 COMPONENT="${COMPONENT:-main}"
 REPO_DIR="$(mktemp -d)"
@@ -83,16 +82,11 @@ if [ ${#DEB_FILES[@]} -eq 0 ]; then
     exit 1
 fi
 
-# Copy each deb to the pool, removing old versions of the same package+arch
+# Copy each deb to the pool, renaming to standard format
 for deb in "${DEB_FILES[@]}"; do
     PKG_NAME="$(dpkg-deb --field "$deb" Package)"
-    PKG_ARCH="$(dpkg-deb --field "$deb" Architecture)"
     POOL_DIR="$REPO_DIR/pool/${COMPONENT}/${PKG_NAME:0:1}/${PKG_NAME}"
     mkdir -p "$POOL_DIR"
-    # Remove old versions for the same architecture
-    for old in "$POOL_DIR"/${PKG_NAME}_*_${PKG_ARCH}.deb; do
-        [ -f "$old" ] && rm -v "$old"
-    done
     cp "$deb" "$POOL_DIR/"
     dpkg-name -o "$POOL_DIR/$(basename "$deb")" 2>/dev/null || true
     echo "Added: $(basename "$deb") -> pool/${COMPONENT}/${PKG_NAME:0:1}/${PKG_NAME}/"
@@ -104,7 +98,7 @@ for arch in amd64 arm64 riscv64; do
     mkdir -p "$BINARY_DIR"
     (
         cd "$REPO_DIR"
-        dpkg-scanpackages --multiversion --arch "$arch" pool/ > "$BINARY_DIR/Packages"
+        dpkg-scanpackages --arch "$arch" pool/ > "$BINARY_DIR/Packages"
         gzip -k -f "$BINARY_DIR/Packages"
     )
     echo "Generated Packages index for ${arch}"

build/dpkg-deps/depends

@@ -11,7 +11,6 @@ cifs-utils
 conntrack
 cryptsetup
 curl
-dkms
 dmidecode
 dnsutils
 dosfstools
@@ -37,7 +36,6 @@ lvm2
 lxc
 magic-wormhole
 man-db
-mokutil
 ncdu
 net-tools
 network-manager

build/dpkg-deps/raspberrypi.depends

@@ -1,6 +1,5 @@
-+ gdisk
+- grub-efi
 + parted
-+ u-boot-rpi
 + raspberrypi-net-mods
 + raspberrypi-sys-mods
 + raspi-config

build/image-recipe/Dockerfile

@@ -23,8 +23,6 @@ RUN apt-get update && \
     squashfs-tools \
     rsync \
     b3sum \
-    btrfs-progs \
-    gdisk \
     dpkg-dev
 
 

build/image-recipe/build.sh

@@ -1,6 +1,7 @@
 #!/bin/bash
 set -e
 
+MAX_IMG_LEN=$((4 * 1024 * 1024 * 1024)) # 4GB
 
 echo "==== StartOS Image Build ===="
 
@@ -131,15 +132,6 @@ ff02::1         ip6-allnodes
 ff02::2         ip6-allrouters
 EOT
 
-if [[ "${IB_OS_ENV}" =~ (^|-)dev($|-) ]]; then
-	mkdir -p config/includes.chroot/etc/ssh/sshd_config.d
-	echo "PasswordAuthentication yes" > config/includes.chroot/etc/ssh/sshd_config.d/dev-password-auth.conf
-fi
-
-# Installer marker file (used by installed GRUB to detect the live USB)
-mkdir -p config/includes.binary
-touch config/includes.binary/.startos-installer
-
 if [ "${IB_TARGET_PLATFORM}" = "raspberrypi" ]; then
 	mkdir -p config/includes.chroot
 	git clone --depth=1 --branch=stable https://github.com/raspberrypi/rpi-firmware.git config/includes.chroot/boot
@@ -180,13 +172,7 @@ sed -i -e '2i set timeout=5' config/bootloaders/grub-pc/config.cfg
 mkdir -p config/archives
 
 if [ "${IB_TARGET_PLATFORM}" = "raspberrypi" ]; then
-	# Fetch the keyring package (not the old raspberrypi.gpg.key, which has
+	curl -fsSL https://archive.raspberrypi.com/debian/raspberrypi.gpg.key | gpg --dearmor -o config/archives/raspi.key
-	# SHA1-only binding signatures that sqv on Trixie rejects).
-	KEYRING_DEB=$(mktemp)
-	curl -fsSL -o "$KEYRING_DEB" https://archive.raspberrypi.com/debian/pool/main/r/raspberrypi-archive-keyring/raspberrypi-archive-keyring_2025.1+rpt1_all.deb
-	dpkg-deb -x "$KEYRING_DEB" "$KEYRING_DEB.d"
-	cp "$KEYRING_DEB.d/usr/share/keyrings/raspberrypi-archive-keyring.gpg" config/archives/raspi.key
-	rm -rf "$KEYRING_DEB" "$KEYRING_DEB.d"
 	echo "deb [arch=${IB_TARGET_ARCH} signed-by=/etc/apt/trusted.gpg.d/raspi.key.gpg] https://archive.raspberrypi.com/debian/ ${IB_SUITE} main" > config/archives/raspi.list
 fi
 
@@ -223,10 +209,6 @@ cat > config/hooks/normal/9000-install-startos.hook.chroot << EOF
 
 set -e
 
-if [ "${IB_TARGET_PLATFORM}" != "raspberrypi" ]; then
-    /usr/lib/startos/scripts/enable-kiosk
-fi
-
 if [ "${NVIDIA}" = "1" ]; then
     # install a specific NVIDIA driver version
 
@@ -254,7 +236,7 @@ if [ "${NVIDIA}" = "1" ]; then
     echo "[nvidia-hook] Target kernel version: \${KVER}" >&2
 
     # Ensure kernel headers are present
-	TEMP_APT_DEPS=(build-essential pkg-config)
+	TEMP_APT_DEPS=(build-essential)
     if [ ! -e "/lib/modules/\${KVER}/build" ]; then
 		TEMP_APT_DEPS+=(linux-headers-\${KVER})
     fi
@@ -297,32 +279,12 @@ if [ "${NVIDIA}" = "1" ]; then
 
     echo "[nvidia-hook] NVIDIA \${NVIDIA_DRIVER_VERSION} installation complete for kernel \${KVER}" >&2
 
-    echo "[nvidia-hook] Removing .run installer..." >&2
-    rm -f "\${RUN_PATH}"
-
-    echo "[nvidia-hook] Blacklisting nouveau..." >&2
-    echo "blacklist nouveau" > /etc/modprobe.d/blacklist-nouveau.conf
-    echo "options nouveau modeset=0" >> /etc/modprobe.d/blacklist-nouveau.conf
-
-    echo "[nvidia-hook] Rebuilding initramfs..." >&2
-    update-initramfs -u -k "\${KVER}"
-
     echo "[nvidia-hook] Removing build dependencies..." >&2
 	apt-get purge -y nvidia-depends
 	apt-get autoremove -y
     echo "[nvidia-hook] Removed build dependencies." >&2
 fi
 
-# Install linux-kbuild for sign-file (Secure Boot module signing)
-KVER_ALL="\$(ls -1t /boot/vmlinuz-* 2>/dev/null | head -n1 | sed 's|.*/vmlinuz-||')"
-if [ -n "\${KVER_ALL}" ]; then
-    KBUILD_VER="\$(echo "\${KVER_ALL}" | grep -oP '^\d+\.\d+')"
-    if [ -n "\${KBUILD_VER}" ]; then
-        echo "[build] Installing linux-kbuild-\${KBUILD_VER} for Secure Boot support" >&2
-        apt-get install -y "linux-kbuild-\${KBUILD_VER}" || echo "[build] WARNING: linux-kbuild-\${KBUILD_VER} not available" >&2
-    fi
-fi
-
 cp /etc/resolv.conf /etc/resolv.conf.bak
 
 if [ "${IB_SUITE}" = trixie ] && [ "${IB_TARGET_ARCH}" != riscv64 ]; then
@@ -336,10 +298,9 @@ fi
 
 if [ "${IB_TARGET_PLATFORM}" = "raspberrypi" ]; then
     ln -sf /usr/bin/pi-beep /usr/local/bin/beep
-    sh /boot/firmware/config.sh > /boot/firmware/config.txt
+    KERNEL_VERSION=${RPI_KERNEL_VERSION} sh /boot/config.sh > /boot/config.txt
     mkinitramfs -c gzip -o /boot/initrd.img-${RPI_KERNEL_VERSION}-rpi-v8 ${RPI_KERNEL_VERSION}-rpi-v8
     mkinitramfs -c gzip -o /boot/initrd.img-${RPI_KERNEL_VERSION}-rpi-2712 ${RPI_KERNEL_VERSION}-rpi-2712
-    cp /usr/lib/u-boot/rpi_arm64/u-boot.bin /boot/firmware/u-boot.bin
 fi
 
 useradd --shell /bin/bash -G startos -m start9
@@ -349,16 +310,14 @@ usermod -aG systemd-journal start9
 
 echo "start9 ALL=(ALL:ALL) NOPASSWD: ALL" | sudo tee "/etc/sudoers.d/010_start9-nopasswd"
 
+if [ "${IB_TARGET_PLATFORM}" != "raspberrypi" ]; then
+    /usr/lib/startos/scripts/enable-kiosk
+fi
+
 if ! [[ "${IB_OS_ENV}" =~ (^|-)dev($|-) ]]; then
     passwd -l start9
 fi
 
-mkdir -p /media/startos
-chmod 750 /media/startos
-chown root:startos /media/startos
-
-start-cli --registry=https://alpha-registry-x.start9.com registry package download tor -d /usr/lib/startos/tor_${QEMU_ARCH}.s9pk -a "${QEMU_ARCH}"
-
 EOF
 
 SOURCE_DATE_EPOCH="${SOURCE_DATE_EPOCH:-$(date '+%s')}"
@@ -411,85 +370,38 @@ if [ "${IMAGE_TYPE}" = iso ]; then
 elif [ "${IMAGE_TYPE}" = img ]; then
 
 	SECTOR_LEN=512
-	FW_START=$((1024 * 1024)) # 1MiB (sector 2048) — Pi-specific
+	BOOT_START=$((1024 * 1024)) # 1MiB
-	FW_LEN=$((128 * 1024 * 1024)) # 128MiB (Pi firmware + U-Boot + DTBs)
+	BOOT_LEN=$((512 * 1024 * 1024)) # 512MiB
-	FW_END=$((FW_START + FW_LEN - 1))
-	ESP_START=$((FW_END + 1)) # 100MB EFI System Partition (matches os_install)
-	ESP_LEN=$((100 * 1024 * 1024))
-	ESP_END=$((ESP_START + ESP_LEN - 1))
-	BOOT_START=$((ESP_END + 1)) # 2GB /boot (matches os_install)
-	BOOT_LEN=$((2 * 1024 * 1024 * 1024))
 	BOOT_END=$((BOOT_START + BOOT_LEN - 1))
 	ROOT_START=$((BOOT_END + 1))
-
+	ROOT_LEN=$((MAX_IMG_LEN - ROOT_START))
-	# Size root partition to fit the squashfs + 256MB overhead for btrfs
+	ROOT_END=$((MAX_IMG_LEN - 1))
-	# metadata and config overlay, avoiding the need for btrfs resize
-	SQUASHFS_SIZE=$(stat -c %s $prep_results_dir/binary/live/filesystem.squashfs)
-	ROOT_LEN=$(( SQUASHFS_SIZE + 256 * 1024 * 1024 ))
-	# Align to sector boundary
-	ROOT_LEN=$(( (ROOT_LEN + SECTOR_LEN - 1) / SECTOR_LEN * SECTOR_LEN ))
-
-	# Total image: partitions + GPT backup header (34 sectors)
-	IMG_LEN=$((ROOT_START + ROOT_LEN + 34 * SECTOR_LEN))
-
-	# Fixed GPT partition UUIDs (deterministic, based on old MBR disk ID cb15ae4d)
-	FW_UUID=cb15ae4d-0001-4000-8000-000000000001
-	ESP_UUID=cb15ae4d-0002-4000-8000-000000000002
-	BOOT_UUID=cb15ae4d-0003-4000-8000-000000000003
-	ROOT_UUID=cb15ae4d-0004-4000-8000-000000000004
 
 	TARGET_NAME=$prep_results_dir/${IMAGE_BASENAME}.img
-	truncate -s $IMG_LEN $TARGET_NAME
+	truncate -s $MAX_IMG_LEN $TARGET_NAME
 
 	sfdisk $TARGET_NAME <<-EOF
-		label: gpt
+		label: dos
+		label-id: 0xcb15ae4d
+		unit: sectors
+		sector-size: 512
 
-		${TARGET_NAME}1 : start=$((FW_START / SECTOR_LEN)), size=$((FW_LEN / SECTOR_LEN)), type=EBD0A0A2-B9E5-4433-87C0-68B6B72699C7, uuid=${FW_UUID}, name="firmware"
+		${TARGET_NAME}1 : start=$((BOOT_START / SECTOR_LEN)), size=$((BOOT_LEN / SECTOR_LEN)), type=c, bootable
-		${TARGET_NAME}2 : start=$((ESP_START / SECTOR_LEN)), size=$((ESP_LEN / SECTOR_LEN)), type=C12A7328-F81F-11D2-BA4B-00A0C93EC93B, uuid=${ESP_UUID}, name="efi"
+		${TARGET_NAME}2 : start=$((ROOT_START / SECTOR_LEN)), size=$((ROOT_LEN / SECTOR_LEN)), type=83
-		${TARGET_NAME}3 : start=$((BOOT_START / SECTOR_LEN)), size=$((BOOT_LEN / SECTOR_LEN)), type=0FC63DAF-8483-4772-8E79-3D69D8477DE4, uuid=${BOOT_UUID}, name="boot"
-		${TARGET_NAME}4 : start=$((ROOT_START / SECTOR_LEN)), size=$((ROOT_LEN / SECTOR_LEN)), type=B921B045-1DF0-41C3-AF44-4C6F280D3FAE, uuid=${ROOT_UUID}, name="root"
 	EOF
 
-	# Create named loop device nodes (high minor numbers to avoid conflicts)
+	BOOT_DEV=$(losetup --show -f --offset $BOOT_START --sizelimit $BOOT_LEN $TARGET_NAME)
-	# and detach any stale ones from previous failed builds
+	ROOT_DEV=$(losetup --show -f --offset $ROOT_START --sizelimit $ROOT_LEN $TARGET_NAME)
-	FW_DEV=/dev/startos-loop-fw
-	ESP_DEV=/dev/startos-loop-esp
-	BOOT_DEV=/dev/startos-loop-boot
-	ROOT_DEV=/dev/startos-loop-root
-	for dev in $FW_DEV:200 $ESP_DEV:201 $BOOT_DEV:202 $ROOT_DEV:203; do
-		name=${dev%:*}
-		minor=${dev#*:}
-		[ -e $name ] || mknod $name b 7 $minor
-		losetup -d $name 2>/dev/null || true
-	done
 
-	losetup $FW_DEV --offset $FW_START --sizelimit $FW_LEN $TARGET_NAME
+	mkfs.vfat -F32 $BOOT_DEV
-	losetup $ESP_DEV --offset $ESP_START --sizelimit $ESP_LEN $TARGET_NAME
+	mkfs.ext4 $ROOT_DEV
-	losetup $BOOT_DEV --offset $BOOT_START --sizelimit $BOOT_LEN $TARGET_NAME
-	losetup $ROOT_DEV --offset $ROOT_START --sizelimit $ROOT_LEN $TARGET_NAME
-
-	mkfs.vfat -F32 -n firmware $FW_DEV
-	mkfs.vfat -F32 -n efi $ESP_DEV
-	mkfs.vfat -F32 -n boot $BOOT_DEV
-	mkfs.btrfs -f -L rootfs $ROOT_DEV
 
 	TMPDIR=$(mktemp -d)
 
-	# Extract boot files from squashfs to staging area
-	BOOT_STAGING=$(mktemp -d)
-	unsquashfs -n -f -d $BOOT_STAGING $prep_results_dir/binary/live/filesystem.squashfs boot
-
-	# Mount partitions (nested: firmware and efi inside boot)
 	mkdir -p $TMPDIR/boot $TMPDIR/root
-	mount $BOOT_DEV $TMPDIR/boot
-	mkdir -p $TMPDIR/boot/firmware $TMPDIR/boot/efi
-	mount $FW_DEV $TMPDIR/boot/firmware
-	mount $ESP_DEV $TMPDIR/boot/efi
 	mount $ROOT_DEV $TMPDIR/root
-
+	mount $BOOT_DEV $TMPDIR/boot
-	# Copy boot files — nested mounts route firmware/* to the firmware partition
+	unsquashfs -n -f -d $TMPDIR $prep_results_dir/binary/live/filesystem.squashfs boot
-	cp -a $BOOT_STAGING/boot/. $TMPDIR/boot/
-	rm -rf $BOOT_STAGING
 
 	mkdir $TMPDIR/root/images $TMPDIR/root/config
 	B3SUM=$(b3sum $prep_results_dir/binary/live/filesystem.squashfs | head -c 16)
@@ -502,46 +414,40 @@ elif [ "${IMAGE_TYPE}" = img ]; then
 	mount -t overlay -o lowerdir=$TMPDIR/lower,workdir=$TMPDIR/root/config/work,upperdir=$TMPDIR/root/config/overlay overlay $TMPDIR/next
 
 	if [ "${IB_TARGET_PLATFORM}" = "raspberrypi" ]; then
+		sed -i 's| boot=startos| boot=startos init=/usr/lib/startos/scripts/init_resize\.sh|' $TMPDIR/boot/cmdline.txt
 		rsync -a $SOURCE_DIR/raspberrypi/img/ $TMPDIR/next/
-
-		# Install GRUB: ESP at /boot/efi (Part 2), /boot (Part 3)
-		mkdir -p $TMPDIR/next/boot \
-			$TMPDIR/next/dev $TMPDIR/next/proc $TMPDIR/next/sys $TMPDIR/next/media/startos/root
-		mount --rbind $TMPDIR/boot $TMPDIR/next/boot
-		mount --bind /dev $TMPDIR/next/dev
-		mount -t proc proc $TMPDIR/next/proc
-		mount -t sysfs sysfs $TMPDIR/next/sys
-		mount --bind $TMPDIR/root $TMPDIR/next/media/startos/root
-
-		chroot $TMPDIR/next grub-install --target=arm64-efi --removable --efi-directory=/boot/efi --boot-directory=/boot --no-nvram
-		chroot $TMPDIR/next update-grub
-
-		umount $TMPDIR/next/media/startos/root
-		umount $TMPDIR/next/sys
-		umount $TMPDIR/next/proc
-		umount $TMPDIR/next/dev
-		umount -l $TMPDIR/next/boot
-
-		# Fix root= in grub.cfg: update-grub sees loop devices, but the
-		# real device uses a fixed GPT PARTUUID for root (Part 4).
-		sed -i "s|root=[^ ]*|root=PARTUUID=${ROOT_UUID}|g" $TMPDIR/boot/grub/grub.cfg
-
-		# Inject first-boot resize script into GRUB config
-		sed -i 's| boot=startos| boot=startos init=/usr/lib/startos/scripts/init_resize\.sh|' $TMPDIR/boot/grub/grub.cfg
 	fi
 
 	umount $TMPDIR/next
 	umount $TMPDIR/lower
 
-	umount $TMPDIR/boot/firmware
-	umount $TMPDIR/boot/efi
 	umount $TMPDIR/boot
 	umount $TMPDIR/root
 
