[GH-ISSUE #9779] Palmr script needs updating #2139

Closed
opened 2026-02-26 12:51:25 +03:00 by kerem · 20 comments
Owner

Originally created by @abuintel on GitHub (Dec 8, 2025).
Original GitHub issue: https://github.com/community-scripts/ProxmoxVE/issues/9779

Originally assigned to: @vhsdream on GitHub.

Have you read and understood the above guidelines?

yes

🔎 Did you run the script with verbose mode enabled?

Yes, verbose mode was enabled and the output is included below

📜 What is the name of the script you are using?

Palmr

📂 What was the exact command used to execute the script?

bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/palmr.sh)"

⚙️ What settings are you using?

  • Default Settings
  • Advanced Settings

🖥️ Which Linux distribution are you using?

Debian 13

📈 Which Proxmox version are you on?

8.4.1

📝 Provide a clear and concise description of the issue.

Palmr devs have made significant changes to the codebase. The proxmox scripts need to be updated to reflect the changes.

https://github.com/kyantech/Palmr/releases

🔄 Steps to reproduce the issue.

https://github.com/kyantech/Palmr/releases

Paste the full error output (if available).

https://github.com/kyantech/Palmr/releases

🖼️ Additional context (optional).

https://github.com/kyantech/Palmr/releases

Originally created by @abuintel on GitHub (Dec 8, 2025). Original GitHub issue: https://github.com/community-scripts/ProxmoxVE/issues/9779 Originally assigned to: @vhsdream on GitHub. ### ✅ Have you read and understood the above guidelines? yes ### 🔎 Did you run the script with verbose mode enabled? Yes, verbose mode was enabled and the output is included below ### 📜 What is the name of the script you are using? Palmr ### 📂 What was the exact command used to execute the script? bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/palmr.sh)" ### ⚙️ What settings are you using? - [x] Default Settings - [ ] Advanced Settings ### 🖥️ Which Linux distribution are you using? Debian 13 ### 📈 Which Proxmox version are you on? 8.4.1 ### 📝 Provide a clear and concise description of the issue. Palmr devs have made significant changes to the codebase. The proxmox scripts need to be updated to reflect the changes. https://github.com/kyantech/Palmr/releases ### 🔄 Steps to reproduce the issue. https://github.com/kyantech/Palmr/releases ### ❌ Paste the full error output (if available). https://github.com/kyantech/Palmr/releases ### 🖼️ Additional context (optional). https://github.com/kyantech/Palmr/releases
kerem 2026-02-26 12:51:25 +03:00
Author
Owner

@MickLesk commented on GitHub (Dec 8, 2025):

And what? A little Bit more information will be nice for the contributors

By the way, Ive deployed the Script at friday and all Work fine.

<!-- gh-comment-id:3628005151 --> @MickLesk commented on GitHub (Dec 8, 2025): And what? A little Bit more information will be nice for the contributors By the way, Ive deployed the Script at friday and all Work fine.
Author
Owner

@abuintel commented on GitHub (Dec 8, 2025):

And what? A little Bit more information will be nice for the contributors

By the way, Ive deployed the Script at friday and all Work fine.

The script will deploy with no issues, however you need to setup an internal s3 storage, otherwise files cant be uploaded or downloaded. see here: https://palmr.kyantech.com.br/docs/v3-beta/quick-start

"Critical: Port 9379 is REQUIRED for internal storage operations. This port exposes Palmr's built-in S3-compatible storage server. If you cannot expose this port, you must configure external S3 storage using the ENABLE_S3=true option."

<!-- gh-comment-id:3628025024 --> @abuintel commented on GitHub (Dec 8, 2025): > And what? A little Bit more information will be nice for the contributors > > By the way, Ive deployed the Script at friday and all Work fine. The script will deploy with no issues, however you need to setup an internal s3 storage, otherwise files cant be uploaded or downloaded. see here: https://palmr.kyantech.com.br/docs/v3-beta/quick-start "Critical: Port 9379 is REQUIRED for internal storage operations. This port exposes Palmr's built-in S3-compatible storage server. If you cannot expose this port, you must configure external S3 storage using the ENABLE_S3=true option."
Author
Owner

@tremor021 commented on GitHub (Dec 8, 2025):

Needs MinIO. Once installed, it works fine @MickLesk @vhsdream

Image
<!-- gh-comment-id:3628297047 --> @tremor021 commented on GitHub (Dec 8, 2025): Needs MinIO. Once installed, it works fine @MickLesk @vhsdream <img width="1274" height="696" alt="Image" src="https://github.com/user-attachments/assets/eaee7fc5-c7a4-4514-be0b-84281b1de797" />
Author
Owner

@vhsdream commented on GitHub (Dec 8, 2025):

Gross - why are they using MinIO?

<!-- gh-comment-id:3628319534 --> @vhsdream commented on GitHub (Dec 8, 2025): Gross - why are they using MinIO?
Author
Owner

@MickLesk commented on GitHub (Dec 8, 2025):

You can try Garage? Its the Same but free.

