ui-patch hinzugefügt

UI Patch

README.md

@@ -1,3 +1,9 @@
+```bash
+wget -O setup-nasbeery https://gitea.perlbach24.de/scripte/nasbeery/raw/branch/main/setup-nasbeery
+bash setup-nasbeery
+```
+---- THIS IS A CLONE OF THE ORIGINAL REPOSITORY ON git.bashclub.org ----
+
 # nasbeery
 Installer for NasBeery ZFS NAS for Raspberry PI 4 and 400 on Raspberry Pi OS Lite 64-Bit
 
@@ -5,3 +11,9 @@ Installer for NasBeery ZFS NAS for Raspberry PI 4 and 400 on Raspberry Pi OS Lit
 wget -O setup-nasbeery https://github.com/bashclub/nasbeery/raw/main/setup-nasbeery
 bash setup-nasbeery
 ```
+
+# Authors
+### Christian Zengel
+https://aow.de
+### Thorsten Spille
+[<img src="https://storage.ko-fi.com/cdn/brandasset/kofi_s_tag_dark.png" rel="Support me on Ko-Fi">](https://ko-fi.com/thorakel)

setup-nasbeery

@@ -1,4 +1,7 @@
 #!/bin/bash
+set -e
+export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+
 prog="$(basename "$0")"
 
 usage() {
@@ -12,7 +15,7 @@ usage() {
     -A ADDONS    Comma separated list of addons to install (ispconfig, docker)
     -S SHARE     Name of the SMB share to create (default: share)
   ---------------------------------------------------------------------------
-    (C) 2022     nasbeery installer by bashclub (https://github.com/bashclub)
+    (C) 2026     nasbeery installer by bashclub (https://github.com/bashclub)
   ---------------------------------------------------------------------------
 	EOF
 	exit $1
@@ -69,20 +72,27 @@ whiptail --title "Possible data loss!" \
 FORMAT=$?
 
 # pin cockpit to buster backports
-echo "Configure apt to install cockpit from backports repo"
-cat << EOF | tee -i /etc/apt/preferences.d/99-cockpit
-Package: cockpit cockpit-*
-Pin: release a=bullseye-backports
-Pin-Priority: 900
-EOF
+#echo "Configure apt to install cockpit from backports repo"
+#cat << EOF | tee -i /etc/apt/preferences.d/99-cockpit
+#Package: cockpit cockpit-*
+#Pin: release a=bullseye-backports
+#Pin-Priority: 900
+#EOF
 
-grep contrib /etc/apt/sources.list
-if [ $? -gt 0 ]; then
-  sed -i "s/main/main contrib non-free/g" /etc/apt/sources.list
-fi
+timedatectl set-ntp true
+systemctl restart systemd-timesyncd
 
-echo "Add debian bullseye backports repo"
-echo "deb http://ftp.de.debian.org/debian/ bullseye-backports main contrib non-free" | tee -i /etc/apt/sources.list.d/bulleye-backports.list
+
+echo "Ensure contrib repo is enabled (required for ZFS)"
+sed -i 's/ main$/ main contrib non-free-firmware/' /etc/apt/sources.list
+sed -i 's/ main non-free-firmware$/ main contrib non-free-firmware/' /etc/apt/sources.list
+apt update
+
+echo "=== Install Cockpit (Debian) ==="
+apt install -y cockpit
+
+#echo "Add debian bullseye backports repo"
+#echo "deb http://ftp.de.debian.org/debian/ bullseye-backports main contrib non-free" | tee -i /etc/apt/sources.list.d/bulleye-backports.list
 
 # update system and install packages
 echo "Updating package lists"
@@ -100,6 +110,10 @@ elif [[ $(dpkg --get-selections | grep -E -m1 "linux-image-current-meson64") ]];
 	headers="linux-headers-current-meson64"
 elif [[ $(dpkg --get-selections | grep -E -m1 "linux-image-edge-meson64") ]]; then
 	headers="linux-headers-edge-meson64"
+elif [[ $(dpkg --get-selections | grep -m1 "linux-image-generic") ]]; then
+	headers="linux-headers-generic"
+elif [[ $(dpkg --get-selections | grep -m1 "linux-image-raspi") ]]; then
+	headers="linux-headers-raspi"
 elif [[ $(dpkg --get-selections | grep -m1 "linux-image-amd64") ]]; then
 	headers="linux-headers-amd64"
 fi
@@ -107,53 +121,44 @@ echo "Intalling required packages"
 DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=critical apt -y -qq -o DPkg::options::="--force-confdef" -o DPkg::options::="--force-confold" install $headers ntpdate git apt-transport-https gnupg2 software-properties-common vim htop net-tools dnsutils dpkg-dev
 
 # add extra apt keys
-echo "Add wsdd apt repo key"
-wget -O - https://pkg.ltec.ch/public/conf/ltec-ag.gpg.key | gpg --dearmor | tee -i /etc/apt/trusted.gpg.d/wsdd.gpg
+#echo "Add wsdd apt repo key"
+#wget -O - https://pkg.ltec.ch/public/conf/ltec-ag.gpg.key | gpg --dearmor | tee -i /etc/apt/trusted.gpg.d/wsdd.gpg
 
 # add extra apt repos
-echo "Add wsdd apt repo url"
-echo "deb [signed-by=/etc/apt/trusted.gpg.d/wsdd.gpg] https://pkg.ltec.ch/public/ $(lsb_release -cs) main" | tee -i /etc/apt/sources.list.d/wsdd.list
+#echo "Add wsdd apt repo url"
+#echo "deb [signed-by=/etc/apt/trusted.gpg.d/wsdd.gpg] https://pkg.ltec.ch/public/ $(lsb_release -cs) main" | tee -i /etc/apt/sources.list.d/wsdd.list
 
 echo "add 45drives repo key"
 wget -O - https://repo.45drives.com/key/gpg.asc | gpg --dearmor | tee -i /etc/apt/trusted.gpg.d/45drives.gpg
 
 echo "Add 45drives apt repo url"
-echo "deb [signed-by=/etc/apt/trusted.gpg.d/45drives.gpg arch=amd64] https://repo.45drives.com/debian focal main" > /etc/apt/sources.list.d/45drives.list
+echo "deb [signed-by=/etc/apt/trusted.gpg.d/45drives.gpg arch=amd64] https://repo.45drives.com/enterprise/debian bookworm main" > /etc/apt/sources.list.d/45drives.list
 
 echo "Updating package lists"
 apt -qq update
 echo "Installing samba"
-DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=critical apt -y -qq -o DPkg::options::="--force-confdef" -o DPkg::options::="--force-confold" install -t bullseye-backports acl samba-dsdb-modules samba-vfs-modules samba winbind wsdd zfs-dkms zfsutils-linux zfs-auto-snapshot
-
-if [[ "$(arch)" == "aarch64" ]]; then
-  znapzend_version=$(apt search znapzend 2>/dev/null | grep znapzend | cut -d ' ' -f2)
-  wget -O znapzend_${znapzend_version}_amd64.deb https://repo.45drives.com/debian/pool/main/z/znapzend/znapzend_${znapzend_version}_amd64.deb
-  mkdir znapzend
-  dpkg-deb -R znapzend_${znapzend_version}_amd64.deb ./znapzend
-  sed -i "s/amd64/arm64/g" ./znapzend/DEBIAN/control
-  sed -i "s/x86_64-linux-gnu/aarch64-linux-gnu/g" znapzend/usr/bin/*
-  mv znapzend/usr/lib/x86_64-linux-gnu znapzend/usr/lib/aarch64-linux-gnu
-  dpkg-deb -b znapzend znapzend_${znapzend_version}_arm64.deb
-  apt install ./znapzend_${znapzend_version}_arm64.deb
-  systemctl disable znapzend.service
-  rm -r znapzend*
-fi
+DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=critical apt -y -qq -o DPkg::options::="--force-confdef" -o DPkg::options::="--force-confold" install acl samba-dsdb-modules samba-vfs-modules samba winbind wsdd zfs-dkms zfsutils-linux zfs-auto-snapshot
 
 echo "Installing cockpit"
-DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=critical apt -y -qq -o DPkg::options::="--force-confdef" -o DPkg::options::="--force-confold" install --no-install-recommends cockpit cockpit-identities cockpit-file-sharing cockpit-navigator cockpit-zfs-manager cockpit-benchmark
+DEBIAN_FRONTEND=noninteractive DEBIAN_PRIORITY=critical apt -y -qq -o DPkg::options::="--force-confdef" -o DPkg::options::="--force-confold" install --no-install-recommends cockpit cockpit-identities cockpit-file-sharing cockpit-navigator cockpit-benchmark
+
+git clone https://github.com/45drives/cockpit-zfs-manager.git
+cp -r cockpit-zfs-manager/zfs /usr/share/cockpit
+
+echo "=== Install ZFS (Debian) ==="
+apt install -y zfs-dkms zfsutils-linux zfs-auto-snapshot
 
 echo "Activate zfs module"
-modprobe zfs
