- DietPi-Set_hardware | Add new vf2-spi-update command to usage output

DietPi-Software | Fail2Ban: Resolved a DietPi v8.11 regression where moving logs to systemd journal on install fails due to a typo.

Co-authored-by: MichaIng <micha@dietpi.com>

- DietPi-Installer | Download and pre-install U-Boot hosted on dietpi.com where it has not been ported (and probably never will) to the Armbian Bookworm repo.

- DietPi-Software | Komga: Update fallback URL

- DietPi-Installer | Remove legacy code in coditions which cannot be reached anymore and minor refactor

- DietPi-Software | Mopidy: Do not install the official APT repo on RISC-V, as it does not contain RISC-V binaries. Instead, the quite recent packages from Debian Sid will be installed.

- DietPi-Software | Mopidy: Disable service before removing package, which is not done by postinst, failing to remove user then
- DietPi-Software | Pi-hole: Stop, disable and remove as well the new systemd service on uninstall, if present

- DietPi-Software | Remove tailing space

DietPi-Software | Transmission: Stop service before removal

- DietPi-Installer | Remove apt-get clean calls since this is now done as part of G_AG* calls
- DietPi-Software | Rclone: Use "arm-v6" builds on ARMv6 RPis, which seem to make use of hardfloat support, compared to "arm" builds, aimed for ARMv5, and update fallback URL

- DietPi-Software | Rclone: Enable on RISC-V via Debian repo package

- DietPi-Installer | Remove serial-getty@hvc0 mask, obsolete with latest kernel

- DietPi-Installer | Minor: Install u-boot-tools and armbian-firmware together with initramfs before kernel and dtb packages. It never made a difference, but generating the initramfs with U-Boot conversion requires u-boot-tools.

- DietPi-Build | Generate RPi images with only 1 MiB leading empty space, which is still aligned to any possible block/cluster size and matches to what the Debian installer does, even including GRUB
- DietPi-Build | Generate EFI or boot FAT partitions with a maximum cluster size up to 4 KiB to get a potential little performance boost while raising waste space a little. This also matches the default on Windows and follows a recent change on RPi OS where it was changed to 4 sectors per cluster == 2048 bytes.

- DietPi-Software | Rclone: Update fallback URL

- DietPi-Build | Parallels: Provide image as VMX + VMDK combination like for VMware. This can be imported on macOS by Parallels to generate a VM with default settings: #5431

- DietPi-Build | Generate VMDK images with "lsilogic" adapter type option, natively compatible with SCSI controllers, which might solve boot issues on Parallels. Also remove nested virtualisation and IDE CD/DVD drives from VMware and ESXi VMs.

- DietPi-Software | Komga: Update fallback URL

- CI | Quartz64: Move whole package build to workflow and bump Linux to v6.2.7
- Quartz64 | Disable IPv6-in-IPv4 tunnel driver. It enables a sit0@NONE network interface. It is a module in most other kernels, but yet to "y" by default. Since I never heard of someone using this, lets disable until someone explicitly requests it.

- Odroid C1 | Minor config update (no functional change)
- DietPi-Installer | Reduce places for code updates by using a new variable to define whether to use the Armbian repo for kernel/bootloader/firmware or not

- DietPi-Software | Uninstalls: Add and use function to consistently and cleanly remove system services, service users and groups
- DietPi-Software | Skip systemd daemon-reload where possible when (un)masking or (en|dis)abling systemd services, as it takes much time

- DietPi-Build | Remove backports qemu-utils install as we do not generate hda images anymore for Parallels

- DietPi-Software | Uninstalls: Add and use function to consistently remove local databases and database users
- DietPi-Software | phpMyAdmin: Remove it on uninstall! Only the database and user were removed for some reason ...

