fix: correct false breakage detection for flavored packages and config changes

Two bugs caused the UI to incorrectly warn about dependency breakages:

1. dryUpdate (version path): Flavored package versions (e.g. #knots:27.0.0:0)
   failed exver.satisfies() against flavorless ranges (e.g. >=26.0.0) due to
   flavor mismatch. Now checks the manifest's `satisfies` declarations,
   matching the pattern already used in DepErrorService. Added `satisfies`
   field to PackageVersionInfo so it's available from registry data.

2. checkConflicts (config path): fast-json-patch's compare() treated missing
   keys as conflicts (add ops) and used positional array comparison, diverging
   from the backend's conflicts() semantics. Replaced with a conflicts()
   function that mirrors core/src/service/action.rs — missing keys are not
   conflicts, and arrays use set-based comparison.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.github/workflows/startos-iso.yaml

@@ -29,7 +29,7 @@ on:
           - aarch64
           - aarch64-nonfree
           - aarch64-nvidia
-          - raspberrypi
+          # - raspberrypi
           - riscv64
           - riscv64-nonfree
       deploy:
@@ -296,18 +296,6 @@ jobs:
           echo "version=$VERSION" >> "$GITHUB_OUTPUT"
           echo "Version: $VERSION"
 
-      - name: Determine platforms
-        id: platforms
-        run: |
-          INPUT="${{ github.event.inputs.platform }}"
-          if [ "$INPUT" = "ALL" ]; then
-            PLATFORMS="x86_64 x86_64-nonfree x86_64-nvidia aarch64 aarch64-nonfree aarch64-nvidia riscv64 riscv64-nonfree"
-          else
-            PLATFORMS="$INPUT"
-          fi
-          echo "list=$PLATFORMS" >> "$GITHUB_OUTPUT"
-          echo "Platforms: $PLATFORMS"
-
       - name: Download squashfs artifacts
         uses: actions/download-artifact@v8
         with:
@@ -359,12 +347,10 @@ jobs:
         run: |
           VERSION="${{ steps.version.outputs.version }}"
           cd artifacts
-          for PLATFORM in ${{ steps.platforms.outputs.list }}; do
-            for file in *_${PLATFORM}.squashfs *_${PLATFORM}.iso; do
-              [ -f "$file" ] || continue
-              echo "Uploading $file..."
-              s3cmd put -P "$file" "${{ env.S3_BUCKET }}/v${VERSION}/$file"
-            done
+          for file in *.iso *.squashfs; do
+            [ -f "$file" ] || continue
+            echo "Uploading $file..."
+            s3cmd put -P "$file" "${{ env.S3_BUCKET }}/v${VERSION}/$file"
           done
 
       - name: Register OS version
@@ -377,14 +363,13 @@ jobs:
         run: |
           VERSION="${{ steps.version.outputs.version }}"
           cd artifacts
-          for PLATFORM in ${{ steps.platforms.outputs.list }}; do
-            for file in *_${PLATFORM}.squashfs *_${PLATFORM}.iso; do
-              [ -f "$file" ] || continue
-              echo "Indexing $file for platform $PLATFORM..."
-              start-cli --registry="${{ env.REGISTRY }}" registry os asset add \
-                --platform="$PLATFORM" \
-                --version="$VERSION" \
-                "$file" \
-                "${{ env.S3_CDN }}/v${VERSION}/$file"
-            done
+          for file in *.squashfs *.iso; do
+            [ -f "$file" ] || continue
+            PLATFORM=$(echo "$file" | sed 's/.*_\([^.]*\)\.\(squashfs\|iso\)$/\1/')
+            echo "Indexing $file for platform $PLATFORM..."
+            start-cli --registry="${{ env.REGISTRY }}" registry os asset add \
+              --platform="$PLATFORM" \
+              --version="$VERSION" \
+              "$file" \
+              "${{ env.S3_CDN }}/v${VERSION}/$file"
           done

build/lib/scripts/forward-port

@@ -58,18 +58,15 @@ iptables -t nat -A ${NAME}_OUTPUT -d "$sip" -p udp --dport "$sport" -j DNAT --to
 iptables -A ${NAME}_FORWARD -d $dip -p tcp --dport $dport -m state --state NEW -j ACCEPT
 iptables -A ${NAME}_FORWARD -d $dip -p udp --dport $dport -m state --state NEW -j ACCEPT
 
-# NAT hairpin: masquerade so replies route back through this host for proper
-# NAT reversal instead of taking a direct path that bypasses conntrack.
-# Host-to-target hairpin: locally-originated packets whose original destination
-# was sip (before OUTPUT DNAT rewrote it to dip).  Using --ctorigdst ties the
-# rule to this specific sip, so multiple WAN IPs forwarding the same port to
-# different targets each get their own masquerade.
-iptables -t nat -A ${NAME}_POSTROUTING -m addrtype --src-type LOCAL -m conntrack --ctorigdst "$sip" -d "$dip" -p tcp --dport "$dport" -j MASQUERADE
-iptables -t nat -A ${NAME}_POSTROUTING -m addrtype --src-type LOCAL -m conntrack --ctorigdst "$sip" -d "$dip" -p udp --dport "$dport" -j MASQUERADE
-# Same-subnet hairpin: when traffic originates from the same subnet as the DNAT
-# target (e.g. a container reaching another container, or a WireGuard peer
-# connecting to itself via the tunnel's public IP).
-iptables -t nat -A ${NAME}_POSTROUTING -s "$dip/$dprefix" -d "$dip" -p tcp --dport "$dport" -j MASQUERADE
-iptables -t nat -A ${NAME}_POSTROUTING -s "$dip/$dprefix" -d "$dip" -p udp --dport "$dport" -j MASQUERADE
+# NAT hairpin: masquerade traffic from the bridge subnet or host to the DNAT
+# target, so replies route back through the host for proper NAT reversal.
+# Container-to-container hairpin (source is on the bridge subnet)
+if [ -n "$bridge_subnet" ]; then
+    iptables -t nat -A ${NAME}_POSTROUTING -s "$bridge_subnet" -d "$dip" -p tcp --dport "$dport" -j MASQUERADE
+    iptables -t nat -A ${NAME}_POSTROUTING -s "$bridge_subnet" -d "$dip" -p udp --dport "$dport" -j MASQUERADE
+fi
+# Host-to-container hairpin (host connects to its own gateway IP, source is sip)
+iptables -t nat -A ${NAME}_POSTROUTING -s "$sip" -d "$dip" -p tcp --dport "$dport" -j MASQUERADE
+iptables -t nat -A ${NAME}_POSTROUTING -s "$sip" -d "$dip" -p udp --dport "$dport" -j MASQUERADE
 
