@underpostnet/underpost 2.97.0 → 2.97.1

package/README.md

@@ -18,7 +18,7 @@
 
 <!-- badges -->
 
-[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/2.97.0)](https://socket.dev/npm/package/underpost/overview/2.97.0) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
+[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/2.97.1)](https://socket.dev/npm/package/underpost/overview/2.97.1) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
 
 <!-- end-badges -->
 
@@ -66,7 +66,7 @@ Run dev client server
 npm run dev
 ```
 <!-- -->
-## underpost ci/cd cli v2.97.0
+## underpost ci/cd cli v2.97.1
 
 ### Usage: `underpost [options] [command]`
   ```

package/baremetal/commission-workflows.json

@@ -1,9 +1,10 @@
 {
   "rpi4mbarm64-iso-ram": {
     "type": "iso-ram",
+    "osIdLike": "debian ubuntu",
+    "isoUrl": "https://cdimage.ubuntu.com/releases/24.04/release/ubuntu-24.04.3-live-server-arm64.iso",
     "tftpPrefix": "rpi4mb",
     "bootstrapHttpServerPort": 8888,
-    "isoUrl": "",
     "menuentryStr": "UNDERPOST.NET UEFI/GRUB/MAAS RPi4 ISO-RAM commissioning (ARM64)",
     "networkInterfaceName": "enabcm6e4ei0",
     "chronyc": {
@@ -28,7 +29,8 @@
     }
   },
   "rpi4mbarm64-chroot": {
-    "type": "chroot",
+    "type": "chroot-debootstrap",
+    "osIdLike": "debian ubuntu",
     "tftpPrefix": "rpi4mb",
     "bootstrapHttpServerPort": 8888,
     "menuentryStr": "UNDERPOST.NET UEFI/GRUB/MAAS RPi4 CHROOT commissioning (ARM64)",
@@ -62,9 +64,10 @@
   },
   "rpi4mbarm64-iso-nfs": {
     "type": "iso-nfs",
+    "osIdLike": "debian ubuntu",
+    "isoUrl": "https://cdimage.ubuntu.com/releases/24.04/release/ubuntu-24.04.3-live-server-arm64.iso",
     "tftpPrefix": "rpi4mb",
     "bootstrapHttpServerPort": 8888,
-    "isoUrl": "",
     "menuentryStr": "UNDERPOST.NET UEFI/GRUB/MAAS RPi4 ISO-NFS commissioning (ARM64)",
     "networkInterfaceName": "enabcm6e4ei0",
     "chronyc": {
@@ -87,5 +90,32 @@
     "keyboard": {
       "layout": "es"
     }
+  },
+  "rpi4mbarm64-chroot-rocky9": {
+    "type": "chroot-container",
+    "osIdLike": "rhel centos fedora",
+    "tftpPrefix": "rpi4mb",
+    "bootstrapHttpServerPort": 8888,
+    "menuentryStr": "UNDERPOST.NET Rocky9 Container CHROOT NFS (ARM64)",
+    "networkInterfaceName": "eth0",
+    "firmwares": [
+      {
+        "url": "https://github.com/pftf/RPi4/releases/download/v1.41/RPi4_UEFI_Firmware_v1.41.zip",
+        "gateway": "192.168.1.1",
+        "subnet": "255.255.255.0"
+      }
+    ],
+    "chronyc": {
+      "timezone": "America/Santiago",
+      "chronyConfPath": "/etc/chrony/chrony.conf"
+    },
+    "container": {
+      "image": "quay.io/rockylinux/rockylinux:9",
+      "architecture": "arm64",
+      "packages": ["kernel", "chrony", "kbd", "glibc-langpack-en", "glibc-langpack-es", "tzdata"]
+    },
+    "keyboard": {
+      "layout": "es"
+    }
   }
 }

package/bin/deploy.js

@@ -658,7 +658,7 @@ ${shellExec(`git log | grep Author: | sort -u`, { stdout: true }).split(`\n`).jo
 