- DietPi-Software | HAProxy: Bump to v2.7.5
- DietPi-Software | Minor coding consistency

- DietPi-Patches | NanoPi R5S/R6S: Upgrade kernel to disable writable clk DebugFS: #6136

- DietPi-Patches | Typo

- DietPi-Patches | Fix package check

- DietPi-Patches | Fix logic

- Quartz64 | Bump U-Boot to v2022.07
- Quartz64 | Move fuse to builtin as it is used OOTB on Debian when not masking sys-fs-fuse-connections.mount

- Orange Pi 5 | Generate single partition images

- ROCK 5B/Orange Pi 5 | Both support the hardware random generator for entropy daemon and use ttyFIQ0 as 1,500,000 baud debug UART

- DietPi-Installer | Switch to 1,500,000 baudrate on Orange Pi 5 and ROCK 5B as well for current master branch images

- DietPi-Installer | Syntax

- Odroid C1 | More minor boot.ini comment improvements (no functional change)

- VirtualBox | Switch to SCSI controller

- DietPi-Set_hardware | Blacklist snd_bcm2835 module on RPi if onboard audio is not used. It is not loaded by default, regardless whether the dtparam is set or not.
- DietPi-Set_hardware | Merge sed calls to reduce dedicated file writes and add error handling to some more commands
- DietPi-Software | Spotifyd: Disable for RISC-V since no assets are provided for this architecture yet
- DietPi-Software | Cleanup hardware/arch/distro ID support declaration
- DietPi-Software | Gitea: Update fallback URL

- DietPi-Config | Resolved an issue where selecting the Nvidia driver on x86_64 systems did not actually install the needed kernel module if kernel headers were not installed before. Headers matching your kernel package are now installed automatically when selecting this option, to have the driver compiled and installed.
- DietPi-Config | Purge nvidia-driver-libs when selecting to uninstall the Nvidia GPU drivers. nvidia-driver-libs-i386 is a transitional dummy package to pull this, and only available until Buster.
- DietPi-Config | Do not install legacy Intel DDX when selecting Intel VA-API in x86_64 display options

- DietPi-Software | phpBB: Update fallback URL

- Parallels | Fix boot by adding the BusLogic driver to initramfs

- DietPi-Software | Kodi: Remove support for legacy Odroid images, install dependencies during udev rules download and cleanup code

- Odroid C1 | Switch to FAT16 boot filesystem

- Odroid XU4 | Add general support for dedicated boot partitions, align and merge with Odroid C1 regarding boot.ini and dietpi-installer code. However, we keep generating single ext4 partition images for Odroid XU4, so this is just a compatibility and cleanup improvement
- Odroid C1 | Since HDMI is broken, use the serial console for primary kernel logs

- DietPi-Build | Cleanup

- Orange Pi 5/ROCK 5B | The hardware random generator daemon rngd is used now in favour of the software random generator haveged. It will be replaced on DietPi update.
- Orange Pi 5/ROCK 5B | Resolved an issue where the wrong serial console device name was expected. The correct /dev/ttyFIQ0 will be enabled on DietPi update and patched for a baudrate of 1,500,000.

- DietPi-Build | Fix FAT cluster sizes: "-S" defines the (logical) sector size while only "-s" defines the cluster size, as a multiple of the sector size. And while 65,525 x 2048 bytes would fit into 128 MiB closely, the actual number of clusters is a little too low

- NanoPi M3/T3/Fire3 | Update boot config

- DietPi-Installer | Cleanup

- Quartz64 | Enable multi-gen LRU by default: https://www.kernel.org/doc/html/latest/admin-guide/mm/multigen_lru.html
- Quartz64 | Use zstd as default zram compression algorithm
- Quartz64 | Add all CPU governors explicitly and builtin, use schedutil as default

- Quartz64 | Bump Linux to v6.2.8

- DietPi-Software | Nextcloud/ownCloud: Update uninstall code with more error handling

- DietPi-Software | vaultwarden: Bump web vault to v2023.3.0

- DietPi-Software | Pi-hole: Remove ancient dnsmasq part from uninstall code

- DietPi-RAMlog | For unknown historical reasons, the /var/log tmpfs mount had 1777 mode, i.e. was world-writable with sticky bit. Since this does not match the Debian default for this directory, this mode has been removed from the mount options, so that the default mode 0755 is now used.

- DietPi-Software | Do network connection check and time sync in DietPi-Automation_Pre() before attempting the full APT upgrade. On first boot, dietpi-update runs and assures network connectivity and synced system clock, but it is possible that a reboot happens after the DietPi update has finished. This also explicitly allows us to move further first run setup steps to be done before software installs, like QEMU guest agent install, RPi 4 EEPROM and Intel/AMD microcode updates, which further steps can generaly benefit from, at least if a reboot is implied as a result of a kernel upgrade. Skip the check within Run_Installations() instead of first run installs.