 exit $err

core/src/net/gateway.rs

@@ -241,19 +241,11 @@ pub async fn check_port(
     .await
     .map_or(false, |r| r.is_ok());
 
-    let local_ipv4 = ip_info
-        .subnets
-        .iter()
-        .find_map(|s| match s.addr() {
-            IpAddr::V4(v4) => Some(v4),
-            _ => None,
-        })
-        .unwrap_or(Ipv4Addr::UNSPECIFIED);
     let client = reqwest::Client::builder();
     #[cfg(target_os = "linux")]
     let client = client
         .interface(gateway.as_str())
-        .local_address(IpAddr::V4(local_ipv4));
+        .local_address(IpAddr::V4(Ipv4Addr::UNSPECIFIED));
     let client = client.build()?;
 
     let mut res = None;
@@ -290,7 +282,12 @@ pub async fn check_port(
         ));
     };
 
-    let hairpinning = check_hairpin(gateway, local_ipv4, ip, port).await;
+    let hairpinning = tokio::time::timeout(
+        Duration::from_secs(5),
+        tokio::net::TcpStream::connect(SocketAddr::new(ip.into(), port)),
+    )
+    .await
+    .map_or(false, |r| r.is_ok());
 
     Ok(CheckPortRes {
         ip,
@@ -301,30 +298,6 @@ pub async fn check_port(
     })
 }
 
-#[cfg(target_os = "linux")]
-async fn check_hairpin(gateway: GatewayId, local_ipv4: Ipv4Addr, ip: Ipv4Addr, port: u16) -> bool {
-    let hairpinning = tokio::time::timeout(Duration::from_secs(5), async {
-        let dest = SocketAddr::new(ip.into(), port);
-        let socket = socket2::Socket::new(socket2::Domain::IPV4, socket2::Type::STREAM, None)?;
-        socket.bind_device(Some(gateway.as_str().as_bytes()))?;
-        socket.bind(&SocketAddr::new(IpAddr::V4(local_ipv4), 0).into())?;
-        socket.set_nonblocking(true)?;
-        let socket = unsafe {
-            use std::os::fd::{FromRawFd, IntoRawFd};
-            tokio::net::TcpSocket::from_raw_fd(socket.into_raw_fd())
-        };
-        socket.connect(dest).await.map(|_| ())
-    })
-    .await
-    .map_or(false, |r| r.is_ok());
-    hairpinning
-}
-
-#[cfg(not(target_os = "linux"))]
-async fn check_hairpin(_: GatewayId, _: Ipv4Addr, _: Ipv4Addr, _: u16) -> bool {
-    false
-}
-
 #[derive(Debug, Clone, Deserialize, Serialize, Parser, TS)]
 #[group(skip)]
 #[serde(rename_all = "camelCase")]
@@ -811,16 +784,12 @@ async fn watcher(
     }
 }
 
-async fn get_wan_ipv4(
-    iface: &str,
-    base_url: &Url,
-    local_ipv4: Ipv4Addr,
-) -> Result<Option<Ipv4Addr>, Error> {
+async fn get_wan_ipv4(iface: &str, base_url: &Url) -> Result<Option<Ipv4Addr>, Error> {
     let client = reqwest::Client::builder();
     #[cfg(target_os = "linux")]
     let client = client
         .interface(iface)
-        .local_address(IpAddr::V4(local_ipv4));
+        .local_address(IpAddr::V4(Ipv4Addr::UNSPECIFIED));
     let url = base_url.join("/ip").with_kind(ErrorKind::ParseUrl)?;
     let text = client
         .build()?
@@ -1443,14 +1412,7 @@ async fn poll_ip_info(
                 Some(NetworkInterfaceType::Bridge | NetworkInterfaceType::Loopback)
             )
         {
-            let local_ipv4 = subnets
-                .iter()
-                .find_map(|s| match s.addr() {
-                    IpAddr::V4(v4) => Some(v4),
-                    _ => None,
-                })
-                .unwrap_or(Ipv4Addr::UNSPECIFIED);
-            match get_wan_ipv4(iface.as_str(), &echoip_url, local_ipv4).await {
+            match get_wan_ipv4(iface.as_str(), &echoip_url).await {
                 Ok(a) => {
                     wan_ip = a;
                 }