+
+	e2fsck -fy $ROOT_DEV
+	resize2fs -M $ROOT_DEV
+
+	BLOCK_COUNT=$(dumpe2fs -h $ROOT_DEV | awk '/^Block count:/ { print $3 }')
+	BLOCK_SIZE=$(dumpe2fs -h $ROOT_DEV | awk '/^Block size:/ { print $3 }')
+	ROOT_LEN=$((BLOCK_COUNT * BLOCK_SIZE))
+
 	losetup -d $ROOT_DEV
 	losetup -d $BOOT_DEV
-	losetup -d $ESP_DEV
+
-	losetup -d $FW_DEV
+	# Recreate partition 2 with the new size using sfdisk
+	sfdisk $TARGET_NAME <<-EOF
+		label: dos
+		label-id: 0xcb15ae4d
+		unit: sectors
+		sector-size: 512
+
+		${TARGET_NAME}1 : start=$((BOOT_START / SECTOR_LEN)), size=$((BOOT_LEN / SECTOR_LEN)), type=c, bootable
+		${TARGET_NAME}2 : start=$((ROOT_START / SECTOR_LEN)), size=$((ROOT_LEN / SECTOR_LEN)), type=83
+	EOF
+
+	TARGET_SIZE=$((ROOT_START + ROOT_LEN))
+	truncate -s $TARGET_SIZE $TARGET_NAME
 
 	mv $TARGET_NAME $RESULTS_DIR/$IMAGE_BASENAME.img
 

build/image-recipe/raspberrypi/img/etc/fstab

@@ -1,4 +1,2 @@
-PARTUUID=cb15ae4d-0001-4000-8000-000000000001  /boot/firmware  vfat    umask=0077  0   2
+/dev/mmcblk0p1  /boot   vfat    umask=0077  0   2
-PARTUUID=cb15ae4d-0002-4000-8000-000000000002  /boot/efi       vfat    umask=0077  0   1
+/dev/mmcblk0p2  /       ext4    defaults    0   1
-PARTUUID=cb15ae4d-0003-4000-8000-000000000003  /boot           vfat    umask=0077  0   2
-PARTUUID=cb15ae4d-0004-4000-8000-000000000004  /               btrfs   defaults    0   1

build/image-recipe/raspberrypi/img/usr/lib/startos/scripts/init_resize.sh

@@ -12,16 +12,15 @@ get_variables () {
   BOOT_DEV_NAME=$(echo /sys/block/*/"${BOOT_PART_NAME}" | cut -d "/" -f 4)
   BOOT_PART_NUM=$(cat "/sys/block/${BOOT_DEV_NAME}/${BOOT_PART_NAME}/partition")
 
-  ROOT_DEV_SIZE=$(cat "/sys/block/${ROOT_DEV_NAME}/size")
+  OLD_DISKID=$(fdisk -l "$ROOT_DEV" | sed -n 's/Disk identifier: 0x\([^ ]*\)/\1/p')
-  # GPT backup header/entries occupy last 33 sectors
-  USABLE_END=$((ROOT_DEV_SIZE - 34))
 
-  if [ "$USABLE_END" -le 67108864 ]; then
+  ROOT_DEV_SIZE=$(cat "/sys/block/${ROOT_DEV_NAME}/size")
-      TARGET_END=$USABLE_END
+  if [ "$ROOT_DEV_SIZE" -le 67108864 ]; then
+      TARGET_END=$((ROOT_DEV_SIZE - 1))
   else
       TARGET_END=$((33554432 - 1))
       DATA_PART_START=33554432
-      DATA_PART_END=$USABLE_END
+      DATA_PART_END=$((ROOT_DEV_SIZE - 1))
   fi
 
   PARTITION_TABLE=$(parted -m "$ROOT_DEV" unit s print | tr -d 's')
@@ -58,30 +57,37 @@ check_variables () {
 main () {
   get_variables
 
-  # Fix GPT backup header first — the image was built with a tight root
-  # partition, so the backup GPT is not at the end of the SD card. parted
-  # will prompt interactively if this isn't fixed before we use it.
-  sgdisk -e "$ROOT_DEV" 2>/dev/null || true
-
   if ! check_variables; then
     return 1
   fi
 
+#   if [ "$ROOT_PART_END" -eq "$TARGET_END" ]; then
+#     reboot_pi
+#   fi
+
   if ! echo Yes | parted -m --align=optimal "$ROOT_DEV" ---pretend-input-tty u s resizepart "$ROOT_PART_NUM" "$TARGET_END" ; then
     FAIL_REASON="Root partition resize failed"
     return 1
   fi
 
   if [ -n "$DATA_PART_START" ]; then
-    if ! parted -ms --align=optimal "$ROOT_DEV" u s mkpart data "$DATA_PART_START" "$DATA_PART_END"; then
+    if ! parted -ms --align=optimal "$ROOT_DEV" u s mkpart primary "$DATA_PART_START" "$DATA_PART_END"; then
       FAIL_REASON="Data partition creation failed"
       return 1
     fi
   fi
 
+  (
+    echo x
+    echo i
+    echo "0xcb15ae4d"
+    echo r
+    echo w
+  ) | fdisk $ROOT_DEV
+
   mount / -o remount,rw
 
-  btrfs filesystem resize max /media/startos/root
+  resize2fs $ROOT_PART_DEV
 
   if ! systemd-machine-id-setup --root=/media/startos/config/overlay/; then
     FAIL_REASON="systemd-machine-id-setup failed"
@@ -105,7 +111,7 @@ mount / -o remount,ro
 beep
 
 if main; then
-  sed -i 's| init=/usr/lib/startos/scripts/init_resize\.sh||' /boot/grub/grub.cfg
+  sed -i 's| init=/usr/lib/startos/scripts/init_resize\.sh||' /boot/cmdline.txt
   echo "Resized root filesystem. Rebooting in 5 seconds..."
   sleep 5
 else

build/image-recipe/raspberrypi/squashfs/boot/cmdline.txt

@@ -0,0 +1 @@
+usb-storage.quirks=152d:0562:u,14cd:121c:u,0781:cfcb:u console=serial0,115200 console=tty1 root=PARTUUID=cb15ae4d-02 rootfstype=ext4 fsck.repair=yes rootwait cgroup_enable=cpuset cgroup_memory=1 cgroup_enable=memory boot=startos

build/image-recipe/raspberrypi/squashfs/boot/config.sh

@@ -27,18 +27,20 @@ disable_overscan=1
 # (e.g. for USB device mode) or if USB support is not required.
 otg_mode=1
 
+[all]
+
 [pi4]
 # Run as fast as firmware / board allows
 arm_boost=1
+kernel=vmlinuz-${KERNEL_VERSION}-rpi-v8
+initramfs initrd.img-${KERNEL_VERSION}-rpi-v8 followkernel
+
+[pi5]
+kernel=vmlinuz-${KERNEL_VERSION}-rpi-2712
+initramfs initrd.img-${KERNEL_VERSION}-rpi-2712 followkernel
 
 [all]
 gpu_mem=16
 dtoverlay=pwm-2chan,disable-bt
 
-# Enable UART for U-Boot and serial console
+EOF
-enable_uart=1
-
-# Load U-Boot as the bootloader (GRUB is chainloaded from U-Boot)
-kernel=u-boot.bin
-
-EOF

build/image-recipe/raspberrypi/squashfs/boot/config.txt

@@ -84,8 +84,4 @@ arm_boost=1
 gpu_mem=16
 dtoverlay=pwm-2chan,disable-bt
 
-# Enable UART for U-Boot and serial console
+auto_initramfs=1
-enable_uart=1
-
-# Load U-Boot as the bootloader (GRUB is chainloaded from U-Boot)
-kernel=u-boot.bin

build/image-recipe/raspberrypi/squashfs/etc/default/grub.d/raspberrypi.cfg

@@ -1,4 +0,0 @@
-# Raspberry Pi-specific GRUB overrides
-# Overrides GRUB_CMDLINE_LINUX from /etc/default/grub with Pi-specific
-# console devices and hardware quirks.
-GRUB_CMDLINE_LINUX="boot=startos console=serial0,115200 console=tty1 usb-storage.quirks=152d:0562:u,14cd:121c:u,0781:cfcb:u cgroup_enable=cpuset cgroup_memory=1 cgroup_enable=memory"

build/image-recipe/raspberrypi/squashfs/etc/startos/config.yaml

@@ -1,3 +1,6 @@
+os-partitions:
+  boot: /dev/mmcblk0p1
+  root: /dev/mmcblk0p2
 ethernet-interface: end0
 wifi-interface: wlan0
 disable-encryption: true

build/lib/motd

@@ -118,6 +118,6 @@ else
 fi
 printf "\n    \033[1;37m┌──────────────────────────────────────────────────── QUICK ACCESS ─┐\033[0m\n"
 printf "    \033[1;37m│\033[0m Web Interface: \033[0;36m%-50s\033[0m \033[1;37m│\033[0m\n" "$web_url"
-printf "    \033[1;37m│\033[0m Documentation: \033[0;36m%-50s\033[0m \033[1;37m│\033[0m\n" "https://docs.start9.com"
+printf "    \033[1;37m│\033[0m Documentation: \033[0;36m%-50s\033[0m \033[1;37m│\033[0m\n" "https://staging.docs.start9.com"
 printf "    \033[1;37m│\033[0m Support:       \033[0;36m%-50s\033[0m \033[1;37m│\033[0m\n" "https://start9.com/contact"
 printf "    \033[1;37m└───────────────────────────────────────────────────────────────────┘\033[0m\n\n"

build/lib/scripts/chroot-and-upgrade

@@ -34,7 +34,7 @@ set -- "${POSITIONAL_ARGS[@]}" # restore positional parameters
 
 if [ -z "$NO_SYNC" ]; then
     echo 'Syncing...'
-    umount -l /media/startos/next 2> /dev/null
+    umount -R /media/startos/next 2> /dev/null
     umount /media/startos/upper 2> /dev/null
     rm -rf /media/startos/upper /media/startos/next
     mkdir /media/startos/upper
@@ -55,16 +55,16 @@ mkdir -p /media/startos/next/sys
 mkdir -p /media/startos/next/proc
 mkdir -p /media/startos/next/boot
 mkdir -p /media/startos/next/media/startos/root
-mount -t tmpfs tmpfs /media/startos/next/run
+mount --bind /run /media/startos/next/run
-mount -t tmpfs tmpfs /media/startos/next/tmp
+mount --bind /tmp /media/startos/next/tmp
 mount --bind /dev /media/startos/next/dev
-mount -t sysfs sysfs /media/startos/next/sys
+mount --bind /sys /media/startos/next/sys
-mount -t proc proc /media/startos/next/proc
+mount --bind /proc /media/startos/next/proc
 mount --bind /boot /media/startos/next/boot
 mount --bind /media/startos/root /media/startos/next/media/startos/root
 
 if mountpoint /sys/firmware/efi/efivars 2>&1 > /dev/null; then
-  mount -t efivarfs efivarfs /media/startos/next/sys/firmware/efi/efivars
+  mount --bind /sys/firmware/efi/efivars /media/startos/next/sys/firmware/efi/efivars
 fi
 
 if [ -z "$*" ]; then
@@ -79,13 +79,13 @@ if mountpoint /media/startos/next/sys/firmware/efi/efivars 2>&1 > /dev/null; the
   umount /media/startos/next/sys/firmware/efi/efivars 
 fi
 
-umount -l /media/startos/next/run
+umount /media/startos/next/run
-umount -l /media/startos/next/tmp
+umount /media/startos/next/tmp
-umount -l /media/startos/next/dev
+umount /media/startos/next/dev
-umount -l /media/startos/next/sys
+umount /media/startos/next/sys
-umount -l /media/startos/next/proc
+umount /media/startos/next/proc
-umount -l /media/startos/next/boot
+umount /media/startos/next/boot
-umount -l /media/startos/next/media/startos/root
+umount /media/startos/next/media/startos/root
 
 if [ "$CHROOT_RES" -eq 0 ]; then
 
@@ -111,6 +111,6 @@ if [ "$CHROOT_RES" -eq 0 ]; then
     reboot
 fi
 
-umount -l /media/startos/next
+umount /media/startos/next
-umount -l /media/startos/upper
+umount /media/startos/upper
 rm -rf /media/startos/upper /media/startos/next

build/lib/scripts/forward-port

@@ -58,18 +58,15 @@ iptables -t nat -A ${NAME}_OUTPUT -d "$sip" -p udp --dport "$sport" -j DNAT --to
 iptables -A ${NAME}_FORWARD -d $dip -p tcp --dport $dport -m state --state NEW -j ACCEPT
 iptables -A ${NAME}_FORWARD -d $dip -p udp --dport $dport -m state --state NEW -j ACCEPT
 
-# NAT hairpin: masquerade so replies route back through this host for proper
+# NAT hairpin: masquerade traffic from the bridge subnet or host to the DNAT
-# NAT reversal instead of taking a direct path that bypasses conntrack.
+# target, so replies route back through the host for proper NAT reversal.
-# Host-to-target hairpin: locally-originated packets whose original destination
+# Container-to-container hairpin (source is on the bridge subnet)
-# was sip (before OUTPUT DNAT rewrote it to dip).  Using --ctorigdst ties the
+if [ -n "$bridge_subnet" ]; then
-# rule to this specific sip, so multiple WAN IPs forwarding the same port to
+    iptables -t nat -A ${NAME}_POSTROUTING -s "$bridge_subnet" -d "$dip" -p tcp --dport "$dport" -j MASQUERADE
-# different targets each get their own masquerade.
+    iptables -t nat -A ${NAME}_POSTROUTING -s "$bridge_subnet" -d "$dip" -p udp --dport "$dport" -j MASQUERADE
-iptables -t nat -A ${NAME}_POSTROUTING -m addrtype --src-type LOCAL -m conntrack --ctorigdst "$sip" -d "$dip" -p tcp --dport "$dport" -j MASQUERADE
+fi
-iptables -t nat -A ${NAME}_POSTROUTING -m addrtype --src-type LOCAL -m conntrack --ctorigdst "$sip" -d "$dip" -p udp --dport "$dport" -j MASQUERADE
+# Host-to-container hairpin (host connects to its own gateway IP, source is sip)
-# Same-subnet hairpin: when traffic originates from the same subnet as the DNAT
+iptables -t nat -A ${NAME}_POSTROUTING -s "$sip" -d "$dip" -p tcp --dport "$dport" -j MASQUERADE
-# target (e.g. a container reaching another container, or a WireGuard peer
+iptables -t nat -A ${NAME}_POSTROUTING -s "$sip" -d "$dip" -p udp --dport "$dport" -j MASQUERADE
-# connecting to itself via the tunnel's public IP).
-iptables -t nat -A ${NAME}_POSTROUTING -s "$dip/$dprefix" -d "$dip" -p tcp --dport "$dport" -j MASQUERADE
-iptables -t nat -A ${NAME}_POSTROUTING -s "$dip/$dprefix" -d "$dip" -p udp --dport "$dport" -j MASQUERADE
 
 exit $err

build/lib/scripts/sign-unsigned-modules

@@ -1,76 +0,0 @@
-#!/bin/bash
-
-# sign-unsigned-modules [--source <dir> --dest <dir>] [--sign-file <path>]
-#                        [--mok-key <path>] [--mok-pub <path>]
-#
-# Signs all unsigned kernel modules using the DKMS MOK key.
-#
-# Default (install) mode:
-#   Run inside a chroot. Finds and signs unsigned modules in /lib/modules in-place.
-#   sign-file and MOK key are auto-detected from standard paths.
-#
-# Overlay mode (--source/--dest):
-#   Finds unsigned modules in <source>, copies to <dest>, signs the copies.
-#   Clears old signed modules in <dest> first. Used during upgrades where the
-#   overlay upper is tmpfs and writes would be lost.
-
-set -e
-
-SOURCE=""
-DEST=""
-SIGN_FILE=""
-MOK_KEY="/var/lib/dkms/mok.key"
-MOK_PUB="/var/lib/dkms/mok.pub"
-
-while [[ $# -gt 0 ]]; do
-    case $1 in
-        --source) SOURCE="$2"; shift 2;;
-        --dest) DEST="$2"; shift 2;;
-        --sign-file) SIGN_FILE="$2"; shift 2;;
-        --mok-key) MOK_KEY="$2"; shift 2;;
-        --mok-pub) MOK_PUB="$2"; shift 2;;
-        *) echo "Unknown option: $1" >&2; exit 1;;
-    esac
-done
-
-# Auto-detect sign-file if not specified
-if [ -z "$SIGN_FILE" ]; then
-    SIGN_FILE="$(ls -1 /usr/lib/linux-kbuild-*/scripts/sign-file 2>/dev/null | head -1)"
-fi
-
-if [ -z "$SIGN_FILE" ] || [ ! -x "$SIGN_FILE" ]; then
-    exit 0
-fi
-
-if [ ! -f "$MOK_KEY" ] || [ ! -f "$MOK_PUB" ]; then
-    exit 0
-fi
-
-COUNT=0
-
-if [ -n "$SOURCE" ] && [ -n "$DEST" ]; then
-    # Overlay mode: find unsigned in source, copy to dest, sign in dest
-    rm -rf "${DEST}"/lib/modules
-
-    for ko in $(find "${SOURCE}"/lib/modules -name '*.ko' 2>/dev/null); do
-        if ! modinfo "$ko" 2>/dev/null | grep -q '^sig_id:'; then
-            rel_path="${ko#${SOURCE}}"
-            mkdir -p "${DEST}$(dirname "$rel_path")"
-            cp "$ko" "${DEST}${rel_path}"
-            "$SIGN_FILE" sha256 "$MOK_KEY" "$MOK_PUB" "${DEST}${rel_path}"
-            COUNT=$((COUNT + 1))
-        fi
-    done
-else
-    # In-place mode: sign modules directly
-    for ko in $(find /lib/modules -name '*.ko' 2>/dev/null); do
-        if ! modinfo "$ko" 2>/dev/null | grep -q '^sig_id:'; then
-            "$SIGN_FILE" sha256 "$MOK_KEY" "$MOK_PUB" "$ko"
-            COUNT=$((COUNT + 1))
-        fi
-    done
-fi
-
-if [ $COUNT -gt 0 ]; then
-    echo "[sign-modules] Signed $COUNT unsigned kernel modules"
-fi

build/lib/scripts/startos-initramfs-module

@@ -104,7 +104,6 @@ local_mount_root()
 		-olowerdir=/startos/config/overlay:/lower,upperdir=/upper/data,workdir=/upper/work \
 		overlay ${rootmnt}
 