- DietPi-Globals | G_OBTAIN_CPU_TEMP: Use first hwmon match if all previous files/globs did not match

- DietPi-Globals | Minor coding

- DietPi-Globals | Syntax

- DietPi-Software | Nextcloud: Update PHP 8.2 patch message after Nextcloud 26 release

- DietPi-Build | Install dosfstools as well if boot partition is formatted with FAT16

- DietPi-Installer | Do not install testing firmware on Quartz64

- CI | Gogs: Remove pre-v8.16 zip archive build and obsolete autologin workaround
- CI | vaultwarden: Enable RISC-V builds
- CI | vaultwarden: Migrate to build matrix
- CI | vaultwarden: Migrate from rc.local to DietPi automated setup
- CI | vaultwarden: Migrate to automated latest version detection and package version suffix generation

- CI | vaultwarden: Remove multiple newlines and trailing spaces

- CI | vaultwarden: Fix web vault download

- CI | vaultwarden: Another fix

- CI | Add missing shebangs

- CHANGELOG | Added more generic support for obtaining the CPU temperature, covering some thin clients and potentially other systems where no CPU temperature was shown when running the "cpu" command or enabling it for the login banner.

- CI | Amiberry: Move to matrix builds
- DietPi-Software | Amiberry: Bump to v5.6.0
- DietPi-Software | Amiberry: Enable special builds for RK3588, now available with Amiberry 5.6.0

- DietPi-Software | Remove trailing space

- CI | Amiberry: Syntax

- CI | Re-add 7zip to build container dependencies as it is needed to extract our images :D

- CI | Amiberry: Add new dependency: BlitterStudio/amiberry#1058

- Live patch 0 | Fix some software installs after recent kernel upgrade on RPi 4 with 32-bit OS/userland

- DietPi-Drive_Manager | Enhance container support: Do not add fstab entries if the source block device does not exist, e.g. if the container cannot see/has no access to its rootfs device. Generally, show the drive and the drive menu, but hide all options which require device access, like resize, fsck, reserved blocks and rootfs transfer. Also hide the swap file option in containers and assume the host supports a kernel feature whenever modprobe would be done to check it: These features are all standard nowadays, and currently we do not know a good way to check whether the host supports them, so best we can do is to assume it. If the assumptions is wrong, the admin will face an error message in an uncritical situation.
- DietPi-Installer | Do not enable DietPi-FS_partition_resize for container images, since containers generally have no chance to resize the partition, as they would need to inform the host's kernel about the change, and they can usually also not resize the filesystem as they have usually no raw access to their rootfs device.

- DietPi-Build | Do not add rootfs mount to fstab for container images and do not bind mount loop devices and disk image, since container images are now expected to have no raw drive access
- DietPi-Build | Align and make AlloGUI  image generation possible in a more generic way
- DietPi-Build | Remove dbus mask handling, which was really only wanted for testing on a specific personal system

- DietPi-Software | Support Raspberry Pi with 64-bit kernel on 32-bit OS

- DietPi-Build | Satisfy shellcheck

- DietPi-Installer | Do not attempt to mount the rootfs (to cleanup below tmpfs mounts) if the rootfs device is not accessible, e.g. within a container image

- DietPi-Imager | Allow to skip dietpi-fs_partition_resize.service on first boot and fix the symlink about that. Strangely this symlink was wrong since a long time, but systemd seems to be smart enough to just start the service with the same name as the symlink.
- DietPi-Build | Cleanup below tmpfs mounts after debootstrap. It creates some files below /dev.
- DietPi-Build | Make use of the new DietPi-Imager variable to skip enabling the dietpi-fs_partition_resize.service

- DietPi-Build | Fix

- DietPi-Build | Cleanup debootstrap created files below /run as well and pre-create /tmp and /var/log tmpfs entries in fstab to prevent disk file creations on these locations in the first place

- DietPi-Build | Better prevent unwanted debootstrap file creation

- DietPi-Build | Use long version of "-m" option, available on Debian Bookworm but not Ubuntu Jammy

- DietPi-Build | Further failsafe removal of files below tmpfs mounts since /var/log/journal was found, how ever this is possible!