web/projects/setup-wizard/src/app/pages/drives.page.ts

@@ -4,16 +4,8 @@ import {
   HostListener,
   inject,
 } from '@angular/core'
-import {
-  AbstractControl,
-  FormControl,
-  FormGroup,
-  ReactiveFormsModule,
-  ValidatorFn,
-  Validators,
-} from '@angular/forms'
 import { Router } from '@angular/router'
-import { WA_IS_MOBILE } from '@ng-web-apis/platform'
+import { FormsModule } from '@angular/forms'
 import {
   DialogService,
   DiskInfo,
@@ -22,14 +14,13 @@ import {
   i18nPipe,
   toGuid,
 } from '@start9labs/shared'
-import { TuiMapperPipe, TuiValidator } from '@taiga-ui/cdk'
+import { WA_IS_MOBILE } from '@ng-web-apis/platform'
 import {
   TuiButton,
-  TuiError,
   TuiIcon,
   TuiLoader,
+  TuiInput,
   TuiNotification,
-  TUI_VALIDATION_ERRORS,
   TuiTitle,
 } from '@taiga-ui/core'
 import {
@@ -38,55 +29,49 @@ import {
   TuiSelect,
   TuiTooltip,
 } from '@taiga-ui/kit'
-import { TuiCardLarge, TuiForm, TuiHeader } from '@taiga-ui/layout'
-import { distinctUntilChanged, filter, Subscription } from 'rxjs'
-import { PRESERVE_OVERWRITE } from '../components/preserve-overwrite.dialog'
+import { TuiCardLarge, TuiHeader } from '@taiga-ui/layout'
+import { PolymorpheusComponent } from '@taiga-ui/polymorpheus'
+import { filter, Subscription } from 'rxjs'
 import { ApiService } from '../services/api.service'
 import { StateService } from '../services/state.service'
+import { PRESERVE_OVERWRITE } from '../components/preserve-overwrite.dialog'
 
 @Component({
   template: `
     @if (!shuttingDown) {
-      @if (loading) {
-        <section tuiCardLarge="compact">
-          <header tuiHeader>
-            <h2 tuiTitle>{{ 'Select Drives' | i18n }}</h2>
-          </header>
+      <section tuiCardLarge="compact">
+        <header tuiHeader>
+          <h2 tuiTitle>{{ 'Select Drives' | i18n }}</h2>
+        </header>
+
+        @if (loading) {
           <tui-loader />
-        </section>
-      } @else if (drives.length === 0) {
-        <section tuiCardLarge="compact">
-          <header tuiHeader>
-            <h2 tuiTitle>{{ 'Select Drives' | i18n }}</h2>
-          </header>
+        } @else if (drives.length === 0) {
           <p tuiNotification size="m" appearance="warning">
             {{
               'No drives found. Please connect a drive and click Refresh.'
                 | i18n
             }}
           </p>
-          <footer>
-            <button tuiButton appearance="secondary" (click)="refresh()">
-              {{ 'Refresh' | i18n }}
-            </button>
-          </footer>
-        </section>
-      } @else {
-        <form tuiCardLarge="compact" tuiForm [formGroup]="form">
-          <header tuiHeader>
-            <h2 tuiTitle>{{ 'Select Drives' | i18n }}</h2>
-          </header>
-
-          <tui-textfield [stringify]="stringify">
+        } @else {
+          <tui-textfield
+            [stringify]="stringify"
+            [disabledItemHandler]="osDisabled"
+          >
             <label tuiLabel>{{ 'OS Drive' | i18n }}</label>
             @if (mobile) {
               <select
                 tuiSelect
-                formControlName="osDrive"
+                [ngModel]="selectedOsDrive"
+                (ngModelChange)="onOsDriveChange($event)"
                 [items]="drives"
               ></select>
             } @else {
-              <input tuiSelect formControlName="osDrive" />
+              <input
+                tuiSelect
+                [ngModel]="selectedOsDrive"
+                (ngModelChange)="onOsDriveChange($event)"
+              />
             }
             @if (!mobile) {
               <tui-data-list-wrapper
@@ -97,28 +82,24 @@ import { StateService } from '../services/state.service'
             }
             <tui-icon [tuiTooltip]="osDriveTooltip" />
           </tui-textfield>
-          @if (form.controls.osDrive.touched && form.controls.osDrive.invalid) {
-            <tui-error formControlName="osDrive" />
-          }
 
-          <tui-textfield [stringify]="stringify">
+          <tui-textfield
+            [stringify]="stringify"
+            [disabledItemHandler]="dataDisabled"
+          >
             <label tuiLabel>{{ 'Data Drive' | i18n }}</label>
             @if (mobile) {
               <select
                 tuiSelect
-                formControlName="dataDrive"
+                [(ngModel)]="selectedDataDrive"
+                (ngModelChange)="onDataDriveChange($event)"
                 [items]="drives"
-                [tuiValidator]="
-                  form.controls.osDrive.value | tuiMapper: dataValidator
-                "
               ></select>
             } @else {
               <input
                 tuiSelect
-                formControlName="dataDrive"
-                [tuiValidator]="
-                  form.controls.osDrive.value | tuiMapper: dataValidator
-                "
+                [(ngModel)]="selectedDataDrive"
+                (ngModelChange)="onDataDriveChange($event)"
               />
             }
             @if (!mobile) {
@@ -136,11 +117,6 @@ import { StateService } from '../services/state.service'
             }
             <tui-icon [tuiTooltip]="dataDriveTooltip" />
           </tui-textfield>
-          @if (
-            form.controls.dataDrive.touched && form.controls.dataDrive.invalid
-          ) {
-            <tui-error formControlName="dataDrive" />
-          }
 
           <ng-template #driveContent let-drive>
             <span tuiTitle>
@@ -150,14 +126,24 @@ import { StateService } from '../services/state.service'
               </span>
             </span>
           </ng-template>
+        }
 