         // Remove PostgreSQL 17 packages and repo
         shellExec(`sudo dnf remove -y postgresql17 postgresql17-server postgresql17-contrib`);
-        shellExec(`sudo rpm -e pgdg-redhat-repo-$(rpm -q pgdg-redhat-repo --qf '%{VERSION}-%{RELEASE}') || true`);
+        shellExec(`sudo rpm -e pgdg-redhat-repo-$(rpm -q pgdg-redhat-repo --qf '%{VERSION}-%{RELEASE}')`);
         shellExec(`sudo rm -f /etc/yum.repos.d/pgdg-redhat-*.repo`);
 
         // Clean up data, logs, config, and the postgres user

package/cli.md

@@ -1,4 +1,4 @@
-## underpost ci/cd cli v2.97.0
+## underpost ci/cd cli v2.97.1
 
 ### Usage: `underpost [options] [command]`
   ```
@@ -51,7 +51,7 @@ Arguments:
   app-name                          The name of the new project.
 
 Options:
-  --deploy-id <deploy-id>           Crete deploy ID conf env files
+  --deploy-id <deploy-id>           Create deploy ID conf env files
   --sub-conf <sub-conf>             Create sub conf env files
   --cluster                         Create deploy ID cluster files and sync to
                                     current cluster
@@ -940,11 +940,14 @@ Options:
   --nfs-build                                   Builds an NFS root filesystem for a workflow id config architecture using QEMU emulation.
   --nfs-mount                                   Mounts the NFS root filesystem for a workflow id config architecture.
   --nfs-unmount                                 Unmounts the NFS root filesystem for a workflow id config architecture.
+  --nfs-build-server                            Builds the NFS server for a workflow id config architecture.
   --nfs-sh                                      Copies QEMU emulation root entrypoint shell command to the clipboard.
   --cloud-init                                  Sets the kernel parameters and sets the necessary seed users on the HTTP server.
   --cloud-init-update                           Updates cloud init for a workflow id config architecture.
   --ubuntu-tools-build                          Builds ubuntu tools for chroot environment.
   --ubuntu-tools-test                           Tests ubuntu tools in chroot environment.
+  --rocky-tools-build                           Builds rocky linux tools for chroot environment.
+  --rocky-tools-test                            Tests rocky linux tools in chroot environment.
   --bootcmd <bootcmd-list>                      Comma-separated list of boot commands to execute.
   --runcmd <runcmd-list>                        Comma-separated list of run commands to execute.
   --logs <log-id>                               Displays logs for log id: dhcp, cloud, machine, cloud-config.

package/conf.js

@@ -65,6 +65,7 @@ const DefaultConf = /**/ {
           '500',
           'Pagination',
           'windowGetDimensions',
+          'SearchBox',
         ],
         default: [
           'MenuDefault',

package/manifests/deployment/dd-default-development/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-blue
-          image: localhost/rockylinux9-underpost:v2.97.0
+          image: localhost/rockylinux9-underpost:v2.97.1
           #          resources:
           #            requests:
           #              memory: "124Ki"
@@ -100,7 +100,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-green
-          image: localhost/rockylinux9-underpost:v2.97.0