+/sbin/modprobe zfs
 
-echo "Update time via ntp"
-ntpdate-debian -b > /dev/null
+#echo "Update time via ntp"
+#ntpdate-debian -b > /dev/null
 
-rootfs=$(grep " / " /proc/mounts | cut -d'/' -f3)
-if [[ "$rootfs" == *"nvme"* ]] || [[ "$rootfs" == *"mmcblk"* ]]; then
-  rootdisk=${rootfs::-3}
-else
-  rootdisk=${rootfs::1}
-fi
+echo "Detecting root disk (SAFETY CHECK)"
+rootdisk=$(findmnt -n -o SOURCE / | sed 's/[0-9]*$//;s/p$//')
+rootdisk=$(basename "$rootdisk")
+
+echo "Root disk detected as: /dev/$rootdisk"
 
 zdisks=$(echo $(lsblk -nd -I 8,259,179 -o name | grep -v ${rootdisk}) | cut -d' ' -f1-2)
 case $FORMAT in
@@ -204,6 +209,8 @@ smbpasswd -x $USERNAME
 (echo $PASSWORD; echo $PASSWORD) | smbpasswd -a $USERNAME
 usermod -aG sudo $USERNAME
 
+mkdir -p /etc/cockpit/zfs/
+
 echo "Writing cockpit configuration"
 cat << EOF | tee -i /etc/cockpit/zfs/config.json
 {
@@ -251,7 +258,6 @@ EOF
 
 if [ -f /etc/cockpit/zfs/shares.conf ]; then
 	echo "Creating cockpit zfs shares conf"
-  mkdir -p /etc/cockpit/zfs/
 	cat << EOF | tee -i /etc/cockpit/zfs/shares.conf
 # COCKPIT ZFS MANAGER
 # WARNING: DO NOT EDIT, AUTO-GENERATED CONFIGURATION
@@ -316,4 +322,4 @@ systemctl enable smbd nmbd wsdd
 echo "############################################"
 echo "nasbeery installation finished! rebooting..."
 echo "############################################"
-reboot
+/sbin/reboot

ui-patch

@@ -0,0 +1,82 @@
+echo "======================================"
+echo "[NASBEERY UI HARDENING PATCH]"
+echo "======================================"
+
+# -----------------------------
+# 1. FONT BASICS (SYSTEM SAFE)
+# -----------------------------
+echo "[UI] Installing fonts + rendering base..."
+
+apt install -y \
+  fonts-dejavu \
+  fonts-liberation \
+  fontconfig
+
+# -----------------------------
+# 2. 45DRIVES FONT FIX (OFFICIAL REPO)
+# -----------------------------
+echo "[UI] Applying 45Drives cockpit font fix..."
+
+rm -rf /tmp/45drives-scripts
+git clone https://github.com/45Drives/scripts.git /tmp/45drives-scripts
+
+if [ -d /tmp/45drives-scripts/cockpit_font_fix ]; then
+  cd /tmp/45drives-scripts/cockpit_font_fix
+
+  if [ -f install.sh ]; then
+    bash install.sh || true
+  else
+    find . -type f -name "*.ttf" -exec cp {} /usr/share/fonts/ \; || true
+    find . -type f -name "*.otf" -exec cp {} /usr/share/fonts/ \; || true
+  fi
+fi
+
+fc-cache -f -v
+
+# -----------------------------
+# 3. UTF-8 / FONT FALLBACK FIX
+# -----------------------------
+echo "[UI] Configuring font fallback..."
+
+cat << EOF > /etc/fonts/local.conf
+<?xml version="1.0"?>
+<!DOCTYPE fontconfig SYSTEM "fonts.dtd">
+<fontconfig>
+  <alias>
+    <family>monospace</family>
+    <prefer>
+      <family>DejaVu Sans Mono</family>
+    </prefer>
+  </alias>
+</fontconfig>
+EOF
+
+fc-cache -f -v
+
+# -----------------------------
+# 4. OPTIONAL ASCII SAFE MODE
+# -----------------------------
+echo "[UI] Applying ASCII-safe fallback (optional)..."
+
+find /usr/share/cockpit/zfs -type f 2>/dev/null | while read f; do
+  sed -i 's/✔/OK/g' "$f" 2>/dev/null || true
+  sed -i 's/✖/FAIL/g' "$f" 2>/dev/null || true
+  sed -i 's/⚠/WARN/g' "$f" 2>/dev/null || true
+done
+
+# -----------------------------
+# 5. COCKPIT UI RESTART
+# -----------------------------
+echo "[UI] Restarting Cockpit..."
+
+systemctl restart cockpit.socket || true
+systemctl restart cockpit || true
+
+# -----------------------------
+# CLEANUP
+# -----------------------------
+rm -rf /tmp/45drives-scripts
+
+echo "======================================"
+echo "[UI HARDENING COMPLETE]"
+echo "======================================"