-          <footer>
-            <button tuiButton [disabled]="form.invalid" (click)="continue()">
+        <footer>
+          @if (drives.length === 0) {
+            <button tuiButton appearance="secondary" (click)="refresh()">
+              {{ 'Refresh' | i18n }}
+            </button>
+          } @else {
+            <button
+              tuiButton
+              [disabled]="!selectedOsDrive || !selectedDataDrive"
+              (click)="continue()"
+            >
               {{ 'Continue' | i18n }}
             </button>
-          </footer>
-        </form>
-      }
+          }
+        </footer>
+      </section>
     }
   `,
   styles: `
@@ -166,34 +152,20 @@ import { StateService } from '../services/state.service'
     }
   `,
   imports: [
-    ReactiveFormsModule,
+    FormsModule,
     TuiCardLarge,
-    TuiForm,
     TuiButton,
-    TuiError,
     TuiIcon,
     TuiLoader,
+    TuiInput,
     TuiNotification,
     TuiSelect,
     TuiDataListWrapper,
     TuiTooltip,
-    TuiValidator,
-    TuiMapperPipe,
     TuiHeader,
     TuiTitle,
     i18nPipe,
   ],
-  providers: [
-    {
-      provide: TUI_VALIDATION_ERRORS,
-      useFactory: () => {
-        const i18n = inject(i18nPipe)
-        return {
-          required: i18n.transform('Required'),
-        }
-      },
-    },
-  ],
 })
 export default class DrivesPage {
   private readonly api = inject(ApiService)
@@ -216,63 +188,29 @@ export default class DrivesPage {
   }
 
   readonly osDriveTooltip = this.i18n.transform(
-    'The drive where the StartOS operating system will be installed. Minimum 18 GB.',
+    'The drive where the StartOS operating system will be installed.',
   )
   readonly dataDriveTooltip = this.i18n.transform(
-    'The drive where your StartOS data (services, settings, etc.) will be stored. This can be the same as the OS drive or a separate drive. Minimum 20 GB, or 38 GB if using a single drive for both OS and data.',
+    'The drive where your StartOS data (services, settings, etc.) will be stored. This can be the same as the OS drive or a separate drive.',
   )
 
   private readonly MIN_OS = 18 * 2 ** 30 // 18 GiB
   private readonly MIN_DATA = 20 * 2 ** 30 // 20 GiB
   private readonly MIN_BOTH = 38 * 2 ** 30 // 38 GiB
 
-  private readonly osCapacityValidator: ValidatorFn = ({
-    value,
-  }: AbstractControl) => {
-    if (!value) return null
-    return value.capacity < this.MIN_OS
-      ? {
-          tooSmallOs: this.i18n.transform('OS drive must be at least 18 GB'),
-        }
-      : null
-  }
-
-  readonly form = new FormGroup({
-    osDrive: new FormControl<DiskInfo | null>(null, [
-      Validators.required,
-      this.osCapacityValidator,
-    ]),
-    dataDrive: new FormControl<DiskInfo | null>(null, [Validators.required]),
-  })
-
-  readonly dataValidator =
-    (osDrive: DiskInfo | null): ValidatorFn =>
-    ({ value }: AbstractControl) => {
-      if (!value) return null
-      const sameAsOs = osDrive && value.logicalname === osDrive.logicalname
-      const min = sameAsOs ? this.MIN_BOTH : this.MIN_DATA
-      if (value.capacity < min) {
-        return sameAsOs
-          ? {
-              tooSmallBoth: this.i18n.transform(
-                'OS + data combined require at least 38 GB',
-              ),
-            }
-          : {
-              tooSmallData: this.i18n.transform(
-                'Data drive must be at least 20 GB',
-              ),
-            }
-      }
-      return null
-    }
-
   drives: DiskInfo[] = []
   loading = true
   shuttingDown = false
   private dialogSub?: Subscription
+  selectedOsDrive: DiskInfo | null = null
+  selectedDataDrive: DiskInfo | null = null
   preserveData: boolean | null = null
 
+  readonly osDisabled = (drive: DiskInfo): boolean =>
+    drive.capacity < this.MIN_OS
+
+  dataDisabled = (drive: DiskInfo): boolean => drive.capacity < this.MIN_DATA
+
   readonly driveName = (drive: DiskInfo): string =>
     [drive.vendor, drive.model].filter(Boolean).join(' ') ||
     this.i18n.transform('Unknown Drive')
@@ -290,40 +228,51 @@ export default class DrivesPage {
 
   async ngOnInit() {
     await this.loadDrives()
-
-    this.form.controls.osDrive.valueChanges.subscribe(drive => {
-      if (drive) {
-        this.form.controls.osDrive.markAsTouched()
-      }
-    })
-
-    this.form.controls.dataDrive.valueChanges
-      .pipe(distinctUntilChanged())
-      .subscribe(drive => {
-        this.preserveData = null
-        if (drive) {
-          this.form.controls.dataDrive.markAsTouched()
-          if (toGuid(drive)) {
-            this.showPreserveOverwriteDialog()
-          }
-        }
-      })
   }
 
   async refresh() {
     this.loading = true
-    this.form.reset()
+    this.selectedOsDrive = null
+    this.selectedDataDrive = null
     this.preserveData = null
     await this.loadDrives()
   }
 
-  continue() {
-    const osDrive = this.form.controls.osDrive.value
-    const dataDrive = this.form.controls.dataDrive.value
-    if (!osDrive || !dataDrive) return
+  onOsDriveChange(osDrive: DiskInfo | null) {
+    this.selectedOsDrive = osDrive
+    this.dataDisabled = (drive: DiskInfo) => {
+      if (osDrive && drive.logicalname === osDrive.logicalname) {
+        return drive.capacity < this.MIN_BOTH
+      }
+      return drive.capacity < this.MIN_DATA
+    }
 
-    const sameDevice = osDrive.logicalname === dataDrive.logicalname
-    const dataHasStartOS = !!toGuid(dataDrive)
+    // Clear data drive if it's now invalid
+    if (this.selectedDataDrive && this.dataDisabled(this.selectedDataDrive)) {
+      this.selectedDataDrive = null
+      this.preserveData = null
+    }
+  }
+
+  onDataDriveChange(drive: DiskInfo | null) {
+    this.preserveData = null
+
+    if (!drive) {
+      return
+    }
+
+    const hasStartOSData = !!toGuid(drive)
+    if (hasStartOSData) {
+      this.showPreserveOverwriteDialog()
+    }
+  }
+
+  continue() {
+    if (!this.selectedOsDrive || !this.selectedDataDrive) return
+
+    const sameDevice =
+      this.selectedOsDrive.logicalname === this.selectedDataDrive.logicalname
+    const dataHasStartOS = !!toGuid(this.selectedDataDrive)
 