+          image: localhost/rockylinux9-underpost:v2.97.1
           #          resources:
           #            requests:
           #              memory: "124Ki"

package/manifests/deployment/dd-test-development/deployment.yaml

@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
         - name: dd-test-development-blue
-          image: localhost/rockylinux9-underpost:v2.97.0
+          image: localhost/rockylinux9-underpost:v2.97.1
 
           command:
             - /bin/sh
@@ -103,7 +103,7 @@ spec:
     spec:
       containers:
         - name: dd-test-development-green
-          image: localhost/rockylinux9-underpost:v2.97.0
+          image: localhost/rockylinux9-underpost:v2.97.1
 
           command:
             - /bin/sh

package/package.json

@@ -2,7 +2,7 @@
     "type": "module",
     "main": "src/index.js",
     "name": "@underpostnet/underpost",
-    "version": "2.97.0",
+    "version": "2.97.1",
     "description": "pwa api rest template",
     "scripts": {
         "start": "env-cmd -f .env.production node --max-old-space-size=8192 src/server",

package/packer/scripts/fuse-tar-root

@@ -25,13 +25,13 @@ MOUNT_POINT=$(mktemp -d /tmp/packer-maas-mount.XXXXXX)
 cleanup() {
     echo "Cleaning up..."
     if mountpoint -q "${MOUNT_POINT}"; then
-        umount "${MOUNT_POINT}" || true
+        umount "${MOUNT_POINT}"
     fi
     if [ -n "${NBD_DEV}" ] && [ -b "${NBD_DEV}" ]; then
-        qemu-nbd -d "${NBD_DEV}" || true
+        qemu-nbd -d "${NBD_DEV}"
     fi
     if [ -d "${MOUNT_POINT}" ]; then
-        rmdir "${MOUNT_POINT}" || true
+        rmdir "${MOUNT_POINT}"
     fi
 }
 

package/scripts/disk-clean.sh

@@ -36,12 +36,12 @@ du -xh --max-depth=1 / | sort -rh | head -n 20
 
 # 1) DNF cleanup
 log "Cleaning DNF caches and removing orphaned packages..."
-dnf -y clean all || true
-dnf -y autoremove || true
+dnf -y clean all
+dnf -y autoremove
 
 # 2) Journal logs vacuum
 log "Vacuuming systemd journal to keep ${VACUUM_SIZE}..."
-journalctl --vacuum-size="$VACUUM_SIZE" || true
+journalctl --vacuum-size="$VACUUM_SIZE"
 
 # 3) Truncate very large logs in /var/log (safer than delete)
 log "Truncating logs in /var/log larger than ${LARGE_LOG_SIZE} (keeps zero-sized file so services don't break)..."
@@ -52,12 +52,12 @@ done
 
 # 4) Clean /tmp and /var/tmp older than TMP_AGE_DAYS
 log "Removing files older than ${TMP_AGE_DAYS} days from /tmp and /var/tmp..."
-find /tmp -mindepth 1 -mtime +"$TMP_AGE_DAYS" -print0 2>/dev/null | xargs -0r rm -rf -- || true
-find /var/tmp -mindepth 1 -mtime +"$TMP_AGE_DAYS" -print0 2>/dev/null | xargs -0r rm -rf -- || true
+find /tmp -mindepth 1 -mtime +"$TMP_AGE_DAYS" -print0 2>/dev/null | xargs -0r rm -rf --
+find /var/tmp -mindepth 1 -mtime +"$TMP_AGE_DAYS" -print0 2>/dev/null | xargs -0r rm -rf --
 
 # 5) Clean /var/cache older than CACHE_AGE_DAYS (but not all cache immediately)
 log "Removing entries in /var/cache older than ${CACHE_AGE_DAYS} days..."
-find /var/cache -mindepth 1 -mtime +"$CACHE_AGE_DAYS" -print0 2>/dev/null | xargs -0r rm -rf -- || true
+find /var/cache -mindepth 1 -mtime +"$CACHE_AGE_DAYS" -print0 2>/dev/null | xargs -0r rm -rf --
 
 # 6) Clean user caches (~/.cache) and Downloads older than CACHE_AGE_DAYS
 log "Cleaning user caches and old downloads (home dirs)..."
@@ -69,60 +69,60 @@ for homedir in /home/* /root; do
 