-	mkdir -m 750 -p ${rootmnt}/media/startos
 	mkdir -p ${rootmnt}/media/startos/config
 	mount --bind /startos/config ${rootmnt}/media/startos/config
 	mkdir -p ${rootmnt}/media/startos/images

build/lib/scripts/upgrade

@@ -24,7 +24,7 @@ fi
 
 unsquashfs -f -d / $1 boot
 
-umount -l /media/startos/next 2> /dev/null || true
+umount -R /media/startos/next 2> /dev/null || true
 umount /media/startos/upper 2> /dev/null || true
 umount /media/startos/lower 2> /dev/null || true
 
@@ -45,13 +45,18 @@ mkdir -p /media/startos/next/media/startos/root
 mount --bind /run /media/startos/next/run
 mount --bind /tmp /media/startos/next/tmp
 mount --bind /dev /media/startos/next/dev
-mount -t sysfs sysfs /media/startos/next/sys
+mount --bind /sys /media/startos/next/sys
-mount -t proc proc /media/startos/next/proc
+mount --bind /proc /media/startos/next/proc
-mount --rbind /boot /media/startos/next/boot
+mount --bind /boot /media/startos/next/boot
 mount --bind /media/startos/root /media/startos/next/media/startos/root
 
+if mountpoint /boot/efi 2>&1 > /dev/null; then
+    mkdir -p /media/startos/next/boot/efi
+    mount --bind /boot/efi /media/startos/next/boot/efi
+fi
+
 if mountpoint /sys/firmware/efi/efivars 2>&1 > /dev/null; then
-    mount -t efivarfs efivarfs /media/startos/next/sys/firmware/efi/efivars
+    mount --bind /sys/firmware/efi/efivars /media/startos/next/sys/firmware/efi/efivars
 fi
 
 chroot /media/startos/next bash -e << "EOF"
@@ -63,18 +68,24 @@ fi
 
 EOF
 
-# Sign unsigned kernel modules for Secure Boot
+# Promote the USB installer boot entry back to first in EFI boot order.
-SIGN_FILE="$(ls -1 /media/startos/next/usr/lib/linux-kbuild-*/scripts/sign-file 2>/dev/null | head -1)"
+# The entry number was saved during initial OS install.
-/media/startos/next/usr/lib/startos/scripts/sign-unsigned-modules \
+if [ -d /sys/firmware/efi ] && [ -f /media/startos/config/efi-installer-entry ]; then
-    --source /media/startos/lower \
+    USB_ENTRY=$(cat /media/startos/config/efi-installer-entry)
-    --dest /media/startos/config/overlay \
+    if [ -n "$USB_ENTRY" ]; then
-    --sign-file "$SIGN_FILE" \
+        CURRENT_ORDER=$(efibootmgr | grep BootOrder | sed 's/BootOrder: //')
-    --mok-key /media/startos/config/overlay/var/lib/dkms/mok.key \
+        OTHER_ENTRIES=$(echo "$CURRENT_ORDER" | tr ',' '\n' | grep -v "$USB_ENTRY" | tr '\n' ',' | sed 's/,$//')
-    --mok-pub /media/startos/config/overlay/var/lib/dkms/mok.pub
+        if [ -n "$OTHER_ENTRIES" ]; then
+            efibootmgr -o "$USB_ENTRY,$OTHER_ENTRIES"
+        else
+            efibootmgr -o "$USB_ENTRY"
+        fi
+    fi
+fi
 
 sync
 
-umount -l /media/startos/next
+umount -Rl /media/startos/next
 umount /media/startos/upper
 umount /media/startos/lower
 

build/manage-release.sh

@@ -8,7 +8,6 @@ S3_BUCKET="s3://startos-images"
 S3_CDN="https://startos-images.nyc3.cdn.digitaloceanspaces.com"
 START9_GPG_KEY="2D63C217"
 
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 ARCHES="aarch64 aarch64-nonfree aarch64-nvidia riscv64 riscv64-nonfree x86_64 x86_64-nonfree x86_64-nvidia"
 CLI_ARCHES="aarch64 riscv64 x86_64"
 
@@ -84,21 +83,16 @@ resolve_gh_user() {
     GH_GPG_KEY=$(git config user.signingkey 2>/dev/null || true)
 }
 
-# Fetch the URL for an OS asset from the registry index.
-# Usage: registry_url <iso|squashfs|img> <platform>
-registry_url() {
-    local ext=$1 platform=$2
-    if [ -z "${_REGISTRY_INDEX:-}" ]; then
-        _REGISTRY_INDEX=$(start-cli --registry=$REGISTRY registry os index)
-    fi
-    echo "$_REGISTRY_INDEX" | jq -r ".versions[\"$VERSION\"].$ext[\"$platform\"].urls[0]"
-}
-
 # --- Subcommands ---
 
 cmd_download() {
     require_version
 
+    if [ -z "${RUN_ID:-}" ]; then
+        read -rp "RUN_ID (OS images, leave blank to skip): " RUN_ID
+    fi
+    RUN_ID=$(parse_run_id "${RUN_ID:-}")
+
     if [ -z "${ST_RUN_ID:-}" ]; then
         read -rp "ST_RUN_ID (start-tunnel, leave blank to skip): " ST_RUN_ID
     fi
@@ -111,14 +105,14 @@ cmd_download() {
 
     ensure_release_dir
 
-    # Download OS images from registry (deployed by GitHub workflow)
+    if [ -n "$RUN_ID" ]; then
-    echo "Downloading OS images from registry..."
+        for arch in $ARCHES; do
-    for arch in $ARCHES; do
+            while ! gh run download -R $REPO "$RUN_ID" -n "$arch.squashfs" -D "$(pwd)"; do sleep 1; done
-        for ext in squashfs iso; do
-            echo "  $ext $arch"
-            start-cli --registry=$REGISTRY registry os asset get "$ext" "$VERSION" "$arch" -d "$(pwd)"
         done
-    done
+        for arch in $ARCHES; do
+            while ! gh run download -R $REPO "$RUN_ID" -n "$arch.iso" -D "$(pwd)"; do sleep 1; done
+        done
+    fi
 
     if [ -n "$ST_RUN_ID" ]; then
         for arch in $CLI_ARCHES; do
@@ -149,12 +143,19 @@ cmd_pull() {
         gh release download -R $REPO "v$VERSION" -p "$file" -D "$(pwd)" --clobber
     done
 
-    # Download ISOs and squashfs from registry
+    # Download ISOs and squashfs from S3 CDN
-    echo "Downloading OS images from registry..."
     for arch in $ARCHES; do
         for ext in squashfs iso; do
-            echo "  $ext $arch"
+            # Get the actual filename from the GH release asset list or body
-            start-cli --registry=$REGISTRY registry os asset get "$ext" "$VERSION" "$arch" -d "$(pwd)"
+            local filename
+            filename=$(gh release view -R $REPO "v$VERSION" --json assets -q ".assets[].name" | grep "_${arch}\\.${ext}$" || true)
+            if [ -z "$filename" ]; then
+                filename=$(gh release view -R $REPO "v$VERSION" --json body -q .body | grep -oP "[^ ]*_${arch}\\.${ext}" | head -1 || true)
+            fi
+            if [ -n "$filename" ]; then
+                echo "Downloading $filename from S3..."
+                curl -fSL -o "$filename" "$S3_CDN/v$VERSION/$filename"
+            fi
         done
     done
 }
@@ -169,12 +170,14 @@ cmd_upload() {
     require_version
     enter_release_dir
 
-    # OS images (iso/squashfs) are already on S3 via the GitHub workflow.
-    # Upload only debs and CLI binaries to the GitHub Release.
     for file in $(release_files); do
         case "$file" in
-            *.iso|*.squashfs) ;;
+            *.iso|*.squashfs)
-            *) gh release upload -R $REPO "v$VERSION" "$file" ;;
+                s3cmd put -P "$file" "$S3_BUCKET/v$VERSION/$file"
+                ;;
+            *)
+                gh release upload -R $REPO "v$VERSION" "$file"
+                ;;
         esac
     done
 }
@@ -195,22 +198,20 @@ cmd_sign() {
     enter_release_dir
     resolve_gh_user
 
-    mkdir -p signatures
-
     for file in $(release_files); do
-        gpg -u $START9_GPG_KEY --detach-sign --armor -o "signatures/${file}.start9.asc" "$file"
+        gpg -u $START9_GPG_KEY --detach-sign --armor -o "${file}.start9.asc" "$file"
         if [ -n "$GH_USER" ] && [ -n "$GH_GPG_KEY" ]; then
-            gpg -u "$GH_GPG_KEY" --detach-sign --armor -o "signatures/${file}.${GH_USER}.asc" "$file"
+            gpg -u "$GH_GPG_KEY" --detach-sign --armor -o "${file}.${GH_USER}.asc" "$file"
         fi
     done
 
-    gpg --export -a $START9_GPG_KEY > signatures/start9.key.asc
+    gpg --export -a $START9_GPG_KEY > start9.key.asc
     if [ -n "$GH_USER" ] && [ -n "$GH_GPG_KEY" ]; then
-        gpg --export -a "$GH_GPG_KEY" > "signatures/${GH_USER}.key.asc"
+        gpg --export -a "$GH_GPG_KEY" > "${GH_USER}.key.asc"
     else
         >&2 echo 'Warning: could not determine GitHub user or GPG signing key, skipping personal signature'
     fi
-    tar -czvf signatures.tar.gz -C signatures .
+    tar -czvf signatures.tar.gz *.asc
 
     gh release upload -R $REPO "v$VERSION" signatures.tar.gz --clobber
 }
@@ -228,41 +229,22 @@ cmd_cosign() {
 
     echo "Downloading existing signatures..."
     gh release download -R $REPO "v$VERSION" -p "signatures.tar.gz" -D "$(pwd)" --clobber
-    mkdir -p signatures
+    tar -xzf signatures.tar.gz
-    tar -xzf signatures.tar.gz -C signatures
 
     echo "Adding personal signatures as $GH_USER..."
     for file in $(release_files); do
-        gpg -u "$GH_GPG_KEY" --detach-sign --armor -o "signatures/${file}.${GH_USER}.asc" "$file"
+        gpg -u "$GH_GPG_KEY" --detach-sign --armor -o "${file}.${GH_USER}.asc" "$file"
     done
 
-    gpg --export -a "$GH_GPG_KEY" > "signatures/${GH_USER}.key.asc"
+    gpg --export -a "$GH_GPG_KEY" > "${GH_USER}.key.asc"
 
     echo "Re-packing signatures..."
-    tar -czvf signatures.tar.gz -C signatures .
+    tar -czvf signatures.tar.gz *.asc
 
     gh release upload -R $REPO "v$VERSION" signatures.tar.gz --clobber
     echo "Done. Personal signatures for $GH_USER added to v$VERSION."
 }
 
-cmd_publish_tunnel() {
-    require_version
-    enter_release_dir
-
-    local tunnel_debs=()
-    for file in start-tunnel*.deb; do
-        [ -f "$file" ] && tunnel_debs+=("$file")
-    done
-
-    if [ ${#tunnel_debs[@]} -eq 0 ]; then
-        >&2 echo "No start-tunnel .deb files found in release directory"
-        exit 1
-    fi
-
-    echo "Publishing start-tunnel debs to apt repository..."
-    "$SCRIPT_DIR/apt/publish-deb.sh" "${tunnel_debs[@]}"
-}
-
 cmd_notes() {
     require_version
     enter_release_dir
@@ -270,14 +252,14 @@ cmd_notes() {
     cat << EOF
 # ISO Downloads
 
-- [x86_64/AMD64]($(registry_url iso x86_64-nonfree))
+- [x86_64/AMD64]($S3_CDN/v$VERSION/$(ls *_x86_64-nonfree.iso))
-- [x86_64/AMD64 + NVIDIA]($(registry_url iso x86_64-nvidia))
+- [x86_64/AMD64 + NVIDIA]($S3_CDN/v$VERSION/$(ls *_x86_64-nvidia.iso))
-- [x86_64/AMD64-slim (FOSS-only)]($(registry_url iso x86_64) "Without proprietary software or drivers")
+- [x86_64/AMD64-slim (FOSS-only)]($S3_CDN/v$VERSION/$(ls *_x86_64.iso) "Without proprietary software or drivers")
-- [aarch64/ARM64]($(registry_url iso aarch64-nonfree))
+- [aarch64/ARM64]($S3_CDN/v$VERSION/$(ls *_aarch64-nonfree.iso))
-- [aarch64/ARM64 + NVIDIA]($(registry_url iso aarch64-nvidia))
+- [aarch64/ARM64 + NVIDIA]($S3_CDN/v$VERSION/$(ls *_aarch64-nvidia.iso))
-- [aarch64/ARM64-slim (FOSS-Only)]($(registry_url iso aarch64) "Without proprietary software or drivers")
+- [aarch64/ARM64-slim (FOSS-Only)]($S3_CDN/v$VERSION/$(ls *_aarch64.iso) "Without proprietary software or drivers")
-- [RISCV64 (RVA23)]($(registry_url iso riscv64-nonfree))
+- [RISCV64 (RVA23)]($S3_CDN/v$VERSION/$(ls *_riscv64-nonfree.iso))
-- [RISCV64 (RVA23)-slim (FOSS-only)]($(registry_url iso riscv64) "Without proprietary software or drivers")
+- [RISCV64 (RVA23)-slim (FOSS-only)]($S3_CDN/v$VERSION/$(ls *_riscv64.iso) "Without proprietary software or drivers")
 
 EOF
     cat << 'EOF'
@@ -333,8 +315,9 @@ EOF
 
 cmd_full_release() {
     cmd_download
+    cmd_register
     cmd_upload
-    cmd_publish_tunnel
+    cmd_index
     cmd_sign
     cmd_notes
 }
@@ -344,23 +327,22 @@ usage() {
 Usage: manage-release.sh <subcommand>
 
 Subcommands:
-  download        Download OS images from registry + other artifacts from GH Actions
+  download      Download artifacts from GitHub Actions runs
-                  OS images are pulled via start-cli from the registry (deployed by GH workflow)
+                Requires: RUN_ID, ST_RUN_ID, CLI_RUN_ID (any combination)
-                  Requires: ST_RUN_ID, CLI_RUN_ID (any combination)
+  pull          Download an existing release from the GH tag and S3
-  pull            Download an existing release from the GH tag and S3
+  register      Register the version in the Start9 registry
-  register        Register the version in the Start9 registry
+  upload        Upload artifacts to GitHub Releases and S3
-  upload          Upload artifacts to GitHub Releases and S3
+  index         Add assets to the registry index
-  index           Add assets to the registry index
+  sign          Sign all artifacts with Start9 org key (+ personal key if available)
-  publish-tunnel  Publish start-tunnel .deb files to the apt repository
+                and upload signatures.tar.gz
-  sign            Sign all artifacts with Start9 org key (+ personal key if available)
+  cosign        Add personal GPG signature to an existing release's signatures
-                  and upload signatures.tar.gz
+                (requires 'pull' first so you can verify assets before signing)
-  cosign          Add personal GPG signature to an existing release's signatures
+  notes         Print release notes with download links and checksums
-                  (requires 'pull' first so you can verify assets before signing)
+  full-release  Run: download → register → upload → index → sign → notes
-  notes           Print release notes with download links and checksums
-  full-release    Run: download → register → upload → publish-tunnel → sign → notes
 