- DietPi-Software | X.Org X Server: Remove dedicated package checks and installs on old Odroid images which we do not provide anymore for a long time. All current Odroid images have KMS/DRM support and hence work best with the default modesetting DDX.

- DietPi-Software | Minor

- DietPi-Software | NoMachine: Bump to v8.4.2_1

- DietPi-Software | Prometheus Node Exporter: Minor updates and disable on RISC-V since there are currently no assets released for this architecture

- DietPi-Services | Aria2 and SABnzbd are backend downloader applications which can be used by Servarr applications and alike, hence move them up
- DietPi-Software | Add service ordering to a bunch of systemd units, to assure that: PHP starts after database servers, webservers start after PHP, any service which accesses or creates media starts after remote-fs.target, network services start after network-online.target, start DNS servers before nss-lookup.target and start Servarr software after backend downloaders
- DietPi-Software | O!MPD: Download and extract in tmpfs move to disk from there
- DietPi-Software | DarkIce: Start services as nobody:dietpi to align with Debian package service on the one hand but grant R/W access to /mnt/dietpi_userdata for (optional) local recording storage
- DietPi-Software | Use "mkdir -p" in most cases instead of checking for the directory. Initially the aim was to minimise external command calls for performance reasons, but the additional code can be annoying and having all steps printed to console can be useful for users to know what needs to be done
- DietPi-Software | AdGuard Home: Remove obsolete dir removal from short beta phase

- DietPi-Services | Rework to not start/stop disabled services anymore. Services previously controlled by DietPi are now enabled and hence started at boot by systemd the common way. DietPi-Services is not invoked at boot anymore, but on software installs and maintenance tasks only to stop services first and restart them afterwards if they are enabled. The menu and CLI has been adjusted to reflect that and further coding changes have been applied in the same turn.

- DietPi-Services | Satisfy shellcheck and fix nested index overwrite

- DietPi-Globals | G_WHIP_MENU/G_WHIP_CHECKLIST: Allow menu entries with leading dash
- DietPi-Services | Internal enhancements: Merge Set_Running_State() and Apply_Service_State() functions into single Apply_Service_Command() function, since those contained mostly repetitive code. Make clear in comments that this function allows not only a single service index input, but multiple indices, which as well worked before but was not documented in the code. And further minor coding enhancements...
- DietPi-Software | Do not unmask and "dietpi_controll" (=disable) all services before installs, instead unmask only those which are to be installed and enable them after all installs have finished
- DietPi-PostBoot | Do not start services as this is now done the common way via systemd

- DietPi-Software | Syntax

- DietPi-Software | Also enable services in aSTART_SERVICES array if aENABLE_SERVICES array is empty

- DietPi-Set_swapfile | Add some error handling when updating the /tmp tmpfs size, but do not exit the whole script if a step fails, but only the related function

- DietPi-Set_swapfile | Switch to G_CONFIG_INJECT and re-add 1777 mode. Removing it was aimed for /var/log tmpfs mounts only

- DietPi-Services | The service handling for software installed via dietpi-software has received a major rework. Previously, services were "disabled" by default, so that the systemd init system did not start them automatically at boot. Instead, they were enabled at a late boot stage as part of the dietpi-postboot service via dietpi-services. The idea was to assure fast undisturbed early boot process and to have all services started up in a specific order, which guarantees that dependencies are running before dependants. But it had several negative implications: systemd is designed to speed overall services startup via parallelism, while our serial startup broke this benefit. "systemctl status SERVICE" showed services as "disabled", which caused confusion as they were still started at boot. Consequently the only way to prevent them from being started was to mask services or exclude them with our script or its config file, as "systemctl disable SERVICE" had no effect. Also it was not uncommon that APT package upgrades left the service stopped, respecting the "disabled" state. DietPi has now been aligned with how Linux distros with systemd handle services commonly. The most important startup ordering is instead done via systemd unit "After=" ordering directives to have e.g. webservers starting after PHP, and PHP after databases.
- DietPi-Software | Grafana: Bump to v9.5.7 on ARMv6