[GH-ISSUE #12301] 2FAuth failed to install #2564

Open
opened 2026-02-26 12:52:51 +03:00 by kerem · 2 comments
Owner

Originally created by @majorpaynedof on GitHub (Feb 24, 2026).
Original GitHub issue: https://github.com/community-scripts/ProxmoxVE/issues/12301

Have you read and understood the above guidelines?

Yes

🔎 Did you run the script with verbose mode enabled?

Yes, verbose mode was enabled and the output is included below

📜 What is the name of the script you are using?

2FAuth

📂 What was the exact command used to execute the script?

bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/2fauth.sh)"

⚙️ What settings are you using?

  • Default Settings
  • Advanced Settings

🖥️ Which Linux distribution are you using?

Alpine

📈 Which Proxmox version are you on?

pve-manager/9.1.5/80cf92a64bef6889 (running kernel: 6.14.11-4-pve)

📝 Provide a clear and concise description of the issue.

When attempting to install 2FAuth it fails on what seems to be dependanciesy

🔄 Steps to reproduce the issue.

Run teh script as is

Paste the full error output (if available).

Setup 2FAuthLoading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

Problem 1
- Root composer.json requires laravel/passport ^12.0 -> satisfiable by laravel/passport[v12.0.0, ..., v12.4.2].
- laravel/passport[v12.0.0, ..., v12.4.2] require firebase/php-jwt ^6.4 -> found firebase/php-jwt[v6.4.0, ..., v6.11.1] but these were not loaded, because they are affected by security advisories ("PKSA-y2cr-5h3j-g3ys"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add them to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.
✖️ in line 39: exit code 2 (Misuse of shell builtins (e.g. syntax error)): while executing command composer update --no-plugins --no-scripts

--- Last 20 lines of log ---
[2026-02-24 16:26:42] [OK] Updated Container OS
[2026-02-24 16:26:42] [INFO] Installing Dependencies
[2026-02-24 16:26:45] [OK] Installed Dependencies
Selecting previously unselected package debsuryorg-archive-keyring.
(Reading database ... 20325 files and directories currently installed.)
Preparing to unpack .../debsuryorg-archive-keyring.deb ...
Unpacking debsuryorg-archive-keyring (2025.11.18) ...
Setting up debsuryorg-archive-keyring (2025.11.18) ...
[2026-02-24 16:26:49] [INFO] Installing PHP 8.4 packages
[2026-02-24 16:27:20] [OK] Setup PHP 8.4
[2026-02-24 16:27:20] [INFO] Setup Composer
[2026-02-24 16:27:23] [OK] Setup Composer
[2026-02-24 16:27:23] [INFO] Setup MariaDB (distribution packages)
[2026-02-24 16:27:39] [OK] Setup MariaDB 11.8.3 (distribution packages)
[2026-02-24 16:27:39] [INFO] Setting up MariaDB Database
[2026-02-24 16:27:39] [OK] Set up MariaDB Database
[2026-02-24 16:27:39] [INFO] Fetching GitHub release: 2fauth (6.0.0)
[2026-02-24 16:27:41] [OK] Deployed: 2fauth (6.0.0)
[2026-02-24 16:27:41] [INFO] Setup 2FAuth
[2026-02-24 16:27:51] [ERROR] in line 39: exit code 2 (Misuse of shell builtins (e.g. syntax error)): while executing command composer update --no-plugins --no-scripts

✖️ Installation failed in container 108 (exit code: 2)

[1]+ Stopped bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/2fauth.sh)"
root@pve6:~#

🖼️ Additional context (optional).