 Environment variables:
   VERSION     (required) Release version
+  RUN_ID      GitHub Actions run ID for OS images (download subcommand)
   ST_RUN_ID   GitHub Actions run ID for start-tunnel (download subcommand)
   CLI_RUN_ID  GitHub Actions run ID for start-cli (download subcommand)
   GH_USER     Override GitHub username (default: autodetected via gh cli)
@@ -369,15 +351,14 @@ EOF
 }
 
 case "${1:-}" in
-    download)       cmd_download ;;
+    download) cmd_download ;;
-    pull)           cmd_pull ;;
+    pull)     cmd_pull ;;
-    register)       cmd_register ;;
+    register) cmd_register ;;
-    upload)         cmd_upload ;;
+    upload)   cmd_upload ;;
-    index)          cmd_index ;;
+    index)    cmd_index ;;
-    publish-tunnel) cmd_publish_tunnel ;;
+    sign)     cmd_sign ;;
-    sign)           cmd_sign ;;
+    cosign)   cmd_cosign ;;
-    cosign)         cmd_cosign ;;
+    notes)    cmd_notes ;;
-    notes)          cmd_notes ;;
+    full-release) cmd_full_release ;;
-    full-release)   cmd_full_release ;;
+    *)            usage; exit 1 ;;
-    *)              usage; exit 1 ;;
 esac

build/save-migration-images.sh

@@ -1,36 +0,0 @@
-#!/bin/bash
-# Save Docker images needed by the 0.3.6-alpha.0 migration as tarballs
-# so they can be bundled into the OS and loaded without internet access.
-set -e
-
-ARCH="${ARCH:-x86_64}"
-DESTDIR="${1:-build/lib/migration-images}"
-
-if [ "$ARCH" = "x86_64" ]; then
-    DOCKER_PLATFORM="linux/amd64"
-elif [ "$ARCH" = "aarch64" ]; then
-    DOCKER_PLATFORM="linux/arm64"
-else
-    DOCKER_PLATFORM="linux/$ARCH"
-fi
-
-IMAGES=("tonistiigi/binfmt:latest")
-if [ "$ARCH" != "riscv64" ]; then
-    IMAGES=("start9/compat:latest" "start9/utils:latest" "${IMAGES[@]}")
-fi
-
-mkdir -p "$DESTDIR"
-
-for IMAGE in "${IMAGES[@]}"; do
-    FILENAME=$(echo "$IMAGE" | sed 's|/|_|g; s/:/_/g').tar
-    if [ -f "$DESTDIR/$FILENAME" ]; then
-        echo "Skipping $IMAGE (already saved)"
-        continue
-    fi
-    echo "Pulling $IMAGE for $DOCKER_PLATFORM..."
-    docker pull --platform "$DOCKER_PLATFORM" "$IMAGE"
-    echo "Saving $IMAGE to $DESTDIR/$FILENAME..."
-    docker save "$IMAGE" -o "$DESTDIR/$FILENAME"
-done
-
-echo "Migration images saved to $DESTDIR"

container-runtime/container-runtime.service

@@ -5,7 +5,7 @@ OnFailure=container-runtime-failure.service
 [Service]
 Type=simple
 Environment=RUST_LOG=startos=debug
-ExecStart=/usr/bin/start-container pipe-wrap /usr/bin/node --experimental-detect-module --trace-warnings /usr/lib/startos/init/index.js
+ExecStart=/usr/bin/node --experimental-detect-module --trace-warnings --unhandled-rejections=warn /usr/lib/startos/init/index.js
 Restart=no
 
 [Install]

container-runtime/package-lock.json

@@ -37,7 +37,7 @@
     },
     "../sdk/dist": {
       "name": "@start9labs/start-sdk",
-      "version": "1.0.0",
+      "version": "0.4.0-beta.58",
       "license": "MIT",
       "dependencies": {
         "@iarna/toml": "^3.0.0",
@@ -45,7 +45,6 @@
         "@noble/hashes": "^1.7.2",
         "@types/ini": "^4.1.1",
         "deep-equality-data-structures": "^2.0.0",
-        "fast-xml-parser": "^5.5.6",
         "ini": "^5.0.0",
         "isomorphic-fetch": "^3.0.0",
         "mime": "^4.0.7",

container-runtime/src/Adapters/EffectCreator.ts

@@ -187,10 +187,9 @@ export function makeEffects(context: EffectContext): Effects {
     getServiceManifest(
       ...[options]: Parameters<T.Effects["getServiceManifest"]>
     ) {
-      return rpcRound("get-service-manifest", {
+      return rpcRound("get-service-manifest", options) as ReturnType<
-        ...options,
+        T.Effects["getServiceManifest"]
-        callback: context.callbacks?.addCallback(options.callback) || null,
+      >
-      }) as ReturnType<T.Effects["getServiceManifest"]>
     },
     subcontainer: {
       createFs(options: { imageId: string; name: string }) {
@@ -212,10 +211,9 @@ export function makeEffects(context: EffectContext): Effects {
       >
     }) as Effects["exportServiceInterface"],
     getContainerIp(...[options]: Parameters<T.Effects["getContainerIp"]>) {
-      return rpcRound("get-container-ip", {
+      return rpcRound("get-container-ip", options) as ReturnType<
-        ...options,
+        T.Effects["getContainerIp"]
-        callback: context.callbacks?.addCallback(options.callback) || null,
+      >
-      }) as ReturnType<T.Effects["getContainerIp"]>
     },
     getOsIp(...[]: Parameters<T.Effects["getOsIp"]>) {
       return rpcRound("get-os-ip", {}) as ReturnType<T.Effects["getOsIp"]>
@@ -246,10 +244,9 @@ export function makeEffects(context: EffectContext): Effects {
       >
     },
     getSslCertificate(options: Parameters<T.Effects["getSslCertificate"]>[0]) {
-      return rpcRound("get-ssl-certificate", {
+      return rpcRound("get-ssl-certificate", options) as ReturnType<
-        ...options,
+        T.Effects["getSslCertificate"]
-        callback: context.callbacks?.addCallback(options.callback) || null,
+      >
-      }) as ReturnType<T.Effects["getSslCertificate"]>
     },
     getSslKey(options: Parameters<T.Effects["getSslKey"]>[0]) {
       return rpcRound("get-ssl-key", options) as ReturnType<
@@ -311,10 +308,7 @@ export function makeEffects(context: EffectContext): Effects {
     },
 
     getStatus(...[o]: Parameters<T.Effects["getStatus"]>) {
-      return rpcRound("get-status", {
+      return rpcRound("get-status", o) as ReturnType<T.Effects["getStatus"]>
-        ...o,
-        callback: context.callbacks?.addCallback(o.callback) || null,
-      }) as ReturnType<T.Effects["getStatus"]>
     },
     /// DEPRECATED
     setMainStatus(o: { status: "running" | "stopped" }): Promise<null> {

container-runtime/src/Adapters/RpcListener.ts

@@ -298,10 +298,13 @@ export class RpcListener {
       }
       case "stop": {
         const { id } = stopType.parse(input)
-        this.callbacks?.removeChild("main")
         return handleRpc(
           id,
-          this.system.stop().then((result) => ({ result })),
+          this.system.stop().then((result) => {
+            this.callbacks?.removeChild("main")
+
+            return { result }
+          }),
         )
       }
       case "exit": {

container-runtime/src/Adapters/Systems/SystemForEmbassy/index.ts

@@ -42,74 +42,6 @@ function todo(): never {
   throw new Error("Not implemented")
 }
 
-function getStatus(
-  effects: Effects,
-  options: Omit<Parameters<Effects["getStatus"]>[0], "callback"> = {},
-) {
-  async function* watch(abort?: AbortSignal) {
-    const resolveCell = { resolve: () => {} }
-    effects.onLeaveContext(() => {
-      resolveCell.resolve()
-    })
-    abort?.addEventListener("abort", () => resolveCell.resolve())
-    while (effects.isInContext && !abort?.aborted) {
-      let callback: () => void = () => {}
-      const waitForNext = new Promise<void>((resolve) => {
-        callback = resolve
-        resolveCell.resolve = resolve
-      })
-      yield await effects.getStatus({ ...options, callback })
-      await waitForNext
-    }
-  }
-  return {
-    const: () =>
-      effects.getStatus({
-        ...options,
-        callback:
-          effects.constRetry &&
-          (() => effects.constRetry && effects.constRetry()),
-      }),
-    once: () => effects.getStatus(options),
-    watch: (abort?: AbortSignal) => {
-      const ctrl = new AbortController()
-      abort?.addEventListener("abort", () => ctrl.abort())
-      return watch(ctrl.signal)
-    },
-    onChange: (
-      callback: (
-        value: T.StatusInfo | null,
-        error?: Error,
-      ) => { cancel: boolean } | Promise<{ cancel: boolean }>,
-    ) => {
-      ;(async () => {
-        const ctrl = new AbortController()
-        for await (const value of watch(ctrl.signal)) {
-          try {
-            const res = await callback(value)
-            if (res.cancel) {
-              ctrl.abort()
-              break
-            }
-          } catch (e) {
-            console.error(
-              "callback function threw an error @ getStatus.onChange",
-              e,
-            )
-          }
-        }
-      })()
-        .catch((e) => callback(null, e as Error))
-        .catch((e) =>
-          console.error(
-            "callback function threw an error @ getStatus.onChange",
-            e,
-          ),
-        )
-    },
-  }
-}
-
 /**
  * Local type for procedure values from the manifest.
  * The manifest's zod schemas use ZodTypeAny casts that produce `unknown` in zod v4.
@@ -396,12 +328,6 @@ export class SystemForEmbassy implements System {
     if (this.manifest.id === "nostr") {
       this.manifest.id = "nostr-rs-relay"
     }
-    if (this.manifest.id === "ghost") {
-      this.manifest.id = "ghost-legacy"
-    }
-    if (this.manifest.id === "synapse") {
-      this.manifest.id = "synapse-legacy"
-    }
   }
 
   async init(
@@ -451,14 +377,15 @@ export class SystemForEmbassy implements System {
   }
   callCallback(_callback: number, _args: any[]): void {}
   async stop(): Promise<void> {
-    const clean = this.currentRunning?.clean({
+    const { currentRunning } = this
-      timeout: fromDuration(
+    this.currentRunning?.clean()
-        (this.manifest.main["sigterm-timeout"] as any) || "30s",
-      ),
-    })
     delete this.currentRunning
-    if (clean) {
+    if (currentRunning) {
-      await clean
+      await currentRunning.clean({
+        timeout: fromDuration(
+          (this.manifest.main["sigterm-timeout"] as any) || "30s",
+        ),
+      })
     }
   }
 
@@ -500,7 +427,7 @@ export class SystemForEmbassy implements System {
       const host = new MultiHost({ effects, id })
       const internalPorts = new Set(
         Object.values(interfaceValue["tor-config"]?.["port-mapping"] ?? {})
-          .map((v) => parseInt(v))
+          .map(Number.parseInt)
           .concat(
             ...Object.values(interfaceValue["lan-config"] ?? {}).map(
               (c) => c.internal,
@@ -1119,26 +1046,16 @@ export class SystemForEmbassy implements System {
     timeoutMs: number | null,
   ): Promise<void> {
     // TODO: docker
-    const status = await getStatus(effects, { packageId: id }).const()
+    await effects.mount({
-    if (!status) return
+      location: `/media/embassy/${id}`,
-    try {
+      target: {
-      await effects.mount({
+        packageId: id,
-        location: `/media/embassy/${id}`,
+        volumeId: "embassy",
-        target: {
+        subpath: null,
-          packageId: id,
+        readonly: true,
-          volumeId: "embassy",
+        idmap: [],
-          subpath: null,
+      },
-          readonly: true,
+    })
-          idmap: [],
-        },
-      })
-    } catch (e) {
-      console.error(
-        `Failed to mount dependency volume for ${id}, skipping autoconfig:`,
-        e,
-      )
-      return
-    }
     configFile
       .withPath(`/media/embassy/${id}/config.json`)
       .read()
@@ -1287,11 +1204,6 @@ async function updateConfig(
       if (specValue.target === "config") {
         const jp = require("jsonpath")
         const depId = specValue["package-id"]
-        const depStatus = await getStatus(effects, { packageId: depId }).const()
-        if (!depStatus) {
-          mutConfigValue[key] = null
-          continue
-        }
         await effects.mount({
           location: `/media/embassy/${depId}`,
           target: {

container-runtime/src/Adapters/Systems/SystemForEmbassy/matchManifest.ts

@@ -10,11 +10,6 @@ const matchJsProcedure = z.object({
 const matchProcedure = z.union([matchDockerProcedure, matchJsProcedure])
 export type Procedure = z.infer<typeof matchProcedure>
 
-const healthCheckFields = {
-  name: z.string(),
-  "success-message": z.string().nullable().optional(),
-}
-
 const matchAction = z.object({
   name: z.string(),
   description: z.string(),
@@ -37,10 +32,13 @@ export const matchManifest = z.object({
     .optional(),
   "health-checks": z.record(
     z.string(),
-    z.union([
+    z.intersection(
-      matchDockerProcedure.extend(healthCheckFields),
+      matchProcedure,
-      matchJsProcedure.extend(healthCheckFields),
+      z.object({
-    ]),
+        name: z.string(),
+        "success-message": z.string().nullable().optional(),
+      }),
+    ),
   ),
   config: z
     .object({

container-runtime/src/Adapters/Systems/SystemForStartOs.ts

@@ -71,7 +71,7 @@ export class SystemForStartOs implements System {
       this.starting = true
       effects.constRetry = utils.once(() => {
         console.debug(".const() triggered")
-        if (effects.isInContext) effects.restart()
+        effects.restart()
       })
       let mainOnTerm: () => Promise<void> | undefined
       const daemons = await (

core/CLAUDE.md

@@ -22,7 +22,7 @@ cd sdk && make baseDist dist               # Rebuild SDK after ts-bindings
 - Always run `cargo check -p start-os` after modifying Rust code
 - When adding RPC endpoints, follow the patterns in [rpc-toolkit.md](rpc-toolkit.md)
 - When modifying `#[ts(export)]` types, regenerate bindings and rebuild the SDK (see [ARCHITECTURE.md](../ARCHITECTURE.md#build-pipeline))
-- **i18n is mandatory** — any user-facing string must go in `core/locales/i18n.yaml` with all 5 locales (`en_US`, `de_DE`, `es_ES`, `fr_FR`, `pl_PL`). This includes CLI subcommand descriptions (`about.<name>`), CLI arg help (`help.arg.<name>`), error messages (`error.<name>`), notifications, setup messages, and any other text shown to users. Entries are alphabetically ordered within their section. See [i18n-patterns.md](i18n-patterns.md)
+- When adding i18n keys, add all 5 locales in `core/locales/i18n.yaml` (see [i18n-patterns.md](i18n-patterns.md))
 - When using DB watches, follow the `TypedDbWatch<T>` patterns in [patchdb.md](patchdb.md)
 - **Always use `.invoke(ErrorKind::...)` instead of `.status()` when running CLI commands** via `tokio::process::Command`. The `Invoke` trait (from `crate::util::Invoke`) captures stdout/stderr and checks exit codes properly. Using `.status()` leaks stderr directly to system logs, creating noise. For check-then-act patterns (e.g. `iptables -C`), use `.invoke(...).await.is_ok()` / `.is_err()` instead of `.status().await.map_or(false, |s| s.success())`.
 - Always use file utils in util::io instead of tokio::fs when available

core/Cargo.toml

@@ -15,7 +15,7 @@ license = "MIT"
 name = "start-os"
 readme = "README.md"
 repository = "https://github.com/Start9Labs/start-os"
-version = "0.4.0-beta.0" # VERSION_BUMP
+version = "0.4.0-alpha.20" # VERSION_BUMP
 
 [lib]
 name = "startos"
@@ -63,7 +63,7 @@ async-compression = { version = "0.4.32", features = [
 ] }
 async-stream = "0.3.5"
 async-trait = "0.1.74"
-axum = { version = "0.8.4", features = ["http2", "ws"] }
+axum = { version = "0.8.4", features = ["ws", "http2"] }
 backtrace-on-stack-overflow = { version = "0.3.0", optional = true }
 base32 = "0.5.0"
 base64 = "0.22.1"
@@ -100,7 +100,6 @@ fd-lock-rs = "0.1.4"
 form_urlencoded = "1.2.1"
 futures = "0.3.28"
 gpt = "4.1.0"
-hashing-serializer = "0.1.1"
 hex = "0.4.3"
 hickory-server = { version = "0.25.2", features = ["resolver"] }
 hmac = "0.12.1"
@@ -171,7 +170,9 @@ once_cell = "1.19.0"
 openssh-keys = "0.6.2"
 openssl = { version = "0.10.57", features = ["vendored"] }
 p256 = { version = "0.13.2", features = ["pem"] }
-patch-db = { version = "*", path = "../patch-db/core", features = ["trace"] }
+patch-db = { version = "*", path = "../patch-db/patch-db", features = [
+  "trace",
+] }
 pbkdf2 = "0.12.2"
 pin-project = "1.1.3"
 pkcs8 = { version = "0.10.2", features = ["std"] }
@@ -182,18 +183,17 @@ qrcode = "0.14.1"
 r3bl_tui = "0.7.6"
 rand = "0.9.2"
 regex = "1.10.2"
-rusqlite = { version = "0.34", features = ["bundled"] }
 reqwest = { version = "0.12.25", features = [
-  "http2",
   "json",
   "socks",
   "stream",
+  "http2",
 ] }
 reqwest_cookie_store = "0.9.0"
 rpassword = "7.2.0"
-rpc-toolkit = { git = "https://github.com/Start9Labs/rpc-toolkit.git" }
 rust-argon2 = "3.0.0"
 rust-i18n = "3.1.5"
+rpc-toolkit = { git = "https://github.com/Start9Labs/rpc-toolkit.git" }
 semver = { version = "1.0.20", features = ["serde"] }
 serde = { version = "1.0", features = ["derive", "rc"] }
 serde_cbor = { package = "ciborium", version = "0.2.1" }
@@ -202,7 +202,6 @@ serde_toml = { package = "toml", version = "0.9.9+spec-1.0.0" }
 serde_yaml = { package = "serde_yml", version = "0.0.12" }
 sha-crypt = "0.5.0"
 sha2 = "0.10.2"
-sha3 = "0.10"
 signal-hook = "0.3.17"
 socket2 = { version = "0.6.0", features = ["all"] }
 socks5-impl = { version = "0.7.2", features = ["client", "server"] }
@@ -234,9 +233,7 @@ uuid = { version = "1.4.1", features = ["v4"] }
 visit-rs = "0.1.1"
 x25519-dalek = { version = "2.0.1", features = ["static_secrets"] }
 zbus = "5.1.1"
-
+hashing-serializer = "0.1.1"
-[dev-dependencies]
-clap_mangen = "0.2.33"
 
 [target.'cfg(target_os = "linux")'.dependencies]
 procfs = "0.18.0"
@@ -251,3 +248,5 @@ opt-level = 3
 [profile.dev.package.backtrace]
 opt-level = 3
 
+[profile.dev.package.sqlx-macros]
+opt-level = 3

core/build/build-cli.sh

@@ -67,10 +67,6 @@ if [[ "${ENVIRONMENT:-}" =~ (^|-)console($|-) ]]; then
   RUSTFLAGS="--cfg tokio_unstable"
 fi
 