     // Scenario 1: Same drive, has StartOS data, preserving → no warning
     if (sameDevice && dataHasStartOS && this.preserveData) {
@@ -343,7 +292,7 @@ export default class DrivesPage {
 
   private showPreserveOverwriteDialog() {
     let selectionMade = false
-    const drive = this.form.controls.dataDrive.value
+    const drive = this.selectedDataDrive
     const filesystem =
       drive?.filesystem ||
       drive?.partitions.find(p => p.guid)?.filesystem ||
@@ -355,20 +304,20 @@ export default class DrivesPage {
         data: { isExt4 },
       })
       .subscribe({
-        next: preserve => {
-          selectionMade = true
-          this.preserveData = preserve
+      next: preserve => {
+        selectionMade = true
+        this.preserveData = preserve
+        this.cdr.markForCheck()
+      },
+      complete: () => {
+        if (!selectionMade) {
+          // Dialog was dismissed without selection - clear the data drive
+          this.selectedDataDrive = null
+          this.preserveData = null
           this.cdr.markForCheck()
-        },
-        complete: () => {
-          if (!selectionMade) {
-            // Dialog was dismissed without selection - clear the data drive
-            this.form.controls.dataDrive.reset()
-            this.preserveData = null
-            this.cdr.markForCheck()
-          }
-        },
-      })
+        }
+      },
+    })
   }
 
   private showOsDriveWarning() {
@@ -411,15 +360,13 @@ export default class DrivesPage {
   }
 
   private async installOs(wipe: boolean) {
-    const osDrive = this.form.controls.osDrive.value!
-    const dataDrive = this.form.controls.dataDrive.value!
     const loader = this.loader.open('Installing StartOS').subscribe()
 
     try {
       const result = await this.api.installOs({
-        osDrive: osDrive.logicalname,
+        osDrive: this.selectedOsDrive!.logicalname,
         dataDrive: {
-          logicalname: dataDrive.logicalname,
+          logicalname: this.selectedDataDrive!.logicalname,
           wipe,
         },
       })

web/projects/shared/src/i18n/dictionaries/de.ts

@@ -399,6 +399,7 @@ export default {
   425: 'Ausführen',
   426: 'Aktion kann nur ausgeführt werden, wenn der Dienst',
   427: 'Verboten',
+  428: 'kann vorübergehend Probleme verursachen',
   429: 'hat unerfüllte Abhängigkeiten. Es wird nicht wie erwartet funktionieren.',
   430: 'Container wird neu gebaut',
   431: 'Deinstallation wird gestartet',
@@ -627,8 +628,8 @@ export default {
   697: 'Geben Sie das Passwort ein, das zum Verschlüsseln dieses Backups verwendet wurde.',
   698: 'Mehrere Backups gefunden. Wählen Sie aus, welches wiederhergestellt werden soll.',
   699: 'Backups',
-  700: 'Das Laufwerk, auf dem das StartOS-Betriebssystem installiert wird. Mindestens 18 GB.',
-  701: 'Das Laufwerk, auf dem Ihre StartOS-Daten (Dienste, Einstellungen usw.) gespeichert werden. Dies kann dasselbe wie das OS-Laufwerk oder ein separates Laufwerk sein. Mindestens 20 GB, oder 38 GB bei Verwendung eines einzelnen Laufwerks für OS und Daten.',
+  700: 'Das Laufwerk, auf dem das StartOS-Betriebssystem installiert wird.',
+  701: 'Das Laufwerk, auf dem Ihre StartOS-Daten (Dienste, Einstellungen usw.) gespeichert werden. Dies kann dasselbe wie das OS-Laufwerk oder ein separates Laufwerk sein.',
   702: 'Versuchen Sie nach der Datenübertragung von diesem Laufwerk nicht, erneut als Start9-Server davon zu booten. Dies kann zu Fehlfunktionen von Diensten, Datenbeschädigung oder Geldverlust führen.',
   703: 'Muss mindestens 12 Zeichen lang sein',
   704: 'Darf höchstens 64 Zeichen lang sein',
@@ -723,7 +724,4 @@ export default {
   808: 'Hostname geändert, Neustart damit installierte Dienste die neue Adresse verwenden',
   809: 'Sprache geändert, Neustart damit installierte Dienste die neue Sprache verwenden',
   810: 'Kioskmodus geändert, Neustart zum Anwenden',
-  811: 'OS-Laufwerk muss mindestens 18 GB groß sein',
-  812: 'Datenlaufwerk muss mindestens 20 GB groß sein',
-  813: 'OS + Daten zusammen erfordern mindestens 38 GB',
 } satisfies i18n

web/projects/shared/src/i18n/dictionaries/en.ts

@@ -398,6 +398,7 @@ export const ENGLISH: Record<string, number> = {
   'Run': 425, // as in, run a piece of software
   'Action can only be executed when service is': 426,
   'Forbidden': 427,
+  'may temporarily experiences issues': 428,
   'has unmet dependencies. It will not work as expected.': 429,
   'Rebuilding container': 430,
   'Beginning uninstall': 431,
@@ -627,8 +628,8 @@ export const ENGLISH: Record<string, number> = {
   'Enter the password that was used to encrypt this backup.': 697,
   'Multiple backups found. Select which one to restore.': 698,
   'Backups': 699,
-  'The drive where the StartOS operating system will be installed. Minimum 18 GB.': 700,
-  'The drive where your StartOS data (services, settings, etc.) will be stored. This can be the same as the OS drive or a separate drive. Minimum 20 GB, or 38 GB if using a single drive for both OS and data.': 701,
+  'The drive where the StartOS operating system will be installed.': 700,
+  'The drive where your StartOS data (services, settings, etc.) will be stored. This can be the same as the OS drive or a separate drive.': 701,
   'After transferring data from this drive, do not attempt to boot into it again as a Start9 Server. This may result in services malfunctioning, data corruption, or loss of funds.': 702,
   'Must be 12 characters or greater': 703,
   'Must be 64 character or less': 704,
@@ -724,7 +725,4 @@ export const ENGLISH: Record<string, number> = {
   'Hostname changed, restart for installed services to use the new address': 808,
   'Language changed, restart for installed services to use the new language': 809,
   'Kiosk mode changed, restart to apply': 810,
-  'OS drive must be at least 18 GB': 811,
-  'Data drive must be at least 20 GB': 812,
-  'OS + data combined require at least 38 GB': 813,
 }