<!-- gh-comment-id:3628329704 --> @MickLesk commented on GitHub (Dec 8, 2025): You can try Garage? Its the Same but free.
Author
Owner

@tremor021 commented on GitHub (Dec 8, 2025):

Image

From their docs

<!-- gh-comment-id:3628333977 --> @tremor021 commented on GitHub (Dec 8, 2025): <img width="818" height="799" alt="Image" src="https://github.com/user-attachments/assets/21a77b4c-d9b5-45b3-aa45-a10fb4a4a77f" /> From their docs
Author
Owner

@vhsdream commented on GitHub (Dec 8, 2025):

I'll have to get to this a bit later on; it's Monday afterall 😆

<!-- gh-comment-id:3628345230 --> @vhsdream commented on GitHub (Dec 8, 2025): I'll have to get to this a bit later on; it's Monday afterall 😆
Author
Owner

@MickLesk commented on GitHub (Dec 8, 2025):

Garage is an replacement. Should be the Same calls. Its an try

<!-- gh-comment-id:3628347198 --> @MickLesk commented on GitHub (Dec 8, 2025): Garage is an replacement. Should be the Same calls. Its an try
Author
Owner

@vhsdream commented on GitHub (Dec 9, 2025):

Um, am I seeing this right? That Palmr is still using a vulnerable NextJS version?

<!-- gh-comment-id:3633012261 --> @vhsdream commented on GitHub (Dec 9, 2025): Um, am I seeing this right? That Palmr is still using a [vulnerable NextJS version](https://github.com/kyantech/Palmr/blob/1f61e47167800d651535010b1cf6303870375a92/apps/web/package.json#L66C5-L66C22)?
Author
Owner

@vhsdream commented on GitHub (Dec 9, 2025):

Yep, I am reading this right. What the fuck

Image

At least the install script in it's current state will prevent exploitation, but I'm not touching this with a ten-foot pole until the developer gets his head out of his ass and fixes the vulnerabilities.

He assigned it to Copilot FFS

<!-- gh-comment-id:3633017459 --> @vhsdream commented on GitHub (Dec 9, 2025): Yep, I am reading this right. What the fuck <img width="949" height="417" alt="Image" src="https://github.com/user-attachments/assets/1b8b42f3-c341-45a8-81c8-2ac0a6397cbe" /> At least the install script in it's current state will prevent exploitation, but I'm not touching this with a ten-foot pole until the developer gets his head out of his ass and fixes the vulnerabilities. [He assigned it to Copilot](https://github.com/kyantech/Palmr/pull/364) FFS
Author
Owner

@MickLesk commented on GitHub (Dec 9, 2025):

We can remove it until it fixed from Website

<!-- gh-comment-id:3633139612 --> @MickLesk commented on GitHub (Dec 9, 2025): We can remove it until it fixed from Website
Author
Owner

@tremor021 commented on GitHub (Dec 9, 2025):

Removed when #9824 merges

<!-- gh-comment-id:3633654819 --> @tremor021 commented on GitHub (Dec 9, 2025): Removed when #9824 merges
Author
Owner

@MickLesk commented on GitHub (Dec 9, 2025):

Reopen due Task

<!-- gh-comment-id:3633714601 --> @MickLesk commented on GitHub (Dec 9, 2025): Reopen due Task
Author
Owner

@vhsdream commented on GitHub (Dec 10, 2025):

The dev has released an update that addresses the NextJS vuln, so Palmr can be restored to the site at your leisure.

<!-- gh-comment-id:3637013983 --> @vhsdream commented on GitHub (Dec 10, 2025): The dev has released an update that addresses the NextJS vuln, so Palmr can be restored to the site at your leisure.
Author
Owner

@MickLesk commented on GitHub (Dec 10, 2025):

copilot fix it before some crypto minings run 😄

<!-- gh-comment-id:3637022606 --> @MickLesk commented on GitHub (Dec 10, 2025): copilot fix it before some crypto minings run :smile:
Author
Owner

@vhsdream commented on GitHub (Dec 10, 2025):

Well, after struggling to automate the configuration of Garage (thankfully there is always a way as long as you are patient enough), I'm getting CORS errors when attempting to upload files. I'll keep plugging away at it.

<!-- gh-comment-id:3637650257 --> @vhsdream commented on GitHub (Dec 10, 2025): Well, after struggling to automate the configuration of Garage (thankfully there is always a way as long as you are patient enough), I'm getting CORS errors when attempting to upload files. I'll keep plugging away at it.
Author
Owner

@vhsdream commented on GitHub (Dec 10, 2025):

Hmm I think it's an upstream issue, something was just merged into Main, so we'll have to wait for the next release before I can make a PR.

<!-- gh-comment-id:3638163282 --> @vhsdream commented on GitHub (Dec 10, 2025): Hmm I think it's an upstream issue, something was just [merged](https://github.com/kyantech/Palmr/pull/380) into Main, so we'll have to wait for the next release before I can make a PR.
Author
Owner

@abuintel commented on GitHub (Dec 17, 2025):

Any updates on this? Greatly appreciate the work the team is doing.

<!-- gh-comment-id:3666647495 --> @abuintel commented on GitHub (Dec 17, 2025): Any updates on this? Greatly appreciate the work the team is doing.
Author
Owner

@vhsdream commented on GitHub (Dec 17, 2025):

As far as I can tell, I need to wait until the next release before I can test anything out with regards to the CORS issues. I have a working install/update, but there's no point in releasing it because uploading is completely broken.

<!-- gh-comment-id:3667123688 --> @vhsdream commented on GitHub (Dec 17, 2025): As far as I can tell, I need to wait until the next release before I can test anything out with regards to the CORS issues. I have a working install/update, but there's no point in releasing it because uploading is completely broken.
Author
Owner

@MickLesk commented on GitHub (Jan 22, 2026):

palmr is currently disabled. we wait for project progress

<!-- gh-comment-id:3784995582 --> @MickLesk commented on GitHub (Jan 22, 2026): palmr is currently disabled. we wait for project progress
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/ProxmoxVE#2139
No description provided.