   if [ -d "$usercache" ]; then
     log "Removing contents of $usercache"
-    rm -rf "${usercache:?}/"* 2>/dev/null || true
+    rm -rf "${usercache:?}/"* 2>/dev/null
   fi
   if [ -d "$userdownloads" ]; then
     log "Removing files older than ${CACHE_AGE_DAYS} days from $userdownloads"
-    find "$userdownloads" -type f -mtime +"$CACHE_AGE_DAYS" -print0 2>/dev/null | xargs -0r rm -f -- 2>/dev/null || true
+    find "$userdownloads" -type f -mtime +"$CACHE_AGE_DAYS" -print0 2>/dev/null | xargs -0r rm -f -- 2>/dev/null
   fi
   if [ -d "$usertrash" ]; then
     log "Emptying trash in $usertrash"
-    rm -rf "${usertrash:?}/"* 2>/dev/null || true
+    rm -rf "${usertrash:?}/"* 2>/dev/null
   fi
 done
 
 # 7) Docker / Podman cleanup (if present)
 if command -v docker >/dev/null 2>&1; then
   log "Docker detected: pruning images/containers/volumes (aggressive)..."
-  docker system df || true
-  docker system prune -a --volumes -f || true
+  docker system df
+  docker system prune -a --volumes -f
 fi
 
 if command -v podman >/dev/null 2>&1; then
   log "Podman detected: pruning images/containers (aggressive)..."
-  podman system df || true
-  podman system prune -a -f || true
+  podman system df
+  podman system prune -a -f
 fi
 
 # 8) Flatpak unused runtimes/apps (if present)
 if command -v flatpak >/dev/null 2>&1; then
   log "Flatpak detected: trying to uninstall unused runtimes/apps..."
-  flatpak uninstall --unused -y || flatpak uninstall --unused || true
-  flatpak repair || true
+  flatpak uninstall --unused -y || flatpak uninstall --unused
+  flatpak repair
 fi
 
 # 9) Python Pip cleanup
 if command -v pip3 >/dev/null 2>&1 || command -v pip >/dev/null 2>&1; then
   log "Python Pip detected: cleaning cache..."
   if command -v pip3 >/dev/null 2>&1; then
-    pip3 cache purge || true
+    pip3 cache purge
   elif command -v pip >/dev/null 2>&1; then
-    pip cache purge || true
+    pip cache purge
   fi
 fi
 
 # 10) Conda cleanup
 if command -v conda >/dev/null 2>&1; then
   log "Conda detected: cleaning all..."
-  conda clean --all -y || true
+  conda clean --all -y
 fi
 
 # 11) Remove old kernels but keep the last KEEP_KERNELS (safe)
 log "Removing old kernels, keeping the last $KEEP_KERNELS kernels..."
-OLD_KERNELS=$(dnf repoquery --installonly --latest-limit=-$KEEP_KERNELS -q 2>/dev/null || true)
+OLD_KERNELS=$(dnf repoquery --installonly --latest-limit=-$KEEP_KERNELS -q 2>/dev/null)
 if [ -n "$OLD_KERNELS" ]; then
   log "Old kernels to remove: $OLD_KERNELS"
-  dnf -y remove $OLD_KERNELS || true
+  dnf -y remove $OLD_KERNELS
 else
   log "No old kernels found by DNF repoquery. Only $KEEP_KERNELS or fewer are currently installed."
 fi
@@ -130,14 +130,14 @@ fi
 # 12) /opt review and removal (ON by default now)
 if [ -d /opt ]; then
   log "/opt usage (top entries):"
-  du -sh /opt/* 2>/dev/null | sort -h | head -n 20 || true
+  du -sh /opt/* 2>/dev/null | sort -h | head -n 20
 
   if [ "$REMOVE_OPT" = "1" ]; then
     OPT_TARGETS=(/opt/local-path-provisioner)
     for t in "${OPT_TARGETS[@]}"; do
       if [ -d "$t" ]; then
         log "Removing $t as REMOVE_OPT=1"
-        rm -rf "$t" || true
+        rm -rf "$t"
       fi
     done
   else
@@ -147,7 +147,7 @@ fi
 
 # 13) Find large files > 100MB (report only)
 log "Listing files larger than 100MB (report only):"