-if [[ "${ENVIRONMENT:-}" =~ (^|-)unstable($|-) ]]; then
-  RUSTFLAGS="$RUSTFLAGS -C debuginfo=1"
-fi
-
 echo "FEATURES=\"$FEATURES\""
 echo "RUSTFLAGS=\"$RUSTFLAGS\""
 rust-zig-builder cargo zigbuild --manifest-path=./core/Cargo.toml $BUILD_FLAGS --features=$FEATURES --locked --bin start-cli --target=$TARGET

core/build/build-manpage.sh

@@ -1,44 +0,0 @@
-#!/bin/bash
-
-cd "$(dirname "${BASH_SOURCE[0]}")"
-
-source ./builder-alias.sh
-
-set -ea
-shopt -s expand_aliases
-
-PROFILE=${PROFILE:-debug}
-if [ "${PROFILE}" = "release" ]; then
-	BUILD_FLAGS="--release"
-else
-  if [ "$PROFILE" != "debug" ]; then
-    >&2 echo "Unknown profile $PROFILE: falling back to debug..."
-    PROFILE=debug
-  fi
-fi
-
-if [ -z "$ARCH" ]; then
-	ARCH=$(uname -m)
-fi
-
-if [ "$ARCH" = "arm64" ]; then
-	ARCH="aarch64"
-fi
-
-RUST_ARCH="$ARCH"
-if [ "$ARCH" = "riscv64" ]; then
-	RUST_ARCH="riscv64gc"
-fi
-
-cd ../..
-FEATURES="$(echo $ENVIRONMENT | sed 's/-/,/g')"
-RUSTFLAGS=""
-if [[ "${ENVIRONMENT}" =~ (^|-)console($|-) ]]; then
-	RUSTFLAGS="--cfg tokio_unstable"
-fi
-echo "FEATURES=\"$FEATURES\""
-echo "RUSTFLAGS=\"$RUSTFLAGS\""
-rust-zig-builder cargo test --manifest-path=./core/Cargo.toml --lib $BUILD_FLAGS --features test,$FEATURES --locked 'export_manpage_'
-if [ "$(ls -nd "core/man" | awk '{ print $3 }')" != "$UID" ]; then
-  rust-zig-builder sh -c "chown -R $UID:$UID core/target && chown -R $UID:$UID core/man && chown -R $UID:$UID  /usr/local/cargo"
-fi

core/build/build-registrybox.sh

@@ -38,10 +38,6 @@ if [[ "${ENVIRONMENT}" =~ (^|-)console($|-) ]]; then
 	RUSTFLAGS="--cfg tokio_unstable"
 fi
 
-if [[ "${ENVIRONMENT}" =~ (^|-)unstable($|-) ]]; then
-	RUSTFLAGS="$RUSTFLAGS -C debuginfo=1"
-fi
-
 echo "FEATURES=\"$FEATURES\""
 echo "RUSTFLAGS=\"$RUSTFLAGS\""
 rust-zig-builder cargo zigbuild --manifest-path=./core/Cargo.toml $BUILD_FLAGS --features=$FEATURES --locked --bin registrybox --target=$RUST_ARCH-unknown-linux-musl

core/build/build-start-container.sh

@@ -38,10 +38,6 @@ if [[ "${ENVIRONMENT}" =~ (^|-)console($|-) ]]; then
 	RUSTFLAGS="--cfg tokio_unstable"
 fi
 
-if [[ "${ENVIRONMENT}" =~ (^|-)unstable($|-) ]]; then
-	RUSTFLAGS="$RUSTFLAGS -C debuginfo=1"
-fi
-
 echo "FEATURES=\"$FEATURES\""
 echo "RUSTFLAGS=\"$RUSTFLAGS\""
 rust-zig-builder cargo zigbuild --manifest-path=./core/Cargo.toml $BUILD_FLAGS --features=$FEATURES --locked --bin start-container --target=$RUST_ARCH-unknown-linux-musl

core/build/build-startbox.sh

@@ -38,10 +38,6 @@ if [[ "${ENVIRONMENT}" =~ (^|-)console($|-) ]]; then
 	RUSTFLAGS="--cfg tokio_unstable"
 fi
 
-if [[ "${ENVIRONMENT}" =~ (^|-)unstable($|-) ]]; then
-	RUSTFLAGS="$RUSTFLAGS -C debuginfo=1"
-fi
-
 echo "FEATURES=\"$FEATURES\""
 echo "RUSTFLAGS=\"$RUSTFLAGS\""
 rust-zig-builder cargo zigbuild --manifest-path=./core/Cargo.toml $BUILD_FLAGS --features=$FEATURES --locked --bin startbox --target=$RUST_ARCH-unknown-linux-musl

core/build/build-tunnelbox.sh

@@ -38,10 +38,6 @@ if [[ "${ENVIRONMENT}" =~ (^|-)console($|-) ]]; then
 	RUSTFLAGS="--cfg tokio_unstable"
 fi
 
-if [[ "${ENVIRONMENT}" =~ (^|-)unstable($|-) ]]; then
-	RUSTFLAGS="$RUSTFLAGS -C debuginfo=1"
-fi
-
 echo "FEATURES=\"$FEATURES\""
 echo "RUSTFLAGS=\"$RUSTFLAGS\""
 rust-zig-builder cargo zigbuild --manifest-path=./core/Cargo.toml $BUILD_FLAGS --features=$FEATURES --locked --bin tunnelbox --target=$RUST_ARCH-unknown-linux-musl

core/locales/i18n.yaml

@@ -857,13 +857,6 @@ error.set-sys-info:
   fr_FR: "Erreur de Définition des Infos Système"
   pl_PL: "Błąd Ustawiania Informacji o Systemie"
 
-error.bios:
-  en_US: "BIOS/UEFI Error"
-  de_DE: "BIOS/UEFI-Fehler"
-  es_ES: "Error de BIOS/UEFI"
-  fr_FR: "Erreur BIOS/UEFI"
-  pl_PL: "Błąd BIOS/UEFI"
-
 # disk/main.rs
 disk.main.disk-not-found:
   en_US: "StartOS disk not found."
@@ -872,13 +865,6 @@ disk.main.disk-not-found:
   fr_FR: "Disque StartOS non trouvé."
   pl_PL: "Nie znaleziono dysku StartOS."
 
-disk.main.converting-to-btrfs:
-  en_US: "Performing file system conversion to btrfs. This can take many hours, please be patient and DO NOT unplug the server."
-  de_DE: "Dateisystemkonvertierung zu btrfs wird durchgeführt. Dies kann viele Stunden dauern, bitte haben Sie Geduld und trennen Sie den Server NICHT vom Strom."
-  es_ES: "Realizando conversión del sistema de archivos a btrfs. Esto puede tardar muchas horas, tenga paciencia y NO desconecte el servidor."
-  fr_FR: "Conversion du système de fichiers vers btrfs en cours. Cela peut prendre de nombreuses heures, soyez patient et NE débranchez PAS le serveur."
-  pl_PL: "Wykonywanie konwersji systemu plików na btrfs. To może potrwać wiele godzin, prosimy o cierpliwość i NIE odłączaj serwera od zasilania."
-
 disk.main.incorrect-disk:
   en_US: "A StartOS disk was found, but it is not the correct disk for this device."
   de_DE: "Eine StartOS-Festplatte wurde gefunden, aber es ist nicht die richtige Festplatte für dieses Gerät."
@@ -1262,13 +1248,6 @@ backup.bulk.leaked-reference:
   fr_FR: "référence fuitée vers BackupMountGuard"
   pl_PL: "wyciekła referencja do BackupMountGuard"
 
-backup.bulk.service-not-ready:
-  en_US: "Cannot create a backup of a service that is still initializing or in an error state"
-  de_DE: "Es kann keine Sicherung eines Dienstes erstellt werden, der noch initialisiert wird oder sich im Fehlerzustand befindet"
-  es_ES: "No se puede crear una copia de seguridad de un servicio que aún se está inicializando o está en estado de error"
-  fr_FR: "Impossible de créer une sauvegarde d'un service encore en cours d'initialisation ou en état d'erreur"
-  pl_PL: "Nie można utworzyć kopii zapasowej usługi, która jest jeszcze inicjalizowana lub znajduje się w stanie błędu"
-
 # backup/restore.rs
 backup.restore.package-error:
   en_US: "Error restoring package %{id}: %{error}"
@@ -1393,21 +1372,6 @@ net.tor.client-error:
   fr_FR: "Erreur du client Tor : %{error}"
   pl_PL: "Błąd klienta Tor: %{error}"
 
-# net/tunnel.rs
-net.tunnel.timeout-waiting-for-add:
-  en_US: "timed out waiting for gateway %{gateway} to appear in database"
-  de_DE: "Zeitüberschreitung beim Warten auf das Erscheinen von Gateway %{gateway} in der Datenbank"
-  es_ES: "se agotó el tiempo esperando que la puerta de enlace %{gateway} aparezca en la base de datos"
-  fr_FR: "délai d'attente dépassé pour l'apparition de la passerelle %{gateway} dans la base de données"
-  pl_PL: "upłynął limit czasu oczekiwania na pojawienie się bramy %{gateway} w bazie danych"
-
-net.tunnel.timeout-waiting-for-remove:
-  en_US: "timed out waiting for gateway %{gateway} to be removed from database"
-  de_DE: "Zeitüberschreitung beim Warten auf das Entfernen von Gateway %{gateway} aus der Datenbank"
-  es_ES: "se agotó el tiempo esperando que la puerta de enlace %{gateway} sea eliminada de la base de datos"
-  fr_FR: "délai d'attente dépassé pour la suppression de la passerelle %{gateway} de la base de données"
-  pl_PL: "upłynął limit czasu oczekiwania na usunięcie bramy %{gateway} z bazy danych"
-
 # net/wifi.rs
 net.wifi.ssid-no-special-characters:
   en_US: "SSID may not have special characters"
@@ -1621,13 +1585,6 @@ net.gateway.cannot-delete-without-connection:
   fr_FR: "Impossible de supprimer l'appareil sans connexion active"
   pl_PL: "Nie można usunąć urządzenia bez aktywnego połączenia"
 
-net.gateway.no-configured-echoip-urls:
-  en_US: "No configured echoip URLs"
-  de_DE: "Keine konfigurierten EchoIP-URLs"
-  es_ES: "No hay URLs de echoip configuradas"
-  fr_FR: "Aucune URL echoip configurée"
-  pl_PL: "Brak skonfigurowanych adresów URL echoip"
-
 # net/dns.rs
 net.dns.timeout-updating-catalog:
   en_US: "timed out waiting to update dns catalog"
@@ -1721,14 +1678,6 @@ lxc.mod.cleaned-up-containers:
   fr_FR: "Conteneurs LXC orphelins nettoyés avec succès"
   pl_PL: "Pomyślnie wyczyszczono wiszące kontenery LXC"
 
-# version/v0_3_6_alpha_0.rs
-migration.migrating-package:
-  en_US: "Migrating package %{package}..."
-  de_DE: "Paket %{package} wird migriert..."
-  es_ES: "Migrando paquete %{package}..."
-  fr_FR: "Migration du paquet %{package}..."
-  pl_PL: "Migracja pakietu %{package}..."
-
 # registry/admin.rs
 registry.admin.unknown-signer:
   en_US: "Unknown signer"
@@ -1826,21 +1775,6 @@ registry.os.version.signer-not-authorized:
   fr_FR: "Le signataire %{signer} n'est pas autorisé à signer pour v%{version}"
   pl_PL: "Sygnatariusz %{signer} nie jest autoryzowany do podpisywania v%{version}"
 
-# registry/os/promote.rs
-registry.os.promote.need-from-or-to:
-  en_US: "At least one of --from or --to must be specified"
-  de_DE: "Mindestens --from oder --to muss angegeben werden"
-  es_ES: "Se debe especificar al menos --from o --to"
-  fr_FR: "Au moins --from ou --to doit être spécifié"
-  pl_PL: "Należy podać przynajmniej --from lub --to"
-
-registry.os.promote.version-not-found:
-  en_US: "OS version %{version} not found on source registry"
-  de_DE: "OS-Version %{version} nicht in der Quell-Registry gefunden"
-  es_ES: "Versión del SO %{version} no encontrada en el registro de origen"
-  fr_FR: "Version OS %{version} introuvable dans le registre source"
-  pl_PL: "Wersja OS %{version} nie znaleziona w rejestrze źródłowym"
-
 # registry/package/mod.rs
 registry.package.remove-not-exist:
   en_US: "%{id}@%{version}%{sighash} does not exist, so not removed"
@@ -1885,20 +1819,6 @@ registry.package.add-mirror.unauthorized:
   fr_FR: "Non autorisé"
   pl_PL: "Brak autoryzacji"
 
-registry.package.promote.need-from-or-to:
-  en_US: "At least one of --from or --to must be specified"
-  de_DE: "Mindestens --from oder --to muss angegeben werden"
-  es_ES: "Se debe especificar al menos --from o --to"
-  fr_FR: "Au moins --from ou --to doit être spécifié"
-  pl_PL: "Należy podać przynajmniej --from lub --to"
-
-registry.package.promote.version-not-found:
-  en_US: "Version %{version} of %{id} not found on source registry"
-  de_DE: "Version %{version} von %{id} nicht in der Quell-Registry gefunden"
-  es_ES: "Versión %{version} de %{id} no encontrada en el registro de origen"
-  fr_FR: "Version %{version} de %{id} introuvable dans le registre source"
-  pl_PL: "Wersja %{version} pakietu %{id} nie znaleziona w rejestrze źródłowym"
-
 registry.package.cannot-remove-last-mirror:
   en_US: "Cannot remove last mirror from an s9pk"
   de_DE: "Letzter Spiegel kann nicht aus einem s9pk entfernt werden"
@@ -2686,13 +2606,6 @@ help.arg.add-signer-key:
   fr_FR: "Ajouter une clé publique au signataire"
   pl_PL: "Dodaj klucz publiczny do sygnatariusza"
 
-help.arg.address:
-  en_US: "Network address"
-  de_DE: "Netzwerkadresse"
-  es_ES: "Dirección de red"
-  fr_FR: "Adresse réseau"
-  pl_PL: "Adres sieciowy"
-
 help.arg.allow-model-mismatch:
   en_US: "Allow database model mismatch"
   de_DE: "Datenbankmodell-Abweichung erlauben"
@@ -2707,13 +2620,6 @@ help.arg.allow-partial-backup:
   fr_FR: "Laisser le média monté même si backupfs échoue à monter"
   pl_PL: "Pozostaw nośnik zamontowany nawet jeśli backupfs nie może się zamontować"
 
-help.arg.architecture:
-  en_US: "Target CPU architecture (e.g. x86_64, aarch64)"
-  de_DE: "Ziel-CPU-Architektur (z.B. x86_64, aarch64)"
-  es_ES: "Arquitectura de CPU objetivo (ej. x86_64, aarch64)"
-  fr_FR: "Architecture CPU cible (ex. x86_64, aarch64)"
-  pl_PL: "Docelowa architektura CPU (np. x86_64, aarch64)"
-
 help.arg.architecture-mask:
   en_US: "Filter by CPU architecture"
   de_DE: "Nach CPU-Architektur filtern"
@@ -2840,20 +2746,6 @@ help.arg.download-directory:
   fr_FR: "Chemin du répertoire de téléchargement"
   pl_PL: "Ścieżka katalogu do pobrania"
 
-help.arg.echoip-urls:
-  en_US: "Echo IP service URLs for external IP detection"
-  de_DE: "Echo-IP-Dienst-URLs zur externen IP-Erkennung"
-  es_ES: "URLs del servicio Echo IP para detección de IP externa"
-  fr_FR: "URLs du service Echo IP pour la détection d'IP externe"
-  pl_PL: "Adresy URL usługi Echo IP do wykrywania zewnętrznego IP"
-
-help.arg.ed25519:
-  en_US: "Use Ed25519 instead of NIST P-256"
-  de_DE: "Ed25519 anstelle von NIST P-256 verwenden"
-  es_ES: "Usar Ed25519 en lugar de NIST P-256"
-  fr_FR: "Utiliser Ed25519 au lieu de NIST P-256"
-  pl_PL: "Użyj Ed25519 zamiast NIST P-256"
-
 help.arg.emulate-missing-arch:
   en_US: "Emulate missing architecture using this one"
   de_DE: "Fehlende Architektur mit dieser emulieren"
@@ -2931,13 +2823,6 @@ help.arg.force-uninstall:
   fr_FR: "Ignorer les erreurs dans le script de désinitialisation du service"
   pl_PL: "Ignoruj błędy w skrypcie deinicjalizacji usługi"
 
-help.arg.from-registry-url:
-  en_US: "Source registry URL to promote from"
-  de_DE: "Quell-Registry-URL zum Heraufstufen"
-  es_ES: "URL del registro de origen para promover"
-  fr_FR: "URL du registre source pour la promotion"
-  pl_PL: "URL rejestru źródłowego do promowania"
-
 help.arg.host-url:
   en_US: "URL of the StartOS server"
   de_DE: "URL des StartOS-Servers"
@@ -2945,13 +2830,6 @@ help.arg.host-url:
   fr_FR: "URL du serveur StartOS"
   pl_PL: "URL serwera StartOS"
 
-help.arg.hostnames:
-  en_US: "Hostnames to include in the certificate"
-  de_DE: "Hostnamen, die in das Zertifikat aufgenommen werden sollen"
-  es_ES: "Nombres de host para incluir en el certificado"
-  fr_FR: "Noms d'hôtes à inclure dans le certificat"
-  pl_PL: "Nazwy hostów do uwzględnienia w certyfikacie"
-
 help.arg.icon-path:
   en_US: "Path to service icon file"
   de_DE: "Pfad zur Service-Icon-Datei"
@@ -3036,41 +2914,6 @@ help.arg.log-limit:
   fr_FR: "Nombre maximum d'entrées de journal"
   pl_PL: "Maksymalna liczba wpisów logu"
 