web/projects/shared/src/i18n/dictionaries/es.ts

@@ -399,6 +399,7 @@ export default {
   425: 'Ejecutar',
   426: 'La acción solo se puede ejecutar cuando el servicio está',
   427: 'Prohibido',
+  428: 'puede experimentar problemas temporales',
   429: 'tiene dependencias no satisfechas. No funcionará como se espera.',
   430: 'Reconstruyendo contenedor',
   431: 'Iniciando desinstalación',
@@ -627,8 +628,8 @@ export default {
   697: 'Introduzca la contraseña que se utilizó para cifrar esta copia de seguridad.',
   698: 'Se encontraron varias copias de seguridad. Seleccione cuál restaurar.',
   699: 'Copias de seguridad',
-  700: 'La unidad donde se instalará el sistema operativo StartOS. Mínimo 18 GB.',
-  701: 'La unidad donde se almacenarán sus datos de StartOS (servicios, ajustes, etc.). Puede ser la misma que la unidad del sistema operativo o una unidad separada. Mínimo 20 GB, o 38 GB si se usa una sola unidad para el sistema operativo y los datos.',
+  700: 'La unidad donde se instalará el sistema operativo StartOS.',
+  701: 'La unidad donde se almacenarán sus datos de StartOS (servicios, ajustes, etc.). Puede ser la misma que la unidad del sistema operativo o una unidad separada.',
   702: 'Después de transferir datos desde esta unidad, no intente arrancar desde ella nuevamente como un servidor Start9. Esto puede provocar fallos en los servicios, corrupción de datos o pérdida de fondos.',
   703: 'Debe tener 12 caracteres o más',
   704: 'Debe tener 64 caracteres o menos',
@@ -723,7 +724,4 @@ export default {
   808: 'Nombre de host cambiado, reiniciar para que los servicios instalados usen la nueva dirección',
   809: 'Idioma cambiado, reiniciar para que los servicios instalados usen el nuevo idioma',
   810: 'Modo kiosco cambiado, reiniciar para aplicar',
-  811: 'La unidad del SO debe tener al menos 18 GB',
-  812: 'La unidad de datos debe tener al menos 20 GB',
-  813: 'SO + datos combinados requieren al menos 38 GB',
 } satisfies i18n

web/projects/shared/src/i18n/dictionaries/fr.ts

@@ -399,6 +399,7 @@ export default {
   425: 'Exécuter',
   426: 'Action possible uniquement lorsque le service est',
   427: 'Interdit',
+  428: 'peut rencontrer des problèmes temporaires',
   429: 'a des dépendances non satisfaites. Il ne fonctionnera pas comme prévu.',
   430: 'Reconstruction du conteneur',
   431: 'Désinstallation initiée',
@@ -627,8 +628,8 @@ export default {
   697: 'Saisissez le mot de passe utilisé pour chiffrer cette sauvegarde.',
   698: 'Plusieurs sauvegardes trouvées. Sélectionnez celle à restaurer.',
   699: 'Sauvegardes',
-  700: 'Le disque sur lequel le système d’exploitation StartOS sera installé. Minimum 18 Go.',
-  701: 'Le disque sur lequel vos données StartOS (services, paramètres, etc.) seront stockées. Il peut s’agir du même disque que le système ou d’un disque séparé. Minimum 20 Go, ou 38 Go si un seul disque est utilisé pour le système et les données.',
+  700: 'Le disque sur lequel le système d’exploitation StartOS sera installé.',
+  701: 'Le disque sur lequel vos données StartOS (services, paramètres, etc.) seront stockées. Il peut s’agir du même disque que le système ou d’un disque séparé.',
   702: 'Après le transfert des données depuis ce disque, n’essayez pas de démarrer dessus à nouveau en tant que serveur Start9. Cela peut entraîner des dysfonctionnements des services, une corruption des données ou une perte de fonds.',
   703: 'Doit comporter au moins 12 caractères',
   704: 'Doit comporter au maximum 64 caractères',
@@ -723,7 +724,4 @@ export default {
   808: "Nom d'hôte modifié, redémarrer pour que les services installés utilisent la nouvelle adresse",
   809: 'Langue modifiée, redémarrer pour que les services installés utilisent la nouvelle langue',
   810: 'Mode kiosque modifié, redémarrer pour appliquer',
-  811: 'Le disque système doit faire au moins 18 Go',
-  812: 'Le disque de données doit faire au moins 20 Go',
-  813: 'Système + données combinés nécessitent au moins 38 Go',
 } satisfies i18n