-find / -xdev -type f -size +100M -printf '%s\t%p\n' 2>/dev/null | sort -nr | head -n 50 | awk '{printf "%.1fMB\t%s\n",$1/1024/1024,$2}' || true
+find / -xdev -type f -size +100M -printf '%s\t%p\n' 2>/dev/null | sort -nr | head -n 50 | awk '{printf "%.1fMB\t%s\n",$1/1024/1024,$2}'
 
 # Final disk usage
 log "Disk usage after cleanup:"

package/scripts/gpu-diag.sh

@@ -2,7 +2,7 @@
 sudo lspci -nnk | egrep -i 'vga|3d' -A3
 
 # modules loaded relevant
-lsmod | egrep 'nvidia|nouveau|amdgpu' || true
+lsmod | egrep 'nvidia|nouveau|amdgpu'
 
 # if exists nvidia tool
 nvidia-smi 2>/dev/null || echo "nvidia-smi not found"
@@ -16,4 +16,4 @@ journalctl -b _COMM=gdm --no-pager | tail -n 200
 journalctl -b _COMM=Xorg --no-pager | tail -n 200
 
 # X log (if exists)
-sudo grep -E "(EE|WW|NVIDIA|nouveau|amdgpu)" /var/log/Xorg.0.log || true
+sudo grep -E "(EE|WW|NVIDIA|nouveau|amdgpu)" /var/log/Xorg.0.log

package/scripts/ip-info.sh

@@ -77,39 +77,39 @@ for IP in "${IPS[@]}"; do
 " "$TARGET" "$IP"
 
   echo "-- REVERSE DNS --"
-  dig -x "$IP" +short || true
+  dig -x "$IP" +short
 
   echo "
 -- WHOIS --"
-  whois "$IP" | sed -n '1,80p' || true
+  whois "$IP" | sed -n '1,80p'
 
   echo "
 -- IPINFO (ipinfo.io) --"
-  curl -sS "https://ipinfo.io/$IP/json" | format || true
+  curl -sS "https://ipinfo.io/$IP/json" | format
 
   echo "
 -- IP-API (ip-api.com) --"
-  curl -sS "http://ip-api.com/json/$IP?fields=status,message,country,regionName,city,zip,lat,lon,timezone,isp,org,as,query" | format || true
+  curl -sS "http://ip-api.com/json/$IP?fields=status,message,country,regionName,city,zip,lat,lon,timezone,isp,org,as,query" | format
 
   echo "
 -- IPWHOIS (ipwhois.app) --"
-  curl -sS "https://ipwhois.app/json/$IP" | format || true
+  curl -sS "https://ipwhois.app/json/$IP" | format
 
   echo "
 -- GEOPLUGIN --"
-  curl -sS "http://www.geoplugin.net/json.gp?ip=$IP" | format || true
+  curl -sS "http://www.geoplugin.net/json.gp?ip=$IP" | format
 
   echo "
 -- TRACEROUTE --"
-  traceroute -m 20 "$IP" || true
+  traceroute -m 20 "$IP"
 
   if [[ "$TARGET" =~ [A-Za-z] ]]; then
     echo "
 -- DNS RECORDS for $TARGET --"
-    dig +short A "$TARGET" || true
-    dig +short AAAA "$TARGET" || true
-    dig +short MX "$TARGET" || true
-    dig +short TXT "$TARGET" || true
+    dig +short A "$TARGET"
+    dig +short AAAA "$TARGET"
+    dig +short MX "$TARGET"
+    dig +short TXT "$TARGET"
   fi
 
   echo "

package/scripts/maas-upload-boot-resource.sh

@@ -33,7 +33,7 @@ if ! command -v jq &> /dev/null; then
 fi
 
 # Get MAAS API URL and credentials from profile
-MAAS_INFO=$(maas list | grep "^${PROFILE}" || true)
+MAAS_INFO=$(maas list | grep "^${PROFILE}")
 if [ -z "$MAAS_INFO" ]; then
     echo "Error: MAAS profile '${PROFILE}' not found"
     echo "Available profiles:"

package/scripts/nvim.sh

@@ -80,7 +80,7 @@ autocmd VimEnter * if argc() == 0 && !exists('s:std_in') | NvimTreeToggle | winc
 EOF
 
 # Fix permissions in case something was left owned by root (happens if you used sudo on these paths before)
-sudo chown -R "$USER":"$USER" ~/.config/nvim ~/.local/share/nvim 2>/dev/null || true
+sudo chown -R "$USER":"$USER" ~/.config/nvim ~/.local/share/nvim 2>/dev/null
 
 # Install plugins automatically (non-interactive)
 nvim +PlugInstall +qall

package/scripts/packer-setup.sh

@@ -39,13 +39,13 @@ print "Distro detected: $PRETTY_NAME"