-help.arg.merge:
-  en_US: "Merge with existing version range instead of replacing"
-  de_DE: "Mit vorhandenem Versionsbereich zusammenführen statt ersetzen"
-  es_ES: "Combinar con el rango de versiones existente en lugar de reemplazar"
-  fr_FR: "Fusionner avec la plage de versions existante au lieu de remplacer"
-  pl_PL: "Połącz z istniejącym zakresem wersji zamiast zastępować"
-
-help.arg.metrics-after:
-  en_US: "Start of time range (RFC 3339 timestamp)"
-  de_DE: "Beginn des Zeitraums (RFC 3339 Zeitstempel)"
-  es_ES: "Inicio del rango de tiempo (marca de tiempo RFC 3339)"
-  fr_FR: "Début de la plage temporelle (horodatage RFC 3339)"
-  pl_PL: "Początek zakresu czasu (znacznik czasu RFC 3339)"
-
-help.arg.metrics-before:
-  en_US: "End of time range (RFC 3339 timestamp)"
-  de_DE: "Ende des Zeitraums (RFC 3339 Zeitstempel)"
-  es_ES: "Fin del rango de tiempo (marca de tiempo RFC 3339)"
-  fr_FR: "Fin de la plage temporelle (horodatage RFC 3339)"
-  pl_PL: "Koniec zakresu czasu (znacznik czasu RFC 3339)"
-
-help.arg.metrics-pkg-id:
-  en_US: "Filter by package ID"
-  de_DE: "Nach Paket-ID filtern"
-  es_ES: "Filtrar por ID de paquete"
-  fr_FR: "Filtrer par identifiant de paquet"
-  pl_PL: "Filtruj według identyfikatora pakietu"
-
-help.arg.metrics-version:
-  en_US: "Filter by version"
-  de_DE: "Nach Version filtern"
-  es_ES: "Filtrar por versión"
-  fr_FR: "Filtrer par version"
-  pl_PL: "Filtruj według wersji"
-
 help.arg.mirror-url:
   en_US: "URL of the mirror"
   de_DE: "URL des Spiegels"
@@ -3183,12 +3026,12 @@ help.arg.platform:
   fr_FR: "Identifiant de la plateforme cible"
   pl_PL: "Identyfikator platformy docelowej"
 
-help.arg.port:
+help.arg.postgres-connection-url:
-  en_US: "Port number"
+  en_US: "PostgreSQL connection URL"
-  de_DE: "Portnummer"
+  de_DE: "PostgreSQL-Verbindungs-URL"
-  es_ES: "Número de puerto"
+  es_ES: "URL de conexión PostgreSQL"
-  fr_FR: "Numéro de port"
+  fr_FR: "URL de connexion PostgreSQL"
-  pl_PL: "Numer portu"
+  pl_PL: "URL połączenia PostgreSQL"
 
 help.arg.proxy-url:
   en_US: "HTTP/SOCKS proxy URL"
@@ -3267,13 +3110,6 @@ help.arg.server-id:
   fr_FR: "Identifiant unique du serveur"
   pl_PL: "Unikalny identyfikator serwera"
 
-help.arg.set-as-default-outbound:
-  en_US: "Set as the default outbound gateway"
-  de_DE: "Als Standard-Ausgangs-Gateway festlegen"
-  es_ES: "Establecer como puerta de enlace de salida predeterminada"
-  fr_FR: "Définir comme passerelle de sortie par défaut"
-  pl_PL: "Ustaw jako domyślną bramę wychodzącą"
-
 help.arg.set-signer-name:
   en_US: "Set the signer name"
   de_DE: "Unterzeichnernamen festlegen"
@@ -3414,13 +3250,6 @@ help.arg.target-version-range:
   fr_FR: "Contrainte de plage de version cible"
   pl_PL: "Ograniczenie zakresu wersji docelowej"
 
-help.arg.to-registry-url:
-  en_US: "Destination registry URL to promote to"
-  de_DE: "Ziel-Registry-URL zum Heraufstufen"
-  es_ES: "URL del registro de destino para promover"
-  fr_FR: "URL du registre de destination pour la promotion"
-  pl_PL: "URL rejestru docelowego do promowania"
-
 help.arg.tor-proxy-url:
   en_US: "Tor SOCKS proxy URL"
   de_DE: "Tor-SOCKS-Proxy-URL"
@@ -3645,13 +3474,6 @@ help.arg.gateway-name:
   fr_FR: "Nom de la passerelle"
   pl_PL: "Nazwa bramy"
 
-help.arg.gateway-type:
-  en_US: "Type of gateway"
-  de_DE: "Typ des Gateways"
-  es_ES: "Tipo de puerta de enlace"
-  fr_FR: "Type de passerelle"
-  pl_PL: "Typ bramy"
-
 help.arg.governor-name:
   en_US: "CPU governor name"
   de_DE: "CPU-Governor-Name"
@@ -4178,13 +4000,6 @@ about.add-version-signer:
   fr_FR: "Ajouter un signataire de version"
   pl_PL: "Dodaj sygnatariusza wersji"
 
-about.add-vhost-passthrough:
-  en_US: "Add vhost passthrough"
-  de_DE: "Vhost-Passthrough hinzufügen"
-  es_ES: "Agregar passthrough de vhost"
-  fr_FR: "Ajouter un passthrough vhost"
-  pl_PL: "Dodaj passthrough vhost"
-
 about.add-wifi-ssid-password:
   en_US: "Add wifi ssid and password"
   de_DE: "WLAN-SSID und Passwort hinzufügen"
@@ -4234,13 +4049,6 @@ about.check-for-updates:
   fr_FR: "Vérifier les mises à jour disponibles"
   pl_PL: "Sprawdź dostępne aktualizacje"
 
-about.check-port-reachability:
-  en_US: "Check if a port is reachable from the WAN"
-  de_DE: "Prüfen, ob ein Port vom WAN erreichbar ist"
-  es_ES: "Comprobar si un puerto es accesible desde la WAN"
-  fr_FR: "Vérifier si un port est accessible depuis le WAN"
-  pl_PL: "Sprawdź, czy port jest osiągalny z WAN"
-
 about.check-update-startos:
   en_US: "Check a given registry for StartOS updates and update if available"
   de_DE: "Ein bestimmtes Registry auf StartOS-Updates prüfen und bei Verfügbarkeit aktualisieren"
@@ -4339,13 +4147,6 @@ about.commands-authentication:
   fr_FR: "Commandes liées à l'authentification, comme connexion, déconnexion"
   pl_PL: "Polecenia związane z uwierzytelnianiem, np. logowanie, wylogowanie"
 
-about.commands-authorized-keys:
-  en_US: "Commands for managing authorized keys"
-  de_DE: "Befehle zur Verwaltung autorisierter Schlüssel"
-  es_ES: "Comandos para gestionar claves autorizadas"
-  fr_FR: "Commandes pour gérer les clés autorisées"
-  pl_PL: "Polecenia do zarządzania autoryzowanymi kluczami"
-
 about.commands-backup:
   en_US: "Commands related to backup creation and backup targets"
   de_DE: "Befehle zur Backup-Erstellung und Backup-Zielen"
@@ -4409,41 +4210,6 @@ about.commands-experimental:
   fr_FR: "Commandes liées à la configuration d'options expérimentales comme zram et le gouverneur CPU"
   pl_PL: "Polecenia konfiguracji opcji eksperymentalnych jak zram i regulator CPU"
 
-about.commands-host-address-domain:
-  en_US: "Commands for managing host address domains"
-  de_DE: "Befehle zur Verwaltung von Host-Adressdomänen"
-  es_ES: "Comandos para gestionar dominios de direcciones del host"
-  fr_FR: "Commandes pour gérer les domaines d'adresses de l'hôte"
-  pl_PL: "Polecenia do zarządzania domenami adresów hosta"
-
-about.commands-host-addresses:
-  en_US: "Commands for managing host addresses"
-  de_DE: "Befehle zur Verwaltung von Host-Adressen"
-  es_ES: "Comandos para gestionar direcciones del host"
-  fr_FR: "Commandes pour gérer les adresses de l'hôte"
-  pl_PL: "Polecenia do zarządzania adresami hosta"
-
-about.commands-host-bindings:
-  en_US: "Commands for managing host bindings"
-  de_DE: "Befehle zur Verwaltung von Host-Bindungen"
-  es_ES: "Comandos para gestionar vínculos del host"
-  fr_FR: "Commandes pour gérer les liaisons de l'hôte"
-  pl_PL: "Polecenia do zarządzania powiązaniami hosta"
-
-about.commands-host-private-domain:
-  en_US: "Commands for managing private domains for a host"
-  de_DE: "Befehle zur Verwaltung privater Domänen für einen Host"
-  es_ES: "Comandos para gestionar dominios privados de un host"
-  fr_FR: "Commandes pour gérer les domaines privés d'un hôte"
-  pl_PL: "Polecenia do zarządzania prywatnymi domenami hosta"
-
-about.commands-host-public-domain:
-  en_US: "Commands for managing public domains for a host"
-  de_DE: "Befehle zur Verwaltung öffentlicher Domänen für einen Host"
-  es_ES: "Comandos para gestionar dominios públicos de un host"
-  fr_FR: "Commandes pour gérer les domaines publics d'un hôte"
-  pl_PL: "Polecenia do zarządzania publicznymi domenami hosta"
-
 about.commands-host-system-ui:
   en_US: "Commands for modifying the host for the system ui"
   de_DE: "Befehle zum Ändern des Hosts für die System-UI"
@@ -4500,13 +4266,6 @@ about.commands-packages:
   fr_FR: "Commandes liées aux paquets"
   pl_PL: "Polecenia związane z pakietami"
 
-about.commands-port-forward:
-  en_US: "Commands for managing port forwards"
-  de_DE: "Befehle zur Verwaltung von Portweiterleitungen"
-  es_ES: "Comandos para gestionar reenvíos de puertos"
-  fr_FR: "Commandes pour gérer les redirections de ports"
-  pl_PL: "Polecenia do zarządzania przekierowaniami portów"
-
 about.commands-registry:
   en_US: "Commands related to the registry"
   de_DE: "Befehle zum Registry"
@@ -4521,20 +4280,6 @@ about.commands-registry-db:
   fr_FR: "Commandes pour interagir avec la base de données, comme dump et apply"
   pl_PL: "Polecenia interakcji z bazą danych, np. dump i apply"
 
-about.commands-registry-metrics:
-  en_US: "Query registry usage metrics"
-  de_DE: "Registry-Nutzungsmetriken abfragen"
-  es_ES: "Consultar métricas de uso del registro"
-  fr_FR: "Consulter les métriques d'utilisation du registre"
-  pl_PL: "Zapytaj o metryki użycia rejestru"
-
-about.commands-registry-info:
-  en_US: "View or edit registry information"
-  de_DE: "Registry-Informationen anzeigen oder bearbeiten"
-  es_ES: "Ver o editar información del registro"
-  fr_FR: "Afficher ou modifier les informations du registre"
-  pl_PL: "Wyświetl lub edytuj informacje rejestru"
-
 about.commands-restore-backup:
   en_US: "Commands for restoring package(s) from backup"
   de_DE: "Befehle zum Wiederherstellen von Paketen aus dem Backup"
@@ -4577,20 +4322,6 @@ about.commands-tunnel:
   fr_FR: "Commandes liées à StartTunnel"
   pl_PL: "Polecenia związane z StartTunnel"
 
-about.commands-tunnel-update:
-  en_US: "Commands for checking and applying tunnel updates"
-  de_DE: "Befehle zum Prüfen und Anwenden von Tunnel-Updates"
-  es_ES: "Comandos para verificar y aplicar actualizaciones del túnel"
-  fr_FR: "Commandes pour vérifier et appliquer les mises à jour du tunnel"
-  pl_PL: "Polecenia do sprawdzania i stosowania aktualizacji tunelu"
-
-about.commands-tunnel-web:
-  en_US: "Commands for managing the tunnel web interface"
-  de_DE: "Befehle zur Verwaltung der Tunnel-Weboberfläche"
-  es_ES: "Comandos para gestionar la interfaz web del túnel"
-  fr_FR: "Commandes pour gérer l'interface web du tunnel"
-  pl_PL: "Polecenia do zarządzania interfejsem webowym tunelu"
-
 about.commands-wifi:
   en_US: "Commands related to wifi networks i.e. add, connect, delete"
   de_DE: "Befehle zu WLAN-Netzwerken, z.B. hinzufügen, verbinden, löschen"
@@ -4731,13 +4462,6 @@ about.display-s9pk-manifest:
   fr_FR: "Afficher le manifeste s9pk"
   pl_PL: "Wyświetl manifest s9pk"
 
-about.display-s9pk-root-sighash-and-maxsize:
-  en_US: "Display the s9pk root signature hash and max size"
-  de_DE: "Den s9pk-Root-Signaturhash und die maximale Größe anzeigen"
-  es_ES: "Mostrar el hash de firma raíz y el tamaño máximo del s9pk"
-  fr_FR: "Afficher le hachage de signature racine et la taille maximale du s9pk"
-  pl_PL: "Wyświetl hash podpisu głównego i maksymalny rozmiar s9pk"
-
 about.display-server-metrics:
   en_US: "Display server metrics"
   de_DE: "Server-Metriken anzeigen"
@@ -4801,20 +4525,6 @@ about.dump-address-resolution-table:
   fr_FR: "Exporter la table de résolution d'adresses"
   pl_PL: "Zrzuć tabelę rozpoznawania adresów"
 
-about.dump-port-forward-table:
-  en_US: "Dump port forward table"
-  de_DE: "Portweiterleitungstabelle ausgeben"
-  es_ES: "Volcar tabla de reenvío de puertos"
-  fr_FR: "Exporter la table de redirection de ports"
-  pl_PL: "Zrzuć tabelę przekierowań portów"
-
-about.dump-vhost-proxy-table:
-  en_US: "Dump vhost proxy table"
-  de_DE: "Vhost-Proxy-Tabelle ausgeben"
-  es_ES: "Volcar tabla de proxy vhost"
-  fr_FR: "Exporter la table de proxy vhost"
-  pl_PL: "Zrzuć tabelę proxy vhost"
-
 about.echo-message:
   en_US: "Echo a message back"
   de_DE: "Eine Nachricht zurückgeben"
@@ -4850,13 +4560,6 @@ about.enable-kiosk-mode:
   fr_FR: "Activer le mode kiosque"
   pl_PL: "Włącz tryb kiosku"
 
-about.enable-or-disable-port-forward:
-  en_US: "Enable or disable a port forward"
-  de_DE: "Portweiterleitung aktivieren oder deaktivieren"
-  es_ES: "Habilitar o deshabilitar un reenvío de puerto"
-  fr_FR: "Activer ou désactiver une redirection de port"
-  pl_PL: "Włącz lub wyłącz przekierowanie portu"
-
 about.enable-webserver:
   en_US: "Enable the webserver"
   de_DE: "Webserver aktivieren"
@@ -4948,13 +4651,6 @@ about.get-developer-pubkey:
   fr_FR: "Obtenir la clé publique du développeur"
   pl_PL: "Pobierz klucz publiczny dewelopera"
 
-about.get-device-info:
-  en_US: "Display device information"
-  de_DE: "Geräteinformationen anzeigen"
-  es_ES: "Mostrar información del dispositivo"
-  fr_FR: "Afficher les informations de l'appareil"
-  pl_PL: "Wyświetl informacje o urządzeniu"
-
 about.get-initialization-progress:
   en_US: "Get initialization progress"
   de_DE: "Initialisierungsfortschritt abrufen"
@@ -4969,27 +4665,6 @@ about.get-listen-address-for-webserver:
   fr_FR: "Obtenir l'adresse d'écoute du serveur web"
   pl_PL: "Pobierz adres nasłuchiwania serwera internetowego"
 
-about.get-metrics-downloads:
-  en_US: "Count package download requests with optional filters"
-  de_DE: "Paket-Download-Anfragen mit optionalen Filtern zählen"
-  es_ES: "Contar solicitudes de descarga de paquetes con filtros opcionales"
-  fr_FR: "Compter les demandes de téléchargement de paquets avec filtres optionnels"
-  pl_PL: "Zlicz żądania pobrania pakietów z opcjonalnymi filtrami"
-
-about.get-metrics-summary:
-  en_US: "Get a summary of registry usage metrics"
-  de_DE: "Zusammenfassung der Registry-Nutzungsmetriken abrufen"
-  es_ES: "Obtener un resumen de las métricas de uso del registro"
-  fr_FR: "Obtenir un résumé des métriques d'utilisation du registre"
-  pl_PL: "Pobierz podsumowanie metryk użycia rejestru"
-
-about.get-metrics-users:
-  en_US: "Count unique active users within a time range"
-  de_DE: "Eindeutige aktive Benutzer in einem Zeitraum zählen"
-  es_ES: "Contar usuarios activos únicos dentro de un rango de tiempo"
-  fr_FR: "Compter les utilisateurs actifs uniques dans un intervalle de temps"
-  pl_PL: "Zlicz unikalnych aktywnych użytkowników w zakresie czasu"
-
 about.get-os-versions-info:
   en_US: "Get OS versions info"
   de_DE: "Informationen zu Betriebssystemversionen abrufen"
@@ -5165,13 +4840,6 @@ about.list-paths-of-package-ingredients:
   fr_FR: "Lister les chemins des composants du package"
   pl_PL: "Wyświetl ścieżki składników pakietu"
 
-about.list-registry-categories:
-  en_US: "List registry categories"
-  de_DE: "Registry-Kategorien auflisten"
-  es_ES: "Listar categorías del registro"
-  fr_FR: "Lister les catégories du registre"
-  pl_PL: "Wyświetl kategorie rejestru"
-
 about.list-registry-info-packages:
   en_US: "List registry info and packages"
   de_DE: "Registry-Informationen und Pakete auflisten"
@@ -5200,13 +4868,6 @@ about.list-version-signers:
   fr_FR: "Lister les signataires de versions"
   pl_PL: "Wyświetl sygnatariuszy wersji"
 
-about.list-vhost-passthrough:
-  en_US: "List vhost passthroughs"
-  de_DE: "Vhost-Passthroughs auflisten"
-  es_ES: "Listar passthroughs de vhost"
-  fr_FR: "Lister les passthroughs vhost"
-  pl_PL: "Wyświetl passthrough vhost"
-
 about.list-wifi-info:
   en_US: "List wifi information"
   de_DE: "WLAN-Informationen auflisten"
@@ -5256,13 +4917,6 @@ about.manage-query-dns:
   fr_FR: "Gérer et interroger le DNS"
   pl_PL: "Zarządzaj i odpytuj DNS"
 
-about.manage-ssl-certificates:
-  en_US: "Manage SSL certificates"
-  de_DE: "SSL-Zertifikate verwalten"
-  es_ES: "Gestionar certificados SSL"
-  fr_FR: "Gérer les certificats SSL"
-  pl_PL: "Zarządzaj certyfikatami SSL"
-
 about.manage-ssl-vhost-proxy:
   en_US: "Manage SSL vhost proxy"
   de_DE: "SSL-vhost-Proxy verwalten"
@@ -5326,20 +4980,6 @@ about.persist-new-notification:
   fr_FR: "Persister une nouvelle notification"
   pl_PL: "Utrwal nowe powiadomienie"
 