web/projects/shared/src/i18n/dictionaries/pl.ts

@@ -399,6 +399,7 @@ export default {
   425: 'Uruchom',
   426: 'Akcja może być wykonana tylko gdy serwis jest',
   427: 'Zabronione',
+  428: 'może tymczasowo napotkać problemy',
   429: 'ma niespełnione zależności. Nie będzie działać zgodnie z oczekiwaniami.',
   430: 'Odbudowywanie kontenera',
   431: 'Rozpoczynanie odinstalowania',
@@ -627,8 +628,8 @@ export default {
   697: 'Wprowadź hasło użyte do zaszyfrowania tej kopii zapasowej.',
   698: 'Znaleziono wiele kopii zapasowych. Wybierz, którą przywrócić.',
   699: 'Kopie zapasowe',
-  700: 'Dysk, na którym zostanie zainstalowany system operacyjny StartOS. Minimum 18 GB.',
-  701: 'Dysk, na którym będą przechowywane dane StartOS (usługi, ustawienia itp.). Może to być ten sam dysk co systemowy lub oddzielny dysk. Minimum 20 GB lub 38 GB w przypadku jednego dysku na system i dane.',
+  700: 'Dysk, na którym zostanie zainstalowany system operacyjny StartOS.',
+  701: 'Dysk, na którym będą przechowywane dane StartOS (usługi, ustawienia itp.). Może to być ten sam dysk co systemowy lub oddzielny dysk.',
   702: 'Po przeniesieniu danych z tego dysku nie próbuj ponownie uruchamiać z niego systemu jako serwer Start9. Może to spowodować nieprawidłowe działanie usług, uszkodzenie danych lub utratę środków.',
   703: 'Musi mieć co najmniej 12 znaków',
   704: 'Musi mieć maksymalnie 64 znaki',
@@ -723,7 +724,4 @@ export default {
   808: 'Nazwa hosta zmieniona, uruchom ponownie, aby zainstalowane usługi używały nowego adresu',
   809: 'Język zmieniony, uruchom ponownie, aby zainstalowane usługi używały nowego języka',
   810: 'Tryb kiosku zmieniony, uruchom ponownie, aby zastosować',
-  811: 'Dysk systemowy musi mieć co najmniej 18 GB',
-  812: 'Dysk danych musi mieć co najmniej 20 GB',
-  813: 'System + dane łącznie wymagają co najmniej 38 GB',
 } satisfies i18n

web/projects/ui/src/app/routes/portal/routes/services/components/controls.component.ts

@@ -36,7 +36,7 @@ import { InterfaceService } from '../../../components/interfaces/interface.servi
         <button
           tuiButton
           iconStart="@tui.rotate-cw"
-          (click)="controls.restart(manifest().id)"
+          (click)="controls.restart(manifest())"
         >
           {{ 'Restart' | i18n }}
         </button>

web/projects/ui/src/app/routes/portal/routes/system/routes/startos-ui/startos-ui.component.ts

@@ -54,7 +54,7 @@ export default class StartOsUiComponent {
   private readonly i18n = inject(i18nPipe)
 
   readonly iface: T.ServiceInterface = {
-    id: 'startos-ui',
+    id: '',
     name: 'StartOS UI',
     description: this.i18n.transform(
       'The web user interface for your StartOS server, accessible from any browser.',

web/projects/ui/src/app/routes/portal/routes/updates/item.component.ts

@@ -10,6 +10,7 @@ import { RouterLink } from '@angular/router'
 import { MarketplacePkg } from '@start9labs/marketplace'
 import {
   DialogService,
+  i18nKey,
   i18nPipe,
   LocalizePipe,
   MarkdownPipe,
@@ -17,10 +18,10 @@ import {
 } from '@start9labs/shared'
 import {
   TuiButton,
-  TuiExpand,
   TuiIcon,
   TuiLink,
   TuiTitle,
+  TuiExpand,
 } from '@taiga-ui/core'
 import { NgDompurifyPipe } from '@taiga-ui/dompurify'
 import {
@@ -31,6 +32,7 @@ import {
   TuiProgressCircle,
 } from '@taiga-ui/kit'
 import { PatchDB } from 'patch-db-client'
+import { defaultIfEmpty, firstValueFrom } from 'rxjs'
 import { InstallingProgressPipe } from 'src/app/routes/portal/routes/services/pipes/install-progress.pipe'
 import { MarketplaceService } from 'src/app/services/marketplace.service'
 import {
@@ -39,6 +41,8 @@ import {
   PackageDataEntry,
   UpdatingState,
 } from 'src/app/services/patch-db/data-model'
+import { getAllPackages } from 'src/app/utils/get-package-data'
+import { hasCurrentDeps } from 'src/app/utils/has-deps'
 import UpdatesComponent from './updates.component'
 
 @Component({
@@ -102,7 +106,7 @@ import UpdatesComponent from './updates.component'
             size="s"
             [loading]="!ready()"
             [appearance]="error() ? 'destructive' : 'primary'"
-            (click.stop)="update()"
+            (click.stop)="onClick()"
           >
             {{ error() ? ('Retry' | i18n) : ('Update' | i18n) }}
           </button>
@@ -195,7 +199,6 @@ import UpdatesComponent from './updates.component'
       &[colspan]:only-child {
         padding: 0 3rem;
         text-align: left;
-        white-space: normal;
       }
     }
 
@@ -270,7 +273,22 @@ export class UpdatesItemComponent {
   readonly local =
     input.required<PackageDataEntry<InstalledState | UpdatingState>>()
 
-  async update() {
+  async onClick() {
+    this.ready.set(false)
+    this.error.set('')
+
+    if (hasCurrentDeps(this.item().id, await getAllPackages(this.patch))) {
+      if (await this.alert()) {
+        await this.update()
+      } else {
+        this.ready.set(true)
+      }
+    } else {
+      await this.update()
+    }
+  }
+
+  private async update() {
     const { id, version } = this.item()
     const url = this.parent.current()?.url || ''
 