 # Enable helpful repos and install helpers
 print "Installing dnf-plugins-core and enabling CRB/PowerTools (if available)"
 set +e
-dnf install -y dnf-plugins-core >/dev/null 2>&1 || true
-dnf config-manager --set-enabled crb >/dev/null 2>&1 || true
-dnf config-manager --set-enabled powertools >/dev/null 2>&1 || true
+dnf install -y dnf-plugins-core >/dev/null 2>&1
+dnf config-manager --set-enabled crb >/dev/null 2>&1
+dnf config-manager --set-enabled powertools >/dev/null 2>&1
 # EPEL
 if ! rpm -q epel-release >/dev/null 2>&1; then
   print "Installing epel-release"
-  dnf install -y epel-release || true
+  dnf install -y epel-release
 fi
 set -e
 
@@ -86,7 +86,7 @@ done
 
 print "Enabling and starting libvirtd"
 systemctl enable --now libvirtd || err "Failed to enable/start libvirtd"
-systemctl status libvirtd --no-pager || true
+systemctl status libvirtd --no-pager
 
 # 3) Install NBD and filesystem tools required for MAAS image creation
 print "Installing NBD and filesystem tooling: libnbd, nbdkit, e2fsprogs, kmod packages (best-effort)"
@@ -125,7 +125,7 @@ if command -v podman >/dev/null 2>&1; then
       fi
     done
 
-    podman rm "$CONTAINER_ID" >/dev/null 2>&1 || true
+    podman rm "$CONTAINER_ID" >/dev/null 2>&1
   fi
 else
   print "podman not available. Install podman to register binfmt for container/chroot convenience."
@@ -181,8 +181,8 @@ else
     print "qemu-system-aarch64 now available after package install"
   else
     print "Compiling QEMU with aarch64-softmmu target. Installing build deps..."
-    dnf groupinstall -y 'Development Tools' || true
-    dnf install -y git libaio-devel libgcrypt-devel libfdt-devel glib2-devel zlib-devel pixman-devel libseccomp-devel libusb1-devel openssl-devel bison flex python3 python3-pip ninja-build || true
+    dnf groupinstall -y 'Development Tools'
+    dnf install -y git libaio-devel libgcrypt-devel libfdt-devel glib2-devel zlib-devel pixman-devel libseccomp-devel libusb1-devel openssl-devel bison flex python3 python3-pip ninja-build
 
     # Enforce libslirp-devel for user networking
     if ! dnf install -y libslirp-devel; then
@@ -192,8 +192,8 @@ else
 
     # Install required Python packages for QEMU build
     print "Installing Python dependencies for QEMU build"
-    python3 -m pip install --upgrade pip || true
-    python3 -m pip install tomli meson || true
+    python3 -m pip install --upgrade pip
+    python3 -m pip install tomli meson
 
     TMPDIR=$(mktemp -d)
     print "Cloning QEMU source to $TMPDIR/qemu"
@@ -209,7 +209,7 @@ else
         make install || err "QEMU install failed"
         # Update PATH to include /usr/local/bin where QEMU was installed
         export PATH="/usr/local/bin:$PATH"
-        hash -r || true
+        hash -r
       else
         err "QEMU build (make) failed"
       fi
@@ -224,7 +224,7 @@ else
     fi
 
     cd /
-    rm -rf "$TMPDIR" || true
+    rm -rf "$TMPDIR"
     print "Removed build directory $TMPDIR"
   fi
 fi
@@ -242,7 +242,7 @@ else
 fi
 if command -v qemu-aarch64-static >/dev/null 2>&1; then print "qemu-aarch64-static: $(command -v qemu-aarch64-static)"; else print "qemu-aarch64-static: NOT INSTALLED"; fi
 print "libvirtd status:"
-systemctl status libvirtd --no-pager || true
+systemctl status libvirtd --no-pager
 
 cat <<'EOF'
 

package/scripts/rocky-setup.sh

@@ -126,8 +126,8 @@ sudo dnf -y update
 