-about.promote-os-registry:
-  en_US: "Promote an OS version from one registry to another"
-  de_DE: "Eine OS-Version von einer Registry in eine andere heraufstufen"
-  es_ES: "Promover una versión del SO de un registro a otro"
-  fr_FR: "Promouvoir une version OS d'un registre à un autre"
-  pl_PL: "Promuj wersję OS z jednego rejestru do drugiego"
-
-about.promote-package-registry:
-  en_US: "Promote a package from one registry to another"
-  de_DE: "Ein Paket von einer Registry in eine andere heraufstufen"
-  es_ES: "Promover un paquete de un registro a otro"
-  fr_FR: "Promouvoir un paquet d'un registre à un autre"
-  pl_PL: "Promuj pakiet z jednego rejestru do drugiego"
-
 about.publish-s9pk:
   en_US: "Publish s9pk to S3 bucket and index on registry"
   de_DE: "S9pk in S3-Bucket veröffentlichen und in Registry indizieren"
@@ -5522,13 +5162,6 @@ about.remove-version-signer:
   fr_FR: "Supprimer le signataire de version"
   pl_PL: "Usuń sygnatariusza wersji"
 
-about.remove-vhost-passthrough:
-  en_US: "Remove vhost passthrough"
-  de_DE: "Vhost-Passthrough entfernen"
-  es_ES: "Eliminar passthrough de vhost"
-  fr_FR: "Supprimer un passthrough vhost"
-  pl_PL: "Usuń passthrough vhost"
-
 about.remove-wifi-network:
   en_US: "Remove a wifi network"
   de_DE: "Ein WLAN-Netzwerk entfernen"
@@ -5571,12 +5204,12 @@ about.reset-user-interface-password:
   fr_FR: "Réinitialiser le mot de passe de l'interface utilisateur"
   pl_PL: "Zresetuj hasło interfejsu użytkownika"
 
-about.uninitialize-webserver:
+about.reset-webserver:
-  en_US: "Uninitialize the webserver"
+  en_US: "Reset the webserver"
-  de_DE: "Den Webserver deinitialisieren"
+  de_DE: "Den Webserver zurücksetzen"
-  es_ES: "Desinicializar el servidor web"
+  es_ES: "Restablecer el servidor web"
-  fr_FR: "Désinitialiser le serveur web"
+  fr_FR: "Réinitialiser le serveur web"
-  pl_PL: "Zdezinicjalizuj serwer internetowy"
+  pl_PL: "Zresetuj serwer internetowy"
 
 about.restart-server:
   en_US: "Restart the server"
@@ -5592,13 +5225,6 @@ about.restart-service:
   fr_FR: "Redémarrer un service"
   pl_PL: "Uruchom ponownie usługę"
 
-about.restart-tunnel:
-  en_US: "Reboot the tunnel server"
-  de_DE: "Den Tunnel-Server neu starten"
-  es_ES: "Reiniciar el servidor del túnel"
-  fr_FR: "Redémarrer le serveur tunnel"
-  pl_PL: "Uruchom ponownie serwer tunelu"
-
 about.restore-packages-from-backup:
   en_US: "Restore packages from backup"
   de_DE: "Pakete aus Backup wiederherstellen"
@@ -5613,13 +5239,6 @@ about.run-service-action:
   fr_FR: "Exécuter une action de service"
   pl_PL: "Uruchom akcję usługi"
 
-about.set-address-enabled-for-binding:
-  en_US: "Set a gateway address enabled for a binding"
-  de_DE: "Gateway-Adresse für eine Bindung aktivieren"
-  es_ES: "Establecer una dirección de gateway habilitada para un vínculo"
-  fr_FR: "Définir une adresse de passerelle activée pour une liaison"
-  pl_PL: "Ustaw adres bramy jako włączony dla powiązania"
-
 about.set-country:
   en_US: "Set the country"
   de_DE: "Das Land festlegen"
@@ -5627,20 +5246,6 @@ about.set-country:
   fr_FR: "Définir le pays"
   pl_PL: "Ustaw kraj"
 
-about.set-default-outbound-gateway:
-  en_US: "Set the default outbound gateway"
-  de_DE: "Standard-Ausgangs-Gateway festlegen"
-  es_ES: "Establecer la puerta de enlace de salida predeterminada"
-  fr_FR: "Définir la passerelle sortante par défaut"
-  pl_PL: "Ustaw domyślną bramę wychodzącą"
-
-about.set-echoip-urls:
-  en_US: "Set the Echo IP service URLs"
-  de_DE: "Die Echo-IP-Dienst-URLs festlegen"
-  es_ES: "Establecer las URLs del servicio Echo IP"
-  fr_FR: "Définir les URLs du service Echo IP"
-  pl_PL: "Ustaw adresy URL usługi Echo IP"
-
 about.set-hostname:
   en_US: "Set the server hostname"
   de_DE: "Den Server-Hostnamen festlegen"
@@ -5676,13 +5281,6 @@ about.set-listen-address-for-webserver:
   fr_FR: "Définir l'adresse d'écoute du serveur web"
   pl_PL: "Ustaw adres nasłuchiwania serwera internetowego"
 
-about.set-outbound-gateway-package:
-  en_US: "Set the outbound gateway for a package"
-  de_DE: "Ausgangs-Gateway für ein Paket festlegen"
-  es_ES: "Establecer la puerta de enlace de salida para un paquete"
-  fr_FR: "Définir la passerelle sortante pour un package"
-  pl_PL: "Ustaw bramę wychodzącą dla pakietu"
-
 about.set-registry-icon:
   en_US: "Set the registry icon"
   de_DE: "Das Registry-Symbol festlegen"
@@ -5781,13 +5379,6 @@ about.stop-service:
   fr_FR: "Arrêter un service"
   pl_PL: "Zatrzymaj usługę"
 
-about.ssl-generate-certificate:
-  en_US: "Generate an SSL certificate from the system root CA"
-  de_DE: "SSL-Zertifikat von der System-Root-CA generieren"
-  es_ES: "Generar un certificado SSL desde la CA raíz del sistema"
-  fr_FR: "Générer un certificat SSL depuis l'autorité racine du système"
-  pl_PL: "Wygeneruj certyfikat SSL z głównego CA systemu"
-
 about.teardown-rebuild-containers:
   en_US: "Teardown and rebuild containers"
   de_DE: "Container abbauen und neu erstellen"
@@ -5858,13 +5449,6 @@ about.update-firmware:
   fr_FR: "Mettre à jour le firmware"
   pl_PL: "Zaktualizuj oprogramowanie układowe"
 
-about.update-port-forward-label:
-  en_US: "Update the label of a port forward"
-  de_DE: "Bezeichnung einer Portweiterleitung aktualisieren"
-  es_ES: "Actualizar la etiqueta de un reenvío de puerto"
-  fr_FR: "Mettre à jour le libellé d'une redirection de port"
-  pl_PL: "Zaktualizuj etykietę przekierowania portu"
-
 about.view-edit-gateway-configs:
   en_US: "View and edit gateway configurations"
   de_DE: "Gateway-Konfigurationen anzeigen und bearbeiten"

core/man/start-cli/start-cli-auth-get-pubkey.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-auth-get-pubkey 1  "get-pubkey " 
-.SH NAME
-start\-cli\-auth\-get\-pubkey \- Get the public key from the server
-.SH SYNOPSIS
-\fBstart\-cli auth get\-pubkey\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Get the public key from the server
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-auth-login.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-auth-login 1  "login " 
-.SH NAME
-start\-cli\-auth\-login \- Login to a new auth session
-.SH SYNOPSIS
-\fBstart\-cli auth login\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Login to a new auth session
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-auth-logout.1

@@ -1,16 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-auth-logout 1  "logout " 
-.SH NAME
-start\-cli\-auth\-logout \- Logout from current auth session
-.SH SYNOPSIS
-\fBstart\-cli auth logout\fR [\fB\-h\fR|\fB\-\-help\fR] <\fISESSION\fR> 
-.SH DESCRIPTION
-Logout from current auth session
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-<\fISESSION\fR>
-

core/man/start-cli/start-cli-auth-reset-password.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-auth-reset-password 1  "reset-password " 
-.SH NAME
-start\-cli\-auth\-reset\-password \- Reset the password
-.SH SYNOPSIS
-\fBstart\-cli auth reset\-password\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Reset the password
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-auth-session-kill.1

@@ -1,16 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-auth-session-kill 1  "kill " 
-.SH NAME
-start\-cli\-auth\-session\-kill \- Terminate auth sessions
-.SH SYNOPSIS
-\fBstart\-cli auth session kill\fR [\fB\-h\fR|\fB\-\-help\fR] [\fIIDS\fR] 
-.SH DESCRIPTION
-Terminate auth sessions
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-[\fIIDS\fR]
-Session identifiers

core/man/start-cli/start-cli-auth-session-list.1

@@ -1,16 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-auth-session-list 1  "list " 
-.SH NAME
-start\-cli\-auth\-session\-list \- Display all auth sessions
-.SH SYNOPSIS
-\fBstart\-cli auth session list\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Display all auth sessions
-.SH OPTIONS
-.TP
-\fB\-\-format\fR
-
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-auth-session.1

@@ -1,20 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-auth-session 1  "session " 
-.SH NAME
-start\-cli\-auth\-session \- List or kill auth sessions
-.SH SYNOPSIS
-\fBstart\-cli auth session\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
-.SH DESCRIPTION
-List or kill auth sessions
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.SH SUBCOMMANDS
-.TP
-start\-cli\-auth\-session\-kill(1)
-Terminate auth sessions
-.TP
-start\-cli\-auth\-session\-list(1)
-Display all auth sessions

core/man/start-cli/start-cli-auth.1

@@ -1,29 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-auth 1  "auth " 
-.SH NAME
-start\-cli\-auth \- Commands related to Authentication i.e. login, logout
-.SH SYNOPSIS
-\fBstart\-cli auth\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
-.SH DESCRIPTION
-Commands related to Authentication i.e. login, logout
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.SH SUBCOMMANDS
-.TP
-start\-cli\-auth\-get\-pubkey(1)
-Get the public key from the server
-.TP
-start\-cli\-auth\-login(1)
-Login to a new auth session
-.TP
-start\-cli\-auth\-logout(1)
-Logout from current auth session
-.TP
-start\-cli\-auth\-reset\-password(1)
-Reset the password
-.TP
-start\-cli\-auth\-session(1)
-List or kill auth sessions

core/man/start-cli/start-cli-backup-create.1

@@ -1,25 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-backup-create 1  "create " 
-.SH NAME
-start\-cli\-backup\-create \- Create a backup for all packages
-.SH SYNOPSIS
-\fBstart\-cli backup create\fR [\fB\-\-old\-password\fR] [\fB\-\-package\-ids\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fITARGET_ID\fR> <\fIPASSWORD\fR> 
-.SH DESCRIPTION
-Create a backup for all packages
-.SH OPTIONS
-.TP
-\fB\-\-old\-password\fR \fI<OLD_PASSWORD>\fR
-Previous backup password
-.TP
-\fB\-\-package\-ids\fR \fI<PACKAGE_IDS>\fR
-Package IDs to include in backup
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-<\fITARGET_ID\fR>
-Backup target identifier
-.TP
-<\fIPASSWORD\fR>
-Password for backup encryption

core/man/start-cli/start-cli-backup-target-cifs-add.1

@@ -1,25 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-backup-target-cifs-add 1  "add " 
-.SH NAME
-start\-cli\-backup\-target\-cifs\-add \- Add a new backup target
-.SH SYNOPSIS
-\fBstart\-cli backup target cifs add\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIHOSTNAME\fR> <\fIPATH\fR> <\fIUSERNAME\fR> [\fIPASSWORD\fR] 
-.SH DESCRIPTION
-Add a new backup target
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-<\fIHOSTNAME\fR>
-CIFS server hostname
-.TP
-<\fIPATH\fR>
-Path on the CIFS share
-.TP
-<\fIUSERNAME\fR>
-CIFS authentication username
-.TP
-[\fIPASSWORD\fR]
-CIFS authentication password

core/man/start-cli/start-cli-backup-target-cifs-remove.1

@@ -1,16 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-backup-target-cifs-remove 1  "remove " 
-.SH NAME
-start\-cli\-backup\-target\-cifs\-remove \- Remove existing backup target
-.SH SYNOPSIS
-\fBstart\-cli backup target cifs remove\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIID\fR> 
-.SH DESCRIPTION
-Remove existing backup target
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-<\fIID\fR>
-Backup target identifier

core/man/start-cli/start-cli-backup-target-cifs-update.1

@@ -1,28 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-backup-target-cifs-update 1  "update " 
-.SH NAME
-start\-cli\-backup\-target\-cifs\-update \- Update an existing backup target
-.SH SYNOPSIS
-\fBstart\-cli backup target cifs update\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIID\fR> <\fIHOSTNAME\fR> <\fIPATH\fR> <\fIUSERNAME\fR> [\fIPASSWORD\fR] 
-.SH DESCRIPTION
-Update an existing backup target
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-<\fIID\fR>
-Backup target identifier
-.TP
-<\fIHOSTNAME\fR>
-CIFS server hostname
-.TP
-<\fIPATH\fR>
-Path on the CIFS share
-.TP
-<\fIUSERNAME\fR>
-CIFS authentication username
-.TP
-[\fIPASSWORD\fR]
-CIFS authentication password

core/man/start-cli/start-cli-backup-target-cifs.1

@@ -1,23 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-backup-target-cifs 1  "cifs " 
-.SH NAME
-start\-cli\-backup\-target\-cifs \- Add, remove, or update a backup target
-.SH SYNOPSIS
-\fBstart\-cli backup target cifs\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
-.SH DESCRIPTION
-Add, remove, or update a backup target
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.SH SUBCOMMANDS
-.TP
-start\-cli\-backup\-target\-cifs\-add(1)
-Add a new backup target
-.TP
-start\-cli\-backup\-target\-cifs\-remove(1)
-Remove existing backup target
-.TP
-start\-cli\-backup\-target\-cifs\-update(1)
-Update an existing backup target

core/man/start-cli/start-cli-backup-target-info.1

@@ -1,25 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-backup-target-info 1  "info " 
-.SH NAME
-start\-cli\-backup\-target\-info \- Display backup information for a package
-.SH SYNOPSIS
-\fBstart\-cli backup target info\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fITARGET_ID\fR> <\fISERVER_ID\fR> <\fIPASSWORD\fR> 
-.SH DESCRIPTION
-Display backup information for a package
-.SH OPTIONS
-.TP
-\fB\-\-format\fR
-
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-<\fITARGET_ID\fR>
-Backup target identifier
-.TP
-<\fISERVER_ID\fR>
-Unique server identifier
-.TP
-<\fIPASSWORD\fR>
-Password for backup encryption

core/man/start-cli/start-cli-backup-target-list.1

@@ -1,16 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-backup-target-list 1  "list " 
-.SH NAME
-start\-cli\-backup\-target\-list \- List existing backup targets
-.SH SYNOPSIS
-\fBstart\-cli backup target list\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-List existing backup targets
-.SH OPTIONS
-.TP
-\fB\-\-format\fR
-
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-backup-target-mount.1

@@ -1,25 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-backup-target-mount 1  "mount " 
-.SH NAME
-start\-cli\-backup\-target\-mount \- Mount a backup target
-.SH SYNOPSIS
-\fBstart\-cli backup target mount\fR [\fB\-\-server\-id\fR] [\fB\-\-allow\-partial\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fITARGET_ID\fR> <\fIPASSWORD\fR> 
-.SH DESCRIPTION
-Mount a backup target
-.SH OPTIONS
-.TP
-\fB\-\-server\-id\fR \fI<SERVER_ID>\fR
-Unique server identifier
-.TP
-\fB\-\-allow\-partial\fR
-Leave media mounted even if backupfs fails to mount
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-<\fITARGET_ID\fR>
-Backup target identifier
-.TP
-<\fIPASSWORD\fR>
-Password for backup encryption

core/man/start-cli/start-cli-backup-target-umount.1

@@ -1,16 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-backup-target-umount 1  "umount " 
-.SH NAME
-start\-cli\-backup\-target\-umount \- Unmount a backup target
-.SH SYNOPSIS
-\fBstart\-cli backup target umount\fR [\fB\-h\fR|\fB\-\-help\fR] [\fITARGET_ID\fR] 
-.SH DESCRIPTION
-Unmount a backup target
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-[\fITARGET_ID\fR]
-Backup target identifier

core/man/start-cli/start-cli-backup-target.1

@@ -1,29 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-backup-target 1  "target " 
-.SH NAME
-start\-cli\-backup\-target \- Commands related to a backup target
-.SH SYNOPSIS
-\fBstart\-cli backup target\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
-.SH DESCRIPTION
-Commands related to a backup target
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.SH SUBCOMMANDS
-.TP
-start\-cli\-backup\-target\-cifs(1)
-Add, remove, or update a backup target
-.TP
-start\-cli\-backup\-target\-info(1)
-Display backup information for a package
-.TP
-start\-cli\-backup\-target\-list(1)
-List existing backup targets
-.TP
-start\-cli\-backup\-target\-mount(1)
-Mount a backup target
-.TP
-start\-cli\-backup\-target\-umount(1)
-Unmount a backup target

core/man/start-cli/start-cli-backup.1

@@ -1,20 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-backup 1  "backup " 
-.SH NAME
-start\-cli\-backup \- Commands related to backup creation and backup targets
-.SH SYNOPSIS
-\fBstart\-cli backup\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
-.SH DESCRIPTION
-Commands related to backup creation and backup targets
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.SH SUBCOMMANDS
-.TP
-start\-cli\-backup\-create(1)
-Create a backup for all packages
-.TP
-start\-cli\-backup\-target(1)
-Commands related to a backup target

core/man/start-cli/start-cli-db-apply.1

@@ -1,22 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-db-apply 1  "apply " 
-.SH NAME
-start\-cli\-db\-apply \- Update a database record
-.SH SYNOPSIS
-\fBstart\-cli db apply\fR [\fB\-\-allow\-model\-mismatch\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fIEXPR\fR> [\fIPATH\fR] 
-.SH DESCRIPTION
-Update a database record
-.SH OPTIONS
-.TP
-\fB\-\-allow\-model\-mismatch\fR
-Allow database model mismatch
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-<\fIEXPR\fR>
-Database patch expression to apply
-.TP
-[\fIPATH\fR]
-Path to the database