No response

Originally created by @majorpaynedof on GitHub (Feb 24, 2026). Original GitHub issue: https://github.com/community-scripts/ProxmoxVE/issues/12301 ### ✅ Have you read and understood the above guidelines? Yes ### 🔎 Did you run the script with verbose mode enabled? Yes, verbose mode was enabled and the output is included below ### 📜 What is the name of the script you are using? 2FAuth ### 📂 What was the exact command used to execute the script? bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/2fauth.sh)" ### ⚙️ What settings are you using? - [x] Default Settings - [ ] Advanced Settings ### 🖥️ Which Linux distribution are you using? Alpine ### 📈 Which Proxmox version are you on? pve-manager/9.1.5/80cf92a64bef6889 (running kernel: 6.14.11-4-pve) ### 📝 Provide a clear and concise description of the issue. When attempting to install 2FAuth it fails on what seems to be dependanciesy ### 🔄 Steps to reproduce the issue. Run teh script as is ### ❌ Paste the full error output (if available). ⏳ Setup 2FAuthLoading composer repositories with package information Updating dependencies Your requirements could not be resolved to an installable set of packages. Problem 1 - Root composer.json requires laravel/passport ^12.0 -> satisfiable by laravel/passport[v12.0.0, ..., v12.4.2]. - laravel/passport[v12.0.0, ..., v12.4.2] require firebase/php-jwt ^6.4 -> found firebase/php-jwt[v6.4.0, ..., v6.11.1] but these were not loaded, because they are affected by security advisories ("PKSA-y2cr-5h3j-g3ys"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add them to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config. Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions. ✖️ in line 39: exit code 2 (Misuse of shell builtins (e.g. syntax error)): while executing command composer update --no-plugins --no-scripts --- Last 20 lines of log --- [2026-02-24 16:26:42] [OK] Updated Container OS [2026-02-24 16:26:42] [INFO] Installing Dependencies [2026-02-24 16:26:45] [OK] Installed Dependencies Selecting previously unselected package debsuryorg-archive-keyring. (Reading database ... 20325 files and directories currently installed.) Preparing to unpack .../debsuryorg-archive-keyring.deb ... Unpacking debsuryorg-archive-keyring (2025.11.18) ... Setting up debsuryorg-archive-keyring (2025.11.18) ... [2026-02-24 16:26:49] [INFO] Installing PHP 8.4 packages [2026-02-24 16:27:20] [OK] Setup PHP 8.4 [2026-02-24 16:27:20] [INFO] Setup Composer [2026-02-24 16:27:23] [OK] Setup Composer [2026-02-24 16:27:23] [INFO] Setup MariaDB (distribution packages) [2026-02-24 16:27:39] [OK] Setup MariaDB 11.8.3 (distribution packages) [2026-02-24 16:27:39] [INFO] Setting up MariaDB Database [2026-02-24 16:27:39] [OK] Set up MariaDB Database [2026-02-24 16:27:39] [INFO] Fetching GitHub release: 2fauth (6.0.0) [2026-02-24 16:27:41] [OK] Deployed: 2fauth (6.0.0) [2026-02-24 16:27:41] [INFO] Setup 2FAuth [2026-02-24 16:27:51] [ERROR] in line 39: exit code 2 (Misuse of shell builtins (e.g. syntax error)): while executing command composer update --no-plugins --no-scripts ----------------------------------- ✖️ Installation failed in container 108 (exit code: 2) [1]+ Stopped bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/2fauth.sh)" root@pve6:~# ### 🖼️ Additional context (optional). _No response_
Author
Owner

@MickLesk commented on GitHub (Feb 25, 2026):

The problem is that Composer blocks firebase/php-jwt (a transitive dependency of laravel/passport) due to a security advisory (PKSA-y2cr-5h3j-g3ys).

https://github.com/Bubka/2FAuth/security/advisories/GHSA-4gj6-v6rh-g869

<!-- gh-comment-id:3957802688 --> @MickLesk commented on GitHub (Feb 25, 2026): The problem is that Composer blocks firebase/php-jwt (a transitive dependency of laravel/passport) due to a security advisory (PKSA-y2cr-5h3j-g3ys). https://github.com/Bubka/2FAuth/security/advisories/GHSA-4gj6-v6rh-g869
Author
Owner

@MickLesk commented on GitHub (Feb 25, 2026):

sorry, github is a little bit stupid today

<!-- gh-comment-id:3959164067 --> @MickLesk commented on GitHub (Feb 25, 2026): sorry, github is a little bit stupid today
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/ProxmoxVE#2564
No description provided.