 # Cleanup
 echo "[+] Cleanup: remove unnecessary packages and old metadata"
-sudo dnf -y autoremove || true
-sudo dnf clean all || true
+sudo dnf -y autoremove
+sudo dnf clean all
 
 cat <<EOF
 

package/scripts/rpmfusion-ffmpeg-setup.sh

@@ -9,19 +9,19 @@ if [ "${EUID:-$(id -u)}" -ne 0 ]; then
 fi
 
 echo "1) Ensure dnf-plugins-core is available (for config-manager)"
-dnf -y install dnf-plugins-core || true
+dnf -y install dnf-plugins-core
 
 echo "2) Enable CodeReady / CRB (needed for some deps, e.g. ladspa)"
 # On RHEL you'd use subscription-manager; on CentOS/Rocky/Alma use config-manager
-dnf config-manager --set-enabled crb || true
+dnf config-manager --set-enabled crb
 
 echo "3) Install EPEL release (required by some ffmpeg deps)"
-dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm || true
+dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm
 
 echo "4) Add RPM Fusion (free + nonfree) repositories"
 # Using mirrors.rpmfusion.org recommended links
 dnf -y install https://mirrors.rpmfusion.org/free/el/rpmfusion-free-release-9.noarch.rpm \
-               https://mirrors.rpmfusion.org/nonfree/el/rpmfusion-nonfree-release-9.noarch.rpm || true
+               https://mirrors.rpmfusion.org/nonfree/el/rpmfusion-nonfree-release-9.noarch.rpm
 
 echo "5) Refresh metadata and update system"
 dnf -y makecache

package/scripts/ssl.sh

@@ -48,7 +48,7 @@ info "Outputs: $CERT_FILE, $KEY_FILE, $FULLCHAIN_FILE, $ROOT_PEM"
 
 # Install prerequisites
 if ! command -v dnf >/dev/null 2>&1; then err "dnf not found. This script expects RHEL/Rocky with dnf."; exit 1; fi
-sudo dnf install -y curl nss-tools ca-certificates || true
+sudo dnf install -y curl nss-tools ca-certificates
 
 # Download and install mkcert binary (no 'go install')
 download_mkcert_binary() {
@@ -60,10 +60,10 @@ download_mkcert_binary() {
   esac
   info "Searching mkcert release for $ARCH_STR"
   ASSET_URL=$(curl -sS "https://api.github.com/repos/FiloSottile/mkcert/releases/latest" | \
-    grep -E '"browser_download_url":' | grep -i "$ARCH_STR" | head -n1 | sed -E 's/.*"(https:[^"]+)".*/\1/' || true)
+    grep -E '"browser_download_url":' | grep -i "$ARCH_STR" | head -n1 | sed -E 's/.*"(https:[^"]+)".*/\1/')
   if [[ -z "$ASSET_URL" ]]; then
     ASSET_URL=$(curl -sS "https://api.github.com/repos/FiloSottile/mkcert/releases/latest" | \
-      grep -E '"browser_download_url":' | grep -i 'linux' | grep -i 'amd64' | head -n1 | sed -E 's/.*"(https:[^"]+)".*/\1/' || true)
+      grep -E '"browser_download_url":' | grep -i 'linux' | grep -i 'amd64' | head -n1 | sed -E 's/.*"(https:[^"]+)".*/\1/')
   fi
   if [[ -z "$ASSET_URL" ]]; then err "Could not find mkcert asset for your arch"; return 1; fi
   TMP_BIN="$(mktemp -u /tmp/mkcert.XXXXXX)"
@@ -93,7 +93,7 @@ use_mkcert() {
   info "Generating cert+key with mkcert"
   if ! "$MKCERT_BIN" -cert-file "$CERT_FILE" -key-file "$KEY_FILE" "${MK_ARGS[@]}"; then err "mkcert failed to generate"; return 1; fi
   # copy root CA from mkcert CAROOT into TARGET_DIR
-  if ROOT_FROM_MKCERT="$($MKCERT_BIN -CAROOT 2>/dev/null || true)"; then
+  if ROOT_FROM_MKCERT="$($MKCERT_BIN -CAROOT 2>/dev/null)"; then
     if [[ -f "$ROOT_FROM_MKCERT/rootCA.pem" ]]; then
       cp "$ROOT_FROM_MKCERT/rootCA.pem" "$ROOT_PEM"
       info "Copied mkcert root CA to $ROOT_PEM"
@@ -135,11 +135,11 @@ use_openssl() {