core/man/start-cli/start-cli-db-dump.1

@@ -1,22 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-db-dump 1  "dump " 
-.SH NAME
-start\-cli\-db\-dump \- Filter and query the database
-.SH SYNOPSIS
-\fBstart\-cli db dump\fR [\fB\-p\fR|\fB\-\-include\-private\fR] [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] [\fIPATH\fR] 
-.SH DESCRIPTION
-Filter and query the database
-.SH OPTIONS
-.TP
-\fB\-p\fR, \fB\-\-include\-private\fR
-Include private data in output
-.TP
-\fB\-\-format\fR
-
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-[\fIPATH\fR]
-Path to the database

core/man/start-cli/start-cli-db-put-ui.1

@@ -1,22 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-db-put-ui 1  "ui " 
-.SH NAME
-start\-cli\-db\-put\-ui \- Add path and value to db
-.SH SYNOPSIS
-\fBstart\-cli db put ui\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fIPOINTER\fR> <\fIVALUE\fR> 
-.SH DESCRIPTION
-Add path and value to db
-.SH OPTIONS
-.TP
-\fB\-\-format\fR
-
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-<\fIPOINTER\fR>
-JSON pointer to specific value
-.TP
-<\fIVALUE\fR>
-JSON value to set

core/man/start-cli/start-cli-db-put.1

@@ -1,17 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-db-put 1  "put " 
-.SH NAME
-start\-cli\-db\-put \- Command for adding UI record to db
-.SH SYNOPSIS
-\fBstart\-cli db put\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
-.SH DESCRIPTION
-Command for adding UI record to db
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.SH SUBCOMMANDS
-.TP
-start\-cli\-db\-put\-ui(1)
-Add path and value to db

core/man/start-cli/start-cli-db.1

@@ -1,23 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-db 1  "db " 
-.SH NAME
-start\-cli\-db \- Commands to interact with the db i.e. dump, put, apply
-.SH SYNOPSIS
-\fBstart\-cli db\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
-.SH DESCRIPTION
-Commands to interact with the db i.e. dump, put, apply
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.SH SUBCOMMANDS
-.TP
-start\-cli\-db\-apply(1)
-Update a database record
-.TP
-start\-cli\-db\-dump(1)
-Filter and query the database
-.TP
-start\-cli\-db\-put(1)
-Command for adding UI record to db

core/man/start-cli/start-cli-diagnostic-disk-forget.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-diagnostic-disk-forget 1  "forget " 
-.SH NAME
-start\-cli\-diagnostic\-disk\-forget \- Remove disk filesystem
-.SH SYNOPSIS
-\fBstart\-cli diagnostic disk forget\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Remove disk filesystem
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-diagnostic-disk-repair.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-diagnostic-disk-repair 1  "repair " 
-.SH NAME
-start\-cli\-diagnostic\-disk\-repair \- Repair disk corruption
-.SH SYNOPSIS
-\fBstart\-cli diagnostic disk repair\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Repair disk corruption
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-diagnostic-disk.1

@@ -1,20 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-diagnostic-disk 1  "disk " 
-.SH NAME
-start\-cli\-diagnostic\-disk \- Command to remove disk from filesystem
-.SH SYNOPSIS
-\fBstart\-cli diagnostic disk\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
-.SH DESCRIPTION
-Command to remove disk from filesystem
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.SH SUBCOMMANDS
-.TP
-start\-cli\-diagnostic\-disk\-forget(1)
-Remove disk filesystem
-.TP
-start\-cli\-diagnostic\-disk\-repair(1)
-Repair disk corruption

core/man/start-cli/start-cli-diagnostic-error.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-diagnostic-error 1  "error " 
-.SH NAME
-start\-cli\-diagnostic\-error \- Display diagnostic error
-.SH SYNOPSIS
-\fBstart\-cli diagnostic error\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Display diagnostic error
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-diagnostic-kernel-logs.1

@@ -1,28 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-diagnostic-kernel-logs 1  "kernel-logs " 
-.SH NAME
-start\-cli\-diagnostic\-kernel\-logs \- Display kernel logs
-.SH SYNOPSIS
-\fBstart\-cli diagnostic kernel\-logs\fR [\fB\-l\fR|\fB\-\-limit\fR] [\fB\-c\fR|\fB\-\-cursor\fR] [\fB\-b\fR|\fB\-\-boot\fR] [\fB\-B\fR|\fB\-\-before\fR] [\fB\-f\fR|\fB\-\-follow\fR] [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Display kernel logs
-.SH OPTIONS
-.TP
-\fB\-l\fR, \fB\-\-limit\fR \fI<LIMIT>\fR
-Maximum number of log entries
-.TP
-\fB\-c\fR, \fB\-\-cursor\fR \fI<CURSOR>\fR
-Start from this cursor position
-.TP
-\fB\-b\fR, \fB\-\-boot\fR \fI<BOOT>\fR
-Filter logs by boot ID
-.TP
-\fB\-B\fR, \fB\-\-before\fR
-Show logs before the cursor position
-.TP
-\fB\-f\fR, \fB\-\-follow\fR
-Follow log output in real\-time
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-diagnostic-logs.1

@@ -1,28 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-diagnostic-logs 1  "logs " 
-.SH NAME
-start\-cli\-diagnostic\-logs \- Display OS logs
-.SH SYNOPSIS
-\fBstart\-cli diagnostic logs\fR [\fB\-l\fR|\fB\-\-limit\fR] [\fB\-c\fR|\fB\-\-cursor\fR] [\fB\-b\fR|\fB\-\-boot\fR] [\fB\-B\fR|\fB\-\-before\fR] [\fB\-f\fR|\fB\-\-follow\fR] [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Display OS logs
-.SH OPTIONS
-.TP
-\fB\-l\fR, \fB\-\-limit\fR \fI<LIMIT>\fR
-Maximum number of log entries
-.TP
-\fB\-c\fR, \fB\-\-cursor\fR \fI<CURSOR>\fR
-Start from this cursor position
-.TP
-\fB\-b\fR, \fB\-\-boot\fR \fI<BOOT>\fR
-Filter logs by boot ID
-.TP
-\fB\-B\fR, \fB\-\-before\fR
-Show logs before the cursor position
-.TP
-\fB\-f\fR, \fB\-\-follow\fR
-Follow log output in real\-time
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-diagnostic-rebuild.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-diagnostic-rebuild 1  "rebuild " 
-.SH NAME
-start\-cli\-diagnostic\-rebuild \- Teardown and rebuild containers
-.SH SYNOPSIS
-\fBstart\-cli diagnostic rebuild\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Teardown and rebuild containers
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-diagnostic-restart.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-diagnostic-restart 1  "restart " 
-.SH NAME
-start\-cli\-diagnostic\-restart \- Restart the server
-.SH SYNOPSIS
-\fBstart\-cli diagnostic restart\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Restart the server
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-diagnostic.1

@@ -1,32 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-diagnostic 1  "diagnostic " 
-.SH NAME
-start\-cli\-diagnostic \- Commands to display logs, restart the server, etc
-.SH SYNOPSIS
-\fBstart\-cli diagnostic\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
-.SH DESCRIPTION
-Commands to display logs, restart the server, etc
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.SH SUBCOMMANDS
-.TP
-start\-cli\-diagnostic\-disk(1)
-Command to remove disk from filesystem
-.TP
-start\-cli\-diagnostic\-error(1)
-Display diagnostic error
-.TP
-start\-cli\-diagnostic\-kernel\-logs(1)
-Display kernel logs
-.TP
-start\-cli\-diagnostic\-logs(1)
-Display OS logs
-.TP
-start\-cli\-diagnostic\-rebuild(1)
-Teardown and rebuild containers
-.TP
-start\-cli\-diagnostic\-restart(1)
-Restart the server

core/man/start-cli/start-cli-disk-list.1

@@ -1,16 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-disk-list 1  "list " 
-.SH NAME
-start\-cli\-disk\-list \- List disk information
-.SH SYNOPSIS
-\fBstart\-cli disk list\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-List disk information
-.SH OPTIONS
-.TP
-\fB\-\-format\fR
-
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-disk-repair.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-disk-repair 1  "repair " 
-.SH NAME
-start\-cli\-disk\-repair \- Repair disk corruption
-.SH SYNOPSIS
-\fBstart\-cli disk repair\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Repair disk corruption
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-disk.1

@@ -1,20 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-disk 1  "disk " 
-.SH NAME
-start\-cli\-disk \- Commands for listing disk info and repairing
-.SH SYNOPSIS
-\fBstart\-cli disk\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
-.SH DESCRIPTION
-Commands for listing disk info and repairing
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.SH SUBCOMMANDS
-.TP
-start\-cli\-disk\-list(1)
-List disk information
-.TP
-start\-cli\-disk\-repair(1)
-Repair disk corruption

core/man/start-cli/start-cli-echo.1

@@ -1,16 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-echo 1  "echo " 
-.SH NAME
-start\-cli\-echo \- Echo a message back
-.SH SYNOPSIS
-\fBstart\-cli echo\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIMESSAGE\fR> 
-.SH DESCRIPTION
-Echo a message back
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-<\fIMESSAGE\fR>
-Message to echo back

core/man/start-cli/start-cli-flash-os.1

@@ -1,32 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-flash-os 1  "flash-os " 
-.SH NAME
-start\-cli\-flash\-os \- Flash StartOS to a drive
-.SH SYNOPSIS
-\fBstart\-cli flash\-os\fR [\fB\-\-efi\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fISQUASHFS\fR> <\fIDISK\fR> 
-.SH DESCRIPTION
-Flash StartOS to a drive
-.SH OPTIONS
-.TP
-\fB\-\-efi\fR \fI<EFI>\fR
-Use EFI boot mode
-.br
-
-.br
-\fIPossible values:\fR
-.RS 14
-.IP \(bu 2
-true
-.IP \(bu 2
-false
-.RE
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-<\fISQUASHFS\fR>
-Path to squashfs image file
-.TP
-<\fIDISK\fR>
-Target disk for installation

core/man/start-cli/start-cli-git-info.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-git-info 1  "git-info " 
-.SH NAME
-start\-cli\-git\-info \- Display the git hash of this build
-.SH SYNOPSIS
-\fBstart\-cli git\-info\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Display the git hash of this build
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-init-kernel-logs.1

@@ -1,28 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-init-kernel-logs 1  "kernel-logs " 
-.SH NAME
-start\-cli\-init\-kernel\-logs \- Display kernel logs
-.SH SYNOPSIS
-\fBstart\-cli init kernel\-logs\fR [\fB\-l\fR|\fB\-\-limit\fR] [\fB\-c\fR|\fB\-\-cursor\fR] [\fB\-b\fR|\fB\-\-boot\fR] [\fB\-B\fR|\fB\-\-before\fR] [\fB\-f\fR|\fB\-\-follow\fR] [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Display kernel logs
-.SH OPTIONS
-.TP
-\fB\-l\fR, \fB\-\-limit\fR \fI<LIMIT>\fR
-Maximum number of log entries
-.TP
-\fB\-c\fR, \fB\-\-cursor\fR \fI<CURSOR>\fR
-Start from this cursor position
-.TP
-\fB\-b\fR, \fB\-\-boot\fR \fI<BOOT>\fR
-Filter logs by boot ID
-.TP
-\fB\-B\fR, \fB\-\-before\fR
-Show logs before the cursor position
-.TP
-\fB\-f\fR, \fB\-\-follow\fR
-Follow log output in real\-time
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-init-key.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-init-key 1  "init-key " 
-.SH NAME
-start\-cli\-init\-key \- Create a new developer key
-.SH SYNOPSIS
-\fBstart\-cli init\-key\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Create a new developer key
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-init-logs.1

@@ -1,28 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-init-logs 1  "logs " 
-.SH NAME
-start\-cli\-init\-logs \- Display OS logs
-.SH SYNOPSIS
-\fBstart\-cli init logs\fR [\fB\-l\fR|\fB\-\-limit\fR] [\fB\-c\fR|\fB\-\-cursor\fR] [\fB\-b\fR|\fB\-\-boot\fR] [\fB\-B\fR|\fB\-\-before\fR] [\fB\-f\fR|\fB\-\-follow\fR] [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Display OS logs
-.SH OPTIONS
-.TP
-\fB\-l\fR, \fB\-\-limit\fR \fI<LIMIT>\fR
-Maximum number of log entries
-.TP
-\fB\-c\fR, \fB\-\-cursor\fR \fI<CURSOR>\fR
-Start from this cursor position
-.TP
-\fB\-b\fR, \fB\-\-boot\fR \fI<BOOT>\fR
-Filter logs by boot ID
-.TP
-\fB\-B\fR, \fB\-\-before\fR
-Show logs before the cursor position
-.TP
-\fB\-f\fR, \fB\-\-follow\fR
-Follow log output in real\-time
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-init-subscribe.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-init-subscribe 1  "subscribe " 
-.SH NAME
-start\-cli\-init\-subscribe \- Get initialization progress
-.SH SYNOPSIS
-\fBstart\-cli init subscribe\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Get initialization progress
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-init.1

@@ -1,23 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-init 1  "init " 
-.SH NAME
-start\-cli\-init \- Commands for initialization
-.SH SYNOPSIS
-\fBstart\-cli init\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
-.SH DESCRIPTION
-Commands for initialization
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.SH SUBCOMMANDS
-.TP
-start\-cli\-init\-kernel\-logs(1)
-Display kernel logs
-.TP
-start\-cli\-init\-logs(1)
-Display OS logs
-.TP
-start\-cli\-init\-subscribe(1)
-Get initialization progress

core/man/start-cli/start-cli-kiosk-disable.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-kiosk-disable 1  "disable " 
-.SH NAME
-start\-cli\-kiosk\-disable \- Disable kiosk mode
-.SH SYNOPSIS
-\fBstart\-cli kiosk disable\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Disable kiosk mode
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-kiosk-enable.1

@@ -1,13 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-kiosk-enable 1  "enable " 
-.SH NAME
-start\-cli\-kiosk\-enable \- Enable kiosk mode
-.SH SYNOPSIS
-\fBstart\-cli kiosk enable\fR [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Enable kiosk mode
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-kiosk.1

@@ -1,20 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-kiosk 1  "kiosk " 
-.SH NAME
-start\-cli\-kiosk \- Commands for kiosk mode
-.SH SYNOPSIS
-\fBstart\-cli kiosk\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
-.SH DESCRIPTION
-Commands for kiosk mode
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.SH SUBCOMMANDS
-.TP
-start\-cli\-kiosk\-disable(1)
-Disable kiosk mode
-.TP
-start\-cli\-kiosk\-enable(1)
-Enable kiosk mode

core/man/start-cli/start-cli-net-acme-init.1

@@ -1,19 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-net-acme-init 1  "init " 
-.SH NAME
-start\-cli\-net\-acme\-init \- Setup ACME certificate acquisition
-.SH SYNOPSIS
-\fBstart\-cli net acme init\fR <\fB\-\-provider\fR> [\fB\-\-contact\fR] [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Setup ACME certificate acquisition
-.SH OPTIONS
-.TP
-\fB\-\-provider\fR \fI<PROVIDER>\fR
-ACME provider identifier or url
-.TP
-\fB\-\-contact\fR \fI<CONTACT>\fR
-Contact email for ACME certificate authority
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-net-acme-remove.1

@@ -1,16 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-net-acme-remove 1  "remove " 
-.SH NAME
-start\-cli\-net\-acme\-remove \- Remove ACME certificate acquisition configuration
-.SH SYNOPSIS
-\fBstart\-cli net acme remove\fR <\fB\-\-provider\fR> [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Remove ACME certificate acquisition configuration
-.SH OPTIONS
-.TP
-\fB\-\-provider\fR \fI<PROVIDER>\fR
-ACME provider identifier or url
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-net-acme.1

@@ -1,20 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-net-acme 1  "acme " 
-.SH NAME
-start\-cli\-net\-acme \- Setup ACME certificate
-.SH SYNOPSIS
-\fBstart\-cli net acme\fR [\fB\-h\fR|\fB\-\-help\fR] <\fIsubcommands\fR>
-.SH DESCRIPTION
-Setup ACME certificate
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.SH SUBCOMMANDS
-.TP
-start\-cli\-net\-acme\-init(1)
-Setup ACME certificate acquisition
-.TP
-start\-cli\-net\-acme\-remove(1)
-Remove ACME certificate acquisition configuration

core/man/start-cli/start-cli-net-dns-dump-table.1

@@ -1,16 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-net-dns-dump-table 1  "dump-table " 
-.SH NAME
-start\-cli\-net\-dns\-dump\-table \- Dump address resolution table
-.SH SYNOPSIS
-\fBstart\-cli net dns dump\-table\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] 
-.SH DESCRIPTION
-Dump address resolution table
-.SH OPTIONS
-.TP
-\fB\-\-format\fR
-
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help

core/man/start-cli/start-cli-net-dns-query.1

@@ -1,19 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-net-dns-query 1  "query " 
-.SH NAME
-start\-cli\-net\-dns\-query \- Test DNS configuration for a domain
-.SH SYNOPSIS
-\fBstart\-cli net dns query\fR [\fB\-\-format\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fIFQDN\fR> 
-.SH DESCRIPTION
-Test DNS configuration for a domain
-.SH OPTIONS
-.TP
-\fB\-\-format\fR
-
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-<\fIFQDN\fR>
-Fully qualified domain name

core/man/start-cli/start-cli-net-dns-set-static.1

@@ -1,16 +0,0 @@
-.ie \n(.g .ds Aq \(aq
-.el .ds Aq '
-.TH start-cli-net-dns-set-static 1  "set-static " 
-.SH NAME
-start\-cli\-net\-dns\-set\-static \- Set static DNS servers
-.SH SYNOPSIS
-\fBstart\-cli net dns set\-static\fR [\fB\-h\fR|\fB\-\-help\fR] [\fISERVERS\fR] 
-.SH DESCRIPTION
-Set static DNS servers
-.SH OPTIONS
-.TP
-\fB\-h\fR, \fB\-\-help\fR
-Print help
-.TP
-[\fISERVERS\fR]
-DNS servers to use