@@ -282,4 +300,21 @@ export class UpdatesItemComponent {
       this.error.set(e.message)
     }
   }
+
+  private async alert(): Promise<boolean> {
+    return firstValueFrom(
+      this.dialog
+        .openConfirm({
+          label: 'Warning',
+          size: 's',
+          data: {
+            content:
+              `${this.i18n.transform('Services that depend on')} ${this.local().stateInfo.manifest.title} ${this.i18n.transform('will no longer work properly and may crash.')}` as i18nKey,
+            yes: 'Continue',
+            no: 'Cancel',
+          },
+        })
+        .pipe(defaultIfEmpty(false)),
+    )
+  }
 }

web/projects/ui/src/app/services/api/api.fixures.ts

@@ -763,68 +763,7 @@ export namespace Mock {
           upstreamRepo: 'https://github.com/bitcoin/bitcoin',
           marketingUrl: 'https://bitcoin.org',
           docsUrls: ['https://bitcoin.org'],
-          releaseNotes: `# Bitcoin Core v27.0.0 Release Notes
-
-## Overview
-
-This is a major release of Bitcoin Core with significant performance improvements, new RPC methods, and critical security patches. We strongly recommend all users upgrade as soon as possible.
-
-## Breaking Changes
-
-- The deprecated \`getinfo\` RPC has been fully removed. Use \`getblockchaininfo\`, \`getnetworkinfo\`, and \`getwalletinfo\` instead.
-- Configuration option \`rpcallowip\` no longer accepts hostnames — only CIDR notation is supported (e.g. \`192.168.1.0/24\`).
-- The wallet database format has been migrated from BerkeleyDB to SQLite. Existing wallets will be automatically converted on first load. **This migration is irreversible.**
-
-## New Features
-
-- **Compact Block Filters (BIP 158):** Full support for serving compact block filters to light clients over the P2P network. Enable with \`-blockfilterindex=basic -peerblockfilters=1\`.
-- **Miniscript support in descriptors:** You can now use miniscript policies inside \`wsh()\` descriptors for more expressive spending conditions.
-- **New RPC: \`getdescriptoractivity\`:** Returns all wallet-relevant transactions for a given set of output descriptors within a block range.
-
-## Performance Improvements
-
-- Block validation is now 18% faster due to improved UTXO cache management and parallel script verification.
-- Initial block download (IBD) time reduced by approximately 25% on NVMe storage thanks to batched database writes.
-- Memory usage during reindex reduced from ~4.2 GB to ~2.8 GB peak.
-
-## Configuration Changes
-
-\`\`\`ini
-# New options added in this release
-blockfilterindex=basic       # Enable BIP 158 compact block filter index
-peerblockfilters=1           # Serve compact block filters to peers
-shutdownnotify=<cmd>         # Execute command on clean shutdown
-v2transport=1                # Prefer BIP 324 encrypted P2P connections
-\`\`\`
-
-## Bug Fixes
-
-1. Fixed a race condition in the mempool acceptance logic that could cause \`submitblock\` to return stale rejection reasons under high transaction throughput.
-2. Corrected fee estimation for transactions with many inputs where the estimator previously overestimated by up to 15%.
-3. Resolved an edge case where \`pruneblockchain\` could delete blocks still needed by an in-progress \`rescanblockchain\` operation.
-4. Fixed incorrect handling of \`OP_CHECKSIGADD\` in legacy script verification mode that could lead to consensus divergence on certain non-standard transactions.
-5. Patched a denial-of-service vector where a malicious peer could send specially crafted \`inv\` messages causing excessive memory allocation in the transaction request tracker.
-
-## Dependency Updates
-
-| Dependency | Old Version | New Version |
-|------------|-------------|-------------|
-| OpenSSL    | 1.1.1w      | 3.0.13      |
-| libevent   | 2.1.12      | 2.2.1       |
-| Boost      | 1.81.0      | 1.84.0      |
-| SQLite     | 3.38.5      | 3.45.1      |
-| miniupnpc  | 2.2.4       | 2.2.7       |
-
-## Migration Guide
-
-For users running Bitcoin Core as a service behind a reverse proxy, note that the default RPC authentication mechanism now uses cookie-based auth by default. If you previously relied on \`rpcuser\`/\`rpcpassword\`, you must explicitly set \`rpcauth\` in your configuration file. See https://github.com/bitcoin/bitcoin/blob/master/share/rpcauth/rpcauth.py for the auth string generator.
-
-## Known Issues
-
-- Wallet encryption with very long passphrases (>1024 characters) may cause the wallet to become temporarily unresponsive during unlock. A fix is planned for v27.0.1.
-- The \`listtransactions\` RPC may return duplicate entries when called with \`include_watchonly=true\` on descriptor wallets that share derivation paths across multiple descriptors.
-
-For the full changelog, see https://github.com/bitcoin/bitcoin/blob/v27.0.0/doc/release-notes/release-notes-27.0.0.md#full-changelog-with-detailed-descriptions-of-every-commit-and-pull-request-merged`,
+          releaseNotes: 'Even better support for Bitcoin and wallets!',
           osVersion: '0.4.0',
           sdkVersion: '0.4.0-beta.49',
           gitHash: 'fakehash',

web/projects/ui/src/app/services/controls.service.ts

@@ -84,16 +84,35 @@ export class ControlsService {
     })
   }
 
-  async restart(id: string) {
-    const loader = this.loader.open('Restarting').subscribe()
+  async restart({ id, title }: T.Manifest) {
+    const packages = await getAllPackages(this.patch)
 
-    try {
-      await this.api.restartPackage({ id })
-    } catch (e: any) {
-      this.errorService.handleError(e)
-    } finally {
-      loader.unsubscribe()
-    }
+    defer(() =>
+      hasCurrentDeps(id, packages)
+        ? this.dialog
+            .openConfirm({
+              label: 'Warning',
+              size: 's',
+              data: {
+                content:
+                  `${this.i18n.transform('Services that depend on')} ${title} ${this.i18n.transform('may temporarily experiences issues')}` as i18nKey,
+                yes: 'Restart',
+                no: 'Cancel',
+              },
+            })
+            .pipe(filter(Boolean))
+        : of(null),
+    ).subscribe(async () => {
+      const loader = this.loader.open('Restarting').subscribe()
+
+      try {
+        await this.api.restartPackage({ id })
+      } catch (e: any) {
+        this.errorService.handleError(e)
+      } finally {
+        loader.unsubscribe()
+      }
+    })
   }
 
   private alert(content: T.LocaleString): Promise<boolean> {