     mv -f "$CSR_KEY" "$KEY_FILE"
     # create fullchain: leaf + root
     cat "$CERT_FILE" "$ROOT_PEM" > "$FULLCHAIN_FILE"
-    sudo cp "$ROOT_PEM" /etc/pki/ca-trust/source/anchors/ || true
-    sudo update-ca-trust extract || true
+    sudo cp "$ROOT_PEM" /etc/pki/ca-trust/source/anchors/
+    sudo update-ca-trust extract
     if command -v certutil >/dev/null 2>&1; then
       mkdir -p "$HOME/.pki/nssdb"
-      certutil -d sql:$HOME/.pki/nssdb -A -t "CT,C,C" -n "Local Dev Root CA" -i "$ROOT_PEM" || true
+      certutil -d sql:$HOME/.pki/nssdb -A -t "CT,C,C" -n "Local Dev Root CA" -i "$ROOT_PEM"
     fi
     info "OpenSSL created cert, key and fullchain"
     return 0

package/src/api/document/document.model.js

@@ -11,6 +11,7 @@ const DocumentSchema = new Schema(
     location: { type: String },
     title: { type: String },
     tags: [{ type: String }],
+    isPublic: { type: Boolean, default: false },
     fileId: {
       type: Schema.Types.ObjectId,
       ref: 'File',
@@ -59,7 +60,12 @@ const DocumentDto = {
       return {
         path: 'userId',
         model: 'User',
-        select: '_id email username',
+        select: '_id email username profileImageId',
+        populate: {
+          path: 'profileImageId',
+          model: 'File',
+          select: '_id name mimetype',
+        },
       };
     },
   },
@@ -67,6 +73,29 @@ const DocumentDto = {
     if (!document.share || !document.share.copyShareLinkEvent) return 0;
     return document.share.copyShareLinkEvent.reduce((total, event) => total + (event.count || 0), 0);
   },
+  /**
+   * Filter 'public' tag from tags array
+   * The 'public' tag is internal and should not be rendered to users
+   * @param {string[]} tags - Array of tags
+   * @returns {string[]} - Filtered tags without 'public'
+   */
+  filterPublicTag: (tags) => {
+    if (!tags || !Array.isArray(tags)) return [];
+    return tags.filter((tag) => tag !== 'public');
+  },
+  /**
+   * Extract isPublic boolean from tags array and return cleaned tags
+   * @param {string[]} tags - Array of tags potentially containing 'public'
+   * @returns {{ isPublic: boolean, tags: string[] }} - Object with isPublic flag and cleaned tags
+   */
+  extractPublicFromTags: (tags) => {
+    if (!tags || !Array.isArray(tags)) {
+      return { isPublic: false, tags: [] };
+    }
+    const hasPublicTag = tags.includes('public');
+    const cleanedTags = tags.filter((tag) => tag !== 'public');
+    return { isPublic: hasPublicTag, tags: cleanedTags };
+  },
 };
 
 export { DocumentSchema, DocumentModel, ProviderSchema, DocumentDto };

package/src/api/document/document.router.js

@@ -9,6 +9,7 @@ const DocumentRouter = (options) => {
   const authMiddleware = options.authMiddleware;
   router.post(`/:id`, authMiddleware, async (req, res) => await DocumentController.post(req, res, options));
   router.post(`/`, authMiddleware, async (req, res) => await DocumentController.post(req, res, options));
+  router.get(`/public/high`, async (req, res) => await DocumentController.get(req, res, options));
   router.get(`/public`, async (req, res) => await DocumentController.get(req, res, options));
   router.get(`/:id`, authMiddleware, async (req, res) => await DocumentController.get(req, res, options));
   router.get(`/`, authMiddleware, async (req, res) => await DocumentController.get(req, res, options));